Help Center/ Koo Command Line Interface/ FAQs/ Authentication/ Authentication Mode Priority
Updated on 2023-02-27 GMT+08:00

Authentication Mode Priority

During command parsing, KooCLI performs authentication for API calling according to the following authentication mode priority:

  1. Delegating account ID (cli-agency-domain-id) or name (cli-agency-domain-name), agency name (cli-agency-name), and profile (cli-source-profile) that stores the authentication information of the delegated party
  2. AK/SK, account, or token authentication in non-configuration mode
    1. Access key (permanent AK/SK, that is, cli-access-key and cli-secret-key) or temporary security credentials (temporary AK/SK and SecurityToken, that is, cli-access-key, cli-secret-key, and cli-security-token)
    2. IAM user name (cli-username), IAM user password (cli-password), and account name (cli-domain)
    3. Token (cli-x-auth-token)
  3. Profile specified in the command or the default profile
  4. Cloud service agency (applicable only when KooCLI is used on an ECS)

Parameters of different authentication modes mentioned in 2 cannot be used interchangeably in the same command. If an exception occurs during authentication mode parsing, authentication modes with a lower priority will not be used.