Assign a role to an IAM user

Last updated:2021-04-28 11:04:11

The following policy grants KS3 permissions. However, all requests must originate from the specified IP address range.

To assign a role to an IAM user, perform the following steps:

  1. Create a role and grant permissions to the role.
  2. Select a trusted account for the role. The trusted account can be the current Kingsoft Cloud account or another Kingsoft Cloud account.
  3. Create an IAM user under the trusted account and attach the following policy to the IAM user:
    "Version": "2015-11-01",
    "Statement": [
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Resource":"krn:ksc:iam::{Trusted account ID}:role/{Rule name}"

Did you find the above information helpful?

Mostly Unhelpful
A little helpful
Very helpful

What might be the problems?

Unclear or awkward
Redundant or clumsy
Lack of context for the complex system or functionality

More suggestions


Please give us your feedback.


Thank you for your feedback.