Authorization Definition
Last updated: 2024-01-04 14:34:05
Types of CLB Resources That Can Be Authorized in CAM
Resource Type | Resource Description in Authorization Policy |
CLB instance | qcs::clb:$region::clb/$loadbalancerid |
CLB real server | qcs::cvm:$region:$account:instance/$cvminstanceid |
In the description:
$region must be the ID of a region and can be empty.$account must be the AccountId of the resource owner or *.$loadbalancerid must be the ID of a CLB instance or *.And so on…
APIs for CLB Authorization in CAM
You can authorize the following actions for a CLB resource in CAM.
Instance
API Operation | Resource Description | API Description |
DescribeLoadBalancers | Queries the CLB instance list. | *, which indicates to authenticate only the API. |
CreateLoadBalancer | Purchases a CLB instance. | qcs:$projectid:clb:$region:$account:clb/* |
DeleteLoadBalancers | Deletes CLB instances. | qcs::clb:$region:$account:clb/$loadbalancerid |
ModifyLoadBalancerAttributes | Modifies the attributes of a CLB instance. | qcs::clb:$region:$account:clb/$loadbalancerid |
ModifyForwardLBName | Modifies the name of a CLB instance. | qcs::clb:$region:$account:clb/$loadbalancerid |
SetLoadBalancerSecurityGroups | Configures security groups for a CLB instance. | qcs::clb:$region:$account:clb/$loadbalancerid |
Listener
API Operation | Resource Description | API Description |
DeleteLoadBalancerListeners | Deletes CLB listeners. | qcs::clb:$region:$account:clb/$loadbalancerid |
DescribeLoadBalancerListeners | Gets the CLB listener list. | qcs::clb:$region:$account:clb/$loadbalancerid |
ModifyLoadBalancerListener | Modifies the attributes of a CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid |
CreateLoadBalancerListeners | Creates CLB listeners. | qcs::clb:$region:$account:clb/$loadbalancerid |
DeleteForwardLBListener | Deletes a layer-4 or layer-7 CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid |
ModifyForwardLBSeventhListener | Modifies the attributes of a layer-7 CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid |
ModifyForwardLBFourthListener | Modifies the attributes of a layer-4 CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid |
DescribeForwardLBListeners | Queries the CLB listener list. | qcs::clb:$region:$account:clb/$loadbalancerid |
CreateForwardLBSeventhLayerListeners | Creates layer-7 CLB listeners. | qcs::clb:$region:$account:clb/$loadbalancerid |
CreateForwardLBFourthLayerListeners | Creates layer-4 CLB listeners. | qcs::clb:$region:$account:clb/$loadbalancerid |
CLB domain name and URL
API Operation | Resource Description | API Description |
ModifyForwardLBRulesDomain | Modifies the domain name of a forwarding rule for a CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid |
CreateForwardLBListenerRules | Creates forwarding rules for a CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid |
DeleteForwardLBListenerRules | Deletes the forwarding rules of a layer-7 CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid |
DeleteRewrite | Deletes the redirection relationship between CLB forwarding rules. | qcs::clb:$region:$account:clb/$loadbalancerid |
ManualRewrite | Manually creates a redirection relationship between CLB forwarding rules. | qcs::clb:$region:$account:clb/$loadbalancerid |
AutoRewrite | Automatically generates a redirection relationship between CLB forwarding rules. | qcs::clb:$region:$account:clb/$loadbalancerid |
Real server
API Operation | Resource Description | API Description |
ModifyLoadBalancerBackends | Modifies real server weights for a CLB instance. | qcs::clb:$region:$account:clb/$loadbalancerid |
DescribeLoadBalancerBackends | Gets the list of real servers bound to a CLB instance. | qcs::clb:$region:$account:clb/$loadbalancerid |
DeregisterInstancesFromLoadBalancer | Unbinds real servers. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
RegisterInstancesWithLoadBalancer | Binds real servers to a CLB instance. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
DescribeLBHealthStatus | Queries the health status of a CLB instance. | qcs::clb:$region:$account:clb/$loadbalancerid |
ModifyForwardFourthBackendsPort | Modifies the CVM instance port in a forwarding rule of a layer-4 listener. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
ModifyForwardFourthBackendsWeight | Modifies the weight of CVM instances in a forwarding rule of a layer-4 listener. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
RegisterInstancesWithForwardLBSeventhListener | Binds CVM instances to the forwarding rules of a layer-7 CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
RegisterInstancesWithForwardLBFourthListener | Binds CVM instances to the forwarding rules of a layer-4 CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
DeregisterInstancesFromForwardLBFourthListener | Unbinds CVM instances from the forwarding rules of a layer-4 CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
DeregisterInstancesFromForwardLB | Unbinds CVM instances from the forwarding rules of a layer-7 CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
ModifyForwardSeventhBackends | Modifies the weight of CVM instances in the forwarding rules of a layer-7 listener. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
ModifyForwardSeventhBackendsPort | Modifies the port of CVM instances in the forwarding rules of a layer-7 listener. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/$cvminstanceid |
DescribeForwardLBBackends | Queries the list of CVM instances bound to a CLB instance. | qcs::clb:$region:$account:clb/$loadbalancerid``qcs::cvm:$region:$account:instance/* |
DescribeForwardLBHealthStatus | Queries the health check status of a CLB instance. | qcs::clb:$region:$account:clb/* |
ModifyLoadBalancerRulesProbe | Modifies the health check configuration and forwarding path in a forwarding rule of a CLB listener. | qcs::clb:$region:$account:clb/$loadbalancerid |
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No