Last updated: 2019-12-25 15:43:31PDF
CAM provides the following features:
Managing access permissions
You can create a sub-account and grant it management permissions for the resources under the root account, without sharing the root account's identity credentials.
Granular permission management
CAM allows you to use permissions to control who can access what kind of Tencent Cloud resources and services at a granular level. For example, you can grant some sub-accounts read permissions for a specific COS bucket, and other sub-accounts or root accounts write permissions for a specific COS object. Resources and access permissions can be granted in batches.
Users who get passwords through CAM using your existing identity verification system (for example, your enterprise network or through an Internet identity provider) can obtain temporary access permissions to your Tencent Cloud account.
CAM is now available in Tencent Cloud in multiple regions that allows you to synchronize cross-region data simply through replicating policy data. Although the modified CAM policies will be submitted immediately, the cross-region policy synchronization can result in delayed effects. CAM utilizes cache to improve performance, which may increase the latency in some cases as updates do not take effect until the cache expires.