Cloud Services that Support Resource-Level Authorization Using IAM

If you want to grant an IAM user permissions for specific resources, create a custom policy that contains permissions for the resources, and attach the policy to the user. The user then only has the permissions for the specified resources. For example, to grant an IAM user permissions for buckets whose names start with TestBucket, create a custom policy, specify the resource path as OBS:*:*:bucket:TestBucket*, and attach the policy to the user.

The following table lists the cloud services that support resource-level authorization and the supported resource types.

**Table 1** Cloud services that support resource-level authorization and the supported resource types
Service	Resource Type	Resource Name
Elastic Cloud Server (ECS)	instance	ECS
Elastic Volume Service (EVS)	volume	EVS disk
Object Storage Service (OBS)	bucket	Bucket
Object Storage Service (OBS)	object	Object
Virtual Private Cloud (VPC)	publicip	EIP
Software Repository for Container (SWR)	chart	Chart
	repository	Repository
	instance	Instance
Intelligent EdgeFabric (IEF)	product	Product
	node	Edge node
	group	Edge node group
	deployment	Deployment
	batchjob	Batch job
	application	Application template
	appVersion	Application template version
	IEFInstance	IEF instance
	cluster	Cluster
Data Lake Insight (DLI)	queue	DLI queue
	database	DLI database
	table	DLI table
	column	DLI column
	datasourceauth	DLI security authentication information
	jobs	DLI job
	resource	Resource package
	elasticresourcepool	Elastic resource pool
	group	Resource package group
Graph Engine Service (GES)	graphName	GES graph name
	backupName	GES backup name
	metadataName	Metadata name
FunctionGraph	function	Function
FunctionGraph	trigger	Trigger
Distributed Message Service (DMS)	rabbitmq	RabbitMQ instance
Distributed Message Service (DMS)	kafka	Kafka instance
Distributed Cache Service (DCS)	instance	Instance
Document Database Service (DDS)	instanceName	Instance name
Resource Formation Service (RFS)	stack	Stack
Data Encryption Workshop (DEW)	KeyId	Key ID
GaussDB(DWS)	cluster	Cluster
Cloud Bastion Host (CBH)	instanceId	Instance ID
ROMA Connect	graph	Service flowchart