vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/iam/api-ref/iam_02_0013.html
Wei, Hongmin 80f18fd272 IAM API 2.6 Version 
Reviewed-by: Kabai, Zoltán Gábor <zoltan-gabor.kabai@t-systems.com>
Co-authored-by: Wei, Hongmin <weihongmin1@huawei.com>
Co-committed-by: Wei, Hongmin <weihongmin1@huawei.com>
2023-08-03 03:34:59 +00:00

564 lines
56 KiB
HTML
Raw Blame History

<a name="iam_02_0013"></a><a name="iam_02_0013"></a>
<h1 class="topictitle1">Creating a Custom Policy for Cloud Services</h1>
<div id="body8662426"><div class="section" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_section164168506319"><h4 class="sectiontitle">Function</h4><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p124162508317">This API is provided for the administrator to create a custom policy for cloud services.</p>
<p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p4416185012320">The API can be called using both the global endpoint and region-specific endpoints.</p>
</div>
<div class="section" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_section134177509310"><h4 class="sectiontitle">URI</h4><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p104171350831">POST /v3.0/OS-ROLE/roles</p>
</div>
<div class="section" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_section1441755011314"><h4 class="sectiontitle">Request Parameters</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_HeaderParameter" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters in the request header</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row154176502319"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p5417850030">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p204188507319">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.2.2.5.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1441815019312">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.2.2.5.1.4"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p184182506318">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row184171250133"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p104189503310">Content-Type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p124185505310">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.2.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p24187501230">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1941815506316">Fill <strong id="iam_02_0013__en-us_topic_0222393171_b1143094110524">application/json;charset=utf8</strong> in this field.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row441765014317"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p12418950439">X-Auth-Token</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1341917501631">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.2.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p10419125018310">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1441955014310">Token with <strong id="iam_02_0013__b379214154614">Security Administrator</strong> permissions.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_requestParameter" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters in the request body</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row10419125010310"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.3.2.5.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p164191350936">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.3.2.5.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1541915011310">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.3.2.5.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p17420750234">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.3.2.5.1.4"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p184202050436">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row54192501136"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p3420950439"><a href="#iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113Role">role</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.3.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p10420155016319">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p9420145011313">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.3.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p104201509310">Custom policy information.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113Role"></a><a name="en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113Role"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113Role" frame="border" border="1" rules="all"><caption><b>Table 3 </b>role</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row8420135017315"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.4.2.5.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p184215501632">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.4.2.5.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p84211050536">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.4.2.5.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1542115509312">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.4.2.5.1.4"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p134211250133">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row20421145016319"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p114211050530">display_name</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1742211503316">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p114227501534">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p8422165012319">Display name of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row1642120507313"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p042217507317">type</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1042212501134">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p17422115012318">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p144229504313">Display mode.</p>
<div class="note" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_note18422750538"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul14233509320"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li1942315500320"><strong id="iam_02_0013__en-us_topic_0222393171_b36351835174515">AX</strong>: Account level.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li1142315506314"><strong id="iam_02_0013__en-us_topic_0222393171_b12560336184520">XA</strong>: Project level.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li124233501832">The display mode of a custom policy can only be <strong id="iam_02_0013__en-us_topic_0222393171_b7600163754510">AX</strong> or <strong id="iam_02_0013__en-us_topic_0222393171_b860033744510">XA</strong>. A custom policy must be displayed at either of the two levels.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row842135018312"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p74238501335">description</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p84231050439">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p11423115019311">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1842395011319">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row142105010312"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p14231750530">description_cn</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p342414505316">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p94243501131">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p542417501432">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row342155017318"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p142419501037"><a href="#iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113RolePolicy">policy</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p144246501932">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p642418502033">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p442416505310">Content of custom policy.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113RolePolicy"></a><a name="en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113RolePolicy"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113RolePolicy" frame="border" border="1" rules="all"><caption><b>Table 4 </b>role.policy</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row1942418501331"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.5.2.5.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p64251350330">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.5.2.5.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p642518501933">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.5.2.5.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1425250434">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.5.2.5.1.4"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p64256507310">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row194251950530"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p24254501635">Version</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.5.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p24251350437">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p542611507311">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.5.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p3427950739">Policy version. When creating a custom policy, set this parameter to <strong id="iam_02_0013__en-us_topic_0222393171_b7100161114466">1.1</strong>.</p>
<div class="note" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_note124277504318"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul15427850639"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li4427145017312"><strong id="iam_02_0013__en-us_topic_0222393171_b1449917284462">1.0</strong>: System-defined role. Only a limited number of service-level roles are provided for authorization.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li0427550936"><strong id="iam_02_0013__en-us_topic_0222393171_b1624183219463">1.1</strong>: Policy. A policy defines the permissions required to perform operations on a specific cloud resource under certain conditions.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row94251650038"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p104274504313"><a href="#iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113RolePolicyStatementArritem">Statement</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.5.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p6427850033">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1442711505311">Array of objects</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.5.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p174282501536">Statement of the policy. A policy can contain a maximum of eight statements.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113RolePolicyStatementArritem"></a><a name="en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113RolePolicyStatementArritem"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_request_Rq113RolePolicyStatementArritem" frame="border" border="1" rules="all"><caption><b>Table 5 </b>role.policy.Statement</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row194281150539"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.6.2.5.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p142865019318">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.6.2.5.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p6428175016317">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.6.2.5.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p5429750336">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.6.2.5.1.4"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1342945017311">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row24281450534"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p5429165016320">Action</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.6.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p5429165016314">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1543016509316">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.6.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p9430175011313">Specific operation permission on a resource. A maximum of 100 actions are allowed.</p>
<div class="note" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_note1743113501237"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul1743145019314"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li174311550135">The value format is <em id="iam_02_0013__en-us_topic_0222393171_i13533105075412">Service name</em>:<em id="iam_02_0013__en-us_topic_0222393171_i1953345075414">Resource type</em>:<em id="iam_02_0013__en-us_topic_0222393171_i145331150145413">Operation</em>, for example, <strong id="iam_02_0013__en-us_topic_0222393171_b3533650105414">vpc:ports:create</strong>.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li1843135019314"><em id="iam_02_0013__en-us_topic_0222393171_i7661153205519">Service name</em>: indicates the product name, such as <strong id="iam_02_0013__en-us_topic_0222393171_b156612375520">ecs</strong>, <strong id="iam_02_0013__en-us_topic_0222393171_b36611334557">evs</strong>, or <strong id="iam_02_0013__en-us_topic_0222393171_b1661239559">vpc</strong>. Only lowercase letters are allowed. Resource types and operations are not case-sensitive. You can use an asterisk (*) to represent all operations.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row18428185014319"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p184316501337">Effect</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.6.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p24311150832">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1443111501317">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.6.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p54316501734">Effect of the permission. The value can be <strong id="iam_02_0013__en-us_topic_0222393171_b18816171133">Allow</strong> or <strong id="iam_02_0013__en-us_topic_0222393171_b8815173315">Deny</strong>. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.</p>
<p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p7431145016317">Options:</p>
<ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul1843113505315"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li164322501831">Allow</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li2043216501539">Deny</li></ul>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row174281850633"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p943218502313">Condition</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.6.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1943220501933">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p174321501311">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.6.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p124321350131">Conditions for the permission to take effect. A maximum of 10 conditions are allowed.</p>
<div class="note" id="iam_02_0013__note122334794612"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="iam_02_0013__p1276712344919">Take the condition in the sample request as an example, the condition key (<strong id="iam_02_0013__b6179125817242">obs:prefix</strong>) and the string (<strong id="iam_02_0013__b16185125852411">public</strong>) must be equal (<strong id="iam_02_0013__b21858587243">StringEquals</strong>).</p>
<pre class="screen" id="iam_02_0013__screen18948143318464"> "Condition": {
"StringEquals": {
"obs:prefix": [
"public"
]
}
}</pre>
</div></div>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row54281350835"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p164335501635">Resource</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.6.2.5.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p194331450436">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p8433195017317">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.6.2.5.1.4 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p343318501535">Cloud resource. The array can contain a maximum of 10 resource strings, and each string cannot exceed 128 characters.</p>
<div class="note" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_note04331650133"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul2433185011318"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li14331250431">Format: <em id="iam_02_0013__en-us_topic_0222393171_i16839174244610">::::</em>. For example, <strong id="iam_02_0013__en-us_topic_0222393171_b38409420461">obs:</strong><strong id="iam_02_0013__en-us_topic_0222393171_b58403426467"><em id="iam_02_0013__i1384014224613">:</em></strong><strong id="iam_02_0013__en-us_topic_0222393171_b14841194264616">:bucket:*</strong>. Asterisks are allowed.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li843314505313">The region segment can be <strong id="iam_02_0013__en-us_topic_0222393171_b9290112810523">*</strong> or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.</li></ul>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_section144371504310"><h4 class="sectiontitle">Response Parameters</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_responseParameter" frame="border" border="1" rules="all"><caption><b>Table 6 </b>Parameters in the response body</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row143745014318"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.2.2.4.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p19438250233">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.2.2.4.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1643845010311">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.2.2.4.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p54386509318">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row8437205015316"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.2.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1343810501837"><a href="#iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113Role">role</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.2.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p143825016319">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.2.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p124387501631">Custom policy information.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113Role"></a><a name="en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113Role"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113Role" frame="border" border="1" rules="all"><caption><b>Table 7 </b>role</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row1843945017320"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.3.2.4.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p04391550834">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.3.2.4.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p17439550230">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.3.2.4.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1744011501632">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row18439950930"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p194401750339">catalog</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p6440750435">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p184401850534">Service catalog.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row443920501535"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p244019501939">display_name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p19440195015316">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p9440195015314">Display name of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row14392502313"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1944017501931">description</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p134401950337">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1944185017311">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row843917507317"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p104415501038"><a href="#iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RoleLinks">links</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p34411050736">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p104413501732">Resource link of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row34391950839"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p154411350538"><a href="#iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RolePolicy">policy</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1744113501132">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p4441125018313">Content of custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row643916501739"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p84411950232">description_cn</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p444115012319">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p04420503318">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row164399503311"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p174424501230">domain_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p144285014318">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1244219503313">Domain ID.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row1439125020318"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p204424503310">type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p7442350837">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p744213503315">Display mode.</p>
<div class="note" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_note44421950236"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul17442950338"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li344316505313"><strong id="iam_02_0013__en-us_topic_0222393171_b442475824616">AX</strong>: Account level.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li14431650632"><strong id="iam_02_0013__en-us_topic_0222393171_b7523559194610">XA</strong>: Project level.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li64431850734">The display mode of a custom policy can only be <strong id="iam_02_0013__en-us_topic_0222393171_b1888010591464">AX</strong> or <strong id="iam_02_0013__en-us_topic_0222393171_b15880185913464">XA</strong>. A custom policy must be displayed at either of the two levels.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row1543911505317"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p15443650734">id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p14435501234">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1544310501637">Policy ID.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row14392501539"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p044317501239">name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p34436504315">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1144395013316">Name of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row1343913501731"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1844315017312">updated_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p544412502039">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p6444150633">Time when the custom policy was last updated.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row143965020314"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p104444502316">created_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p844435010312">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p12444650731">Time when the custom policy was created.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row144394501339"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p144418506316">references</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p244445017315">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p14444550534">Number of references.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RoleLinks"></a><a name="en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RoleLinks"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RoleLinks" frame="border" border="1" rules="all"><caption><b>Table 8 </b>role.links</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row164462506318"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.4.2.4.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p12447205016312">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.4.2.4.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p844715507319">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.4.2.4.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p14471350531">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row5446150835"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.4.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p94479501734">self</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.4.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p444714506315">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.4.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p444714501430">Resource link.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RolePolicy"></a><a name="en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RolePolicy"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RolePolicy" frame="border" border="1" rules="all"><caption><b>Table 9 </b>role.policy</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row7447350431"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.5.2.4.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p144489501535">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.5.2.4.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p185481350239">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.5.2.4.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p654915011317">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row74472507311"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p4549250838">Version</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1254935016317">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.5.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p105499501235">Policy version.</p>
<div class="note" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_note4549195020314"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul554985019310"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li9549350131"><strong id="iam_02_0013__en-us_topic_0222393171_b209111794718">1.0</strong>: System-defined role. Only a limited number of service-level roles are provided for authorization.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li175491550032"><strong id="iam_02_0013__en-us_topic_0222393171_b1440751010474">1.1</strong>: Policy. A policy defines the permissions required to perform operations on a specific cloud resource under certain conditions.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row154471250936"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p75491508315"><a href="#iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RolePolicyStatementArritem">Statement</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p4549750335">Array of objects</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.5.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p05491850538">Statement of the policy. A policy can contain a maximum of eight statements.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RolePolicyStatementArritem"></a><a name="en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RolePolicyStatementArritem"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_response_Rs113RolePolicyStatementArritem" frame="border" border="1" rules="all"><caption><b>Table 10 </b>role.policy.Statement</caption><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row3449350332"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.6.2.4.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p18549145017314">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.6.2.4.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p454914501634">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.6.2.4.1.3"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p054911501435">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row194491508316"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p954917501539">Action</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1554915503312">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.6.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p14549105016317">Specific operation permission on a resource. A maximum of 100 actions are allowed.</p>
<div class="note" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_note5549175017313"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul145498501238"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li185495507312">The value format is <em id="iam_02_0013__en-us_topic_0222393171_i1939915645916">Service name</em>:<em id="iam_02_0013__en-us_topic_0222393171_i204001056185912">Resource type</em>:<em id="iam_02_0013__en-us_topic_0222393171_i18402256145910">Operation</em>, for example, <strong id="iam_02_0013__en-us_topic_0222393171_b144031356165913">vpc:ports:create</strong>.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li65491650232"><em id="iam_02_0013__en-us_topic_0222393171_i3338123416120">Service name</em>: indicates the product name, such as <strong id="iam_02_0013__en-us_topic_0222393171_b16338143416113">ecs</strong>, <strong id="iam_02_0013__en-us_topic_0222393171_b433933417119">evs</strong>, or <strong id="iam_02_0013__en-us_topic_0222393171_b333912341019">vpc</strong>. Only lowercase letters are allowed. Resource types and operations are not case-sensitive. You can use an asterisk (*) to represent all operations.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row64493508320"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p155491550638">Effect</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p185491950239">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.6.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p185496501232">Effect of the permission. The value can be <strong id="iam_02_0013__en-us_topic_0222393171_b1698105617">Allow</strong> or <strong id="iam_02_0013__en-us_topic_0222393171_b117011451917">Deny</strong>. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.</p>
<p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p95497501137">Options:</p>
<ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul6549145012312"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li12549105016316">Allow</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li175492501936">Deny</li></ul>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row54491150333"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p155491501034">Condition</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1554919501438">Map&lt;String,Map&lt;String,Array&lt;String&gt;&gt;&gt;</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.6.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p554912508319">Conditions for the permission to take effect. A maximum of 10 conditions are allowed.</p>
<div class="note" id="iam_02_0013__note24751644460"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="iam_02_0013__p1647513419461">Take the condition in the sample request as an example, the condition key (<strong id="iam_02_0013__b13961741202912">obs:prefix</strong>) and the string (<strong id="iam_02_0013__b796294122911">public</strong>) must be equal (<strong id="iam_02_0013__b1996213416299">StringEquals</strong>).</p>
<pre class="screen" id="iam_02_0013__screen547515411466"> "Condition": {
"StringEquals": {
"obs:prefix": [
"public"
]
}
}</pre>
</div></div>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row134491507314"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p85492050234">Resource</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p115495507312">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.6.2.4.1.3 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p13549650433">Cloud resource. The array can contain a maximum of 10 resource strings, and each string cannot exceed 128 characters.</p>
<div class="note" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_note16549185017311"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_ul354965015318"><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li135501501134">Format: <em id="iam_02_0013__en-us_topic_0222393171_i1537618157475">::::</em>. For example, <strong id="iam_02_0013__en-us_topic_0222393171_b1037681512473">obs:</strong><strong id="iam_02_0013__en-us_topic_0222393171_b8377115204717"><em id="iam_02_0013__i1337618152473">:</em></strong><strong id="iam_02_0013__en-us_topic_0222393171_b0377101514712">:bucket:*</strong>. Asterisks are allowed.</li><li id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_li1555085015312">The region segment can be <strong id="iam_02_0013__en-us_topic_0222393171_b14832175713523">*</strong> or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.</li></ul>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_section1055014501937"><h4 class="sectiontitle">Example Request</h4><pre class="screen" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_screen19716115313415">POST https://<em id="iam_02_0013__i55821235165918"></em>iam.eu-de.otc.t-systems.com/v3.0/OS-ROLE/roles</pre>
<pre class="screen" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_screen155013503316">{
"role": {
"display_name": "IAMCloudServicePolicy",
"type": "AX",
"description": "IAMDescription",
"description_cn": "Policy description",
"policy": {
"Version": "1.1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"obs:bucket:GetBucketAcl"
],
"Condition": {
"StringStartWith": {
"g:ProjectName": [
"eu-de"
]
}
},
}
]
}
}
}</pre>
</div>
<div class="section" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_section15551185017316"><h4 class="sectiontitle">Example Response</h4><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p105518501730"><strong id="iam_02_0013__en-us_topic_0222393171_b655542415479">Status code: 201</strong></p>
<p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p455118505313">The request is successful.</p>
<pre class="screen" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_screen45511050334">{
"role": {
"catalog": "CUSTOMED",
"display_name": "IAMCloudServicePolicy",
"description": "IAMDescription",
"links": {
"self": "https://<em id="iam_02_0013__i033712813262"></em>iam.eu-de.otc.t-systems.com/v3/roles/93879fd90f1046f69e6e0b31c94d2..."
},
"policy": {
"Version": "1.1",
"Statement": [
{
"Action": [
"obs:bucket:GetBucketAcl"
],
"Resource": [
"obs:*:*:bucket:*"
],
"Effect": "Allow",
"Condition": {
"StringStartWith": {
"g:ProjectName": [
"eu-de"
]
}
}
}
]
},
"description_cn": "Policy description",
"domain_id": "d78cbac186b744899480f25bd...",
"type": "AX",
"id": "93879fd90f1046f69e6e0b31c9...",
"name": "custom_d78cbac186b744899480f25bd022f468_1"
}
}</pre>
</div>
<div class="section" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_section145516501310"><h4 class="sectiontitle">Status Codes</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_table284" frame="border" border="1" rules="all"><thead align="left"><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row104598502316"><th align="left" class="cellrowborder" valign="top" width="15%" id="mcps1.3.7.2.1.3.1.1"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p11551750933">Status Code</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="85%" id="mcps1.3.7.2.1.3.1.2"><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1551175020311">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row1745914509314"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1055117501834">201</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p145514501933">The request is successful.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row64591550631"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p75511150738">400</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p35513501638">The server failed to process the request.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row19459750533"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p1855115019319">401</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p14552105014310">Authentication failed.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row745945018310"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p655218509315">403</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p155245019320">Access denied.</p>
</td>
</tr>
<tr id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_row64599506315"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p115523501037">500</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p4552450337">Internal server error.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_section205528501533"><h4 class="sectiontitle">Error Codes</h4><p id="iam_02_0013__en-us_topic_0222393171_en-us_topic_0222037452_p115521750332">None</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="iam_02_0010.html">Custom Policy Management</a></div>
</div>
</div>
View Git Blame Copy Permalink