Can CFW Be Used by Other Tencent Cloud Accounts?
CFW does not support cross-account usage and can only protect cloud assets under the current Tencent Cloud root account.
Does Creating a Role for Authorization Affect Normal Business Operations?
No. Creating a role authorization only allows the CFW backend system to read data such as your cloud resources, VPCs, and subnets for building the data required for page display, and it does not perform any automated operations that affect your business.
Can I Still Receive Bandwidth Alarms If I Do Not Select the Root Account or Sub-Account as Alarm Objects in Alarm Center?
If no primary account or sub-account is selected for receiving alerts, you will not be notified via SMS from Alert Management, Message Center, or WeChat. However, alerts will still be displayed on the console.
How to Grant CFW Permissions to a Sub-Account?
First, create a CFW role in CAM, and then add the following 6 permissions to the sub-account:
QcloudCFWReadOnlyAccess"
QcloudAccessForCFWRole
QcloudAccessForCFWRoleInUploadLog
QcloudAccessForCFWRoleInVPCFireWall
QcloudCFWFullAccess
QcloudCamSubaccountsAuthorizeRoleFullAccess"
This fine-grained permission has not been added to CAM yet. Configure the following permissions for the sub-account first:
QcloudCFWFullAccess
QcloudCFWReadOnlyAccess"