In EU DataVault Storage, IAM policies are used to define and manage access permissions for specific resources. These policies follow the Industry S3 policy standard, ensuring compatibility and familiarity for users with experience in other environments. Each policy is written in JSON format, allowing for precise and structured permission definitions.
IAM Policy management at EU DataVault Storage Console can be done in Policies tab. From there, you can add, filter, delete as well as edit an existing policy.
The Policies tab is only visible for root users - and accordingly, also conducting any of the above actions.
Creating a Policy
To simplify policy creation, the EU DataVault Storage Console includes a built-in JSON editor. This editor provides a convenient interface for writing and editing policies directly within the Console, making it easy to define access rules according to your requirements.
To create a policy, follow these instructions:
Navigate to the Policies tab in left-pane menu.
Click the Add Policy button on the top-right of the console.
Fill in the Policy name
(Optional) Fill in the description of the policy.
The policy name must consist of alphanumeric characters (upper and lowercase) with no spaces. Once created, the policy name and description cannot be changed.
Write the S3 policy in the built-in JSON editor.
Click Create Policy on the top-right corner of your screen to confirm the creation of the policy.
Updating a Policy
When you update a policy using the Graphical User Interface (GUI) in the EU DataVault Storage Console, a new version of that policy is automatically created. This versioning system allows you to easily revert to a previous version if needed.
To edit a policy, follow these instructions:
Navigate to the Policies tab in left-pane menu.
Click the Edit button next to the policy you want to modify.
You can edit the policy using the built-in JSON editor, just like when creating a new policy.
Click the Save button in the top-right corner to create a new version.
Click on the newly created version and set it as the default to activate the version.
The Storage Console supports a maximum of 5 (five) policy versions. If this limit is reached, you must remove an existing version before creating a new one.
Deleting a Policy
Deleting a policy will automatically remove the access and permissions for the corresponding group(s) of users.
To delete a policy, follow these instructions:
Navigate to the Policies tab in left-pane menu.
Click on the Delete button next to the policy.
Confirm the deletion.