CredentialConfig for cross-account access authorization - Intelligent Media Management - Alibaba Cloud - Intelligent Media Management

Parameter	Type	Description	Example
	object	The authorization chain settings. In most cases, this parameter is left empty. Note If Account A is used to call an API operation of Intelligent Media Management (IMM) to process Object Storage Service (OSS) data in Account B, you must set the ServiceRole parameter to a role in Account A, and set the Chain parameter to a role in Account B.
ServiceRole	string	The service role in the account that is used to call an IMM API operation. The role must have the `sts:AssumeRole` permission. You can configure permissions for the role in the Resource Access Management (RAM) console.	AliyunSTSAssumeForIMMServiceRole
Policy	string	The policy that is attached to the role specified by the ServiceRole parameter. For example, the policy allows access to OSS. This parameter is optional.	{"Statement": [{"Action": "oss:","Effect": "Allow","Resource": ""}],"Version": "1"}
Chain	array	The authorization chains. All roles in the array must have the `sts:AssumeRole` permission. You need to only grant other permissions, such as read and write permissions on OSS, to the last role in the array. You can grant permissions in the RAM console.
	object	The authorization chain.
AssumeRoleFor	string	The ID of the account that you use to grant permissions.	10232100246xxxxx
Role	string	The RAM role that can be assumed.	AliyunOSSRole
RoleType	string	The role type. Valid values: user: Alibaba Cloud account. service: Alibaba Cloud service.	user

object

The authorization chain settings. In most cases, this parameter is left empty.

Note

If Account A is used to call an API operation of Intelligent Media Management (IMM) to process Object Storage Service (OSS) data in Account B, you must set the ServiceRole parameter to a role in Account A, and set the Chain parameter to a role in Account B.

ServiceRole

string

The service role in the account that is used to call an IMM API operation. The role must have the sts:AssumeRole permission. You can configure permissions for the role in the Resource Access Management (RAM) console.

AliyunSTSAssumeForIMMServiceRole

Policy

string

The policy that is attached to the role specified by the ServiceRole parameter. For example, the policy allows access to OSS. This parameter is optional.

{"Statement": [{"Action": "oss:*","Effect": "Allow","Resource": "*"}],"Version": "1"}

Chain

array

The authorization chains. All roles in the array must have the sts:AssumeRole permission. You need to only grant other permissions, such as read and write permissions on OSS, to the last role in the array. You can grant permissions in the RAM console.

object

The authorization chain.

AssumeRoleFor

string

The ID of the account that you use to grant permissions.

10232100246xxxxx

Role

string

The RAM role that can be assumed.

AliyunOSSRole

RoleType

string

The role type. Valid values:

user: Alibaba Cloud account.
service: Alibaba Cloud service.

user