Shulou(Shulou.com)05/31 Report--

This article mainly introduces the relevant knowledge of "what is the overall architecture of MaxCompute access control". The editor shows you the operation process through an actual case, and the operation method is simple, fast and practical. I hope this article "what is the overall architecture of MaxCompute access control" can help you solve the problem.

Basic terminology

Project: project space, MaxCompute provides users with the basic unit of self-management.

Access control: check whether a request is trusted and legitimate.

ACL: access control list, an expression of authorization.

Policy: a rule-based expression of authorization.

Role: a collection of permissions used to implement role-based privilege management.

LabelSecurity: tag-based access control for column-level permission management.

ProjectProtection: project space protection, which is used to enable data flow access control.

TruestedProject: trusted project space for project space data flow access control authorization.

ExceptionPolicy: a description of an exception to the project space protection mechanism in which project spatial data flows to access control authorization.

Package: a medium for resource sharing between project spaces.

Overall architecture of MaxCompute access control

Authentication: authentication is required first to access MaxCompute.

Request source check (IP whitelist): check the IP that submitted the access request to make sure that the IP is in the IP whitelist before you can access MaxCompute.

Project space status check: it is often used for operation or operation and maintenance. If the project is frozen due to MaxCompute arrears, no request can be passed to MaxCompute.

LabelSecurity check: access control for column-level sensitive data.

Role/Policy/ACL: finally, check the permissions of the role, as well as the permissions of Policy and ACL.

DataWorks Rights Management and MaxCompute Rights Management

This is the end of the introduction to "what is the overall architecture of MaxCompute access control". Thank you for your reading. If you want to know more about the industry, you can follow the industry information channel. The editor will update different knowledge points for you every day.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.