Authorizable Resource Types

Tencent Cloud Lighthouse

Release Notes and Announcements

Image Update History

Announcements

Announcement on the Addition of the São Paulo Region and Availability Zones

Updating General Instance Bundles

Announcement on Adding the Razor Speed Bundle for Lighthouse

User Guide

Product Introduction

Overview

Product Comparison

Comparison with CVM

Comparison with Other Products

Region and Network Connectivity

Purchase Guide

Billing Overview

Price Overview

Purchase Methods

Overdue Payments and Service Suspension

Refund Policies

Bundle Upgrade Fee

Getting Started

Quickly Creating Application with Lighthouse

Basic Concepts

Creating Lighthouse Instances

Creating a Linux Instance

Creating a Windows Instance

Operation Guide

Logging In to Linux Instances

Logging in to Linux Instance via Tencent Cloud OrcaTerm

Logging in to Linux Instance via Remote Login Software

Logging in to Linux Instance via SSH Key

Logging in to Linux Instance via VNC

Logging in Windows Instance

Logging in to Windows Instance via VNC

Logging in to Windows Instance via Remote Desktop Connection

Managing Instances

Resetting the instances passwords

Password Reset Operation Instruction

Troubleshoot the Issue That the Password Fails To Be Reset Online or Is Invalid

Troubleshoot the Issue That the Password Reset Fails To Be Reset Offline or Is Invalid for The Windows Instance

Binding Key

Viewing Instance Information

Shutting down Instance

Upgrading Instance Package

Managing Instance Tag

Changing Instance Public IP

Batch Operations

Working with Cloud Disks

Creating Cloud Disks

Attaching Cloud Disks

Initializing Cloud Disks

Renewing Cloud Disks

Detaching Cloud Disks

Terminating Cloud Disks

Managing Keys

Managing Firewall

Manage instance firewall

Managing Snapshot

Managing Image

Working with Custom Images

Replicating Custom Images Across Regions

Share Custom Images

Tencent Cloud Support for Lighthouse Images

Private Network Interconnection

OPS and Monitoring

Instance Monitoring

Access Management

CAM Overview

Authorizable Resource Types

Authorization Policy Syntax

Transfering File

Uploading Local Files to Lighthouse

Uploading File from Windows to Linux Lighthouse Instance via WinSCP

Uploading File from Windows to Lighthouse Instance via FTP

Uploading File from Windows to Windows Lighthouse Instance via Remote Desktop Connection

Uploading File from Linux or macOS to Linux Lighthouse Instance via SCP

Uploading File from Linux or macOS to Lighthouse Instance via FTP

Uploading File from Linux to Windows Lighthouse Instance via rdesktop

Uploading File from macOS to Windows Lighthouse Instance via MRD

Practical Tutorial

Websites

Building up a Website Using WordPress Application Template

Building Development Environment

Building a Platform with Theia IDE Template

Building LAMP Development Environment

Building Node.js Development Environment

Building ASP.NET Development Environment

Building Docker Container Environment with Template

Managing K3s Container Cluster with Image

Cloud Storage System

Building up a Cloud Storage System with Cloudreve Application template

Building an E-commerce Platform

Building an Individual E-commerce Site Using WooCommerce Application Template

Setting up Live Streaming Service with SRS Application Template

Setting Up an FTP Server

Setting Up an FTP Server on Linux Lighthouse Instance

Setting Up an FTP Server on Windows Lighthouse Instance

Installing SSL Certificate

Installing Certificate on NGINX Server

Installing Certificate on Apache Server (Linux)

Installing Certificate on Apache Server (Windows)

Ops Guide

Setting to Allow Multiple Users to Log in to Windows Instance Remotely

Troubleshooting

"Remote Desktop Cannot Connect to the Remote Computer" Error Reported During Windows Instance Login

API Documentation

Making API Requests

Snapshot APIs

ApplyInstanceSnapshot

CreateInstanceSnapshot

DeleteSnapshots

DescribeSnapshots

DescribeSnapshotsDeniedActions

ModifySnapshotAttribute

Instance APIs

CBS APIs

DescribeDisksDeniedActions

DescribeDisksReturnable

DetachDisks

InquirePriceCreateDisks

InquirePriceRenewDisks

Key APIs

AssociateInstancesKeyPairs

CreateKeyPair

DeleteKeyPairs

DescribeInstanceLoginKeyPairAttribute

DescribeKeyPairs

DisassociateInstancesKeyPairs

ImportKeyPair

ModifyInstancesLoginKeyPairAttribute

CCN APIs

AttachCcn

DescribeCcnAttachedInstances

DetachCcn

ResetAttachCcn

Image APIs

CreateBlueprint

DescribeBlueprintInstances

InquirePriceCreateBlueprint

DescribeBlueprints

DeleteBlueprints

ModifyBlueprintAttribute

Firewall APIs

CreateFirewallRules

DeleteFirewallRules

DescribeFirewallRules

DescribeFirewallRulesTemplate

ModifyFirewallRuleDescription

ModifyFirewallRules

Scene APIs

DescribeAllScenes

DescribeScenes

Package APIs

DescribeBundleDiscount

DescribeBundles

Quota APIs

DescribeGeneralResourceQuotas

Region APIs

DescribeRegions

DescribeZones

Other APIs

InquirePriceCreateInstances

InquirePriceRenewInstances

Data Types

Error Codes

FAQs

lighthouse Policy

Data Processing And Security Agreement

DocumentationTencent Cloud LighthouseOperation GuideAccess ManagementAuthorizable Resource Types

Authorizable Resource Types

Download PDF

Last updated: 2022-05-12 12:24:12

Authorizable Resource Types

Last updated: 2022-05-12 12:24:12

Download PDF

With Cloud Access Management (CAM), you can grant resource-level permissions for users.
In CAM, the types of Lighthouse resources that can be authorized are as follows:
Resource Type
Resource Description Method in Authorization Policy
Instance
qcs::lighthouse:$region:$account:instance/*
Image
qcs::lighthouse:$region:$account:blueprint/*
Snapshot
qcs::lighthouse:$region:$account:snapshot/*
Key
qcs::lighthouse:$region:$account:keypair/*
﻿
The table below lists the API operations of Lighthouse that currently support resource-level permissions, as well as their resources and condition keys. When setting the resource path, you need to replace the variable parameters such as $region and $account with your actual parameter values. You can also use the * wildcard in the path.
For relevant concepts such as region, action, account, and resource in CAM policies, see Resource Description Method.
Note: 
Lighthouse API operations not listed here do not support resource-level permissions. You can still authorize a user to perform such an API operation, but you must specify * as the resource element of the policy statement.
Instance
API
Resource
ModifyInstancesBundle
qcs::lighthouse:$region:$account:instance/$instanceId
RenewInstances
qcs::lighthouse:$region:$account:instance/$instanceId
IsolateInstances
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyInstancesAttribute
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyInstancesRenewFlag
qcs::lighthouse:$region:$account:instance/$instanceId
RebootInstances
qcs::lighthouse:$region:$account:instance/$instanceId
ResetInstance
qcs::lighthouse:$region:$account:instance/$instanceId
ResetInstancesPassword
qcs::lighthouse:$region:$account:instance/$instanceId
StartInstances
qcs::lighthouse:$region:$account:instance/$instanceId
StopInstances
qcs::lighthouse:$region:$account:instance/$instanceId
TerminateInstances
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesDeniedActions
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesReturnable
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesTrafficPackages
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstanceVncUrl
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeResetInstanceBlueprints
qcs::lighthouse:$region:$account:instance/$instanceId
﻿
Snapshot
API
Resource
CreateInstanceSnapshot
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:snapshot/*
DeleteSnapshots
qcs::lighthouse:$region:$account:snapshot/$snapshotId
ApplyInstanceSnapshot
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:snapshot/$snapshotId
DescribeSnapshotsDeniedActions
qcs::lighthouse:$region:$account:snapshot/$snapshotId
ModifySnapshotAttribute
qcs::lighthouse:$region:$account:snapshot/$snapshotId
﻿
Firewall
API
Resource
CreateFirewallRules
qcs::lighthouse:$region:$account:instance/$instanceId
DeleteFirewallRules
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeFirewallRules
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyFirewallRules
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyFirewallRuleDescription
qcs::lighthouse:$region:$account:instance/$instanceId
﻿
Key
API
Resource
DeleteKeyPairs
qcs::lighthouse:$region:$account:keypair/$keypairId
AssociateInstancesKeyPairs
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:keypair/$keypairId
DescribeInstanceLoginKeyPairAttribute
qcs::lighthouse:$region:$account:instance/$instanceId
DisassociateInstancesKeyPairs
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:keypair/$keypairId
ModifyInstancesLoginKeyPairAttribute
qcs::lighthouse:$region:$account:instance/$instanceId
﻿
Image
API
Resource
CreateBlueprint
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:blueprint/*
DeleteBlueprints
qcs::lighthouse:$region:$account:blueprint/$blueprintId
DescribeBlueprintInstances
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyBlueprintAttribute
qcs::lighthouse:$region:$account:blueprint/$blueprintId
﻿
Bundle
API
Resource
DescribeModifyInstanceBundles
qcs::lighthouse:$region:$account:instance/$instanceId
﻿
Billing
API
Resource
InquirePriceRenewInstances
qcs::lighthouse:$region:$account:instance/$instanceId
﻿

Was this page helpful?

You can also Contact Sales or Submit a Ticket for help.

Yes

Resource Type	Resource Description Method in Authorization Policy
Instance	qcs::lighthouse:$region:$account:instance/*
Image	qcs::lighthouse:$region:$account:blueprint/*
Snapshot	qcs::lighthouse:$region:$account:snapshot/*
Key	qcs::lighthouse:$region:$account:keypair/*

API	Resource
ModifyInstancesBundle	qcs::lighthouse:$region:$account:instance/$instanceId
RenewInstances	qcs::lighthouse:$region:$account:instance/$instanceId
IsolateInstances	qcs::lighthouse:$region:$account:instance/$instanceId
ModifyInstancesAttribute	qcs::lighthouse:$region:$account:instance/$instanceId
ModifyInstancesRenewFlag	qcs::lighthouse:$region:$account:instance/$instanceId
RebootInstances	qcs::lighthouse:$region:$account:instance/$instanceId
ResetInstance	qcs::lighthouse:$region:$account:instance/$instanceId
ResetInstancesPassword	qcs::lighthouse:$region:$account:instance/$instanceId
StartInstances	qcs::lighthouse:$region:$account:instance/$instanceId
StopInstances	qcs::lighthouse:$region:$account:instance/$instanceId
TerminateInstances	qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesDeniedActions	qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesReturnable	qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesTrafficPackages	qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstanceVncUrl	qcs::lighthouse:$region:$account:instance/$instanceId
DescribeResetInstanceBlueprints	qcs::lighthouse:$region:$account:instance/$instanceId

API	Resource
DescribeModifyInstanceBundles	qcs::lighthouse:$region:$account:instance/$instanceId

tencent cloud

New User Offers

Next-Generation CDN：EdgeOne

Elasticsearch Service Special Offers

Free Tier

Tencent Cloud Startup Program

Special Offers

Lighthouse Special Offers

Cloud Object Storage Special Offers

Featured Products

New Products

Education

Tencent Cloud Online Education Solutions

Gaming

Gaming Solution

Game Media Solutions

Financial Services

Financial Services Solution

Audio & Video

Audio/Video Solution

LVB Recording Solution

Interactive Classroom Solution

Interactive Live Streaming Solution

Audio Chat Social Networking Solution

Real Estate

Tencent Cloud LinkBase(Weiling)

E-commerce

E-commerce retail solutions

Compute

Cloud Virtual Machine

Auto Scaling

Batch Compute

CVM Dedicated Host

Database

TencentDB for MySQL

TencentDB for Redis®

TencentDB for CTSDB

TDSQL for MySQL

Data Transfer Service

TencentDB for MongoDB

TencentDB for PostgreSQL

TencentDB for SQL Server

TencentDB for TcaplusDB

Video Service

Cloud Streaming Services

Video on Demand

Media Processing Service

Cloud Application Rendering

Cloud Contact Center

Game Multimedia Engine

Chat

Real-time Communication

Tencent Effect SDK

AI and Machine Learning

Image Creation Large Model

Face Fusion

eKYC

Optical Character Recognition

Video Creation Large Model

Industry Applications

Tencent HealthCare Omics Platform

Container and Middleware

TDMQ for CKafka

Serverless Cloud Function

Tencent Kubernetes Engine

Tencent Kubernetes Engine for Serverless

Networking

Cloud Load Balancer

Virtual Private Cloud

Direct Connect

Cloud Connect Network

NAT Gateway

VPN Connection

Bandwidth Package

Anycast Internet Acceleration

Elastic Network Interface

Flow Logs

Global Application Acceleration Platform

Security

Captcha