阿里云凭证管理与安全最佳实践

{"navs":[{"title":"首页","key":"https://open.aliyun.com/","link":"https://open.aliyun.com/","pathname":"/","new":false},{"title":"LandingZone","key":"https://open.aliyun.com/tools","link":"https://open.aliyun.com/landing-zone","pathname":"/landing-zone","new":false},{"title":"Well-Architected","link":"https://open.aliyun.com/well-architected","pathname":"/well-architected","new":true},{"title":"多账号架构","link":"https://open.aliyun.com/multi-account","pathname":"/multi-account","new":false},{"link":"https://open.aliyun.com/credential-security","new":true,"pathname":"/credential-security","title":"凭证管理与安全"},{"title":"企业IT治理","key":"https://open.aliyun.com/governance","link":"https://open.aliyun.com/governance","pathname":"/governance","new":false},{"title":"OpenAPI","key":"https://open.aliyun.com/apis","link":"https://next.api.aliyun.com/home","pathname":"apis","new":false}],"mobileNavs":[{"title":"首页","key":"https://open.aliyun.com/"},{"title":"LandingZone","key":"https://open.aliyun.com/landing-zone","subNav":[]},{"title":"企业IT治理","key":"https://open.aliyun.com/governance"},{"title":"OpenAPI","key":"https://api.aliyun.com"}]}

{"title":"视频专区","videoList":[{"videoLink":"https://cloud.video.taobao.com/play/u/null/p/1/e/6/t/1/451116293737.mp4","videoCoverLink":"https://img.alicdn.com/imgextra/i4/O1CN01BjUfMP28wgGdNGodA_!!6000000007997-0-tps-756-360.jpg","videoTitle":"凭证管理与安全治理实践","videoDesc":"本次分享将为您介绍从访问云资源的人员/程序身份两种身份类型，介绍云上凭证的认证方式、安全风险及凭证管理的最佳实践。"},{"videoLink":"https://cloud.video.taobao.com/play/u/null/p/1/e/6/t/1/451125073089.mp4","videoCoverLink":"https://img.alicdn.com/imgextra/i3/O1CN01U2WP8N24Sfr6LMZJW_!!6000000007390-0-tps-756-360.jpg","videoTitle":"云上程序使用临时凭证的最佳实践","videoDesc":"STS临时访问凭证是阿里云提供的一种临时访问权限管理服务，通过STS获取可以自定义时效和访问权限的临时身份凭证，减少长期访问密钥（AccessKey）泄露的风险。本视频将为您介绍产品原理，以及具体的使用步骤。"},{"videoCoverLink":"https://img.alicdn.com/imgextra/i1/O1CN01jpNXJZ23x4WkjDS4a_!!6000000007321-0-tps-756-360.jpg","videoTitle":"云上安全使用AccessKey的最佳实践","videoLink":"https://cloud.video.taobao.com/play/u/null/p/1/e/6/t/1/451239517384.mp4","videoDesc":"集中管控AK/SK的生命周期，可以极大降低AK/SK管理和使用成本，同时通过加密和轮转的方式，保证AK/SK的安全使用，本视频将为您介绍产品原理，以及具体的使用步骤。"}],"videoConfig":{"isAutoPlay":true,"videoWidth":60,"pageSize":6},"isAdaptationMobile":true}

{"selectWidth":"1256px","relatedProducts":{"title":"相关文章","serviceList":[{"name":"解决方案","description":"步骤1的简单描述：存储容量最大64TB单库；单实例可扩展至100TB，步骤1的简单描述：存储容量最大64TB单库。","detailText":"查看详情","detailLink":"https://developer.aliyun.com/article/795849?spm"},{"name":"文章标题","description":"德勤拥有丰富的行业数字化咨询经验和交付能力，结合阿里云Landing Zone上云框架，为企业提供从云战略咨询、到云应用实施、到云运营的端到端的服务，帮助企业一站式上云。","detailText":"查看详情","detailLink":"https://developer.aliyun.com/article/795849?spm"},{"name":"文章标题3","description":"飞络拥有十二年行业数字化转型经验，专注于IT服务，重点在“上云”和“安全”两个领域为阿里云Landing Zone客户提供从咨询、设计、构建、运维一站式的服务致力于为客户提供更具业务场景价值的云化。","detailText":"查看详情","detailLink":"https://developer.aliyun.com/article/795849?spm"},{"name":"文章标题4","description":"飞络拥有十二年行业数字化转型经验，专注于IT服务，重点在“上云”和“安全”两个领域为阿里云Landing Zone客户提供从咨询、设计、构建、运维一站式的服务致力于为客户提供更具业务场景价值的云化。","detailLink":"https://developer.aliyun.com/article/795849?spm","detailText":"查看详情"}],"showPagination":false,"pageSize":6},"relatedArticles":{"title":"阿里云卓越架构","showPagination":false,"serviceList":[{"name":"阿里云卓越架构白皮书","description":"阿里云基于多年服务各行各业客户的经验总结，将云上的架构设计最佳实践总结为一系列的方法论和设计原则，形成阿里云卓越架构，以帮助云用户构建良好直至卓越的云上架构。","detailText":"查看详情","detailLink":"https://help.aliyun.com/product/2362200.html","backgroundImage":"https://img.alicdn.com/imgextra/i4/O1CN01di6pnb22Tvi0FGcyc_!!6000000007122-0-tps-1276-376.jpg"},{"name":"身份管理原则","description":"身份是指在云环境中执行操作的实体。云上主要有两种身份类型：人员身份和程序身份。人员身份通常代表组织中的个人，通常通过阿里云的控制台、CLI、特定场景下的客户端等方式对云上的资源进行操作。","detailText":"查看详情","detailLink":"https://help.aliyun.com/document_detail/2573792.html","backgroundImage":"https://img.alicdn.com/imgextra/i4/O1CN01di6pnb22Tvi0FGcyc_!!6000000007122-0-tps-1276-376.jpg"},{"name":"权限管理原则","detailText":"查看详情","detailLink":"https://help.aliyun.com/document_detail/2573793.html","description":"云上的权限管理是为了控制某个身份在什么条件下对哪些资源能够执行哪些操作。云上的权限管理的核心原则就是权限最小化，只给身份授予必要的权限，确保权限最小够用。","backgroundImage":"https://img.alicdn.com/imgextra/i4/O1CN01di6pnb22Tvi0FGcyc_!!6000000007122-0-tps-1276-376.jpg"},{"backgroundImage":"https://img.alicdn.com/imgextra/i4/O1CN01di6pnb22Tvi0FGcyc_!!6000000007122-0-tps-1276-376.jpg","name":"凭证泄露止血方案","detailText":"查看详情","description":"AccessKey（包含AccessKey ID和Secret）是程序访问的凭证，无异于打开云上资源的大门钥匙。保管好AK是保障云上安全最重要的事情，甚至没有之一。与此同时，多了解一些AK相关的知识，假如真遇到AK泄露就可能更快地阻止风险继续蔓延。","detailLink":"https://developer.aliyun.com/article/1449467?groupCode=openapi"}]},"moduleBackground":"#fff"}