Resource Preparation

Before using obsfs, you need to prepare the resources listed in Table 1.

**Table 1** Resource preparation
Resource	Description	Operation Guide
HUAWEI ID	You can use an account to access Huawei Cloud and to manage resources (including IAM users, access keys, and OBS parallel file systems) required by obsfs. Before using obsfs, you need a HUAWEI ID that has subscribed to OBS.	Creating a HUAWEI ID and Enabling Huawei Cloud Services
IAM user	Optional. To ensure account and resource security, you are advised not to use a regular account to access OBS directly, and it is safer to create an IAM user and assign permissions to that user specifically for accessing OBS resources. Then use the IAM account to access obsfs. NOTE: The IAM user who uses obsfs to mount and access a parallel file system must have the same access permissions for OBS buckets. After an OBS role or policy is granted to an IAM user, the role or policy will apply to both OBS buckets and parallel file systems.	Creating an IAM User
Access keys (AK and SK)	Access keys (AK and SK) are used as credentials for your account and for IAM users. obsfs accesses OBS using access keys that are used to encrypt the signature of a request, ensuring the security and integrity of the request and that identities of the request sender and receiver are correct.	Creating Access Keys (AK and SK)
Parallel file system	A parallel file system is a container for storing data.	Creating a Parallel File System

Creating a HUAWEI ID and Enabling Huawei Cloud Services

Before using obsfs, you need to create a HUAWEI ID and subscribe to OBS. You can use OBS on a pay-per-use basis or by purchasing resource packages. Make sure that your account balance is sufficient or you have valid resource packages. Then you can access and use OBS. If you already have an account and have subscribed to OBS, skip this part.

Visit the Huawei Cloud official website.
Create a HUAWEI ID.
If you already have one, start from 3.
1. On the right of the top navigation bar, click Register.
2. Complete the registration as instructed.
  After the registration is completed, you will be redirected to your account information page.
On the right of the top navigation menu, click Log In, and enter the username and password.
On the right of the top navigation bar, click Console to go to the management console.

Creating an IAM User

To ensure account and resource security, you are advised not to use a regular account to access OBS directly, and it is safer to create an IAM user and assign permissions to that user specifically for accessing OBS resources. Then use the IAM account to access obsfs. If you do not need any IAM users, skip this part.

Visit the Huawei Cloud official website.
Click Console in the upper right corner of the page and use the created account to log in to OBS Console.
On the top navigation bar, choose Service List > Management & Governance > Identity and Access Management. The IAM console is displayed.
Create a user group.

For details, see Creating a User Group and Assigning Permissions. After the user group is created, locate the row that displays Global service > OBS in the User Group Permissions area, and click Configure Policy in the row to set OBS permissions for the user group. For details about OBS policies, see IAM Permissions.

The permissions required for accessing a parallel file system are the same as those required for accessing an OBS bucket. After an OBS role or policy is granted to an IAM user, the role or policy will apply to both OBS buckets and parallel file systems.
Create a user.

For details, see Creating a User. When creating a user, add it to the user group created in 4 (with OBS permissions configured).

If the user group has not been configured OBS permissions, you can grant full access to the parallel file system to be mounted on OBS Console through a policy or access control list (ACL).

Creating Access Keys (AK and SK)

Access keys (AK and SK) are used as credentials for your account and for IAM users. obsfs accesses OBS using access keys that are used to encrypt the signature of a request, ensuring the security and integrity of the request and that identities of the request sender and receiver are correct. For details about how to create access keys, see Obtaining Access Keys (AK and SK). If you already have them, skip this part.

Each account or IAM user can create a maximum of two valid access keys.