If you use a RAM user to request access to the ApsaraVideo Live resources of the relevant Alibaba Cloud account, you must comply with the authentication rules on API requests. This topic describes the authentication rules for the ApsaraVideo Live API.

Overview

You can use RAM to authorize a RAM user to access ApsaraVideo Live resources within your Alibaba Cloud account.
  • You can activate ApsaraVideo Live and add domain names by using your Alibaba Cloud account. Then, all the ApsaraVideo Live features and the added domain names are recognized as resources within your Alibaba Cloud account. By default, you have full operation permissions on the resources within your Alibaba Cloud account.
  • RAM allows you to grant access and management permissions on your ApsaraVideo Live resources to RAM users.
  • Before you use RAM to authorize a RAM user to access your ApsaraVideo Live resources, make sure that you have read the Authentication rules for the Domains API.
  • If you do not need to use a RAM user, ignore this topic.

Authentication rules

When a RAM user uses OpenAPI Explorer to access ApsaraVideo Live resources within the relevant Alibaba Cloud account, ApsaraVideo Live sends a request to RAM to verify that the RAM user has the required permissions to access these resources.

Each ApsaraVideo Live API operation determines the permissions to check based on different resources and the API syntax. The following table describes the Alibaba resource name (ARN) of the resource to be checked for each API operation.

Action-name Resource
DescribeLiveStreamsPublishList acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamsOnlineList acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamsBlockList acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamsControlHistory acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamOnlineUserNum acs:cdn:*:$accountid:domain/$domainName
ForbidLiveStream acs:cdn:*:$accountid:domain/$domainName
ResumeLiveStream acs:cdn:*:$accountid:domain/$domainName
SetLiveStreamsNotifyUrlConfig acs:cdn:*:$accountid:domain/$domainName
AddLiveAppRecordConfig acs:cdn:*:$accountid:domain/$domainName
CreateLiveStreamRecordIndexFiles acs:cdn:*:$accountid:domain/$domainName
DeleteLiveAppRecordConfig acs:cdn:*:$accountid:domain/$domainName
DescribeLiveRecordConfig acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamRecordContent acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamRecordIndexFile acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamRecordIndexFiles acs:cdn:*:$accountid:domain/$domainName
AddLiveStreamTranscode acs:cdn:*:$accountid:domain/$domainName
DeleteLiveStreamTranscode acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamTranscodeInfo acs:cdn:*:$accountid:domain/$domainName
AddLiveAppSnapshotConfig acs:cdn:*:$accountid:domain/$domainName
DeleteLiveAppSnapshotConfig acs:cdn:*:$accountid:domain/$domainName
UpdateLiveAppSnapshotConfig acs:cdn:*:$accountid:domain/$domainName
DescribeLiveSnapshotConfig acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamSnapshotInfo acs:cdn:*:$accountid:domain/$domainName
AddLiveSnapshotDetectPornConfig acs:cdn:*:$accountid:domain/$domainName
AddLiveDetectNotifyConfig acs:cdn:*:$accountid:domain/$domainName
DescribeLiveSnapshotDetectPornConfig acs:cdn:*:$accountid:domain/$domainName
DescribeLiveDetectNotifyConfig.md acs:cdn:*:$accountid:domain/$domainName
UpdateLiveSnapshotDetectPornConfig acs:cdn:*:$accountid:domain/$domainName
UpdateLiveDetectNotifyConfig acs:cdn:*:$accountid:domain/$domainName
DeleteLiveSnapshotDetectPornConfig acs:cdn:*:$accountid:domain/$domainName
DeleteLiveDetectNotifyConfig acs:cdn:*:$accountid:domain/$domainName
DescribeLiveStreamsFrameRateAndBitRateData acs:cdn:*:$accountid:domain/$domainName