Creating a Custom CAE Policy

Updated on 2024-05-25 GMT+08:00

View PDF

Custom policies supplement the system-defined policies of CAE.

You can create custom policies in either of the following ways:

Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of policy syntax.
JSON: Create a JSON policy or edit an existing one.

For details, see Creating a Custom Policy. This section provides examples of common custom CAE policies.

Example Custom Policy

This procedure creates a policy that an IAM user is prohibited to delete components.

{
        "Version": "1.1",
        "Statement": [
                {
                        "Action": [
                                "cae:*:*"
                        ],
                        "Effect": "Allow"
                },
                {
                        "Action": [
                                "cae:application:delete"
                        ],
                        "Effect": "Deny"
                }
        ]
}

A policy with only "Deny" permissions must be used together with other policies. If the permissions granted to a user contain both "Allow" and "Deny", the "Deny" permissions take precedence over the "Allow" permissions.

After authorization, users in the group can verify their permissions using the console or REST APIs.

The following uses the custom policy as an example to describe how to log in to the CAE console to verify that a user is not allowed to delete components.

Log in to Huawei Cloud as an IAM user.
- Tenant name: Name of the account used to create the IAM user
- IAM username and password: Username and password specified during the IAM user creation using the tenant name
On the Components page, create a component for test, and click More > Delete in the Operation column of the component. If a message is displayed indicating that you do not have the operation permissions, the permissions configuration is correct and has taken effect.

Parent topic: Permissions Management

Previous topic: Creating a User and Granting Permissions

Next topic: Environment Management

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot