The Huawei Cloud IAM account is used to invoke target cloud API interfaces during disaster recovery To create access to cloud resources and store disaster recovery data, download the corresponding AccessKey and AccessSecretKey when activating the IAM account. Please send the account information, AK/SK via email to us.

Create IAM User

:::tips

Huawei Cloud official documentation link:

https://support.huaweicloud.com/intl/en-us/usermanual-iam/iam_02_0001.html

:::

Granting Authorization to IAM User

:::tips

Huawei Cloud official documentation link:

https://support.huaweicloud.com/intl/en-us/usermanual-iam/iam_01_0652.html

:::

Managing IAM User Access Keys

:::tips

Huawei Cloud official documentation link:

https://support.huaweicloud.com/intl/en-us/usermanual-iam/iam_02_0003.html

:::

Huawei Cloud IAM requirements

#ecs/vpc/evs/ims

  1. {
  2.     "Version": "1.1",
  3.     "Statement": [
  4.         {
  5.             "Effect": "Allow",
  6.             "Action": [
  7.                 "ecs:serverPasswords:manage",
  8.                 "ecs:serverKeypairs:delete",
  9.                 "ecs:cloudServers:reboot",
  10.                 "ecs:diskConfigs:use",
  11.                 "ecs:cloudServers:start",
  12.                 "ecs:cloudServers:vnc",
  13.                 "ecs:servers:lock",
  14.                 "ecs:servers:rebuild",
  15.                 "ecs:cloudServers:attach",
  16.                 "ecs:serverInterfaces:get",
  17.                 "ecs:cloudServers:detachVolume",
  18.                 "ecs:servers:unlock",
  19.                 "ecs:cloudServers:delete",
  20.                 "ecs:serverKeypairs:get",
  21.                 "ecs:cloudServers:updateMetadata",
  22.                 "ecs:cloudServers:stop",
  23.                 "ecs:servers:setMetadata",
  24.                 "ecs:serverVolumes:use",
  25.                 "ecs:cloudServers:create",
  26.                 "ecs:serverKeypairs:create",
  27.                 "ecs:servers:get",
  28.                 "ecs:serverInterfaces:use",
  29.                 "ecs:serverGroups:manage",
  30.                 "ecs:securityGroups:use",
  31.                 "ecs:*:get*",
  32.                 "ecs:*:list*"
  33.             ]
  34.         },
  35.         {
  36.             "Effect": "Allow",
  37.             "Action": [
  38.                 "evs:snapshots:rollback",
  39.                 "evs:volumes:use",
  40.                 "evs:snapshots:delete",
  41.                 "evs:volumes:create",
  42.                 "evs:snapshots:create",
  43.                 "evs:volumes:update",
  44.                 "evs:backups:get",
  45.                 "evs:volumes:get",
  46.                 "evs:snapshots:get",
  47.                 "evs:volumes:delete",
  48.                 "evs:*:get*",
  49.                 "evs:*:list*"
  50.             ]
  51.         },
  52.         {
  53.             "Effect": "Allow",
  54.             "Action": [
  55.                 "vpc:securityGroups:create",
  56.                 "vpc:vpcs:delete",
  57.                 "vpc:subnets:update",
  58.                 "vpc:routers:update",
  59.                 "vpc:subnets:delete",
  60.                 "vpc:vpcs:create",
  61.                 "vpc:networks:get",
  62.                 "vpc:publicIps:create",
  63.                 "vpc:ports:get",
  64.                 "vpc:ports:update",
  65.                 "vpc:ports:create",
  66.                 "vpc:securityGroupRules:get",
  67.                 "vpc:subnets:create",
  68.                 "vpc:securityGroups:delete",
  69.                 "vpc:publicIps:delete",
  70.                 "vpc:subnets:get",
  71.                 "vpc:securityGroups:update",
  72.                 "vpc:routers:get",
  73.                 "vpc:securityGroups:get",
  74.                 "vpc:networks:create",
  75.                 "vpc:networks:update",
  76.                 "vpc:*:list*",
  77.                 "vpc:*:get*"
  78.             ]
  79.         },
  80.         {
  81.             "Effect": "Allow",
  82.             "Action": [
  83.                 "ims:images:get",
  84.                 "ims:*:list*"
  85.             ]
  86.         }
  87.     ]
  88. }

#obs

  1. {
  2.     "Version": "1.1",
  3.     "Statement": [
  4.         {
  5.             "Effect": "Allow",
  6.             "Action": [
  7.                 "OBS:*:*"
  8.             ]
  9.         }
  10.     ]
  11. }