All scripts and environment check scripts are inside the skill package. You must use skill action=exec to execute them; do not run them directly in the shell.
Prerequisites
CLI Version Requirements and Verification Commands
COC SDK Version Requirement: huaweicloudsdkcoc >= 3.1.0
Verification Commands:
bash
# Check current SDK version
python -c "import huaweicloudsdkcoc; print(huaweicloudsdkcoc.__version__)"
# Verify COC client availability
python -c "from huaweicloudsdkcoc.v1 import CocClient; print('COC SDK version verification passed')"
Authentication Configuration and Security Rules
Supported Authentication Methods:
Credential Acquisition Methods:
This skill supports obtaining Huawei Cloud credentials through the following methods (in order of priority from high to low):
Environment Variables (highest priority)
HW_ACCESS_KEY: Huawei Cloud Access Key AK
HW_SECRET_KEY: Huawei Cloud Access Key SK
HW_SECURITY_TOKEN: Security token for temporary credentials
Command Line Parameters (used when environment variables are not provided)
--ak: Huawei Cloud Access Key AK
--sk: Huawei Cloud Access Key SK
--security-token: Security token for temporary credentials (required when using temporary AK/SK)
Interactive Input (when neither of the above methods are provided)
The program will prompt the user to input credential information such as AK/SK
Execute script directly (will automatically use environment variables)
python {baseDir}/scripts/caller.py create
# Will prompt for AK/SK/region
Authentication Parameter Description:
Parameter
Description
Required
Default
Example
--ak
Huawei Cloud Access Key AK (can be temporary AK)
Yes*
Prompted
--ak AXXX...
--sk
Huawei Cloud Access Key SK (can be temporary SK)
Yes*
Prompted
--sk SXXX...
--security-token
Security token for temporary credentials (required when using temporary AK/SK)
No
Prompted
--security-token XXXX...
--region
COC Service Region
No
cn-north-4
--region cn-north-4
Note: Parameters marked with * can be provided via environment variables (HW_ACCESS_KEY, HW_SECRET_KEY, HW_SECURITY_TOKEN, HW_REGION). If environment variables are set, they take priority over command line parameters.
Authentication Priority:
First check environment variables: HW_ACCESS_KEY, HW_SECRET_KEY, HW_SECURITY_TOKEN, HW_REGION
If all required environment variables are set, use them directly
If environment variables are not set, use command line parameters
If neither is provided, prompt for interactive input
Security Rules:
No Hardcoded Credentials: Never embed AK/SK directly in code or configuration files
Principle of Least Privilege: Grant only the minimum permissions required
Regular Key Rotation: Rotate AK/SK every 90 days
Enable Key Rotation Alerts: Set up expiration reminders in Huawei Cloud Console
IAM Permissions List
This skill requires the following IAM permissions. For detailed information, refer to IAM Policies Documentation:
Permission Category
Permission Name
Description
Script Management
coc:script:create
Create script
Script Management
coc:script:list
List scripts
Script Management
coc:script:get
Get script details
Script Management
coc:script:update
Update script
Script Management
coc:script:delete
Delete script
Execution Management
coc:execution:create
Create execution task
Execution Management
coc:execution:list
List execution tasks
Execution Management
coc:execution:get
Get execution details
Instance Management
coc:instance:list
List target instances
Permission Failure Handling Flow
Insufficient Permission Error Handling:
Error Identification:
bash
# Typical error message
error: AccessDenied
message: You do not have permission to perform this action.
Troubleshooting Steps:
Verify AK/SK configuration
Confirm user has required COC permissions
Validate region configuration
Check if IAM policy is active
Resolution:
Contact administrator for required permissions
Confirm IAM policy is properly attached to user/role
Wait for policy to take effect (typically 5-10 minutes)
Verification:
bash
# Re-execute to verify permissions
python {baseDir}/scripts/caller.py list
If environment variables are set, they take priority over command line parameters.
create Command Parameters
Parameter
Description
Required
Default
--name
Script name
Yes
-
--type
Script type (SHELL/PYTHON/BAT)
Yes
-
--content
Script content
Yes
-
--description
Script description
Yes
-
--risk-level
Risk level (LOW/MEDIUM/HIGH)
No
LOW
--version
Script version
No
1.0.0
execute Command Parameters
Parameter
Description
Required
Default
--script-uuid
Script UUID
No
Most recent script
--execute-user
Execute user
No
root
--timeout
Timeout in seconds (5-1800)
No
300
--success-rate
Success rate (0.01-100)
No
1
--rotation-strategy
Rotation strategy (CONTINUE/PAUSE)
No
CONTINUE
show Command Parameters
Parameter
Description
Required
Default
--script-uuid
Script UUID
Yes
-
list Command Parameters
Parameter
Description
Required
Default
--page
Page number
No
1
--size
Page size
No
10
query Command Parameters
Parameter
Description
Required
Default
--execute-uuid
Execution task UUID
Yes
-
SDK Installation
Before creating or executing scripts for the first time, ensure the Huawei Cloud COC SDK dependencies are installed. Run from the skill directory (skills/coc):
bash
pip install -r {baseDir}/requirements.txt
Installation Notes:
Installation may take a few minutes, please be patient
After successful installation, you can call the Python code in the scripts directory for script creation and execution
Use the following mirrors to install the SDK (second pip mirror, preferred):
bash
