To make it easier for you to configure domain name queries and manage permissions at a higher level of granularity, the CDN permission policies have been completely upgraded. This allows you to grant permissions at the domain name level through custom policy statements.
Log in to the CAM Console and click Policies to access the policy management page. Then, click Create Custom Policy:
Select Create by Policy Generator:
Select CDN in the service drop-down list and select the actions to be authorized. If you want to grant full read/write permission, check Action Name to select all actions. To map specific actions with console features, please see Console Permissions.
Enter the domain name to be authorized as the resource. Then, click Add Statement and Next to create a policy. Then, associate the created policy with existing users and user groups for further authorization:
*for resource description.
$accountis described using
uin, i.e., the account ID of the root account. Take the domain names
,, such as