Docs

Key Management System

Key management service

Project Management

Introduction

Each time you create a Keyring in the key management system, a corresponding Keyring resource is generated. Project management is a resource management method provided by Volcano Engine that allows grouping resources used by different businesses or projects for management. Granting IAM permissions based on projects (i.e., a group of resources) helps maintain resource independence and data security. \nFor more information about projects, see Project Management.

Notes

KMS resources that support project management include: Keyring.

As a sub-resource of Keyring, individual keys (Key) do not support separate project management. For details on parent-child resource relationships, see: Parent-Child Resource Management

A resource can only belong to one project.

Newly created resources are assigned to the default project if no specific project is specified.

After binding to a project, resources can only be used by users with permissions for that project.

The relationships between resources do not change when added to a project.

If you need to associate resources from multiple projects, you must have permissions for all projects involved; for example, to associate Keyring1 under project a with Keyring2 under project b, you must have permissions for both projects a and b. For authorization operations, see Manage Project Permissions.

When using subaccounts to create and manage resources, the subaccount must be granted the corresponding permissions by the main account.

Project management process

This article uses an example to explain how to manage cloud resources through projects. The general process for using project management features is as follows:

Create a project: Create a project to manage instances within the project.

Add project permissions to IAM users: Grant project permissions to subusers.

Create instances: Use subusers to create instances and bind them to projects.

If you need to bind projects to other newly created resources, select the target resource in the left navigation tree.

(optional) resource transfer in/out project: you can transfer the instance when its project changes.

view project resource information

view the project of a resource

click the target instance on the instance list page to enter the overview page, then check the project info in the basic information section.

search resources by project

select the region in the top navigation bar, then select the project as instructed below.

select all resources under the account to view all resources under the current account.

description

when logged in with the primary or sub-account, the system shows all resources under that account by default.

if your sub-account lacks global permissions, you cannot view all resources under that account by selecting "all account resources." switch projects or contact the primary account for authorization.

Select a specific project to view all resources linked to it.

Select Manage Project to go to the project list page for project management.

Last updated: 2025.06.27 15:24:20