If you use a RAM user to request access to the ApsaraVideo Live resources of the relevant Alibaba Cloud account, you must comply with the authentication rules on API requests. This topic describes the authentication rules for the ApsaraVideo Live API.
Overview
- You can activate ApsaraVideo Live and add domain names by using your Alibaba Cloud account. Then, all the ApsaraVideo Live features and the added domain names are recognized as resources within your Alibaba Cloud account. By default, you have full operation permissions on the resources within your Alibaba Cloud account.
- RAM allows you to grant access and management permissions on your ApsaraVideo Live resources to RAM users.
- Before you use RAM to authorize a RAM user to access your ApsaraVideo Live resources, make sure that you have read the Authentication rules for the Domains API.
- If you do not need to use a RAM user, ignore this topic.
Authentication rules
When a RAM user uses OpenAPI Explorer to access ApsaraVideo Live resources within the relevant Alibaba Cloud account, ApsaraVideo Live sends a request to RAM to verify that the RAM user has the required permissions to access these resources.
Each ApsaraVideo Live API operation determines the permissions to check based on different resources and the API syntax. The following table describes the Alibaba resource name (ARN) of the resource to be checked for each API operation.
| Action-name | Resource |
|---|---|
| DescribeLiveStreamsPublishList | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamsOnlineList | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamsBlockList | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamsControlHistory | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamOnlineUserNum | acs:cdn:*:$accountid:domain/$domainName |
| ForbidLiveStream | acs:cdn:*:$accountid:domain/$domainName |
| ResumeLiveStream | acs:cdn:*:$accountid:domain/$domainName |
| SetLiveStreamsNotifyUrlConfig | acs:cdn:*:$accountid:domain/$domainName |
| AddLiveAppRecordConfig | acs:cdn:*:$accountid:domain/$domainName |
| CreateLiveStreamRecordIndexFiles | acs:cdn:*:$accountid:domain/$domainName |
| DeleteLiveAppRecordConfig | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveRecordConfig | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamRecordContent | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamRecordIndexFile | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamRecordIndexFiles | acs:cdn:*:$accountid:domain/$domainName |
| AddLiveStreamTranscode | acs:cdn:*:$accountid:domain/$domainName |
| DeleteLiveStreamTranscode | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamTranscodeInfo | acs:cdn:*:$accountid:domain/$domainName |
| AddLiveAppSnapshotConfig | acs:cdn:*:$accountid:domain/$domainName |
| DeleteLiveAppSnapshotConfig | acs:cdn:*:$accountid:domain/$domainName |
| UpdateLiveAppSnapshotConfig | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveSnapshotConfig | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamSnapshotInfo | acs:cdn:*:$accountid:domain/$domainName |
| AddLiveSnapshotDetectPornConfig | acs:cdn:*:$accountid:domain/$domainName |
| AddLiveDetectNotifyConfig | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveSnapshotDetectPornConfig | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveDetectNotifyConfig.md | acs:cdn:*:$accountid:domain/$domainName |
| UpdateLiveSnapshotDetectPornConfig | acs:cdn:*:$accountid:domain/$domainName |
| UpdateLiveDetectNotifyConfig | acs:cdn:*:$accountid:domain/$domainName |
| DeleteLiveSnapshotDetectPornConfig | acs:cdn:*:$accountid:domain/$domainName |
| DeleteLiveDetectNotifyConfig | acs:cdn:*:$accountid:domain/$domainName |
| DescribeLiveStreamsFrameRateAndBitRateData | acs:cdn:*:$accountid:domain/$domainName |