Huawei Cloud Project List Skill

Overview

This skill lists all Huawei Cloud IAM (Identity and Access Management) projects owned by the authenticated account. It is a read-only inventory skill: it never creates, modifies, deletes projects, or changes any IAM configuration.

Architecture:

Agent → hcloud CLI (KooCLI IAM, primary) → Huawei Cloud IAM API
       ↘ huaweicloudsdkiam Python SDK (fallback)  ↗

Applicable Scenarios:

• Project inventory and resource discovery (locate project IDs for other services)
• Multi-region operations planning (each region has its own system project)
• Permission review (checking which projects exist under the account)
• Troubleshooting account-level IAM configuration

Prerequisites

1. hcloud CLI (KooCLI) installed and authenticated — See references/cli-installation-guide.md
2. IAM permissions — iam:projects:listProjects — See references/iam-policies.md
3. Python 3.6+ with huaweicloudsdkiam package (SDK fallback) — pip install huaweicloudsdkiam

Credentials. KooCLI reads credentials from hcloud configure (AK/SK) or environment variables. The IAM API is global (no region endpoint), so the same account credentials used for other Huawei Cloud services work here. Never ask the user to paste AK/SK into the conversation.

Workflow

1. Verify prerequisites — hcloud version, then run the list command (below)
2. Run the query — hcloud IAM KeystoneListProjects (CLI primary) with desired options
3. Handle results — Parse project IDs, names, domain IDs, parent IDs, enabled status, and descriptions; report the total project count
4. Fallback — If the CLI is unavailable, use the Python SDK example below

Core Commands

List All Projects

hcloud IAM KeystoneListProjects --cli-region=cn-north-4

List Projects (JSON Output)

hcloud IAM KeystoneListProjects --cli-region=cn-north-4 --cli-output=json

Filter by Project Name

hcloud IAM KeystoneListProjects --cli-region=cn-north-4 --name=<project-name>

Filter by Domain ID (Account ID)

hcloud IAM KeystoneListProjects --cli-region=cn-north-4 --domain_id=<domain-id>

Filter by Enabled Status

hcloud IAM KeystoneListProjects --cli-region=cn-north-4 --enabled=true

Filter by Parent Project ID

hcloud IAM KeystoneListProjects --cli-region=cn-north-4 --parent_id=<project-id>

Pagination

hcloud IAM KeystoneListProjects --cli-region=cn-north-4 --page=1 --per_page=50

SDK Fallback Example

import os
from huaweicloudsdkcore.auth.credentials import GlobalCredentials
from huaweicloudsdkiam.v3 import IamClient
from huaweicloudsdkiam.v3.model import KeystoneListProjectsRequest
from huaweicloudsdkiam.v3.region.iam_region import IamRegion

# Project listing is a domain-level (global) operation, so use GlobalCredentials
# with the domain ID (account ID). Obtain the domain ID from the console or via
# `hcloud IAM KeystoneListAuthDomains`.
credentials = GlobalCredentials(
    os.environ["HUAWEI_CLOUD_ACCESS_KEY"],
    os.environ["HUAWEI_CLOUD_SECRET_KEY"],
).with_domain_id(os.environ["HUAWEI_CLOUD_DOMAIN_ID"])

client = IamClient.new_builder() \
    .with_credentials(credentials) \
    .with_region(IamRegion.value_of("cn-north-4")) \
    .build()

response = client.keystone_list_projects(KeystoneListProjectsRequest())
projects = response.projects or []
for project in projects:
    print(project.id, project.name, project.domain_id, project.parent_id, project.enabled, project.description)
print("Project number:", len(projects))

Parameter Confirmation

Reference Documents

• CLI Installation Guide
• IAM Policies
• Verification Method
• Data Flow Diagram
• Acceptance Criteria

KooCLI Command Format Standard

The hcloud IAM module maps directly to the Huawei Cloud IAM API operations.