Step 2: Add a Whitelist Record

Scenarios

Permission management controls the access of a VPC endpoint in one domain to a VPC endpoint service in another.

After a VPC endpoint service is created, you can add an authorized domain ID to or delete it from the whitelist of the VPC endpoint service.

The following operations describe how to obtain your domain ID and add it to the whitelist of an existing VPC endpoint service in another domain.

Prerequisites

There is a VPC endpoint service available.

Obtain the ID of Your Own Domain

1. Log in to the management console.
2. Click My Credentials under the domain.
   Figure 1 My Credentials
   
   The My Credentials page is displayed. You can view and record the domain ID.

   Figure 2 Domain ID
   

Add Domain IDs to Be Authorized to the Whitelist of a VPC Endpoint Service

1. Click in the upper left corner and select the required region and project.

2. Click Service List and choose Networking > VPC Endpoint.

3. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
4. In the VPC endpoint service list, locate the target VPC endpoint service and click its name.
5. On the displayed page, select the Permission Management tab and click Add to Whitelist.
6. Enter an authorized domain ID in the required format and click OK.
   Figure 3 Add to Whitelist
   
   

   • Your domain is in the whitelist of your VPC endpoint service by default.
   • The authorized domain ID is in the iam:domain::domain_id format.

     domain_id indicates the ID of the authorized domain, for example, iam:domain::1564ec50ef2a47c791ea5536353ed4b9

   • Adding * to the whitelist means that all users can access the VPC endpoint service.