What is the difference between the multi-application service and RAM?
-
RAM isolates and manages resource-level permissions across accounts. The multi-application service physically isolates resources and data of multiple users within the same Alibaba Cloud account.
-
The multi-application service does not handle logon or authentication for Alibaba Cloud accounts. You must attach the AliyunVODFullAccess policy to the RAM user in the RAM console for fine-grained permission control over applications. AliyunVODFullAccess grants full access to ApsaraVideo VOD resources. You must use the multi-application service together with RAM to implement role-based access control.
Why does a permission error occur when I use the multi-application service after I attach the AliyunVODFullAccess policy to the RAM user?
Before you use the multi-application service, you must attach the AliyunVODFullAccess policy to the RAM user or RAM role and grant permissions to manage the sub-application. For more information, see AttachAppPolicyToIdentity.
Are existing services affected after I activate the multi-application service?
No. ApsaraVideo VOD is backward compatible. By default, all data is placed in the default application. If a RAM user or RAM role under your Alibaba Cloud account has permissions to access ApsaraVideo VOD, that identity also has permissions on the default application.
Can I authorize a third-party account to access resources in an application?
Yes. You can use a RAM role to authorize third-party accounts to access application resources. For more information, see Access resources across Alibaba Cloud accounts.
Can each application be billed separately?
No. Separate billing is not supported for applications. Resources such as storage and domain names are not physically isolated across applications. After resources such as storage, domain names, transcoding, and AI processing are isolated, usage and statistics can be calculated separately for each application. However, bills are generated at the Alibaba Cloud account level.
Why am I unable to find an existing media asset in the ApsaraVideo VOD console?
The ApsaraVideo VOD console displays only media assets of the default application. To find which application a media asset belongs to, call the SearchMedia operation. The AppId parameter in the response indicates the ID of the application.