Resource-level permissions refer to the ability to specify which resources a user can perform operations on. The Tencent Cloud CDC partially supports resource-level permissions, meaning that for Tencent Cloud CDC operations that support resource-level permissions, you can control when users are allowed to perform operations or use specific resources.
The types of resources that can be authorized in CAM are as follows:
Resource type | Resource Description Method in Authorization Policies |
qcs::cdc:$region::site/* | |
qcs::cdc:$region::cluster/* |
Tencent Cloud CDC site related and Tencent Cloud CDC cluster related introduce the Tencent Cloud CDC API operations that currently support resource-level permissions, along with the supported resources and condition keys for each operation. When setting the resource path, you need to replace variables such as
$region and $account with your actual parameters. You can also use the * wildcard in the path.Note:
Tencent Cloud CDC API operations not listed in the table do not support resource-level permissions. For Tencent Cloud CDC API operations that do not support resource-level permissions, you can still grant users permission to use those operations, but the resource element in the policy statement must be specified as *.
Tencent Cloud CDC "Site" Related
API Operations | Resource path | Conditional Key |
CreateSite | qcs::cdc:$region:$account:site/* | cdc:region |
DeleteSites | qcs::cdc:$region:$account:site/*qcs::cdc:$region:$account:site/$siteId | cdc:region |
DescribeSites | qcs::cdc:$region:$account:site/*qcs::cdc:$region:$account:site/$siteId | cdc:region |
DescribeSitesDetail | qcs::cdc:$region:$account:site/*qcs::cdc:$region:$account:site/$siteId | cdc:region |
Tencent Cloud CDC "Cluster" Related
API Operations | Resource path | Conditional Key |
CreateDedicatedCluster | qcs::cdc:$region:$account:cluster/* | cdc:region |
CreateDedicatedClusterOrder | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
DeleteDedicatedClusters | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
DescribeDedicatedClusterInstanceTypes | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
DescribeDedicatedClusterOrders | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
DescribeDedicatedClusters | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
Yes
No
Was this page helpful?