Identity Authentication and Access Control

Identity Authentication

You can access VIAS through various methods, including the console, APIs, and SDKs. Essentially, all requests ultimately rely on RESTful APIs provided by the service.

There are two authentication options available for these APIs:

Token-based authentication: Requests are authenticated using tokens.
AK/SK-based authentication. Requests are encrypted using an access key ID (AK)/secret access key (SK). An authenticated request must contain a signature value. The signature value is calculated based on the requestor's access key (AK/SK) as the encryption factor and the specific information carried in the request body. The platform supports authentication using an access key (AK/SK pair). It uses AK/SK-based encryption to authenticate requests.

Access Control

VIAS supports access control through IAM permissions.

Method		Description
Permission control	IAM permissions	IAM permissions manage cloud resource access by defining allowed and denied operations. After creating an IAM user, administrators assign them to a user group. The group is then granted necessary permissions for VIAS, which are automatically inherited by all members.
Permission control	Agency authorization	To use data stored in OBS, you can delegate authorization to allow the VIAS to access OBS resources.