[Alibaba Cloud] [Notice about new RAM authentication for some OpenAPI interfaces of CDN/DCDN/SCDN products]
Upgrade time: Beijing time, January 30, 2024 00:00:00-February 6, 2024 23:59:59
Upgrade matters: In order to enhance product capabilities and plan to optimize the management and control of resource operation permissions, Alibaba Cloud CDN/DCDN/SCDN products will add RAM authentication to the following OpenAPI interfaces.

CDN
2018-05-10/DescribeCdnConditionIPBInfo
2018-05-10/DescribeCdnRegionAndIsp
2018-05-10/DescribeCdnTypes
2018-05-10/DescribeIpInfo
2018-05-10/DescribeUserCdnStatus
2018-05-10/DescribeUserCdncomputeStatus
2014-11-11/DescribeRefreshQuota
2014-11-11/DescribeIpInfo

DCDN
DescribeDcdnConditionIPBInfo
DescribeDcdnIpInfo
DescribeDcdnRegionAndIsp
DescribeUserDcdnIpaStatus
DescribeUserDcdnStatus
DescribeUserErStatus
DescribeUserLogserviceStatus
DescribeDcdnIpaService
DescribeDcdnDdosService
DescribeDcdnService
DescribeDcdnWafService
DescribeDcdnsecService

SCDN
CheckScdnService
DescribeScdnService

Impact of changes:
1. After the interface is changed, if you directly access the above OpenAPI interface through a sub-account, or access the above functions through the console, Alibaba Cloud will perform RAM authentication on the sub-account, and unauthorized sub-accounts will not be able to access; if the sub-account has been configured with the following permission policy will not be affected.
CDN
AliyunCDNFullAccess
AliyunCDNReadOnlyAccess
DCDN
AliyunDCDNFullAccess
AliyunDCDNReadOnlyAccess
SCDN
AliyunSCDNFullAccess
AliyunSCDNReadOnlyAccess

2. If the above permission policy is not configured, or you need more fine-grained RAM authentication control, you can refer to the operation examples in the following document link to configure the permission policy for the corresponding interface for the sub-account.
https://www.alibabacloud.com/help/cdn/user-guide/authorize-a-ram-user-to-prefetch-and-refresh-resources
phone Contact Us