Updated on 2022-01-25 GMT+08:00

Step 2: Add a Whitelist Record

Scenarios

Permission management controls the access of a VPC endpoint in one domain to a VPC endpoint service in another.

After a VPC endpoint service is created, you can add an authorized domain ID to or delete it from the whitelist of the endpoint service.

The following operations describe how to obtain your own domain ID and add it to the whitelist of an existing VPC endpoint service in another domain.

Prerequisites

The target VPC endpoint service already exists.

Obtain the ID of Your Own Domain

  1. Log in to the management console.
  2. Click My Credentials under the domain.

    The My Credentials page is displayed. You can view the Domain ID of VPC 1.

Add an Authorized Domain ID to the Whitelist of a VPC Endpoint Service

  1. Log in to the management console.
  2. Click in the upper left corner and select the required region and project.
  1. Choose Service List > Networking > VPC Endpoint.
  1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
  2. In the VPC endpoint service list, locate the target VPC endpoint service and click its name.
  3. On the displayed page, select the Permission Management tab and click Add to Whitelist.
  4. Enter an authorized domain ID in the required format and click OK.
    • Your domain is in the whitelist of your VPC endpoint service by default.
    • The authorized domain ID is in the iam:domain::domain_id format.

      domain_id indicates the ID of the authorized domain, for example, iam:domain::1564ec50ef2a47c791ea5536353ed4b9

    • Adding * to the whitelist means that all users can access the VPC endpoint service.
  5. Click OK.