Resource Access
You can view all resources with individual permissions and access them. To access resources, a PM or PL group user must register the cloud account resources associated with the project and go through the user’s permission request and approval process.
Resource
Displays all resources for which the user has been granted permission. The user can view the resource list and access resources directly.
Connection
Click the Connect button to access the resource, and after connecting, it provides connection details.
- Local Port: Enter a port number that is not being used for other purposes on the PC.
- Remote Port: Enter the port number of the resource.
- Putty Execution: To enable automatic execution of Putty, you need to set it to ON.
Connection Information
Provides detailed connection information to access resources via SSH.
- User ID: Click the copy icon to copy the user ID for use.
- Password: You can click the copy icon to copy the password and use it.
- Local IP: Click the copy icon to copy the local IP for use.
- Cloud Server IP: Click the copy icon to copy the cloud server IP for use.
Disconnect
When the resource is connected, the Connect button changes to a Disconnect button. To disconnect the resource, click the Disconnect button.
Resource Registration
In this menu, you can register the resource information required for access, and it displays the list of resources that have been registered.
Register
To register a resource, cloud account registration must be performed first in the project menu. PM and PL group users can register resources created within a cloud account. Click the Enroll button to go to the resource registration screen, then configure the resource connection information.
- Project: Select a project among those registered for PM or PL group users.
- Account: Select a cloud account among those registered in the selected project.
- Region: Select the region information of the selected account.
- Resource Type: Select one of Compute or DB.
- Resource: Select resources that match the selected criteria.
- Connection Type: Choose between Direct (direct connection to the server) and Bastion (connection via a proxy server).
- Address: Enter the resource’s address information.
- Root User: Provides the root user’s IP and password for the resource.
Supported OS/DB
Currently, the OSes and DBs that can perform ‘resource registration’ are limited as shown below, and supported OSes and DBs will be continuously added.
| OS | Version |
|---|---|
| Ubuntu | Ubuntu Server 24.04 LTS |
| Ubuntu | Ubuntu Server 22.04 LTS |
| Amazon Linux | Amazon Linux 2023 AMI |
| Redhat | Red Hat Enterprise Linux 9.4 |
| DB Engine | Version |
|---|---|
| PostgreSQL | 16.x |
| MySQL | 8.0.x |
| Aurora PostgreSQL | 15.x |
| Aurora MySQL | 3.05.x |
| Aurora MySQL | 3.04.x |
| Aurora MySQL | 3.03.x |
| MariaDB | 10.11.10x |
Network Settings
To register resources in CAM and access them through CAM, network configuration must be performed first.
After receiving guidance from the tenant administrator and completing network configurations appropriate for each tenant environment, such as firewall registration and security group registration, please proceed with resource registration.
Withdrawal
Resources that are no longer used must be removed from the registered resource list. After selecting from the resource view or resource registration list, click the Withdraw button to prevent further access.
Permission request
In the permission request menu, you can view project members’ resource permissions and request permissions for each user’s CSP resource types.
Request
Users can select a duration and permission type to request resource permissions for each CSP resource type. All permissions require approval, but when ‘Emergency’ is selected, the permission is granted simultaneously with the approval request.
Resource Information
- Project: Select a project from those the user belongs to.
- Account: Select the account registered in the selected project.
- Resource Type: Select one of Compute or DB.
Permission
- Period: Select the period (e.g., 4h, 8h, 24h, 10d, 30d, 12M).
- Emergency: If checked, permission is granted immediately upon the approval request, and a related email is sent to the approver.
- Permission Level: Choose one of USER, ADMIN, DBA.
- Comment: Add a comment for approval.
Create approval
To obtain resource access permissions, an approval process is required. To proceed with the approval process, go through the “Create Approval” popup, which is sent to Knox for approval and processed through Knox.
- Title: Automatically entered by the system and cannot be edited.
- Approver: Add the approver and the consenter according to the guide.
- Content: Project and permission information is automatically entered by the system and cannot be modified.
Withdrawal
To remove permissions that are no longer needed, select the permission in the request list and click the Withdraw button.
PC configuration
To access cloud resources, you must install the client agent and register the IP address of the access environment.
Client Agent Download
Click Download Client Agent to start the download, then install the client agent.
User Guide
To access the resource, you need to download and install the client. Also, if the installation is incomplete or the version is unsupported, you cannot connect to the resource even if all other preparations, such as permissions and IP registration, are completed.
Installation Guide
To start the installation process, click the Download Client Agent button to download the installation file. Once the download is complete, refer to the following information to proceed with the installation.
- Download Location: Specify a folder on the local drive.
- Execution: Select the downloaded file, right‑click, and click Run as administrator to execute.
IP registration
Access to cloud resources is allowed only from registered IPs, and up to five IPs can be registered. Please register the IP using the following information.
- To add a new IP, click the Add button.
- To remove an existing IP, select the IP from the list and click the Delete button.