In Elastic Desktop Service (EDS), a cloud computer policy is a collection of configurations to manage cloud computers, such as data security, access control, user experience, and collaboration. EDS provides a default cloud computer policy that cannot be modified or deleted. To meet your business requirements, you can create custom policies. This topic describes how to create and manage custom policies.
Create a custom policy
You can use different methods to create a custom policy.
Create a custom policy
You can create a custom policy from scratch.
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Policies page, click Create Policy.
In the Create Policy panel, specify a name for the policy that you want to create, configure parameters as prompted, and then click Create.
After the policy is created, you can go to the Policies page to view it.
Clone an existing custom policy
If you want to quickly create a policy whose configurations are the same as or similar to an existing policy, we recommend that you clone the existing policy and then modify configurations based on your business requirements.
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Policies page, find the source custom policy that you want to clone and click Clone in the Actions column.
In the Clone Policy dialog box, specify a name for the policy you want to create and click OK.
After the policy is cloned, you can view the cloned policy in the policy list and modify its configurations based on your business requirements.
Import a policy configuration file
You can import a standard policy configuration file in the JSON format to quickly create a policy.
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Policies page, click Import Policy.
In the Import Policy dialog box, specify a name for the policy you want to create, upload a policy configuration file in the JSON format, and then click OK.
Change an associated policy
If the policy associated with your cloud computer or cloud computer pool cannot meet your business requirements, you can change the associated policy.
Replace the existing policy of a cloud computer
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Cloud Computers page, perform the following operations to replace the existing policy of one or more cloud computers.
Replace the existing policy of a cloud computer: Find the cloud computer that you want to manage, click the ⋮ icon in the Actions column, and then click Change Policy.
Replace the existing policy of multiple cloud computers: Select one or more cloud computers and choose in the lower part of the page.
In the Change Policy panel, clear the current policy, select a new policy, and then click OK.
In the message that appears, click OK.
Replace the existing policy of a cloud computer pool
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Cloud Computer Pools page, find the cloud computer pool that you want to manage and click its ID.
On the Basic Information tab, find the Policy Group Name parameter and click the icon.
In the Change Policy panel, clear the current policy, select a new policy, and then click OK.
Modify configurations in a custom policy
If the custom policy that is associated with your cloud computer can no longer meet your business requirements, you can modify configurations in the policy.
Procedure
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Policies page, find the custom policy that you want to manage and click Change Policy in the Actions column.
In the Change Policy panel, modify configurations and click OK.
Configurations immediately taking effect
After you modify the configurations of a policy, the time to take effect for different configurations varies. Most configurations that you have modified take effect the next time when the cloud computers that are associated with the policy are connected. The following configurations immediately take effect:
Watermark
Image Display Quality
Security Group Control
DNS
Screen Recording Audit
Stream Collaboration
System Optimization
NoteThis feature is in invitational preview for specific users and not available to the public.
Specify effective CIDR blocks
By default, the default policy takes effect on all CIDR blocks. If you want a custom policy to take effect only on specific CIDR blocks, specify the CIDR blocks. Then, when end users connect to cloud computers that are associated with the policy from Alibaba Cloud Workspace terminals, the system determines whether the egress IP addresses of the terminals are within the specified CIDR blocks. If not, the policy does not take effect.
Procedure
The following procedure shows how to specify a CIDR block on which a policy takes effect.
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Policies page, find the custom policy that you want to manage and click Change Policy in the Actions column.
In the Change Policy panel, click the Valid IP Address tab and select Specific CIDR Block.
NoteA custom policy is created. You can specify a CIDR block for the custom policy regardless of whether the policy is associated with a cloud computer. For an associated policy that takes effect on a specified CIDR block, you can directly change the CIDR block.
(Optional) A custom policy that takes effect on all CIDR blocks is disassociated from cloud computers. If you do not want to disassociate the policy, you can clone the policy to create a new policy that has the same configurations, specify a CIDR block for the new policy, and then associate the new policy with the cloud computers.
Enter up to three CIDR blocks in the Valid CIDR Block field and click OK.
After you specify a CIDR block for a policy and associate the policy with a cloud computer, the policy takes effect the next time the cloud computer is connected.
NoteEach cloud computer must be associated with exactly one policy that takes effect on all CIDR blocks. A cloud computer can be associated with up to four policies that take effect on specific CIDR blocks.
Export a policy
You can export policies. The exported policies are configuration files in the JSON format. If you share the files to others, the recipients can import the files to quickly policies.
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Policies page, find the policy that you want to manage and click Export Policy in the Actions column.
After the policy is exported, a file in the JSON format is generated, and you can download it to your local device.
Delete custom policies
If you no longer use a policy, you can delete it.
Log on to the Elastic Desktop Service (EDS) console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Policies page, perform the following operations to delete one or more custom policies.
NoteIf the policy that you want to delete is associated with cloud computers, you must replace the policy with another one and then proceed.
Delete a policy: Find the custom policy that you want to manage and click Delete in the Actions column.
Delete multiple policies: Select one or more custom policies and click Delete in the lower part of the page.
In the message that appears, click Confirm.