Abstract: A cloud computing technology-based access management method includes a cloud platform that receives a data boundary establishment request from a first tenant for a cloud service; the cloud platform establishes the data boundary for the cloud service; the cloud platform compares information carried in an access request, for the cloud service, that is received by the cloud service with the constraint condition in the data boundary; and the cloud platform allows the cloud service to respond to the access request when the information carried in the access request matches the constraint condition in the data boundary.

Abstract: A cloud computing technology-based access control method includes: The cloud management platform obtains and records a first access control policy configured by an administrator, where configuration of the first access control policy includes configuring at least one piece of first request attribute information, and the first request attribute information includes a first request attribute; the cloud management platform obtains a first access request triggered by a user, where the first access request carries a target request attribute; and the cloud management platform detects whether the target request attribute matches the first request attribute, to obtain a first matching result.

Abstract: A cloud computing technology-based access control method is provided, and includes: A request initiator deployed on a cloud sends an access request to a third-party service. The access request carries subject attribute information and environment attribute information of the request initiator, the subject attribute information indicates identity information of the request initiator on the cloud, and the environment attribute information indicates environment information of the request initiator on the cloud. The third-party service receives the access request. The third-party service extracts the subject attribute information and the environment attribute information from the access request, where the subject attribute information and the environment attribute information are used for calculation based on an access control policy, to determine that the third-party service allows or rejects the access request.

Abstract: A cloud resource access control method includes obtaining and recording a first resource control policy that is configured by an administrator of a target organization and that is for a target cloud resource in the target organization; obtaining a first resource access request that is triggered by the user outside the target organization and that is for the target cloud resource in the target organization; and allowing or denying, based on the first resource control policy, the first resource access request for accessing the target cloud resource.

Abstract: A vehicle location sharing method enables real-time location sharing of the vehicle that can improve the safety of a user driving the vehicle. A function interface is displayed that provides a location function. A trigger operation is received on the location sharing function, and a candidate account list is displayed based on the trigger application. The candidate account list includes a candidate account that has an association relationship with a first account. A selection operation is received on a second account and a a location sharing result is displayed in response to the selection operation. This provides a convenient operation to share location information without use of cumbersome operations, such as through the use of a mobile phone.