任务说明:

1、根据文档创建华为云IAM账号并分配相应的权限,并提供相应的Access Key ID和Access Secret Key

说明:华为云IAM账号用于容灾时调用容灾目标云API接口

(创建访问云资源,存放容灾数据),开通IAM账号时下载对应AccessKey和AccessSecretKey,请将账号信息及AK/SK通过邮件发送给我们。参考权限问题:

https://docs.oneprocloud.com/userguide/poc/hyperbdr-proxy-pre-settings.html#_3-proxy-to-vmware-network-testing

备注:

内容不全,需要补充华为云创建IAM账号的截图示例,包含自定义权限如何配置,用户如何创建,创建用户时如何关联设定的自定义权限、以及是否具备编程权限和控制台访问权限,中间过程截图,可以依照我们的华为云账号来进行补充。(英文界面)

以下为文档正文,注意格式:


华为云IAM账号用于容灾时调用容灾目标云API接口

(创建访问云资源,存放容灾数据),开通IAM账号时下载对应AccessKey和AccessSecretKey,请将账号信息及AK/SK通过邮件发送给我们。参考权限问题:

创建IAM用户

:::tips 华为云官方文档链接:

https://support.huaweicloud.com/intl/en-us/usermanual-iam/iam_02_0001.html

:::

给IAM用户授权

:::tips 华为云官方文档链接:

https://support.huaweicloud.com/intl/en-us/usermanual-iam/iam_01_0652.html

:::

管理IAM用户访问密钥

:::tips 华为云官方文档链接:

https://support.huaweicloud.com/intl/en-us/usermanual-iam/iam_02_0003.html

:::

Huawei Cloud IAM requirements

#ecs/vpc/evs/ims

  1. {
  2. "Version": "1.1",
  3. "Statement": [
  4. {
  5. "Effect": "Allow",
  6. "Action": [
  7. "ecs:serverPasswords:manage",
  8. "ecs:serverKeypairs:delete",
  9. "ecs:cloudServers:reboot",
  10. "ecs:diskConfigs:use",
  11. "ecs:cloudServers:start",
  12. "ecs:cloudServers:vnc",
  13. "ecs:servers:lock",
  14. "ecs:servers:rebuild",
  15. "ecs:cloudServers:attach",
  16. "ecs:serverInterfaces:get",
  17. "ecs:cloudServers:detachVolume",
  18. "ecs:servers:unlock",
  19. "ecs:cloudServers:delete",
  20. "ecs:serverKeypairs:get",
  21. "ecs:cloudServers:updateMetadata",
  22. "ecs:cloudServers:stop",
  23. "ecs:servers:setMetadata",
  24. "ecs:serverVolumes:use",
  25. "ecs:cloudServers:create",
  26. "ecs:serverKeypairs:create",
  27. "ecs:servers:get",
  28. "ecs:serverInterfaces:use",
  29. "ecs:serverGroups:manage",
  30. "ecs:securityGroups:use",
  31. "ecs:*:get*",
  32. "ecs:*:list*"
  33. ]
  34. },
  35. {
  36. "Effect": "Allow",
  37. "Action": [
  38. "evs:snapshots:rollback",
  39. "evs:volumes:use",
  40. "evs:snapshots:delete",
  41. "evs:volumes:create",
  42. "evs:snapshots:create",
  43. "evs:volumes:update",
  44. "evs:backups:get",
  45. "evs:volumes:get",
  46. "evs:snapshots:get",
  47. "evs:volumes:delete",
  48. "evs:*:get*",
  49. "evs:*:list*"
  50. ]
  51. },
  52. {
  53. "Effect": "Allow",
  54. "Action": [
  55. "vpc:securityGroups:create",
  56. "vpc:vpcs:delete",
  57. "vpc:subnets:update",
  58. "vpc:routers:update",
  59. "vpc:subnets:delete",
  60. "vpc:vpcs:create",
  61. "vpc:networks:get",
  62. "vpc:publicIps:create",
  63. "vpc:ports:get",
  64. "vpc:ports:update",
  65. "vpc:ports:create",
  66. "vpc:securityGroupRules:get",
  67. "vpc:subnets:create",
  68. "vpc:securityGroups:delete",
  69. "vpc:publicIps:delete",
  70. "vpc:subnets:get",
  71. "vpc:securityGroups:update",
  72. "vpc:routers:get",
  73. "vpc:securityGroups:get",
  74. "vpc:networks:create",
  75. "vpc:networks:update",
  76. "vpc:*:list*",
  77. "vpc:*:get*"
  78. ]
  79. },
  80. {
  81. "Effect": "Allow",
  82. "Action": [
  83. "ims:images:get",
  84. "ims:*:list*"
  85. ]
  86. }
  87. ]
  88. }

#obs

  1. {
  2. "Version": "1.1",
  3. "Statement": [
  4. {
  5. "Effect": "Allow",
  6. "Action": [
  7. "OBS:*:*"
  8. ]
  9. }
  10. ]
  11. }