Identity and Access Management

IAM Identity Authentication

Identity and Access Management (IAM) enables you to easily manage users and control their access to Huawei Cloud services and resources.

You can use Identity and Access Management (IAM) to control access to your CloudDC resources. IAM permissions define which actions are allowed or denied on your cloud resources.

After creating an IAM user, the administrator needs to add it to a user group and grant the permissions required by CloudDC to the user group. Then, all users in this group automatically inherit those permissions.

• For details about IAM, see IAM Functions.
• For details about the permissions required by CloudDC, see Permissions.

Access Control

CloudDC uses network ACLs to protect the entire CloudDCN subnet. A network ACL is an optional layer of security for your subnets. You can associate one or more subnets with a network ACL to control traffic in and out of the subnets.

You can create, view, modify, delete, enable, disable network ACLs, associate subnets with or disassociate them from network ACLs, add and modify ACL rules, change the sequence of ACL rules, enable, disable, and delete ACL rules.

You can define network ACL rules to control traffic in and out of the subnets.