[Upgrade] Added RAM authentication to some OpenAPI interfaces of CDN/DCDN/SCDN products
Jan 26, 2024
CDN
[Alibaba Cloud] [Notice about new RAM authentication for some OpenAPI interfaces of CDN/DCDN/SCDN products]
Upgrade time: Beijing time, January 30, 2024 00:00:00-February 6, 2024 23:59:59
Upgrade matters: In order to enhance product capabilities and plan to optimize the management and control of resource operation permissions, Alibaba Cloud CDN/DCDN/SCDN products will add RAM authentication to the following OpenAPI interfaces.
CDN
2018-05-10/DescribeCdnConditionIPBInfo
2018-05-10/DescribeCdnRegionAndIsp
2018-05-10/DescribeCdnTypes
2018-05-10/DescribeIpInfo
2018-05-10/DescribeUserCdnStatus
2018-05-10/DescribeUserCdncomputeStatus
2014-11-11/DescribeRefreshQuota
2014-11-11/DescribeIpInfo
DCDN
DescribeDcdnConditionIPBInfo
DescribeDcdnIpInfo
DescribeDcdnRegionAndIsp
DescribeUserDcdnIpaStatus
DescribeUserDcdnStatus
DescribeUserErStatus
DescribeUserLogserviceStatus
DescribeDcdnIpaService
DescribeDcdnDdosService
DescribeDcdnService
DescribeDcdnWafService
DescribeDcdnsecService
SCDN
CheckScdnService
DescribeScdnService
Impact of changes:
1. After the interface is changed, if you directly access the above OpenAPI interface through a sub-account, or access the above functions through the console, Alibaba Cloud will perform RAM authentication on the sub-account, and unauthorized sub-accounts will not be able to access; if the sub-account has been configured with the following permission policy will not be affected.
CDN
AliyunCDNFullAccess
AliyunCDNReadOnlyAccess
DCDN
AliyunDCDNFullAccess
AliyunDCDNReadOnlyAccess
SCDN
AliyunSCDNFullAccess
AliyunSCDNReadOnlyAccess
2. If the above permission policy is not configured, or you need more fine-grained RAM authentication control, you can refer to the operation examples in the following document link to configure the permission policy for the corresponding interface for the sub-account.
https://www.alibabacloud.com/help/cdn/user-guide/authorize-a-ram-user-to-prefetch-and-refresh-resources
Upgrade time: Beijing time, January 30, 2024 00:00:00-February 6, 2024 23:59:59
Upgrade matters: In order to enhance product capabilities and plan to optimize the management and control of resource operation permissions, Alibaba Cloud CDN/DCDN/SCDN products will add RAM authentication to the following OpenAPI interfaces.
CDN
2018-05-10/DescribeCdnConditionIPBInfo
2018-05-10/DescribeCdnRegionAndIsp
2018-05-10/DescribeCdnTypes
2018-05-10/DescribeIpInfo
2018-05-10/DescribeUserCdnStatus
2018-05-10/DescribeUserCdncomputeStatus
2014-11-11/DescribeRefreshQuota
2014-11-11/DescribeIpInfo
DCDN
DescribeDcdnConditionIPBInfo
DescribeDcdnIpInfo
DescribeDcdnRegionAndIsp
DescribeUserDcdnIpaStatus
DescribeUserDcdnStatus
DescribeUserErStatus
DescribeUserLogserviceStatus
DescribeDcdnIpaService
DescribeDcdnDdosService
DescribeDcdnService
DescribeDcdnWafService
DescribeDcdnsecService
SCDN
CheckScdnService
DescribeScdnService
Impact of changes:
1. After the interface is changed, if you directly access the above OpenAPI interface through a sub-account, or access the above functions through the console, Alibaba Cloud will perform RAM authentication on the sub-account, and unauthorized sub-accounts will not be able to access; if the sub-account has been configured with the following permission policy will not be affected.
CDN
AliyunCDNFullAccess
AliyunCDNReadOnlyAccess
DCDN
AliyunDCDNFullAccess
AliyunDCDNReadOnlyAccess
SCDN
AliyunSCDNFullAccess
AliyunSCDNReadOnlyAccess
2. If the above permission policy is not configured, or you need more fine-grained RAM authentication control, you can refer to the operation examples in the following document link to configure the permission policy for the corresponding interface for the sub-account.
https://www.alibabacloud.com/help/cdn/user-guide/authorize-a-ram-user-to-prefetch-and-refresh-resources