FAQs

Q: What is an IAM role?

An IAM user is an entity identity with defined credentials, typically corresponding one-to-one with a specific person or application. An IAM role, on the other hand, is a virtual identity associated with a set of permissions but without specific credentials. It must be associated with an entity identity for use. IAM roles are not tied to particular users or groups. Instead, trusted entities such as IAM users, applications, or services like BCC can assume roles.

Q: What problems can IAM roles help solve?

IAM roles allow users to delegate access permissions to trusted entities based on defined permissions, eliminating the need to share long-term access keys. With IAM roles, users can grant access to IAM users within their own accounts, IAM users in other accounts, or services like BCC.

Q: How to assume an IAM role?

Users can assume IAM roles by invoking the Security Token Service (STS) AssumeRole API (including AssumeRole, AssumeRoleWithWebIdentity, and AssumeRoleWithSAML). These APIs return a set of temporary security credentials, which can then be used to sign requests for service APIs in applications.

Q: How many IAM roles can be assumed?

There is no limit to the number of IAM roles you can assume. However, when submitting a request to Baidu AI Cloud, you can only operate with one IAM role at a time.

Q: What is the difference between an IAM role and an IAM user?

IAM users possess permanent credentials to directly interact with cloud services, whereas IAM roles do not have credentials and cannot directly make service requests. An IAM role must be assumed by an authorized entity, such as an IAM user, application, or services like BCC.

Q: Is it possible to add IAM roles to IAM groups?

Not available.

Q: How many IAM roles can I create?

Your account allows you to create up to 100 IAM roles.

Q: Can I delete a role associated with the service? Yes. Before deleting the role, you must revoke its authorization. This step ensures that you will not accidentally delete roles required for normal operations.