# Official Sources — Huawei Live IAM Policy Change Guard

Authoritative Huawei Cloud documentation for IAM policy, SCP, and agency management.

## Core References

- **IAM Overview** — https://support.huaweicloud.com/intl/en-us/iam/index.html
  Huawei Cloud Identity and Access Management product documentation covering users, groups, agencies, fine-grained policies, and system policies.

- **SCP (Service Control Policies) at Organizations** — https://support.huaweicloud.com/intl/en-us/usermanual-organizations/organizations_03_0001.html
  Creating and managing Service Control Policies at the Organizations level; SCP precedence over IAM policies in member accounts.

- **IAM Fine-Grained Custom Policies** — https://support.huaweicloud.com/intl/en-us/usermanual-iam/iam_01_0605.html
  Creating custom fine-grained policies with resource-level, action-level, and condition-level constraints.

- **IAM Agency Management** — https://support.huaweicloud.com/intl/en-us/usermanual-iam/iam_06_0004.html
  Creating and managing agencies for cross-account access, delegated trust relationships, and temporary security credentials.

- **Enterprise Project IAM Permissions** — https://support.huaweicloud.com/intl/en-us/usermanual-em/en-us_topic_0108763916.html
  Binding IAM users and groups to enterprise projects for scoped resource access control.

- **IAM System Policies Reference** — https://support.huaweicloud.com/intl/en-us/permissions/index.html
  Complete list of Huawei Cloud system policies (ReadOnlyAccess, FullAccess variants) and their permission scopes.

- **CTS Audit Logs for IAM** — https://support.huaweicloud.com/intl/en-us/usermanual-cts/cts_03_0002.html
  Querying Cloud Trace Service logs for IAM events: policy creation, attachment, agency creation, SCP changes.

- **IAM Security Best Practices** — https://support.huaweicloud.com/intl/en-us/bestpractice-iam/iam_bp_0001.html
  Least privilege, MFA enforcement, password policies, and privilege escalation prevention for Huawei Cloud IAM.
