Access Control with Both VPC Endpoint Policies and OBS Bucket Policies
You can configure both a VPC endpoint policy and a bucket policy to enable VPC-level access control over OBS resources.
A VPC endpoint policy defines which servers (ECSs, CCE, or BMSs) in a VPC can access specific resources in OBS, while a bucket policy specifies which OBS buckets can be accessed by servers in a given VPC. This ensures security by working on both the request sources and the requested resources.
Migration drills help you fully assess the feasibility and identify potential risks of a migration task beforehand. The system verifies if security group ports are set correctly, domains connect normally, and necessary permissions are available. If issues are identified, the system offer fixes to minimize risks and disruptions during migration.
TaurusDB supports the read-only (AP) proxy mode. All read requests are forwarded to the selected read replicas and HTAP nodes based on the read weights.
You can enable this function and set a bandwidth threshold. When the bandwidth of client requests reaches the threshold, CDN alerts you, helping you identify attacks promptly and prevent excess billing caused by bandwidth theft or attacks.
{"Compute":["Elastic Cloud Server","Huawei Cloud Flexus","Bare Metal Server","Auto Scaling","Image Management Service","Dedicated Host","FunctionGraph","Cloud Phone Host","Huawei Cloud EulerOS"],"Storage":["Object Storage Service","Elastic Volume Service","Cloud Backup and Recovery","Storage Disaster Recovery Service","Scalable File Service Turbo","Scalable File Service","Volume Backup Service","Cloud Server Backup Service","Data Express Service","Dedicated Distributed Storage Service"],"Networking":["Virtual Private Cloud","Elastic IP","Elastic Load Balance","NAT Gateway","Direct Connect","Virtual Private Network","VPC Endpoint","Cloud Connect","Enterprise Router","Enterprise Switch","Global Accelerator"],"Containers":["Cloud Container Engine","SoftWare Repository for Container","Application Service Mesh","Ubiquitous Cloud Native Service","Cloud Container Instance (CCI)"],"Management & Governance":["Cloud Eye","Identity and Access Management","Cloud Trace Service","Resource Formation Service","Tag Management Service","Log Tank Service","Config","OneAccess","Resource Access Manager","Simple Message Notification","Application Performance Management","Application Operations Management","Organizations","Optimization Advisor","IAM Identity Center","Cloud Operations Center","Resource Governance Center"],"Databases":["Relational Database Service","Document Database Service","Data Admin Service","Data Replication Service","GeminiDB","GaussDB","Distributed Database Middleware","Database and Application Migration UGO","TaurusDB"],"Migration":["Server Migration Service","Object Storage Migration Service","Cloud Data Migration","Migration Center"],"Middleware":["Distributed Cache Service","API Gateway","Distributed Message Service for Kafka","Distributed Message Service for RabbitMQ","Distributed Message Service for RocketMQ","Cloud Service Engine","Multi-Site High Availability Service","EventGrid"],"Cloud Ecosystem":["KooGallery","Partner Center"],"Dedicated Cloud":["Dedicated Computing Cluster"],"User Support":["My Account","Billing Center","Cost Center","Resource Center","Enterprise Management","Service Tickets","HUAWEI CLOUD (International) FAQs"," ICP Filing","Support Plans","My Credentials","Customer Operation Capabilities","Partner Support Plans","Professional Services"],"Business Applications":["Workspace","ROMA Connect","Message & SMS","Domain Name Service","Edge Data Center Management","Meeting"],"Analytics":["MapReduce Service","Data Lake Insight","CloudTable Service","Cloud Search Service","Data Lake Visualization","Data Ingestion Service","GaussDB(DWS)","DataArts Studio","Data Lake Factory","DataArts Lake Formation","DataArts Fabric"],"AI":["Face Recognition Service","Graph Engine Service","Content Moderation","Image Recognition","Optical Character Recognition","ModelArts","ImageSearch","Conversational Bot Service","Speech Interaction Service","Huawei HiLens","Video Intelligent Analysis Service"],"IoT":["IoT Device Access"],"Cloud Transformation":["Well-Architected Framework","Cloud Adoption Framework "],"Developer Tools":["SDK Developer Guide","API Request Signing Guide","Terraform","Koo Command Line Interface"],"Others":["Product Pricing Details","System Permissions","Console Quick Start","Common FAQs","Instructions for Associating with a HUAWEI CLOUD Partner","Message Center"],"Content Delivery & Edge Computing":["Content Delivery Network","Intelligent EdgeFabric","CloudPond","Intelligent EdgeCloud"],"Security & Compliance":["Security Technologies and Applications","Web Application Firewall","Host Security Service","Cloud Firewall","SecMaster","Anti-DDoS Service","Data Encryption Workshop","Database Security Service","Cloud Bastion Host","Data Security Center","Cloud Certificate Manager","Edge Security"],"Solutions":["SAP Cloud","High Performance Computing"],"Blockchain":["Blockchain Service","Web3 Node Engine Service"],"Media Services":["Media Processing Center","Video On Demand","Live","SparkRTC","MetaStudio"],"MacroVerse aPaaS":["KooMessage","KooPhone","KooDrive"],"Developer Services":["ServiceStage","CodeArts","CodeArts PerfTest","CodeArts Req","CodeArts Pipeline","CodeArts Build","CodeArts Deploy","CodeArts Artifact","CodeArts TestPlan","CodeArts Check","CodeArts Repo","Cloud Application Engine","Huawei Cloud Astro Canvas","Huawei Cloud Astro Zero","CodeArts Governance"]}
["Elastic Cloud Server","Huawei Cloud Flexus","Bare Metal Server","Auto Scaling","Image Management Service","Dedicated Host","FunctionGraph","Cloud Phone Host","Huawei Cloud EulerOS","Object Storage Service","Elastic Volume Service","Cloud Backup and Recovery","Storage Disaster Recovery Service","Scalable File Service Turbo","Scalable File Service","Volume Backup Service","Cloud Server Backup Service","Data Express Service","Dedicated Distributed Storage Service","Virtual Private Cloud","Elastic IP","Elastic Load Balance","NAT Gateway","Direct Connect","Virtual Private Network","VPC Endpoint","Cloud Connect","Enterprise Router","Enterprise Switch","Global Accelerator","Cloud Container Engine","SoftWare Repository for Container","Application Service Mesh","Ubiquitous Cloud Native Service","Cloud Container Instance (CCI)","Cloud Eye","Identity and Access Management","Cloud Trace Service","Resource Formation Service","Tag Management Service","Log Tank Service","Config","OneAccess","Resource Access Manager","Simple Message Notification","Application Performance Management","Application Operations Management","Organizations","Optimization Advisor","IAM Identity Center","Cloud Operations Center","Resource Governance Center","Relational Database Service","Document Database Service","Data Admin Service","Data Replication Service","GeminiDB","GaussDB","Distributed Database Middleware","Database and Application Migration UGO","TaurusDB","Server Migration Service","Object Storage Migration Service","Cloud Data Migration","Migration Center","Distributed Cache Service","API Gateway","Distributed Message Service for Kafka","Distributed Message Service for RabbitMQ","Distributed Message Service for RocketMQ","Cloud Service Engine","Multi-Site High Availability Service","EventGrid","KooGallery","Partner Center","Dedicated Computing Cluster","My Account","Billing Center","Cost Center","Resource Center","Enterprise Management","Service Tickets","HUAWEI CLOUD (International) FAQs"," ICP Filing","Support Plans","My Credentials","Customer Operation Capabilities","Partner Support Plans","Professional Services","Workspace","ROMA Connect","Message & SMS","Domain Name Service","Edge Data Center Management","Meeting","MapReduce Service","Data Lake Insight","CloudTable Service","Cloud Search Service","Data Lake Visualization","Data Ingestion Service","GaussDB(DWS)","DataArts Studio","Data Lake Factory","DataArts Lake Formation","DataArts Fabric","Face Recognition Service","Graph Engine Service","Content Moderation","Image Recognition","Optical Character Recognition","ModelArts","ImageSearch","Conversational Bot Service","Speech Interaction Service","Huawei HiLens","Video Intelligent Analysis Service","IoT Device Access","Well-Architected Framework","Cloud Adoption Framework ","SDK Developer Guide","API Request Signing Guide","Terraform","Koo Command Line Interface","Product Pricing Details","System Permissions","Console Quick Start","Common FAQs","Instructions for Associating with a HUAWEI CLOUD Partner","Message Center","Content Delivery Network","Intelligent EdgeFabric","CloudPond","Intelligent EdgeCloud","Security Technologies and Applications","Web Application Firewall","Host Security Service","Cloud Firewall","SecMaster","Anti-DDoS Service","Data Encryption Workshop","Database Security Service","Cloud Bastion Host","Data Security Center","Cloud Certificate Manager","Edge Security","SAP Cloud","High Performance Computing","Blockchain Service","Web3 Node Engine Service","Media Processing Center","Video On Demand","Live","SparkRTC","MetaStudio","KooMessage","KooPhone","KooDrive","ServiceStage","CodeArts","CodeArts PerfTest","CodeArts Req","CodeArts Pipeline","CodeArts Build","CodeArts Deploy","CodeArts Artifact","CodeArts TestPlan","CodeArts Check","CodeArts Repo","Cloud Application Engine","Huawei Cloud Astro Canvas","Huawei Cloud Astro Zero","CodeArts Governance"]
3593
www.huaweicloud.com/intl/en-us/productfeature
[{"product":"Object Storage Service","stage":"","functionName":"Access Control with Both VPC Endpoint Policies and OBS Bucket Policies","onlineTime":"June,2025","description":"<p class=\"MsoNormal\" align=\"left\"><span lang=\"EN-US\" >You can configure both a VPC endpoint policy and a bucket policy to enable VPC-level access control over OBS resources.</span></p>\n<p><span lang=\"EN-US\" >A VPC endpoint policy defines which servers (ECSs, CCE, or BMSs) in a VPC can access specific resources in OBS, while a bucket policy specifies which OBS buckets can be accessed by servers in a given VPC. This ensures security by working on both the request sources and the requested resources.</span></p>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-obs/obs_03_0602.html,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/obs.html","id":"926bd715-94fc-3e4b-af5c-e9cbc0290ee8","documentName":"Access Control with Both VPC Endpoint Policies and OBS Bucket Policies,","content":{"updatedAt":1751372431000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-obs/obs_03_0602.html"},{"product":"Server Migration Service","stage":"","functionName":"Migration Drill","onlineTime":"June,2025","description":"<p>Migration drills help you fully assess the feasibility and identify potential risks of a migration task beforehand. The system verifies if security group ports are set correctly, domains connect normally, and necessary permissions are available. If issues are identified, the system offer fixes to minimize risks and disruptions during migration.</p>","documentLink":"https://support.huaweicloud.com/intl/en-us/qs-sms/sms3_02_0009.html,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/sms.html","id":"75914dd0-fd7f-354e-ac42-e8488a8211e6","documentName":"Configuring the Target Server,","content":{"updatedAt":1751338098000},"btnLink":"https://support.huaweicloud.com/intl/en-us/qs-sms/sms3_02_0009.html"},{"product":"Data Lake Insight","stage":"","functionName":"Introduction to data catalogs in Data Lake Insight User Guide","onlineTime":"June,2025","description":"<p id=\"EN-US_TOPIC_0287340785__p1118284311447\" data-hd-class=\"- topic/p \" data-hd-id=\"p1118284311447\" data-copy=\"true\" data-topicnum=\"en-us_topic_0287340785\" data-lang=\"en-us\" data-multidtd=\"true\" data-dtdtype=\"topic\" data-projectid=\"2331572288\">Included details about data catalogs and added steps for creating them in <em id=\"EN-US_TOPIC_0287340785__i2061093921818\" data-hd-class=\"+ topic/ph hi-d/i \" data-hd-id=\"i2061093921818\">Data Lake Insight User Guide</em>.</p>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dli/dli_01_0228.html,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/dli.html","id":"e4670805-f669-3e5d-98f0-8a635f048525","documentName":"Understanding Data Catalogs, Databases, and Tables,","content":{"updatedAt":1751092638000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dli/dli_01_0228.html"},{"product":"TaurusDB","stage":"OBT","functionName":"Read-only (AP) proxy mode","onlineTime":"June,2025","description":"<p id=\"EN-US_TOPIC_0000002277584100__p115494251324\" data-hd-class=\"- topic/p \" data-hd-id=\"p115494251324\" data-copy-enter=\"true\" data-copy=\"true\" data-topicnum=\"en-us_topic_0000002277584100\" data-lang=\"en-us\" data-multidtd=\"true\" data-dtdtype=\"topic\" data-projectid=\"205872849953\"><span id=\"EN-US_TOPIC_0000002277584100__text139471533155119\" data-hd-class=\"- topic/text \" data-hd-id=\"text139471533155119\" data-hd-conref=\"x-wc://file=en-us_commonterms_0000001928524213.xml#id_9cd283fd-d6dd-135e-7ab8-299681ecd9fb\" data-refreshed=\"true\" data-commonterms=\"true\" data-textsourceprojectid=\"205872849953\" data-textsourcemap=\"EN-US_BOOKMAP_0000002312183777\" data-textiszh=\"en-us\" data-textisproject=\"true\">TaurusDB</span> supports the read-only (AP) proxy mode. All read requests are forwarded to the selected read replicas and HTAP nodes based on the read weights.</p>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-taurusdb/taurusdb_11_0016.html,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/taurusdb.html","id":"a727395a-3897-3186-8459-7e8172d0bed4","documentName":"What Is Database Proxy?,","content":{"updatedAt":1750929175000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-taurusdb/taurusdb_11_0016.html"},{"product":"Content Delivery Network","stage":"","functionName":"Burst Bandwidth Alert","onlineTime":"June,2025","description":"<p>You can enable this function and set a bandwidth threshold. When the bandwidth of client requests reaches the threshold, CDN alerts you, helping you identify attacks promptly and prevent excess billing caused by bandwidth theft or attacks.</p>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-cdn/cdn_01_0324.html,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/cdn.html","id":"513ad3ec-5359-391a-b012-20c2afaf1152","documentName":"Burst Bandwidth Alert,","content":{"updatedAt":1750920265000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-cdn/cdn_01_0324.html"},{"product":"Data Encryption Workshop","stage":"","functionName":"Secret quota expansion","onlineTime":"June,2025","description":"<p id=\"EN-US_TOPIC_0291822505__p198039312188\" data-hd-class=\"- topic/p \" data-hd-id=\"p198039312188\" data-copy-enter=\"true\" data-copy=\"true\" data-topicnum=\"en-us_topic_0291822505\" data-lang=\"en-us\" data-multidtd=\"true\" data-dtdtype=\"topic\" data-projectid=\"33064637464\">Increased the secret quota from 200 to 500.</p>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dew/dew_01_9993.html,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/dew.html","id":"768e9a53-36e0-321c-a2e1-bf347f42330f","documentName":"Creating a Secret,","content":{"updatedAt":1750751777000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dew/dew_01_9993.html"},{"product":"Data Encryption Workshop","stage":"","functionName":"Setting the maximum size of a secret to 64 KB","onlineTime":"June,2025","description":"<p id=\"EN-US_TOPIC_0291822505__p38036314181\" data-hd-class=\"- topic/p \" data-hd-id=\"p38036314181\" data-copy-enter=\"true\" data-copy=\"true\" data-topicnum=\"en-us_topic_0291822505\" data-lang=\"en-us\" data-multidtd=\"true\" data-dtdtype=\"topic\" data-projectid=\"33064637464\">The secret created on CSMS cannot exceed 64 KB.</p>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dew/dew_01_9993.html,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/dew.html","id":"872edf7d-264c-3729-b623-dae63f0f9a31","documentName":"Creating a Secret,","content":{"updatedAt":1750751820000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dew/dew_01_9993.html"},{"product":"Cost Center","stage":"","functionName":"Resource package costs can be amortized based on actual usage","onlineTime":"June,2025","description":"<p data-hd-class=\"- topic/p \" data-hd-id=\"p15899199143813\" data-copy=\"true\" data-topicnum=\"zh-cn_topic_0000002356576221\" data-lang=\"zh-cn\" data-multidtd=\"true\" data-dtdtype=\"topic\" data-projectid=\"7535262223\">The costs of some resource packages can be amortized based on their actual usage. Customers can allocate the costs by tag and enterprise project.</p>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-cost/costcenter_000002_10.html,","detailsLink":"https://support.huaweicloud.com/intl/en-us/usermanual-cost/costcenter_000002_10.html","id":"1b959454-f945-3e23-b4c5-fa801944ebbb","documentName":"Resource package costs can be amortized based on actual usage,","content":{"updatedAt":1750732961000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-cost/costcenter_000002_10.html"},{"product":"Data Encryption Workshop","stage":"","functionName":"Setting the minimum rotation period of a secret to 4 hours","onlineTime":"June,2025","description":"<p id=\"EN-US_TOPIC_0291822505__p11803103111817\" data-hd-class=\"- topic/p \" data-hd-id=\"p11803103111817\" data-copy-enter=\"true\" data-copy=\"true\" data-topicnum=\"en-us_topic_0291822505\" data-lang=\"en-us\" data-multidtd=\"true\" data-dtdtype=\"topic\" data-projectid=\"33064637464\">The minimum rotation period of a secret is changed from 6 hours to 4 hours.</p>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dew/dew_01_9993.html,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/dew.html","id":"8cc89931-2704-3f2f-bfce-52f5f5e39b83","documentName":"Creating a Secret,","content":{"updatedAt":1750751829000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dew/dew_01_9993.html"},{"product":"Data Encryption Workshop","stage":"","functionName":"ML algorithms supported by KMS","onlineTime":"June,2025","description":"<p id=\"EN-US_TOPIC_0291822505__p13958114513617\" data-hd-class=\"- topic/p \" data-hd-id=\"p13958114513617\" data-copy-enter=\"true\" data-copy=\"true\" data-topicnum=\"en-us_topic_0291822505\" data-lang=\"en-us\" data-multidtd=\"true\" data-dtdtype=\"topic\" data-projectid=\"33064637464\">KMS supports ML algorithms to implement quantum encryption algorithms.</p>\n<div id=\"EN-US_TOPIC_0291822505__note1782025555017\" class=\"note noteExtend\" data-hd-class=\"- topic/note \" data-hd-type=\"note_2.0\" data-hd-id=\"note1782025555017\">\n<p id=\"EN-US_TOPIC_0291822505__p16820185512504\" data-hd-class=\"- topic/p \" data-hd-id=\"p16820185512504\" data-copy-enter=\"true\">To enable the ML algorithm, <a title=\"link to:https://support.huaweicloud.com/intl/en-us/usermanual-ticket/topic_0065264094.html\nctrl +click to jump\" href=\"https://support.huaweicloud.com/intl/en-us/usermanual-ticket/topic_0065264094.html\" target=\"_blank\" rel=\"noopener\" data-hd-class=\"- topic/xref \" data-hd-id=\"en-us_topic_0000002169709738_xref11629816103614\" data-hd-href=\"https://support.huaweicloud.com/intl/en-us/usermanual-ticket/topic_0065264094.html\" data-hd-scope=\"external\" data-hd-product=\"hws_hk\">submit a service ticket</a>.</p>\n</div>","documentLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dew/dew_01_7775.html#section1,","detailsLink":"https://www.huaweicloud.com/intl/en-us/product/dew.html","id":"8fa146a3-9ec4-3b37-8504-74264cb61470","documentName":"Key Algorithms and Specifications Supported by KMS,","content":{"updatedAt":1750751792000},"btnLink":"https://support.huaweicloud.com/intl/en-us/usermanual-dew/dew_01_7775.html#section1"}]