OSS External ID Authorization¶

External ID Authorization¶

1. Click Go to Authorize to enter the Console.

2. Navigate to RAM Access Control > Roles and select Create Role:

1. Complete creating the role:

1. Modify the role's trust policy management

{
  "Statement": [
    {
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "sts:ExternalId": "<外部ID>"
        }
      },
      "Effect": "Allow",
      "Principal": {
        "RAM": [
          "acs:ram::<被授权的账号ID>:user/<用户名>"
        ]
      }
    }
  ],
  "Version": "1"
}

1. Create a permission policy

1. Navigate to RAM Access Control > Permission Policies and click Continue Editing:

1. Enter a permission name and click OK:

1. Add authorization for the role.

In Roles > Permission Management, click Add Authorization: