The page has been translated by Gen AI.

How-to guides

Users can create the service by entering the required information for the API Gateway service and selecting detailed options via the Samsung Cloud Platform Console.

Create API

An API is a collection of resources and methods integrated with backend HTTP endpoints, Cloud Functions, or other SCP services. The API provides a logical interface for the actual service and can be deployed across multiple stages for use in various environments (development, production, etc.).

You can create an API in the Samsung Cloud Platform Console and use it.

To create an API, follow these steps.

  1. Click the All Services > Application Service > API Gateway menu. 1. Go to the Service Home page of API Gateway.
  2. On the Service Home page, click the Create API button. 2. Go to the API creation page.
  3. On the API creation page, enter the information required to create the service and select detailed options.
    • Select the required information in the Service Information Input area.
      Category
      Required
      Detailed description
      API namerequiredEnter API name
      • must start with a lowercase English letter and must not end with a special character (-) , use lowercase letters, numbers and special characters (-) to input 3 ~ 50 characters
      How to create an APIrequiredSelect API creation method
      • Create new, Clone existing API – choose
      API to duplicateRequiredWhen selecting Existing API Replication as the API creation method, choose from among APIs that have already been created.
      ExplanationSelectionEnter API info or description within 50 chars
      API endpoint typerequiredPath to access the API
      • Region: Process requests within the region where the API is deployed
      • Private: Expose the API so that it can only be requested privately from other VPCs
        • When Private is selected, JWT activation is applied
      Table. API Service Information Input Items
  • Enter or select the required information in the Additional Information Input area.
    Category
    Required
    Detailed description
    tagSelectionAdd Tag
    • Add Tag Click the button to create and add a tag, or add an existing tag
    • You can add up to 50 tags
    • The newly added tags are applied after the service creation is completed
    Table. API additional information input fields
  1. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
    • Once creation is complete, check the created resources on the API List page.

Check API details

You can view and edit the complete list of resources and detailed information of the API service. API Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the API service, follow these steps.

  1. All Services > Application Service > API Gateway menu, click it. 1. Go to the Service Home page of API Gateway.
  2. On the Service Home page, click the API menu. 2. Go to the API list page.
  3. On the API List page, click the resource to view detailed information. 3. API Details page is accessed.
    • API Details page displays status information and additional feature information, and consists of the Details, Tags, Activity History tabs.
      CategoryDetailed description
      Status displayUser-created API status
      • Creating: API creation in progress
      • Active: API operating normally
      • Deleting: API deletion in progress
      • Error: API internal error makes it unavailable
      Service cancellationService cancellation button
      Table. API status information and additional features

Detailed Information

API Details page allows you to view detailed information of the selected resource and edit the information if needed.

CategoryDetailed description
ServiceService name
Resource TypeResource type
SRNUnique resource ID in Samsung Cloud Platform
Resource nameResource Name
Resource IDUnique resource ID in the service
constructorUser who created the service
Creation date and timeService creation date and time
ModifierUser who modified the service information
Modification date and timeService information modification date and time
API nameAPI name
API endpoint typeAPI endpoint type
DNS statusDNS status
  • Creating, Active, Inactive, Error display
ExplanationAdditional information or description about the API
Table. API Detailed Information Tab Items

Connection Management

Connection Management page allows you to manage connection requests for the API Gateway PrivateLink Service.

CategoryDetailed description
Request Endpoint IDRequested endpoint ID
Creation timestampService creation date and time
statusResource status value
RejectPrivateLink Service connection request denied
ApprovalApprove PrivateLink Service connection request
BlockBlock connected PrivateLink Endpoint
ReconnectionReconnect blocked PrivateLink endpoint
Table. API Connection Management Tab Items
reference
  • When the connection status is Rejected or Error, requests such as approval or denial are not possible.

Tag

On the API Details page, you can view the tag information of the selected resource, and add, modify, or delete it.

CategoryDetailed description
Tag ListTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search the existing list of created Keys and Values and select
Table. API Tag Tab Detailed Information Items

Job History

You can view the operation history of the selected resource on the API Details page.

CategoryDetailed description
Task History ListResource Change History
  • You can view operation details, operation time, resource type, resource name, operation result, and operator information
  • Operation History List Click the relevant resource in the list. Operation History Details A popup window will open.
  • Detailed Search button provides detailed search functionality
Table. API operation history tab detailed information items

Integrating PrivateLink Service

By integrating the API Gateway service with the PrivateLink service, you can connect “API Gateway and VPC” or “API Gateway and other SCP services” without using the external internet. The data uses only the internal network, providing high security, and does not require a public IP, NAT, VPN, internet gateway, etc.

Creating a PrivateLink service for API Gateway

When creating an API, select the endpoint type as Private. You can expose the API so that it can be accessed privately from other VPCs or services.

Reference

Create PrivateLink Endpoint

You can create an Entry Point in the API Gateway service to access other PrivateLinks.

To create a PrivateLink Endpoint, follow these steps.

  1. All Services > Application Service > API Gateway click the menu. 1. Navigate to the Service Home page of API Gateway.

  2. On the Service Home page, click the PrivateLink Endpoint menu. 2. Go to the PrivateLink Endpoint List page.

  3. On the PrivateLink Endpoint List page, click the Create PrivateLink Endpoint button. 3. Go to the Create PrivateLink Endpoint page.

    • Enter or select the required information.
      Category
      Required
      Detailed description
      PrivateLink Endpoint namerequiredEnter PrivateLink Endpoint name
      • Enter using letters and numbers, 3 to 20 characters
      ExplanationSelectionEnter additional information or description within 50 characters.
      PrivateLink Service IDrequiredEnter the ID of the PrivateLink Service to connect
      • Confirm the Service ID with the PrivateLink Service provider in advance, and after creating the Endpoint, provide the Endpoint ID to the provider
      • Enter using letters and numbers, 3 to 60 characters
      Table. PrivateLink Endpoint creation information input fields
  4. After entering or selecting the information, click the Confirm button.

  5. After checking the message in the notification popup, click the Confirm button.

    • Once creation is complete, check the created resource in the PrivateLink Endpoint list.
    • To delete a PrivateLink Endpoint list, select the resource to remove from the list and click the Delete button.
Reference
  • To request a connection to the service provider via PrivateLink, you must go through an approval process.
  • When applying for a service connection, you must verify the target PrivateLink Service ID in advance.
    • A usage agreement with the service provider must be completed before applying for the service.
  • After the user creates a PrivateLink endpoint, they must provide the endpoint ID to the service provider. * The service provider can verify the user’s Endpoint ID and quickly proceed with usage approval.

View detailed information of PrivateLink Endpoint

You can view and edit the full list of resources and detailed information for a PrivateLink Endpoint. PrivateLink Endpoint Details page is composed of Detail Information and Operation History tabs.

To view detailed information about the API service, follow these steps.

  1. All Services > Application Service > API Gateway Click the menu. 1. Go to the Service Home page of API Gateway.
  2. On the Service Home page, click the PrivateLink Endpoint menu. 2. Go to the PrivateLink Endpoint List page.
  3. On the PrivateLink Endpoint List page, click the resource to view detailed information. 3. Go to the PrivateLink Endpoint Details page.
    • PrivateLink Endpoint Details page displays status information and additional feature details, and consists of Details and Operation History tabs.
      CategoryDetailed description
      Status displayPrivateLink Endpoint status
      • Requesting: Connection request pending approval, Cancel request button displayed
      • Active: Creation complete, operating
      • Creating: Creating
      • Deleting: Deleting
      • Disconnected: Connection blocked
      • Rejected: Connection rejected, Resubmit request button displayed
      • Error: Error occurred
      • Canceled: Connection request canceled, Resubmit request button displayed
      Cancel requestCancel connection request
      Re-request approvalRe-request connection after the connection request was canceled
      Table. PrivateLink Endpoint status information and additional features

Detailed Information

On the PrivateLink Endpoint Details page, you can view detailed information of the selected resource.

CategoryDetailed description
ServiceService name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource nameResource Name
Resource IDUnique resource ID in the service
ConstructorUser who created the service
Creation timestampService creation date and time
ModifierUser who edited the service information
Modification date and timeDate and time the service information was modified
PrivateLink Endpoint namePrivateLink Endpoint name
PrivateLink Endpoint IDPrivateLink Endpoint ID
PrivateLink Service IDConnected PrivateLink Service ID
API endpoint typeAPI endpoint type
ExplanationAdditional information or description about the PrivateLink Endpoint
Table. PrivateLink Endpoint detailed information tab items

Job History

PrivateLink Endpoint Details page allows you to view the operation history of the selected resource.

CategoryDetailed description
Task History ListResource Change History
  • You can view operation details, operation time, resource type, resource name, operation result, and operator information
  • Operation History List Click the relevant resource in the list. Operation History Details A popup window will open.
  • Provides detailed search functionality via the Detailed Search button
Table. PrivateLink Endpoint operation history tab detailed information items

Create Resource

A resource is a logical unit that represents a specific endpoint (URI path) within an API. Each resource can be organized in a tree structure and can have multiple HTTP methods.

To create a resource, follow these steps.

  1. All Services > Application Service > API Gateway Click the menu. 1. Go to the Service Home page of API Gateway.

  2. On the Service Home page, click the API Gateway > Resources menu. 2. Go to the Resources page.

  3. On the Resource page, click the Create Resource button. 3. Create Resource Navigate to the popup window.

    • Enter or select the required information.
      Category
      Required
      Detailed description
      Resource namerequiredEnter resource name
      • must start with a lowercase English letter and be 3 to 50 characters using lowercase letters, numbers, and special characters (-{})
      • If curly braces are used, {character} is the only allowed format and cannot be left empty
      Resource pathrequiredSelect the path chosen in the resource menu tree
      Table. Resource creation input fields
  4. When the information entry and selection are complete, click the Confirm button.

  5. After checking the message in the notification popup, click the Confirm button.

    • After creation is complete, check the created resource in the resource list.
    • To delete a resource, select the resource to delete from the list and click the Delete button.
Reference
  • A maximum of 300 resources can be created.
  • The depth of a resource is up to 30, including the Root.

Create Method

Methods define the HTTP actions (e.g., GET, POST, PUT, DELETE, etc.) that can be performed on each resource. Each method integrates with a specific backend to process real data or execute a function.

To create a method, follow these steps.

  1. All Services > Application Service > API Gateway Click the menu. 1. Go to the Service Home page of API Gateway.

  2. On the Service Home page, click the API Gateway > Resources menu. 2. Navigate to the Resource page.

  3. Click the Create Method button on the Resources page. 3. Create Method Navigate to the popup window.

    • Enter or select the required information.
      Category
      Required status
      Detailed description
      Method typerequiredSelect method type
      • The generated value is not displayed in the list.
      • Selecting ANY creates methods of all types
      Integration typerequiredSelect endpoint type
      • Select from HTTP, Cloud Function, PrivateLink
      Endpoint URLRequiredEnter the endpoint URL when HTTP type is selected
      • The endpoint is a unique URL used by the client to access the API. A separate endpoint is created for each stage. Various types such as Regional, Edge-Optimized, Private, etc.
      • It must be a valid URL starting with http:// or https://, and must be entered within 500 characters using English letters and special characters ($-_.+!*’:(){}/)
      EndpointrequiredWhen the Cloud Function type is selected, endpoint selection
      • the region is provided as the current region and cannot be changed
      URL query string parameterSelectionAfter checking use, enter name
      • using English letters, numbers, and special characters (_) to input
      HTTP request headerSelectionAfter checking Use, enter Name
      • English letters, numbers, special characters(-)using
      API Key usageSelectTo limit usage through a usage policy, check Use
      Table. Method creation information input fields
  4. After entering the information and making selections, click the Save button.

  5. After checking the message in the notification popup, click the Confirm button.

    • After creation is complete, verify the created resource in the method list.
    • To delete a method, select the resource to delete from the list, then click the Delete button.
Reference

You can create up to a maximum of seven methods, with one per type. When generated with Any, it creates methods of all types.

CategoryDetailed description
GETResource retrieval (read)
POSTResource creation (registration)
PUTFull resource update (refresh)
PATCHPartially modify only a portion of the resource
DELETEDelete resource
OPTIONSRetrieve the list of HTTP methods supported by this endpoint
HEADRetrieve only headers without body (return only metadata without response body)
Table. Method Types

Deploy API

To apply a developing API to the actual service environment, API deployment is required.

To deploy the generated API, follow the steps below.

  1. All Services > Application Service > API Gateway Click the menu. 1. Go to the Service Home page of API Gateway.

  2. On the Service Home page, click the API Gateway > Resources menu. 2. Go to the Resource page.

  3. Resources page, click the API Deployment button. 3. API deployment Navigate to the popup window.

    • Enter or select the required information.
      Category
      Required status
      Detailed description
      StagerequiredSelect the stage to deploy the API
      • New Stage: Create a new stage and deploy
      • None Stage: Deploy without selecting a stage
      Stage nameRequiredWhen New Stage is selected, enter a new stage name
      • It must start with a lowercase English letter and must not end with a special character (-), using lowercase letters, numbers, and special characters (-) to enter 3 to 30 characters
      deployment descriptionSelectEnter up to 50 chars of API deployment info
      Table. API deployment information input items
  4. When the information entry and selection are complete, click the Deploy button.

  5. After checking the message in the notification popup, click the Confirm button.

Create Stage

A stage is a named reference to a specific point in time (snapshot) of an API deployment, distinguishing environments in the API lifecycle such as development (dev), testing (test), and production (prod). Each stage has a unique URL, and you can configure separate settings for each environment, such as caching, logging, throttling, and stage variables. Through stages, we support various operational scenarios such as Canary releases, environment-specific configurations, and traffic segmentation.

To create a stage for deploying the API, follow these steps.

  1. Click the All Services > Application Service > API Gateway menu. 1. Go to the Service Home page of API Gateway.

  2. On the Service Home page, click the API Gateway > Stage menu. 2. Navigate to the Stage page.

  3. On the Stage page, click the Create Stage button. 3. Stage Creation Navigate to the popup window.

    • Enter or select the required information.
      Category
      Required
      Detailed description
      Stage namerequiredIf New Stage is selected, enter the new stage name
      • Start with a lowercase English letter and ensure it does not end with a special character (-), using lowercase letters, numbers, and special characters (-) to enter 3 to 50 characters
      Stage descriptionSelectionEnter additional information or description about the stage within 100 characters.
      API deployment versionRequiredSelect the API version to deploy
      • Start with a lowercase English letter and ensure it does not end with a special character (-), using lowercase letters, numbers, and special characters (-) to input 3 ~ 50 characters
      Table. Stage creation information input items
  4. When the information entry and selection are complete, click the Confirm button.

  5. After checking the message in the notification popup, click the Confirm button.

    • Once creation is complete, check the created resources in the stage list.
Reference
A maximum of 10 stages can be created.

View stage details

You can view and edit the stage list and detailed information. The detail page consists of Stage Details information and API Deployment Version Management, CORS, Usage Policy tabs.

To view the detailed information of the stage, follow these steps.

  1. Click the All Services > Application Service > API Gateway menu. 1. Navigate to the Service Home page of API Gateway.
  2. Click the API Gateway > Stage menu on the Service Home page. 2. Navigate to the Stage page.
  3. Click the resource to view detailed information in the stage list.
    • Stage Details displays status information and additional feature information, and consists of API Deployment Version Management, CORS, Usage Policy tabs.
    • To delete a stage, select the resource to delete from the list and click the Delete button.
    • To edit a stage, select the resource to modify from the list and click the Edit button.

Stage Details

On the Stage Details page, you can view detailed information of the selected resource.

CategoryDetailed description
Stage nameStage name
CORSCORS operation status
Stage descriptionStage information
JWTJSON Web Token usage status
API KeyWhether to use an API Key
Invoke URLURL for API call
Activation date and timeStage activation date and time
Deployment IDAPI deployment ID
Table. Stage detailed items

API Deployment Version Management

API Deployment Version Management tab allows you to view the API deployment history.

CategoryDetailed description
API Deployment Version Management ListAPI deployment history
  • Deployment timestamp, status, description, and deployment ID can be viewed
Deployment changeSelect the resource to change the deployment from the list, then click the Change Deployment button. Clicking the Confirm button in the notification popup will immediately update the active deployment ID.
Table. API Deployment Version Management Tab Detailed Information Items

CORS (Cross-Origin Resource Sharing)

Reference
For detailed information about CORS (Cross-Origin Resource Sharing), please refer to 구성 요소 > CORS.

You can check the CORS list in the CORS tab.

CategoryDetailed description
NameCORS name
Mapping ValueMapping value applied to CORS
Table. CORS tab detailed information items

Usage Policy

Usage Policy tab allows you to view the usage policies attached to the stage.

CategoryDetailed description
Usage Policy NameUsage Policy Name
Usage Policy IDUsage Policy ID
QuotaQuota set in the usage policy
Connected API Key nameAPI Key name linked to the usage policy
Table. Detailed information items for the usage policy tab
Reference
  • When making an API call, you must use the key value of the API Key attached to the stage in the ‘x-scp-apikey’ header.
  • Usage policies are linked at the stage level, but quotas are calculated per method that is checked for API Key usage.

Create Authentication

JWT (JSON Web Token) is an open standard (RFC 7519) used for user authentication. JWT is a claim-based web token that stores user information as an encrypted token using the JSON format.

To generate a JWT, follow these steps.

  1. Click the All Services > Application Service > API Gateway menu. 1. Navigate to the Service Home page of API Gateway.

  2. From the Service Home page, click the API Gateway > Authentication menu. 2. Navigate to the Authentication List page.

  3. On the Authentication List page, click the Create JSON Web Token button. 3. JSON Web Token Generation Navigate to the popup window.

    • Enter or select the required information.
      Category
      Required status
      Detailed description
      JWT nameRequiredEnter token name
      • must start with a lowercase English letter and must not end with a special character (-), using lowercase letters, numbers, and special characters (-) to enter 3 ~ 50 characters
      Stage to connectSelectionAfter checking Use, select stage
      Table. Authentication creation information input items
  4. After entering the information and making selections, click the Confirm button.

  5. After checking the message in the notification popup, click the Confirm button. 5. Access Token Navigate to the notification popup window.

    • The token can be viewed only in the Access Token notification popup. * If needed, download the Access Token file.
  6. Access Token After checking the message in the notification popup, click the Confirm button.

    • After creation is complete, verify the created resource in the authentication list.
    • To delete a token, select the resource to delete from the list and click the Delete button.
    • To edit a token, select Edit from the context menu of the resource you want to edit.

Create Access Control

You can add an allowed IP address to restrict API calls to a specific IP.

Reference
  • A stage is linked to a single access control. * When a stage is initially created, the Default access control is applied by default, blocking access from all IPs (All deny). * Create a new access control and attach it to the stage; you can configure it to be invoked only from specific IP addresses.
  • Access control cannot be created in the following cases.
    • If you exceed the available service quota limit: check the current allocation and the additional capacity in the Quota Service.
    • If there is no available API, create the API first.
    • When the API endpoint type is Private, access control is not supported, but JWT activation is required on that API’s stage.

To create access control, follow the steps below.

  1. All Services > Application Service > API Gateway Click the menu. 1. Navigate to the Service Home page of API Gateway.

  2. On the Service Home page, click the API Gateway > Access Control menu. 2. Navigate to the Access Control List page.

  3. On the Access Control List page, click the Create Access Control button. 3. Create Access Control Go to the popup window.

    • Enter or select the required information.
      Category
      Required
      Detailed description
      Access control nameRequiredEnter access control name
      • that starts with a lowercase English letter and does not end with a special character (-), using lowercase letters, numbers, and special characters (-) with a length of 3 to 50 characters
      Public access allowed IPrequiredEnter IPs to allow access
      • ’,‘You can enter up to 100 using ‘,’
      Stage to connectSelectionAfter checking Use, select stage
      ExplanationSelectionEnter extra access control info (≤50 chars)
      Table. Access Control Creation Information Input Items
  4. When the information entry and selection are complete, click the Confirm button.

  5. After checking the message in the notification popup, click the Confirm button.

    • Once creation is complete, verify the created resource in the access control list.
    • To delete an access control list, select the resource to remove from the list and click the Delete button. * The default access control cannot be deleted.
    • To modify access control, select Edit from the context menu of the resource you want to modify.

Terminate API

You can reduce operating costs by terminating the unused service. However, if you terminate the service, the currently operating service may be stopped immediately, so you should proceed with the termination only after fully considering the impact that may arise from the service interruption.

To cancel the API, follow these steps.

  1. All Services > Application Service > API Gateway Click the menu. 1. Navigate to the Service Home page of API Gateway.
  2. On the Service Home page, click the API menu. 2. Go to the API list page.
  3. On the API List page, select the resource to cancel and click the Service Termination button.
  4. After the termination is complete, check on the API List page whether the resource has been terminated.

Using Report

You can check API traffic, performance, and error status.

To use the Report, follow these steps.

  1. All Services > Application Service > API Gateway Click the menu. 1. Go to the Service Home page of API Gateway.
  2. On the Service Home page, click the API Gateway > Report menu. 2. Go to the Report page.
    • Enter or select the required information.
CategoryDetailed description
Query periodSelect the date to view (default 1 week from today, up to one month can be viewed)
Stage nameStage name under API
Table. Report information input items
  1. After completing the information entry and selection, you can view the Report information.
CategoryDetailed description
TOP Resources 5Among the resources invoked by the user, the top 5 most frequently called with an API status code of 2XX (ties are not displayed as duplicate ranks).
API call countNumber of calls with API status code 2XX
LatencyThe time elapsed from when the user sends a request to the API Gateway until receiving a response.
Integration LatencyThe time taken from when the API Gateway sends a request to the backend server until it receives a response from the backend.
4XX ErrorNumber of calls with API status code 4XX
5XX ErrorNumber of calls with API status code 5XX
Table. Report detailed information items
Reference
  • If a stage is deleted, it cannot be viewed in the Report.
  • The report retrieves data from one hour before the current time.

Create Usage Policy

The usage policy is established to ensure efficient allocation of server resources, maintain service stability, prevent unnecessary traffic, and avoid misuse.

To create a usage policy, follow these steps.

  1. All Services > Application Service > API Gateway menu, click it. 1. Go to the Service Home page of API Gateway.
  2. On the Service Home page, click the API Gateway > Usage Policy menu. 2. Go to the Usage Policy page.
  3. On the Usage Policy page, click the Create Usage Policy button. 3. Navigate to the Create Usage Policy page.
    • Enter or select the required information.
Category
Required
Detailed description
API name to connectrequiredSelect from the generated AIPs
Usage Policy NamerequiredStart with a lowercase English letter and ensure it does not end with a hyphen (-); use lowercase letters, numbers, and hyphens (-) to enter 3 to 50 characters.
QuotarequiredEnter a value between 1 and 2,000,000,000 on a monthly/daily/hourly basis.
ExplanationSelectionEnter a description of the usage policy within 50 characters.
Table. Usage policy information input items
  1. When the information entry and selection are complete, click the Complete button.
  2. After checking the message in the notification popup, click the Confirm button.
    • Once creation is complete, check the resources you created in the usage policy list.

Create API Key

An API key is used to identify which user or app is calling the API. It is primarily used to limit usage according to the usage policy.

To create an API Key, follow these steps.

  1. All Services > Application Service > API Gateway menu, click. 1. Go to the Service Home page of API Gateway.
  2. On the Service Home page, click the API Gateway > Usage Policy menu. 2. Go to the Usage Policy page.
  3. Click the usage policy in the list. 3. Navigate to the Usage Policy Details page.
  4. On the Usage Policy Details page, click the Create API Key button. 4. Add API Key Navigate to the popup window.
    • Enter or select the required information.
Category
Required
Detailed description
API Key namerequiredStart with a lowercase English letter and ensure it does not end with a special character (-); use lowercase letters, numbers, and the special character (-) to input 3 to 50 characters.
ExplanationSelectionEnter a 50‑character description of the API Key.
Table. API Key information input fields
  1. After entering the information and making selections, click the Confirm button.
  2. After checking the message in the notification popup, click the Confirm button.
    • When creation is complete, check the created resources on the Usage Policy Details page.
Reference
  • You can create up to 10 usage policies and 5 API keys.
  • Quotas are calculated per API Key.

Create Resource Policy

Resource-based policies can fundamentally block unauthorized access and enhance the security level of the service.

To create a resource policy, follow these steps.

  1. All Services > Application Service > API Gateway Click the menu. 1. Go to the Service Home page of API Gateway.
  2. On the Service Home page, click the API Gateway > Resource Policy menu. 2. Navigate to the Resource Policy page.
  3. Resource Policy page, click the Create Resource Policy button. 3. Navigate to the Create Resource Policy page.
    • In the Service Information Input area, enter or select the required information.
Category
Required status
Detailed description
Policy TemplaterequiredSelect Policy Template
  • Default Policy: A policy automatically applied when creating an API
  • Account Allowlist: A policy that permits only users of a specific SCP account (Root user or IAM Role) to call the API
  • IP Range Blocklist: A policy that allows or blocks only specific IP addresses or CIDR ranges
Table. Resource policy information input items
  1. When the information entry and selection are complete, click the Complete button.
  2. After checking the message in the notification popup, click the Confirm button.
    • When creation is complete, you can review, modify, or delete the resource policy.
ServiceWatch metric
Resource-Based Policy Guide