火山引擎服务示例

白名单设置

设置防火墙，仅白名单可以访问。默认开通公网访问，申请公网ip

ip 白名单

# lan 
127.0.0.0/8,10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16

# wan-office
# 92.38.131.57

# wan-server
47.101.164.190,129.146.60.145,138.2.25.190

备份设置

pg 30天每周1357全量每2小时增量
mongo 30天每天全量
es 不用备份
milvus 不备份
对象存储不用备份

搭建服务

pg

实例账号管理新增高权限账号

redis

mongodb

mongodb
mongodb

给第一个节点地址申请公网地址即可

es

给 kibana 开通公网访问即可

es 用 http

kafka

无需开通公网访问

设置自动创建 Topic, Group

对象存储

权限管理存储桶授权策略管理

cms

{
  "Statement": [
    {
      "Sid": "所有用户-cms/目录-只读",
      "Effect": "Allow",
      "Principal": [
        "*"
      ],
      "Action": "tos:Get*",
      "Resource": "trn:tos:::yyyy/zzzz-*/cms/*"
    },
    {
      "Sid": "所有用户-config/目录-只读",
      "Effect": "Allow",
      "Principal": [
        "*"
      ],
      "Action": "tos:Get*",
      "Resource": "trn:tos:::yyy/config/*"
    }
  ]
}

prod

{
  "Statement": [
    {
      "Sid": "所有用户-aigc/目录-只读",
      "Effect": "Allow",
      "Principal": [
        "*"
      ],
      "Action": "tos:Get*",
      "Resource": "trn:tos:::xxx/aigc/*"
    },
    {
      "Sid": "所有用户-tts/目录-只读",
      "Effect": "Allow",
      "Principal": [
        "*"
      ],
      "Action": "tos:Get*",
      "Resource": "trn:tos:::xxx/tts/*"
    },
    {
      "Sid": "所有用户-ugc/目录-只读",
      "Effect": "Allow",
      "Principal": [
        "*"
      ],
      "Action": "tos:Get*",
      "Resource": "trn:tos:::xxx/ugc/*"
    }
  ]
}