CDN permission policies have been fully upgraded to facilitate more granular configuration of domain name query and management permissions. Users can achieve domain-level permission allocation through custom policy statements.
Note:
Note: As the CDN 2.0 API is no longer updated or maintained, it is not recommended to create new policies using Create by Product Feature or Project Permission. Instead, users are advised to use the more comprehensive and convenient Create Using Policy Generator or Tag-based Authorization.
1. Log in to the CAM Console, click the Policies menu to enter the policy management page, and click Create Custom Policy:
2. Select Create Using Policy Generator:
3. In the product selection box, choose CDN and select the feature set to be authorized. To grant full read and write permissions, check All Operations. For the mapping relationship between features and the console, see the Action Mapping Table.
4. Fill in the domain name to be authorized in the resource section. After completing the filling, click Yes and click Next to create the policy. Associate the created policy with existing users/user groups to authorize.
All domain names: Check all resources in the resource section, click Yes.
Single/Multiple domain names: Check specific resources, click Add a custom six-segment resource description.
Fill in the corresponding single domain in the Resources section of the right popup window, then click Yes. To add multiple domains, click Add a custom six-segment resource description multiple times.
5. After completing the above operations, click Next, select the sub-account user to be authorized, and click Finish.
