If you use the Tencent Cloud TCHouse-C service and these services are managed by different individuals but all share your cloud account key, the following issues will arise:
The risk of your key being compromised is high since multiple users are sharing it.
You cannot restrict other people's access rights, which may lead to security risks due to misoperation.
This is where Cloud Access Management (CAM) comes in. For a detailed introduction to CAM, see CAM Overview. After CAM is enabled, you can use sub-accounts to allow different individuals to manage different services, thereby avoiding the issues mentioned above. By default, a sub-account does not have permissions to use the TCHouse-C cloud data warehouse or related resources. Therefore, you need to create policies to grant sub-accounts access to the specific resources or permissions they require. A policy is a syntax specification that defines and describes one or more permissions. It allows or denies the use of specified resources by authorizing a user or a group of users. For more basic information about CAM policies, see Policy Syntax. For more usage information about CAM policies, see Policies. Note:
If you do not need to manage access to TCHouse-C cloud data warehouse resources for sub-accounts, you can skip this section. Skipping these parts does not affect your understanding and use of the rest of the document.