How to grant key management privileges to child users #

The key management function supports rights management through access control. When you create an IAM user, the user will not have key management permissions by default. You can add the following policies for child users, and the corresponding permissions will work as follows:

You can also customize policies to define permissions to manage the keys of a specified user. For example, the following policies allow you to create, delete, view, and update the keys of Bob, a child of the main account 2000012345:

{ 
    "Statement": [ 
        { 
            "Effect": "Allow", 
            "Action": [ 
                "iam:CreateAccessKey", 
                "iam:DeleteAccessKey", 
                "iam:UpdateAccessKey", 
                "iam:ListAccessKeys", 
                "iam:ListSecretKeys" 
            ], 
            "Resource": [ 
                "trn:iam::2000012345:user/Bob" 
            ] 
        } 
    ] 
}