Authorization rules define access policies that specify which destinations IoT terminals can access.
Overview
An authorization rule consists of a destination and an access policy. The destination is a domain name or a CIDR block, and the access policy is set to either Allow or Deny. You can configure rules for different IoT terminals to allow or deny access to specified destinations.
If an authorization rule contains both an Allow and a Deny action for the same domain name or IP address, the Deny action takes precedence.
Add an authorization rule
- Log on to the Cloud Connector console.
On the Instances page, find the target Cloud Connector instance, and in the Actions column, click Configure Authorization Rules.
On the Authorization Rules tab, click Add Rule.
In the Add Rule dialog box, configure the following parameters and click OK.
Parameter
Description
Rule Name
Enter a name for the authorization rule.
Destination
Enter the destination address.
Select a destination type. Valid values are Domain Name and CIDR Block.
Enter the destination address as a domain name or CIDR block, depending on the selected destination type.
Action
Select the policy action. Valid options are Allow and Deny.
Allow: Permits IoT terminals to access the specified destination.
Deny: Prohibits IoT terminals from accessing the specified destination.
Edit an authorization rule
You can edit an authorization rule to change its name, destination, or action.
- Log on to the Cloud Connector console.
On the Instances page, find the target Cloud Connector instance, and in the Actions column, click Configure Authorization Rules.
On the Authorization Rules tab, find the target rule, and in the Actions column, click Edit.
In the Edit Rule dialog box, modify the rule settings, and then click OK.
Delete an authorization rule
After you delete an authorization rule, IoT terminals will not be able to access the destination specified in it. Proceed with caution.
- Log on to the Cloud Connector console.
On the Instances page, find the target Cloud Connector instance, and in the Actions column, click Configure Authorization Rules.
On the Authorization Rules tab, delete one or more target authorization rules.
To delete a single authorization rule: In the Actions column of the target rule, click Delete.
To delete multiple authorization rules: Select the checkboxes for the rules you want to delete, and click Batch Delete at the bottom of the list.
In the confirmation dialog box, click OK.
References
CreateAuthorizationRule : Creates an authorization rule.
UpdateAuthorizationRuleAttribute : Updates the attributes of an authorization rule.
DeleteAuthorizationRule : Deletes an authorization rule.
DeleteAuthorizationRules : Deletes multiple authorization rules.