- Product Introduction
- Purchase Guide
- Quick Start
- Operation Guide
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Cloud Dedicated Cluster (CDC) APIs
- CreateDedicatedCluster
- CreateDedicatedClusterOrder
- CreateSite
- DeleteDedicatedClusters
- DeleteSites
- DescribeDedicatedClusterCosCapacity
- DescribeDedicatedClusterHostStatistics
- DescribeDedicatedClusterHosts
- DescribeDedicatedClusterInstanceTypes
- DescribeDedicatedClusterOrders
- DescribeDedicatedClusterOverview
- DescribeDedicatedClusterTypes
- DescribeDedicatedClusters
- DescribeDedicatedSupportedZones
- DescribeSites
- DescribeSitesDetail
- ModifyDedicatedClusterInfo
- ModifyOrderStatus
- ModifySiteDeviceInfo
- ModifySiteInfo
- Data Types
- Error Codes
- FAQs
- Contact Us
- Data Processing And Security Agreement
- Glossary
- Product Introduction
- Purchase Guide
- Quick Start
- Operation Guide
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Cloud Dedicated Cluster (CDC) APIs
- CreateDedicatedCluster
- CreateDedicatedClusterOrder
- CreateSite
- DeleteDedicatedClusters
- DeleteSites
- DescribeDedicatedClusterCosCapacity
- DescribeDedicatedClusterHostStatistics
- DescribeDedicatedClusterHosts
- DescribeDedicatedClusterInstanceTypes
- DescribeDedicatedClusterOrders
- DescribeDedicatedClusterOverview
- DescribeDedicatedClusterTypes
- DescribeDedicatedClusters
- DescribeDedicatedSupportedZones
- DescribeSites
- DescribeSitesDetail
- ModifyDedicatedClusterInfo
- ModifyOrderStatus
- ModifySiteDeviceInfo
- ModifySiteInfo
- Data Types
- Error Codes
- FAQs
- Contact Us
- Data Processing And Security Agreement
- Glossary
Resource-level permissions refer to the ability to specify which resources a user can perform operations on. The Tencent Cloud CDC partially supports resource-level permissions, meaning that for Tencent Cloud CDC operations that support resource-level permissions, you can control when users are allowed to perform operations or use specific resources.
The types of resources that can be authorized in CAM are as follows:
Resource type | Resource Description Method in Authorization Policies |
qcs::cdc:$region::site/* | |
qcs::cdc:$region::cluster/* |
Tencent Cloud CDC site related and Tencent Cloud CDC cluster related introduce the Tencent Cloud CDC API operations that currently support resource-level permissions, along with the supported resources and condition keys for each operation. When setting the resource path, you need to replace variables such as
$region and $account with your actual parameters. You can also use the * wildcard in the path.Note:
Tencent Cloud CDC API operations not listed in the table do not support resource-level permissions. For Tencent Cloud CDC API operations that do not support resource-level permissions, you can still grant users permission to use those operations, but the resource element in the policy statement must be specified as *.
Tencent Cloud CDC "Site" Related
API Operations | Resource path | Conditional Key |
CreateSite | qcs::cdc:$region:$account:site/* | cdc:region |
DeleteSites | qcs::cdc:$region:$account:site/*qcs::cdc:$region:$account:site/$siteId | cdc:region |
DescribeSites | qcs::cdc:$region:$account:site/*qcs::cdc:$region:$account:site/$siteId | cdc:region |
DescribeSitesDetail | qcs::cdc:$region:$account:site/*qcs::cdc:$region:$account:site/$siteId | cdc:region |
Tencent Cloud CDC "Cluster" Related
API Operations | Resource path | Conditional Key |
CreateDedicatedCluster | qcs::cdc:$region:$account:cluster/* | cdc:region |
CreateDedicatedClusterOrder | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
DeleteDedicatedClusters | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
DescribeDedicatedClusterInstanceTypes | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
DescribeDedicatedClusterOrders | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
DescribeDedicatedClusters | qcs::cdc:$region:$account:cluster/*qcs::cdc:$region:$account:cluster/$clusterId | cdc:region |
Yes
No
Was this page helpful?