Help Center> Identity and Access Management> User Guide> Permissions> Custom Policies> Cloud Services Supported by IAM
View PDF

Cloud Services Supported by IAM

If you want to grant an IAM user permissions for specific resources, create a custom policy that contains permissions for the resources, and assign the policy to the user. The user then only has the permissions for the specified resources. For example, to grant an IAM user permissions for buckets whose names start with TestBucket, create a custom policy, specify the resource path as OBS:*:*:bucket:TestBucket*, and assign the policy to the user.

The following table lists the cloud services that support resource-level authorization and the supported resource types.

Table 1 Cloud services that support resource-level authorization and the supported resource types

Service

Resource Type

Resource Name

Object Storage Service (OBS)

bucket

Bucket

object

Object

Intelligent EdgeFabric (IEF)

product

Product

node

Edge node

group

Edge node group

deployment

Deployment

batchjob

Batch job

application

Application template

appVersion

Application template version

IEFInstance

IEF instance

Data Lake Insight (DLI)

queue

DLI queue

database

DLI database

table

DLI table

column

DLI column

datasourceauth

DLI security authentication information

jobs

DLI job

Graph Engine Service (GES)

graphName

GES graph name

backupName

GES backup name

FunctionGraph

function

Function

trigger

Trigger

Distributed Message Service (DMS)

rabbitmq

RabbitMQ instance

kafka

Kafka instance

IoT Device Access (IoTDA)

app

Resource space ID

Data Encryption Workshop (DEW)

KeyId

Key ID

Autonomous Driving Cloud Service (Octopus)

dataset

Dataset

replay

Replay

Data Warehouse Service (DWS)

cluster

Cluster
Parent topic: Custom Policies