Grant permission to a sub-user to play a role

Last updated:2021-04-28 11:04:11

The following policy grants KS3 permissions. However, all requests must originate from the specified IP address range.

To assign a role to an IAM user, perform the following steps:

  1. Create a role and grant permissions to the role.
  2. Select a trusted account for the role. The trusted account can be the current Kingsoft Cloud account or another Kingsoft Cloud account.
  3. Create an IAM user under the trusted account and attach the following policy to the IAM user:
{
    "Version": "2015-11-01",
    "Statement": [
       {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Resource":"krn:ksc:iam::{Trusted account ID}:role/{Rule name}"
       }
    ]
}

Did you find the above information helpful?

Unhelpful
Mostly Unhelpful
A little helpful
Helpful
Very helpful

What might be the problems?

Insufficient
Outdated
Unclear or awkward
Redundant or clumsy
Lack of context for the complex system or functionality

More suggestions

0/200

Please give us your feedback.

Submitted

Thank you for your feedback.

问题反馈