Quickly Isolating Resources in Tencent Cloud’s VOD
Published: 2022-09-26 03:35:12

We have launched the sub-application feature for Tencent Cloud’s Video-on-Demand (VOD) to help you easily isolate resources.

**1. What can sub-applications do?**

**Help you isolate resources** - VOD sub-applications can implement efficient and secure resource isolation with zero O&M costs, and they have the same features and are used in the same way. In addition, the features of data statistics collection and usage analysis can be performed at the sub-application level, so that you can break down your data system for analysis.

**Help you control permissions** - VOD sub-applications are connected to the Cloud Access Management (CAM) service of Tencent Cloud, and access to sub-application resources is controlled through permission policies. You can quickly implement permission control through simple operations that are easier to learn than those in sub-applications of other cloud vendors, as multi-level authorization is not required.

**Help you manage the resource lifecycle** - VOD sub-applications have a complete lifecycle to allow for flexible sub-application management. Sub-applications can be disabled, terminated, or enabled as needed in different scenarios.

**2. What are the typical use cases of sub-applications?**

**Sample use case 1**

A company intends to develop its own products based on Tencent Cloud. Department A plans to use VOD to develop a short video application, and department B plans to develop a movie and television website. These two VOD businesses need to be isolated from each other. However, out of financial considerations, the company cannot create an independent Tencent Cloud account for each department.

In this case, the sub-application feature of VOD can be used to assign a sub-application to each department, so that the two departments can manage their business resources in separate sub-applications. Under the sub-application role, the features and usage of VOD are the same as those before the sub-application feature is enabled. VOD will generate separate data statistics for each sub-application to facilitate reasonable resource allocation.

**Sample use case 2**

After each is configured with its own sub-application, departments A and B are further required to control permissions at a finer granularity. For example, sub-application 1 is assigned to department A and sub-application 2 to department B. Department A needs to have all the operation permissions of sub-application 1 and be able to access sub-application 2, but should not be able to perform video processing operations in sub-application 2.

This use case requires permissions to access isolated resources. To achieve this, a custom policy can be created through the account admin to refine access permissions in the API dimension, and then, the policy can be associated with the sub-account of department A.

**3. Summary**

The VOD sub-application feature helps you implement resource isolation and permission assignment in VOD, thereby lowering your operations costs and facilitating resource management. Sub--applications are absolutely a good choice for complex production environments with multiple business scenarios.

Read more at: https://www.tencentcloud.com/dynamic/blogs/sample-article/100345