Logging In to the Management Console

Register a public cloud account if you do not have one.

1. Log in to the public cloud management console.

   If you have not registered with the public cloud, click Free Registration to register an account with the public cloud as prompted.

2. From the menu on the top of the public cloud management console, choose Service List.
3. Click Cloud Stream Service under EI Enterprise Intelligence.

Enabling CS

If you are logging in to the CS management console for the first time, you need to apply for CS and then create an agency to manage permissions.

1. Log in to the CS console.

   If you have not registered with the public cloud, click Free Registration to register an account with the public cloud as prompted.

2. The Apply for Cloud Stream Service page is displayed.
   Figure 1 Applying for CS
   

1. Select I have read and agree to the HUAWEI CLOUD User Agreement and click Apply.
2. After the application completes, the system will automatically redirect you to the Overview page.

   The system automatically switches to the CS Service Agency so you can start assigning permissions. For details, see Creating an Agency for Permission Management.

Creating an Agency for Permission Management

When applying for CS, create an agency for CS permission management so CS can use certain related services.

• To use CS, you need to create an agency first. Otherwise, related services, such as DIS, SMN, OBS, and CloudTable, will be unavailable.
• Only the master account can create an agency. For details about the cloud account, see the Identity and Access Management User Guide.

1. After logging in to the CS management console, if an agency has not been created, the CS Service Agency dialog box is displayed. If this happens, click Go to authorization.
   Figure 2 Creating an agency
   
   The Cloud Resource Access Authorization dialog box is displayed.

   Figure 3 Requesting access to cloud resources
   
2. Click Agree to authorize. If the "Successfully authorized, you have successfully created the CS Service Default Agency." message is displayed, the default agency has been created.
   After the agency is created, you can view the agency details on the Agency page in the IAM console.

   Figure 4 Viewing the agency
   

   The following code illustrates permissions granted to CS:

   {
         "Version": "1.0",
         "Statement": [
               {
                     "Effect": "Allow",
                     "Action": [
                           "OBS:Bucket:*",
                           "OBS:Object:*"
                     ]
               }
         ]
   },
   {
         "Version": "1.0",
         "Statement": [
               {
                     "Effect": "Allow",
                     "Action": [
                           "Cloudtable:Cloudtable:*"
                     ]
               }
         ],
         "Depends": [
               {
                     "catalog": "BASE",
                     "display_name": "Tenant Guest"
               },
               {
                     "catalog": "BASE",
                     "display_name": "Server Administrator"
               }
         ]
   },
   {
         "Version": "1.0",
         "Statement": [
               {
                     "Effect": "Allow",
                     "Action": [
                           "DIS:DIS:*"
                     ]
               }
         ],
         "Depends": [
               {
                     "catalog": "BASE",
                     "display_name": "Tenant Guest"
               },
               {
                     "catalog": "BASE",
                     "display_name": "Server Administrator"
               }
         ]
   },
   {
         "Version": "1.0",
         "Statement": [
               {
                     "Effect": "Allow",
                     "Action": [
                           "SMN:Topic:*",
                           "SMN:Sms:*",
                           "SMN:Email:*"
                     ]
               }
         ]
   },
   {
         "Version": "1.0",
         "Statement": [
               {
                     "Effect": "Allow",
                     "Action": [
                           "*:*:*"
                     ]
               },
               {
                     "Effect": "Deny",
                     "Action": [
                           "identity:*:*"
                     ]
               }
         ]
   }