Huawei Cloud international USD balance & IAM setup guide

Read Huawei Cloud international balance with a dedicated IAM user. Set minimal permissions, distinguish total credit limits, and reconcile USD cloud funds.

Awaiting live-account verification

Guide updated

Implemented from public international documentation reviewed 2026-10-17. Real international accounts, least-privilege permissions, signed-in setup and amount reconciliation await user testing. China-site validation does not transfer. No supplier login, model call or permission change was performed.

Required credentials
International account Domain ID + dedicated IAM AK/SK
Monitoring currency
USD · dollars (measure_id=1), not cents or CNY
What is monitored
Cloud account balance (account_type=1)
Only fixed GET https://bss-intl.myhuaweicloud.com/v2/accounts/customer-accounts/balances with SDK-HMAC-SHA256 and signed X-Domain-Id. Main amount is account_type=1 amount in USD. It is shared cloud-account funding, including non-AI services, not ModelArts/Pangu, project or key-specific funds. No bill-detail, model, payment, permission-management or IAM-discovery requests.

Check manually without sharing credentials

  1. Sign in yourself to international Billing Center with existing financial access and confirm the owning USD account.
  2. Read balance separately from total credit limit, bonus, deposit, earmarked amounts and total amount due. Ask Huawei Cloud if a displayed label does not map to the API.
  3. Record the time; accounting can lag. Do not sum categories or duplicate account connections and do not change payments for monitoring.
Open official Huawei Cloud international page(opens in a new tab)

Connect Huawei Cloud international to Quota Monitor

  1. Identify the international paying account

    Sign in yourself to the international Billing Center below. Confirm that this is the USD account paying for your cloud services, including any AI workloads. China accounts must use the separate China connection.

    Check: an existing financial administrator can inspect the account. Reseller customers without their own balance are unsupported. Do not top up, change billing arrangements or apply for credit just to connect monitoring.

  2. Create the minimal classic custom policy

    An existing administrator opens international IAM → Permissions → Policies/Roles → Create Custom Policy. Name it QuotaMonitorIntlBalanceRead, choose the JSON policy view, replace the entire editor with the JSON below, and save with OK.

    Check: Version is 1.1 and the only Action is bss:balance:view. Do not add bss:balance:update, BSS Administrator or wildcard actions. If the name exists, inspect it or use a new dedicated name; do not overwrite another workload's policy. Creating a policy alone grants nothing.

    Huawei Cloud international read-only policy JSON

    {
      "Version": "1.1",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "bss:balance:view"
          ]
        }
      ]
    }

    Copies the complete JSON without keys or account details.

  3. Authorize a dedicated user group

    Open IAM → User Groups → Create User Group and name it quotamonitor-billing-intl. In its row select Authorize, select the custom QuotaMonitorIntlBalanceRead policy, click Next, choose All resources and confirm with OK.

    Check: the group shows this policy. All resources covers the required account/region authorization scope; it does not grant every action. This API does not support enterprise-project authorization. Do not add broad roles or change other users' groups.

  4. Create the programmatic IAM user

    Open IAM → Users → Create User. Use a unique name such as quotamonitor-billing-intl, select Programmatic access and Access key credentials, then choose the dedicated group from the previous step and complete creation.

    Check: management-console access and administrator-group membership are unnecessary. Review all effective group permissions and existing denies; multiple memberships can broaden access. Use only this dedicated monitoring identity.

  5. Save one matching AK/SK pair

    Download and securely store the access key offered when the user is created. If none was created, the existing administrator opens this user's Security Settings → Access Keys → Create Access Key, completes verification and downloads it immediately.

    Check: AK and SK belong to the same active international IAM user. SK cannot be retrieved after the download dialog closes, and each user supports at most two keys. Never delete another workload's key to make room; ask your administrator to arrange a safe rotation. Do not send keys in chat, screenshots, URLs or MCP arguments.

  6. Get the owning account Domain ID

    In the international console, open the username menu → My Credentials. Copy Account ID, also called Domain ID, for the account owning this IAM user. It is 32 hexadecimal characters.

    Check: this is not the IAM user ID or a project ID. Quota Monitor signs X-Domain-Id directly and does not call IAM to discover it. Keep it with the same AK/SK pair and confirm account ownership with your administrator.

  7. Save the international connection

    In Quota Monitor open your workspace and target project, add a provider connection, and choose Huawei Cloud international · USD. Paste Domain ID, AK and SK into their three masked fields, then save. A secure setup link must belong to your own workspace.

    Check: currency is fixed USD and no region, endpoint or project/key filter is needed. Credentials are encrypted together and only a suffix is shown later. Help does not submit; switching providers clears unsaved credential values. Never paste a model key or China credentials.

  8. Refresh and reconcile the first amount

    Wait for the first sync or select Query latest balance and confirm the successful query time changes. Compare account_type=1 amount with the balance of the same international account. A synthetic amount 123.4567890123456789 is USD 123.4567890123456789, not cents divided by 100.

    Check: REST/MCP huaweiGlobalBalance.balance equals the card's main amount. Expand the details and separately compare type 2 total credit limits, bonus, deposit, designated funds and debt_amount. If console labels differ, confirm the API mapping instead of reconstructing a total.

  9. Record real acceptance and handle failures safely

    Real international permissions and amounts remain pending until you complete your own least-privilege read and reconciliation. These are public-documentation steps, not a signed-in walkthrough of your account. Note the successful time and only sanitized failure codes.

    Check: an old timestamp after failure is not a new read. Do not infer model suspension, top up, change permissions or invent a reset date from a low balance. For a continuing mismatch contact Huawei Cloud with the relevant field and time, not secrets or signed headers.

What Quota Monitor reads from Huawei Cloud international

  • The international account and endpoint are independent of China CNY. Both response and account entries must declare USD and measure_id=1. No cross-site fallback, currency conversion, arbitrary endpoint or project/key filter is supported.
  • For account_type=2, amount is the TOTAL credit limit, not remaining credit. credit_amount is also a total credit limit field. They are displayed separately; do not add them or substitute them for the main balance. Type 5 bonus, type 7 deposit and debt_amount (total amount due) are also separate.
  • designated_amount is earmarked money within its account category, not additional funds. Never add categories, subtract debt or usage again, or call this withdrawable cash. Coupons, resource packs, free tokens, reseller-customer balances and an AI-only wallet are outside this API.
  • This guide uses classic Policies/Roles Version 1.1 with bss:balance:view. New identity policies use a different model and billing:balance:view; do not change only the version or mix actions. Follow the matching official authorization documentation if your console only offers the new editor; never attach administrator access to bypass a denial.
  • Missing details remain unknown, not zero. Failed reads retain the last successful amount/time. Zero and negative decimals are preserved. No reset, expiry or model availability is inferred. Duplicate connections share funds; never sum them. Thresholds and daily-burn forecasts are your settings, not provider limits or measured spending.
  • The dashboard shows the latest successful snapshot. Manual refresh queries the provider again but cannot eliminate upstream billing delays. An old balance is not a new result after a failed query.

Huawei Cloud international FAQ and troubleshooting

CBC.0151 or HTTP 403?
Confirm the Version 1.1 bss:balance:view policy was actually authorized to the dedicated group over All resources and the user belongs to that group. Check existing explicit denies. New identity-policy billing:balance:view is a separate model. Never grant administrator access to fix this.
HTTP 401, signature or timestamp error?
Check the active matching international AK/SK, owning Domain ID and server clock. Model keys, China credentials and STS tokens are unsupported. Supply only a sanitized code and time when reporting a problem; do not expose signed headers.
CBC.99000049 or CBC.0100?
Reseller customers can have no independent balance; do not substitute the reseller's account or another wallet. Verify account type and Domain ID with the existing administrator or Huawei Cloud. Do not invent a project scope.
Why is the credit figure different from available funds?
International type 2 amount is the TOTAL credit limit. credit_amount is another total-limit field, not remaining credit. Neither is used as main balance. designated_amount is a subset and debt_amount is total amount due, not a subtraction instruction.
Missing fields, wrong currency, zero or negative amount?
Missing main balance, non-USD currency or a unit other than measure_id=1 fails instead of fabricating zero. Optional omitted/null details stay unknown. Valid zero and negative values remain unchanged; no currency is guessed from your card or locale.
429/5xx or a stale value; when does it reset?
Wait for the next scheduled retry and inspect the last successful time. This is cloud-account balance, not a quota with a known reset. The API does not establish model availability; duplicate connections share the same funds.

Official Huawei Cloud international references

Prepared by Quota Monitor, not an official provider tutorial. Interfaces and permissions may change; check official pages. Verification is limited to the scope stated here.

Monitor Huawei Cloud international automatically

Checking a console by hand is easy to forget. Quota Monitor reads Huawei Cloud international through its official API for you.

  • Refreshes every 10 minutes by default, and you can refresh manually at any time.
  • Low balances, invalid keys, and sync failures appear at the top of your overview.
  • Group accounts by project, and ask about balances from AI assistants such as Claude through remote MCP.
Start for free

Using the other site? View the Huawei Cloud / Pangu (China) setup guide