DocsICP FilingConsole
Documentation

Authentication rules

Updated at:
Copy as MD
Product
My Favorites

This topic lists the Actions and Resources for Hybrid Disaster Recovery (HDR). You can use these lists with Resource Access Management (RAM) to authenticate team members, grant permissions to RAM users and RAM roles, and authorize access across Alibaba Cloud services. This lets you create custom policies for fine-grained access control.

Background information

Note You can skip this section if you can access the target resources without requiring authorization.

By default, an Alibaba Cloud account or a RAM user can use the HDR console to fully manage the HDR resources that they create. However, authorization issues can occur in the following scenarios:

  • When a RAM user is first created, the user does not have permissions to manage resources that belong to the root account.
  • When you need to access HDR resources from other Alibaba Cloud services, or when HDR needs to access other Alibaba Cloud services.
  • To manage an HDR resource with access control, the resource owner must first grant the required permissions for that resource.

When an account uses HDR to access resources that belong to a root account, HDR sends a permission check request to RAM. This check verifies that the resource owner has granted the necessary permissions to the caller. For more information about how to implement fine-grained authorization policies and access control, see Resource Access Management documentation.

Custom policies

You can create a custom policy in the RAM console or by calling the RAM CreatePolicy API. When you create a custom policy on the Script tab, enter the policy content in the Policy Document field based on the JSON template. For more information, see Basic elements of a policy.

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "hdr:*"
            ],
            "Resource": [
                "acs:hdr:*:15619224785*****:*"
            ],
            "Effect": "Allow"
        }
    ]
}

Authentication list

Action and Resource elements, see Basic elements of a policy.
Action Resource
hdr:* acs:hdr:*:<uid>:*