Wāhanga 1 o te 3
I te tau 2011, i whakapuaki a Amazon i te mahinga AWS Identity & Access Management (IAM) mo CloudFront. I whakarewahia te IAM i te tau 2010, me te tautoko i te S3. Ko te AWS Identity & Management Management (IAM) ka taea e koe te maha o nga kaiwhakamahi i roto i te kaute AWS. Mena kua whakamahia e koe nga Ratonga Tukutuku Amazon (AWS), e mohio ana koe ko te huarahi anake hei whakahaere i nga ihirangi i roto i te AWS, ko te whakaputa i to ingoa kaiwhakamahi me te kupuhipa me nga mahinga uru.
He tino painga tenei mo te nuinga o tatou. Ka whakakorehia e IAM te hiahia ki te tuhi i nga kupuhipa me nga mahinga uru.
Ko te whakarereketanga i to maatau kupuhipa matua AWS ranei, ko te whakaputa i nga taviri hou, ko te otinga noa noa iho ka mahue i te kaimahi te kaaanga. Ko te Tuakiri AWS me te Whakahaere Uru (IAM) he timatanga pai ki te tuku i nga kaute kaiwhakamahi takitahi ki nga mahinga takitahi. Heoi, he kaiwhakamahi S3 / CloudFront matou kei te titiro matou kia uru atu a CloudFront ki a IAM.
I kitea e ahau nga tuhinga i runga i tenei ratonga kia pakaru noa atu. He torutoru nga hua o te rōpū e tuku ana i te whānuitanga o te tautoko mo te Tuakiri me te Whakahaere Uru (IAM). Engari ko nga kaiwhakangungu kei te nuinga o te tikanga, na, i rapu ahau i tetahi otinga kore ki te whakahaere i te IAM me to raatau ratonga Amazon S3.
Kei te haere tenei tuhinga i roto i te tukanga o te whakarite i te Atanga Raina Raihana e tautoko ana i te IAM me te whakatu i tetahi rōpū / kaiwhakamahi ki te uru atu ki te S3. Me hiahia koe ki te whakatuwhera i te raupapa kaute a Amazon AWS S3 i mua i te tīmatanga o te whirihora i te Tuakiri & Whakahaere Whakahaere (IAM).
Ko taku tuhinga, Ma te whakamahi i te Amazon Storage Simple (S3), ka haere koe na roto i te tukanga o te whakatakoto i tetahi kaute AWS S3.
Anei nga takahanga i roto i te whakarite me te whakatinana i tetahi kaiwhakamahi i roto i te IAM. Kua tuhia tenei mo Windows engari ka taea e koe te tweak hei whakamahi i te Linux, UNIX me te Mac OSX.
- Tāuta me te whirihora i te Atanga Raina Whakatau (CLI)
- Waihangahia he Rōpū
- Homai te Rōpū Rōpū ki te S3 Bucket me te CloudFront
- Waihanga Kaiwhakamahi me te Tāpiri ki te Rōpū
- Waihanga Profile Profile me Hanga Waihanga
- Whakatau Whakamātau
Tāuta me te whirihora i te Atanga Raina Whakatau (CLI)
Ko te Toolkit Raina IAM Command he hōtaka Java e wātea ana i nga Amazon AWS Developers Tools. Ka taea e te taputapu te whakamahi i nga tono API IAM mai i te taonga taiao (DOS mo Windows).
- Me whakahaere koe Java 1.6 neke atu ranei. Ka taea e koe te tiki i te putanga hou mai Java.com. Hei kite i te ahua o te putanga i runga i to rorohiko Windows, whakatuwheratia te Whakatairanga Whakatairanga me te momo i roto i te reanga-java. Ka whakaaro tenei ko java.exe kei to PATH.
- Tikiake i te taputapu IAM CLI me te wehe i tetahi wahi ki to puku a to rohe.
- E rua nga kōnae kei te pakiaka o te taputapu CLI e hiahia ana koe ki te whakahou.
- aws-credential.template: Kei roto i tenei kōnae o tautuhinga AWS. Tāpirihia to AWSAccessKeyId me to AWSSecretKey, tiakina me te kati i te kōnae.
- client-config.template : Me whakahou koe i tenei kōnae mēnā e hiahia ana koe ki te tūmau takawaenga. Tangohia nga tohu me te whakahou ClientProxyHost, ClientProxyPort, ClientProxyUsername me ClientProxyPassword. Tiaki me te kati i te kōnae.
- Ko te taahiraa e whai ake nei ko te whakauru i nga Maamaa Taiao. Haere ki te Paewhiri Mana | Ngā Āhuatanga Pūnaha | Ngā tautuhinga pūnaha tawhito | Ngā Tae Taiao. Tāpirihia nga taurangi e whai ake nei:
- AWS_IAM_HOME : Whakaritehia tenei huringa ki te whaiaronga i tuhia ai te taputapu CLI. Mena kei te whakahaere koe i te Windows, ka tukuna atu ki te pakiaka o to drive C, ko C: \ IAMCli-1.2.0 te huringa.
- JAVA_HOME : Tautuhia tenei taurangi ki te whaiaronga kei te whakauruhia a Java. Koinei te waahi o te kōnae java.exe. I roto i te taapiri Windows 7 Java, he mea penei me C: \ Papatono Papatono (x86) \ Java \ jre6.
- AWS_CREDENTIAL_FILE : Tautuhia tenei huringa ki te ara me te ingoa kōnae o te aws-credential.template kua whakahoutia ake ake. Mena kei te whakahaere koe i te Windows, ka waihohia ki te pakiaka o to puku C, ko C: \ IAMCli-1.2.0 \ aws-credential.template.
- CLIENT_CONFIG_FILE : Ka hiahia koe ki te tāpiri i tenei taurangi taiao mēnā e hiahiatia ana e koe he tūmau takawaenga. Mena kei te whakahaere koe i te Windows, ka tukuna atu ki te pakiaka o to puku C, ko C: \ IAMCli-1.2.0 \ client-config.template. Kaua e tapiritia tenei taurangi kaore koe e hiahia.
- Whakamātautauhia te tāutanga mā te haere ki te Whakatairanga Whakatairanga me te whakaururu i te mema-userlistbypath. I te mea kaore koe e hapa i tetahi hapa, me pai koe ki te haere.
Ko nga whakahau IAM katoa ka taea te rere i te Whakaaetanga Whakatairanga. Ka timata nga whakahau katoa ki te "iam-".
Waihangahia he Rōpū
He nui te 100 o nga rōpū e taea te hanga mo ia kaute AWS. Ahakoa ka taea e koe te tautuhi i nga whakaaetanga i roto i te IAM i te taumata kaiwhakamahi, ma te whakamahi i nga rōpū hei mahi pai. Koinei te tukanga mo te hanga i tetahi rōpū i roto i te IAM.
- Ko te raupapa whakawhitinga mo te hanga i te rōpū he iam-groupcreate -g GROUPNAME [-p PATH] [-v] kei hea nga whiringa -p me -v. Kei te wātea nga tuhinga katoa mo te Atanga Raina Ture i runga i nga AWS Docs.
- Ki te hiahia koe ki te waihanga i tetahi roopu e kiia ana he "nga whakamataku", ka uru mai koe, iam-groupcreate -g nga whakamataku i te Whakatau Whakatairanga.
- Ka taea e koe te tirotiro kei te tika te hanganga o te roopu ma te whakaurunga i te roopu-grouplistbypath i te Whakatairanga Whakatairanga. Mena kua hangaia e koe tenei roopu, ko te putanga he mea penei: "arn: aws: iam :: 123456789012: rōpū / whakamataku", kei hea te nama o to tau AWS.
Homai te Rōpū Rōpū ki te S3 Bucket me te CloudFront
Ko nga kaupapa here e whakahaere ana i te mea ka taea e to rōpū te mahi i te S3, te CloudFront rānei. Ma te taunoa, kaore e taea e to rōpū te uru ki tetahi mea i roto i te AWS. I kitea e ahau nga tuhinga i runga i nga kaupapa here kia pai, engari i te hanga i etahi ringaringa o nga kaupapa here, i mahi ahau i etahi waahanga me nga hapa ki te tiki i nga mea mahi i te huarahi i hiahia ahau kia mahi ratou.
E rua o nga whiringa mo te hanga kaupapa here.
Ko tetahi o nga mea ka taea e koe te whakauru tika ki roto ki te Whakatairanga Whakatairanga. Mai i te mea kei te hangaia e koe he kaupapa here me te whakaputa i te reira, ki a au he meawari ake te whakauru i te kaupapahere ki roto i te kōnae kuputuhi me te tuku i te kōnae kuputuhi hei tawhito me te tono iam-groupuploadpolicy. Koinei te tukanga ma te whakamahi i te kōnae kuputuhi me te tuku ki IAM.
- Whakamahia he mea pera me te Pānui me te tomo i te tuhinga e whai ake nei me te tiaki i te kōnae:
{
"Tauranga": [{
"Putanga": "Tukua",
"Mahi": "s3: *",
"Rauemi": [
"arn: aws: s3 ::: BUCKETNAME",
"arn: aws: s3 ::: BUCKETNAME / *"]
},
{
"Putanga": "Tukua",
"Mahi": "s3: ListAllMyBuckets",
"Rauemi": "arn: aws: s3 ::: *"
},
{
"Putanga": "Tukua",
"Mahi": ["kapuarangi: *"],
"Rauemi": "*"
}
]
} - E toru nga waahanga ki tenei kaupapahere. Ka whakamahia te Hua ki te Whakaae, ki te Whakaae ranei i etahi ahua o te uru. Ko te Mahi ko nga mea motuhake ka taea e te rōpū te mahi. Ka whakamahia te Rauemi hei whakauru ki nga peere takitahi.
- Ka taea e koe te whakawhitinga i nga Mahinga takitahi. I roto i tenei tauira, "Action": ["s3: GetObject", "s3: ListBucket", "s3: GetObjectVersion"], ka taea e te rōpū te whakariterite i nga ihirangi o te peere me nga mea tango.
- Ko te waahanga tuatahi "Ka tuku" ki te roopu ki te mahi i nga mahi S3 katoa mo te peere "BUCKETNAME".
- Ko te waahanga tuarua "Ka tuku" i te roopu ki te whakariterite i nga peere katoa i te S3. Kei te hiahia koe ki tenei ka taea e koe te kite i te rarangi o te peere mehemea kei te whakamahi koe i tetahi mea pera i te AWS Console.
- Ko te waahanga tuatoru e uru ana ki te whanui ki te CloudFront.
He maha nga waahanga ka tae mai ki nga kaupapa here IAM. Ko Amazon he taputapu tino pai e mohiotia ana ko te AWS Policy Policy. Ka whakaratohia e tenei taputapu he GUI ki hea ka taea e koe te waihanga i o kaupapa here me te whakaputa i te waehere pono e hiahia ana koe ki te whakatinana i te kaupapa here. Ka taea hoki e koe te tirotiro i te waahanga Kupu Reo Kaupapa Uru e whai ana i te Whakamahinga AWS Identity me te Whakaaetanga Whakaaetanga Whakahaere.
Waihanga Kaiwhakamahi me te Tāpiri ki te Rōpū
Ko te tukanga o te hanga i tetahi kaiwhakamahi hou me te whakauru atu ki te roopu hei whakarato i a raatau whakauru e rua nga waahanga.
- Ko te whakawhitinga mo te waihanga i tetahi kaiwhakamahi ko iam-usercreate -u USERNAME [-p PATH] [-g GROUPS ...] [-k] [-v] kei hea nga whiringa -p, -g, -k me -v. Kei te wātea nga tuhinga katoa mo te Atanga Raina Ture i runga i nga AWS Docs.
- Ki te hiahia koe ki te hanga i tetahi kaiwhakamahi "bob", ka tomo koe, iam-usercreate -u bob -g awesomeusers i te whakahau Whakatairanga.
- Ka taea e koe te tirotiro i te tika o te kaiwhakamahi na roto i te whakaurunga i nga kaim-grouplistusers -g awesomeusers i te whakahau Whakatairanga. Mena kua hangaia e koe tenei kaiwhakamahi, ko te putanga he mea penei: "arn: aws: iam :: 123456789012: kaiwhakamahi / bob", kei hea te nama o to tau AWS.
Waihanga Hoahoa Whakaoho me te Hanga Hanga
I tenei wa, kua hangaia e koe he kaiwhakamahi engari me hiahia koe ki te whakarato ki a raatau he huarahi ki te whakarahi me te tango i nga taonga mai i te S3.
E rua nga whiringa kei te wātea hei whakarato i nga kaiwhakamahi ki te whakamahi ki te S3 ma te whakamahi IAM. Ka taea e koe te waihanga he Profile Takiuru me te whakarato ki o kaiwhakamahi me te kupuhipa. Ka taea e ratou te whakamahi i o raatau tohu ki te takiuru ki te Amazon AWS Console. Ko te atu waahanga ko te tuku i to hunga kaiwhakamahi he taviri uru me tetahi kī ngaro. Ka taea e ratou te whakamahi i enei maatau i nga taputapu tuatoru e toru rite te S3 Fox, CloudBerry S3 Explorer, S3 Browser rānei.
Waihanga Profile Profile
Ko te waihanga i tetahi Profile Ingoa mo o kaiwhakamahi S3 e whakarato ana ki a ratou he ingoa kaiwhakamahi me tetahi kupuhipa ka taea e raatau ki te takiuru ki te Amazon AWS Console.
- Ko te raupapa whakawhitinga mo te waihanga i tetahi putea takiuru ko iam-useraddloginprofile -u USERNAME -p PASSWORD. Kei te wātea nga tuhinga katoa mo te Atanga Raina Ture i runga i nga AWS Docs.
- Mena ka hiahia koe ki te waihanga i tetahi putea takiuru mo te kaiwhakamahi "bob", ka tomo koe, iam-useraddloginprofile -u bob -p PASSWORD i te Whakatau Whakatairanga.
- Ka taea e koe te tirotiro kei te tika te hanga o te putea takiuru na roto i te whakauru ki -m-usergetloginprofile -u bob i te Whakatairanga Whakatairanga. Mena kua waihangahia e koe he putea takiuru mo bob, ko te putanga he mea hei "Profile Profile mo te bob kaiwhakamahi".
Waihanga Maama
Ko te hanga i te AWS Key Access Key me te AWS Access Key ID ka tuku i to kaiwhakamahi ki te whakamahi i te rorohiko tuatoru me nga mea i whakahuatia i mua. Kia mahara kia rite ki te haumarutanga, ka taea e koe te tiki i enei mahinga i te wa o te tukanga hei whakauru i te waitohu kaiwhakamahi. Me mohio koe ki te kape me te whakapiri i te putanga mai i te Whakatau Whakatairanga me te tiaki i roto i te kōnae kuputuhi. Ka taea e koe te tuku i te kōnae ki to kaiwhakamahi.
- Ko te whakahuahua mo te whakapiri i nga taviri mo te kaiwhakamahi ko iam-useraddkey [-u USERNAME]. Kei te wātea nga tuhinga katoa mo te Atanga Raina Ture i runga i nga AWS Docs.
- Mena e hiahia ana koe ki te hanga i nga taviri mo te kaiwhakamahi "bob", ka uru koe ki te -mera-whakamahiraddkey -u bob i te Whakatau Whakatairanga.
- Ka puta mai te whakahau i nga taviri hei titiro penei:
AKIACOOB5BQVEXAMPLE
BvQW1IpqVzRdbwPUirD3pK6L8ngoX4PTEXAMPLE
Ko te raina tuatahi ko te Access Key ID me te raina tuarua ko te Key Access Key. E hiahia ana koe mo te pūmanawa tuatoru.
Whakatau Whakamātau
I tenei wa i hangaia e koe nga rōpū / kaiwhakamahi IAM me te hoatu i nga roopu ki te whakamahi i nga kaupapa here, me whakamatau koe i te uru.
Uru Uru
Ka taea e nga kaiwhakamahi te whakamahi i to ingoa kaiwhakamahi me to kupuhipa ki te takiuru ki te AWS Console. Engari, ehara tenei i te whārangi takiuru paatata auau e whakamahia ana mo te AWS matua matua.
He URL motuhake ka taea e koe te whakamahi hei whakarato i tetahi puka takiuru mo to Amazon AWS anake. Tenei ko te URL ki te takiuru ki S3 mo o kaiwhakamahi IAM.
https://AWS-ACCOUNT-NUMBER.signin.aws.amazon.com/console/s3
Ko te AWS-ACCOUNT-NUMBER ko to nama AWS tonu. Ka taea e koe te tiki i tenei ma te takiuru ki te puka Waitohu Ratonga Tukutuku o Amazon. Whakauru me te pāwhiri i te Pūkete | Mahi Mahi. Ko to tau nama kei te kokonga matau. Me tino tangohia nga pupuhi. Ka titiro te URL ki te https://123456789012.signin.aws.amazon.com/console/s3.
Te whakamahi i nga Tae Uru
Ka taea e koe te tikiake me te tāuta i tetahi o nga taputapu tuatoru kua whakahuatia i tenei tuhinga. Tomohia to ID Key Access me te Key Access Key mo nga tuhinga taputapu tuatoru.
Kei te tino taunaki ahau kia hanga e koe he kaiwhakamahi tuatahi, me te whakamatau tino whakamatautau i taua kaiwhakamahi ka taea e ratou te mahi i nga mea katoa e hiahiatia ana e ratou ki te S3. I muri i to waitohu koe ki tetahi o nga kaiwhakamahi, ka taea e koe te whakahaere i te katoa o o kaiwhakamahi S3.
Rauemi
Anei etahi o nga rauemi hei whakarato i a koe i te pai ake o te mohio ki te Tuakiri me te Whakahaere Uru (IAM).
- Tīmata me te IAM
- Rauemi Raina Raihana IAM
- Amazon AWS Paaho
- AWS Generator Policy
- Te whakamahi i te AWS Identity me te Whakahaere Uru
- Iam Release Notes
- Iwi Discussion Forums
- IAM FAQs