Configuring LakeFormation Cloud Service Authorization

Signing Up for a HUAWEI ID

To access the LakeFormation console, you need an HUAWEI ID. If you do not have such an ID, you need to perform the following operations to sign up one. You can use your HUAWEI ID to access all Huawei Cloud services, including LakeFormation.

1. Visit the Huawei Cloud website.
2. Click Sign Up and complete the information. For details, see Signing Up for a HUAWEI ID and Enabling Huawei Cloud Services.

   The system redirects you to the personal information page.

3. Complete real-name authentication for individual or enterprise accounts. For details, see Real-Name Authentication.

Procedure

1. Log in to the management console as the user created in Signing Up for a HUAWEI ID.
2. Click the service list on the left and choose Analytics > LakeFormation. On the displayed page, click Service Authorization the left navigation pane.

   You can view the permissions on cloud resources on the page.

3. Select "I have read and agree with the LakeFormation Service Statement." Click Authorize.

   After cloud service authorization, LakeFormation will create an agency named lakeformation_admin_trust in Identity and Access Management (IAM). Do not delete the agency when using LakeFormation.

   If the agency fails to be automatically created, log in to the IAM console, delete the agency or contact the administrator to increase the quota, and check whether the current user has the permission to create an agency.

Reference

If you need to minimize the permissions of the automatically created agency lakeformation_admin_trust, see How Do I Minimize the Permissions of the LakeFormation Agency?.