Peran dan izin API

GKE di AWS memiliki izin Identity and Access Management (IAM) tertentu. Izin tersebut dijelaskan dalam tabel berikut. Untuk mengetahui petunjuk tentang cara mengelola izin, lihat Memberikan, Mengubah, dan Mencabut Akses ke Resource.

Izin API GKE di AWS

GKE on AWS API mencakup peran gkemulticloud.viewer dan gkemulticloud.admin yang telah ditetapkan. Peran ini dijelaskan dalam tabel berikut:

Peran	Izin
Anthos Multi-cloud Admin (roles/gkemulticloud.admin) Akses admin ke resource Anthos Multi-cloud.	gkemulticloud.* gkemulticloud.attachedClusters.create gkemulticloud.attachedClusters.createTagBinding gkemulticloud.attachedClusters.delete gkemulticloud.attachedClusters.deleteTagBinding gkemulticloud.attachedClusters.generateInstallManifest gkemulticloud.attachedClusters.get gkemulticloud.attachedClusters.import gkemulticloud.attachedClusters.list gkemulticloud.attachedClusters.listEffectiveTags gkemulticloud.attachedClusters.listTagBindings gkemulticloud.attachedClusters.update gkemulticloud.attachedServerConfigs.get gkemulticloud.awsClusters.create gkemulticloud.awsClusters.delete gkemulticloud.awsClusters.generateAccessToken gkemulticloud.awsClusters.get gkemulticloud.awsClusters.getAdminKubeconfig gkemulticloud.awsClusters.list gkemulticloud.awsClusters.update gkemulticloud.awsNodePools.create gkemulticloud.awsNodePools.delete gkemulticloud.awsNodePools.get gkemulticloud.awsNodePools.list gkemulticloud.awsNodePools.update gkemulticloud.awsServerConfigs.get gkemulticloud.azureClients.create gkemulticloud.azureClients.delete gkemulticloud.azureClients.get gkemulticloud.azureClients.list gkemulticloud.azureClusters.create gkemulticloud.azureClusters.delete gkemulticloud.azureClusters.generateAccessToken gkemulticloud.azureClusters.get gkemulticloud.azureClusters.getAdminKubeconfig gkemulticloud.azureClusters.list gkemulticloud.azureClusters.update gkemulticloud.azureNodePools.create gkemulticloud.azureNodePools.delete gkemulticloud.azureNodePools.get gkemulticloud.azureNodePools.list gkemulticloud.azureNodePools.update gkemulticloud.azureServerConfigs.get gkemulticloud.operations.cancel gkemulticloud.operations.delete gkemulticloud.operations.get gkemulticloud.operations.list gkemulticloud.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Anthos Multi-cloud Viewer (roles/gkemulticloud.viewer) Akses viewer ke resource Anthos Multi-cloud.	gkemulticloud.attachedClusters.generateInstallManifest gkemulticloud.attachedClusters.get gkemulticloud.attachedClusters.list gkemulticloud.attachedClusters.listEffectiveTags gkemulticloud.attachedClusters.listTagBindings gkemulticloud.attachedServerConfigs.get gkemulticloud.awsClusters.generateAccessToken gkemulticloud.awsClusters.get gkemulticloud.awsClusters.list gkemulticloud.awsNodePools.get gkemulticloud.awsNodePools.list gkemulticloud.awsServerConfigs.get gkemulticloud.azureClients.get gkemulticloud.azureClients.list gkemulticloud.azureClusters.generateAccessToken gkemulticloud.azureClusters.get gkemulticloud.azureClusters.list gkemulticloud.azureNodePools.get gkemulticloud.azureNodePools.list gkemulticloud.azureServerConfigs.get gkemulticloud.operations.get gkemulticloud.operations.list gkemulticloud.operations.wait resourcemanager.projects.get resourcemanager.projects.list

Langkah berikutnya

Peran IAM tambahan, seperti pemilik dan editor, mencakup izin GKE di AWS. Untuk mengetahui informasi selengkapnya, lihat daftar lengkap referensi Izin IAM.