Authorization policies enable access control on workloads in an Alibaba Cloud Service Mesh (ASM) instance. This topic describes how to create, modify, and delete an authorization policy.

Create an authorization policy

  1. Log on to the ASM console.
  2. In the left-side navigation pane, choose Service Mesh > Mesh Management.
  3. On the Mesh Management page, find the ASM instance that you want to configure. Click the name of the ASM instance or click Manage in the Actions column of the ASM instance.
  4. On the details page of the ASM instance, choose Security > AuthorizationPolicy in the left-side navigation pane. On the AuthorizationPolicy page, click Create.
  5. In the Create panel, set the parameters.
    1. Select a namespace from the Namespaces drop-down list.
    2. In the code editor, enter code to configure an authorization policy.
    3. Click OK.
    On the AuthorizationPolicy page, you can view the created authorization policy.

Modify an authorization policy

  1. Log on to the ASM console.
  2. In the left-side navigation pane, choose Service Mesh > Mesh Management.
  3. On the Mesh Management page, find the ASM instance that you want to configure. Click the name of the ASM instance or click Manage in the Actions column of the ASM instance.
  4. On the details page of the ASM instance, choose Security > AuthorizationPolicy in the left-side navigation pane.
  5. On the AuthorizationPolicy page, find the authorization policy that you want to modify and click YAML in the Actions column.
  6. In the Edit panel, modify the authorization policy and click OK.

Delete an authorization policy

  1. Log on to the ASM console.
  2. In the left-side navigation pane, choose Service Mesh > Mesh Management.
  3. On the Mesh Management page, find the ASM instance that you want to configure. Click the name of the ASM instance or click Manage in the Actions column of the ASM instance.
  4. On the details page of the ASM instance, choose Security > AuthorizationPolicy in the left-side navigation pane.
  5. On the AuthorizationPolicy page, find the authorization policy that you want to delete and click Delete in the Actions column.
  6. In the Submit message, click OK.
    The authorization policy disappears from the AuthorizationPolicy page.