External Access authentication and permissions management

The latest service changes have not yet been reflected in this content. We will update the content as soon as possible. Please refer to the Korean version for information on the latest updates.

Available in Classic and VPC

This page provides description on how to authenticate workloads outside NAVER Cloud Platform and manage the permissions required to access NAVER Cloud Platform.

Authenticate external workload

To authenticate external workloads and securely provide temporary keys, generate an X.509 certificate using the NCP Private CA service on NAVER Cloud Platform, and manage authentication and authorization through the External Access menu.

• Using Private CA: More information on using private CA

Create Trust Anchor

This step involves configuring the Trust Anchor to validate the customer's certificate. To create Trust Anchor, follow these steps:

1. On NAVER Cloud Platform console, click Services > Management & Governance > Sub Account > Sub Accounts in order.
2. Click the [Create] button on the Trust Anchor tab.
   
3. Enter the name and description of the trust anchor you want to create in the Trust Anchor information.
4. Select the CA to register in the CA information.
   • If no CA has been created, you can proceed by creating one by clicking the Create Private CA button.
5. After completing the Trust Anchor information and CA information entries, click the [Create] button.
6. Check the Trust Anchor tab to verify that the trust anchor has been added.
   

Create profile and role integrations

This step involves creating and managing a Profile for accessing NAVER Cloud Platform.
By mapping the External Access Service Role to the Profile, you can control access to NAVER Cloud Platform resources through the external access service role for authenticated external workloads. To create a Profile, follow these steps:

• Create Service Role: More information on creating a Service Role and applying roles

1. On NAVER Cloud Platform console, click Services > Management & Governance > Sub Account > Sub Accounts in order.
2. Click the [Create] button on the Profile tab.
   
3. In Profile information, enter the name and notes for the profile you want to create.
4. In Role information, select role that you want to integrate with the profile.
5. Set the expiration time for the temporarily issued key in Session information.
6. Click [Create].
7. Check the Profile tab to verify that the profile has been added
   

Subject Activity

You can manage the detailed usage history of certificates with the same subject attributes through subject activity. Subject activity is automatically generated based on the certificate usage history, to view the usage history follow these steps:

1. On NAVER Cloud Platform console, click Services > Management & Governance > Sub Account > Sub Accounts in order.
2. Click Subject that has been created in Subject Activity tab.
3. Check the information of the created Subject and the certificate usage history.

Issue temporary keys with Signing Helper

Once the trust anchor and profile settings are complete, you can issue temporary keys and obtain temporary credentials through Signing Helper CLI.

• Using Signing Helper CLI: Signing Helper CLI Guide