Product |
Abbreviation in CAM |
Console |
Authorization by Tag |
Authorization Granularity |
IP Restriction |
Cloud Application Rendering |
car |
Supported |
not supported |
Operation level |
Partially supported |
Note:
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
ActivateService |
Activate cloud application renderer service |
Operation level |
* |
Supported |
ApplyConcurrent |
try to acquire concurrent runtime for cloud application |
Operation level |
* |
Supported |
BindProjectToConcurrentPackages |
bind concurrent package for cloud application project |
Operation level |
* |
not supported |
CreateApplication |
create a cloud applicaiton |
Operation level |
* |
Supported |
CreateApplicationProject |
create project for cloud application |
Operation level |
* |
Supported |
CreateApplicationSnapshot |
create cloud application screen snapshot |
Operation level |
* |
Supported |
CreateApplicationVersion |
create new version for cloud application |
Operation level |
* |
Supported |
CreateMobileProject |
CreateMobileProject |
Operation level |
* |
not supported |
CreateSession |
create cloud application connection |
Operation level |
* |
Supported |
DeleteApplication |
delete cloud application |
Operation level |
* |
Supported |
DeleteApplicationProjects |
delete cloud application project |
Operation level |
* |
Supported |
DeleteApplicationVersion |
delete cloud application version |
Operation level |
* |
Supported |
DeleteMobileProjects |
DeleteMobileProjects |
Operation level |
* |
not supported |
DestroySession |
destroy cloud application connection |
Operation level |
* |
Supported |
ModifyApplicationBaseInfo |
modify cloud application info |
Operation level |
* |
Supported |
ModifyApplicationProject |
modify cloud application project |
Operation level |
* |
Supported |
ModifyApplicationVersion |
modify cloud application version |
Operation level |
* |
Supported |
ModifyConcurrentPackage |
modify concurrent package |
Operation level |
* |
Supported |
ModifyMobileApplicationInfo |
modify mobile application info |
Operation level |
* |
Supported |
ModifyMobileProject |
ModifyMobileProject |
Operation level |
* |
not supported |
SetApplicationVersionOnline |
set online version for cloud application |
Operation level |
* |
Supported |
UnbindProjectToConcurrentPackages |
bind concurrent packages for cloud application project |
Operation level |
* |
not supported |
Read operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
DescribeApplicationList |
get cloud application list |
Operation level |
* |
Supported |
DescribeApplicationPathList |
get executor binary path of cloud application |
Operation level |
* |
Supported |
DescribeApplicationProjectAdvancedConfig |
DescribeApplicationProjectAdvancedConfig |
Operation level |
* |
Supported |
DescribeApplicationProjects |
get cloud application project list |
Operation level |
* |
Supported |
DescribeApplicationStatus |
get cloud application running status |
Operation level |
* |
Supported |
DescribeApplicationVersion |
get cloud application versions |
Operation level |
* |
Supported |
DescribeBackgroundImageCOSCredential |
DescribeBackgroundImageCOSCredential |
Operation level |
* |
Supported |
DescribeConcurrentPackages |
get concurrent package list |
Operation level |
* |
Supported |
DescribeConcurrentSaleStatus |
DescribeConcurrentSaleStatus |
Operation level |
* |
Supported |
DescribeUserFPSHistogram |
describe user FPS histogram |
Operation level |
* |
Supported |
List Operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
DescribeMobileProjects |
DescribeMobileProjects |
Operation level |
* |
not supported |
Was this page helpful?