Edge Security Acceleration:Custom policies for DCDN

What is a custom policy?

Resource Access Management (RAM) policies are classified into system policies and custom policies. You can manage custom policies based on your business requirements.

• After you create a custom policy, you must attach the policy to a RAM user, RAM user group, or RAM role. This way, the permissions that are specified in the policy can be granted to the principal.

• You can delete a RAM policy that is not attached to a principal. If the RAM policy is attached to a principal, before you can delete the RAM policy you must detach the RAM policy from the principal.

• Custom policies support version control. You can manage custom policy versions based on the version management mechanism provided by RAM.

References

• Create a custom policy

• Modify the document and description of a custom policy

• Delete a custom policy

• Manage policy-based authorization

• Manage custom policy versions

Example of custom policies

Example: Purge and prefetch permissions

• This policy grants the RAM user permissions to purge or prefetch resources by calling API operations.

  {
    "Version": "1",
    "Statement": [
      {
        "Action": [
          "dcdn:PreloadDcdnObjectCaches",
          "dcdn:RefreshDcdnObjectCaches",
          "dcdn:DescribeDcdnRefreshTaskById",
          "dcdn:DescribeDcdnRefreshQuota",
          "dcdn:DescribeDcdnRefreshTasks"
        ],
        "Resource": "acs:dcdn:*:*:*",
        "Effect": "Allow"
      }
    ]
  }

Authorization information

To use a custom policy, you must understand the permission control requirements of your business and the authorization information about Dynamic Content Delivery Network (DCDN). For more information, see RAM authorization.