- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Access Key
- User Groups
- Role
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Policies
- Permissions Boundary
- Troubleshooting
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Practical Tutorial
- Security Practical Tutorial
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- Authorizing Sub-account Full Access to COS Resources under the Account
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- Authorizing Sub-account Read-only Access to VPCs
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- User APIs
- DescribeSafeAuthFlagColl
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Access Key
- User Groups
- Role
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Policies
- Permissions Boundary
- Troubleshooting
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Practical Tutorial
- Security Practical Tutorial
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- Authorizing Sub-account Full Access to COS Resources under the Account
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- Authorizing Sub-account Read-only Access to VPCs
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- User APIs
- DescribeSafeAuthFlagColl
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- FAQs
- Glossary
Fundamental information
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| CDN | cdn | Supported | Supported | Resource level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| AddCdnDomain | Operation level | * | Supported | |
| AddCdnDomainConfig | Used for adding and merging domain config on the console | Resource level | qcs::cdn:${region}:uin/${uin}:domain/* | Supported |
| AddImageDomain | add image domain | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| AddOfflineLogSaveTask | AddOfflineLogSaveTask | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| AppealBlockedRecord | Appeal blocked record | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ApplyQuota | Submit an application for a temporary or permanent quota. | Operation level | * | Supported |
| ApplySaaSSSLCert | apply for saas agent maintenance certificate | Resource level | qcs::cdn::uin/${uin}:domain/${domains} | Supported |
| CancelAppealedRecord | Cancel appealed record | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| CopyBotPublicRule | CopyBotPublicRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| CopyBotUCBFeatureRules | CopyBotUCBFeatureRules | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| CopyBotUCBPreinstallRule | CopyBotUCBPreinstallRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| CopyBotUserCustomRule | Copy Bot User Custom Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | not supported |
| CopyBotUserPreinstallRule | Copy Bot Preinstall Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | not supported |
| CopyScdnBotPublicRule | Copy Scdn Public Bot Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | not supported |
| CreateAddon | Enable the add-on | Operation level | * | Supported |
| CreateCacheMd5Task | Create file consistency check task | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| CreateClsLogSet | create cls log set for cdn real-time log | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| CreateClsLogTopic | Create log topic | Operation level | * | Supported |
| CreateDiagnoseTask | Used to create diagnostic tasks | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| CreateDiagnoseUrl | Generate diagnostic link | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| CreateDomainDraft | Add a domain draft | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| CreateEdgePackConfig | Create new edgepack configuration. | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| CreateEdgePackTask | For SCF to trigger CDN original APK processing | Operation level | * | Supported |
| CreatePurgeFetchTask | Create timed purge/prefetch task. | Operation level | * | Supported |
| CreateScdnDomain | Create SCDN domain | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| CreateScdnFailedLogTask | Recreate failed SCDN log task | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| CreateScdnLogTask | Create SCDN log task | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| CreateSharedCname | create shared cname | Operation level | * | Supported |
| CreateSpeedLimitStrategy | create domain spped limit strategy | Operation level | * | Supported |
| DeleteAddon | Turn off the add-on | Operation level | * | Supported |
| DeleteBotUCBFeatureRule | DeleteBotUCBFeatureRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DeleteBotUserCustomRule | Delete Bot User Custom Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | not supported |
| DeleteCdnDomain | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DeleteClsLogTopic | Delete log topics | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DeleteEdgePackConfig | Delete the configuration of edgepack. | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DeleteOfflineLogSaveTask | DeleteOfflineLogSaveTask | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DeletePurgeFetchTask | Delete the timed purge/prefetch task. | Operation level | * | Supported |
| DeleteScdnDomain | Delete SCDN domain | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DeleteScdnWafRuleWhitePath | Delete Scdn Waf Whitelist URL | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DeleteSharedCname | delete shared cname | Operation level | * | Supported |
| DeleteSpeedLimitStrategies | delete spped limit strategies | Operation level | * | Supported |
| DeployDomainDraft | Deploy domain\'s draft | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DisableCaches | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DisableClsLogTopic | Stop shipping the log | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DisableDomainDraft | Disable domain\'s draft | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DuplicateDomainConfig | Copy domain configuration | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| EnableCaches | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| EnableClsLogTopic | Start shipping the log | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| EnableDomainDraft | Enable domain\'s draft | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ManageClsTopicDomains | Manage domain names of the log topic | Operation level | * | Supported |
| ModifyBotPublicRule | ModifyBotPublicRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| ModifyBotUCBFeatureRule | ModifyBotUCBFeatureRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| ModifyBotUCBPreinstallRule | ModifyBotUCBPreinstallRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| ModifyBotUserCustomRule | Modify Bot User Custom Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyBotUserPreinstallRule | Modify Bot Preinstall Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyCookieAuthStrategy | Modify the Strategy of Cookie Authentication | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyDomainConfig | Modify Domain Config | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyEdgePackConfig | Modify the configuration of edgepack. | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyGeoBlockStrategy | Modify the configuration of geo-block. | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyPurgeFetchTask | Modify the timed purge/pretech task | Operation level | * | Supported |
| ModifyPurgeFetchTaskStatus | Modify the status of timed purge/prefetch tasks. | Operation level | * | Supported |
| ModifySaaSSSLCert | This interface is used to change, revoke, and delete SaaS certificates | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyScdnAiRecomState | Modify CC Recommanded Configuration State | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyScdnBotPublicRule | Modify Scdn Public Bot Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyScdnPackage | Modify Scdn Package | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifyScdnWafRuleWhitePath | Modify Scdn Waf Whitelist URL | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifySchemaConfigForKugou | update domain special config | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ModifySpeedLimitStrategy | modify domain speed limit strategy | Operation level | * | Supported |
| ModifySpeedLimitStrategySwitch | modify speed limit strategy switch | Operation level | * | Supported |
| OpenCdnService | Open CDN service | Operation level | * | Supported |
| OpenChannelService | Open channel business account | Operation level | * | Supported |
| PayCdnTrafficPackOrder | Pay for orders of CDN traffic packages in the Chinese Mainland. | Operation level | * | Supported |
| PlaceCdnTrafficPackOrder | Place an order for CDN traffic packages in the Chinese Mainland. | Operation level | * | Supported |
| PurgePathCache | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| PurgeUrlsCache | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| PurgeUrlsCacheAsync | async purge url cache | Operation level | * | Supported |
| PushUrlsCache | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| RefundTrafficPackage | Refund Traffic Package | Operation level | * | Supported |
| RegisterImageService | open image optim service | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| RenewHttpsPackage | Renew Https Package | Operation level | * | Supported |
| RenewTrafficPackage | Renew Traffic Package | Operation level | * | Supported |
| StartCdnDomain | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| StartScdnDomain | Start scdn domain | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| StopCdnDomain | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| StopScdnDomain | Stop scdn domain | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| TcbCheckCreate | Tcb Check Create | Operation level | * | Supported |
| UpdateCacheByFile | The UpdateCacheByFile interface is used to refreshe or preheat URLs by uploaded files. | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| UpdateCustomPublicKey | Microsoft customized update authentication key interface | Resource level | qcs::cdn:${region}:uin/${uin}:- | Supported |
| UpdateDiagnoseTaskInfo | update diagnose task info | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| UpdateDomainConfig | Modify domain config 3.0 | Operation level | * | Supported |
| UpdateDomainDraft | Update the configuration of the domain’s draft | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| UpdateDomainHttps | update domain https | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| UpdateDomainsCertificate | update domains certificate | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | not supported |
| UpdateDomainsHttps | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| UpdateGCSToken | UpdateGCSToken | Operation level | * | not supported |
| UpdateHttpsPackageAlertThreshold | Update Https Package Alert Threshold | Operation level | * | Supported |
| UpdateImageConfig | Update CDN domain image config | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| UpdateOfflineLogSaveTask | UpdateOfflineLogSaveTask | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| UpdatePayType | Update pay type | Operation level | * | Supported |
| UpdateScdnDomain | Update configuration of SCDN domain | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| UpdateSharedCname | update shared cname | Operation level | * | Supported |
| UpdateTrafficPackageAlertThreshold | update the alert threshold of traffic package | Operation level | * | Supported |
Read operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CheckClsRegisterStatus | check cls service open status | Operation level | * | Supported |
| CheckDomain | check domain | Operation level | * | Supported |
| CheckDomainByService | check domain by service | Operation level | * | Supported |
| CheckDomainIsSuperior | check domain is superiror | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| CheckImageServiceStatus | check domain image optimization | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| CheckOrigin | origin site compliance verification | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeAccountQuota | check account quota | Operation level | * | Supported |
| DescribeAddons | Get the list of the addons | Operation level | * | Supported |
| DescribeAppealedRecords | Describe appealed records | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeAppidWhitelist | check account white list config | Operation level | * | Supported |
| DescribeBillingData | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DescribeBillingDataCustom | Kuaishou obtains custom platform dimension indicators | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| DescribeBotRecordData | DescribeBotRecordData | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeBotRecordDetail | DescribeBotRecordDetail | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeBotRecordItems | DescribeBotRecordItems | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeBotUserCustomRule | Describe Bot User Custom Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeBotUserPreinstallRule | Describe Bot Preinstall Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeCacheMd5Task | Query file consistency check results | Operation level | * | Supported |
| DescribeCdnData | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DescribeCdnDetailData | Describe cdn detail data | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeCdnDistrictData | describe cdn district data | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| DescribeCdnDomainLogs | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DescribeCdnDomainsByCerts | describe cdn domains by certs | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeCdnIp | Query IP ownership | Operation level | * | Supported |
| DescribeCdnOriginIp | query origin ip | Operation level | * | Supported |
| DescribeCdnRawData | Query CDN raw data | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| DescribeCertDomains | Verifies the SSL certificate and extracts the domains contained in it | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeCookieAuthStrategies | Query the strategy list of Cookie Authentication | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeDiagnoseReport | query diagnotic reports details | Operation level | * | Supported |
| DescribeDiagnoseReportContent | query diagnose report content | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeDiagnoseTaskInfo | query diagnose task detail | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeDiagnoseTasks | List Diagnose Tasks | Resource level | qcs::cdn::uin/${uin}:domain/$domain | Supported |
| DescribeDistrictIspDataCustomized | query district and isp data customized | Operation level | * | Supported |
| DescribeDomainCname | query domain cname | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeDomainCnameRecords | query domain cname record list | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeDomainDraft | Query the configuration of the domain\'s draft | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | not supported |
| DescribeDomains | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | not supported | |
| DescribeDomainsByLuaScriptConfig | query domain pkey info | Operation level | * | Supported |
| DescribeDomainsCacheKey | describe domain cache key | Operation level | * | Supported |
| DescribeDomainsConfig | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DescribeDomainsStatusCodeData | query the domain statusCode data | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeEdgeData | Query CDN edge layer bandwidth and edge hit rate. | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeEdgePackConfigs | Get the edgepack configurations. | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeEdgePackData | Get the usage info of edgepack service. | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeEdgePackTaskStatus | Get the status of edgepack configuration | Operation level | * | Supported |
| DescribeEdgePackTopData | Get the top usage data of edgepack service. | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeEventLogData | Describe Event Log Data | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeEventLogDetail | Describe Event Log Detail | Operation level | * | Supported |
| DescribeEventLogs | Describe Event Logs | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeFogData | DescribeFogData | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeGeoBlockStrategies | Get the configuration of geo-block. | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeHttpsPackageAlertThreshold | Describe Https Package Alert Threshold | Operation level | * | Supported |
| DescribeImageConfig | Get CDN domain image config | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeImageDomains | DescribeImageDomains | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeIpStatus | describe status | Operation level | * | Supported |
| DescribeIpVisit | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DescribeLogDataExpand | query multidimensional detail data log of domain log | Operation level | * | Supported |
| DescribeMainlandMonitorRealtimeData | query mainland realtime monitor data | Operation level | * | Supported |
| DescribeMapInfo | query province and isp mapping | Operation level | * | Supported |
| DescribeMonitorDomains | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DescribeMonitorTrendData | query monitor trend data | Operation level | * | Supported |
| DescribeOfflineLogSaveDomain | DescribeOfflineLogSaveDomain | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeOfflineLogSaveTask | get offline log save task | Operation level | * | Supported |
| DescribeOriginCostData | query origin cost data | Operation level | * | Supported |
| DescribeOriginData | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DescribeOriginDetailData | Describe origin detail data | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeOriginRegion | check origin location | Operation level | * | Supported |
| DescribeOverdueFlux | query overdue flux of location | Operation level | * | Supported |
| DescribeOverdueHttps | Describe Overdue Https | Operation level | * | Supported |
| DescribeOverseaDistrictMap | check the district map of oversea monitor data | Operation level | * | Supported |
| DescribeOverseaMonitorRealtimeData | query realtime monitor data of oversea | Operation level | * | Supported |
| DescribePublishRecord | query domain pulblish record | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribePurgeFetchTaskStatus | Get the status of timed puge/prefetch task. | Operation level | * | Supported |
| DescribePurgeFetchTasks | Get the list of timed purge/prefetch tasks. | Operation level | * | Supported |
| DescribePurgeQuota | Describe Purge Quota | Operation level | * | Supported |
| DescribePurgeTasks | Operation level | * | Supported | |
| DescribePushQuota | Describe Push Quota | Operation level | * | Supported |
| DescribePushTasks | Operation level | * | Supported | |
| DescribeQuicData | Describe quic data | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeQuotaApplyList | Query the customer\'s quota application history list. | Operation level | * | Supported |
| DescribeQuotaList | Query the list of quota items that the user can manage. | Operation level | * | Supported |
| DescribeQuotaRestriction | Query the upper and lower limits of quota application. | Operation level | * | Supported |
| DescribeReportData | Decribe Report Data | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeSandboxIp | Obtain the IP of the sandbox | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeScdnAiRecomInfo | Describe CC Recommanded Configuration | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeScdnAiRecomState | Describe Scdn CC Recommanded Configuration State | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeScdnBotAccessLog | Describe Scdn Bot Access Log | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeScdnBotData | Describe Scdn Bot Data | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeScdnBotPublicRule | Describe Scdn Public Bot Rule | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | not supported |
| DescribeScdnBotRecordData | Describe Scdn Bot Record Data | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeScdnBotRecordDetail | Describe Scdn Bot Record Detail | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeScdnBotRecords | Describe Scdn Bot Records | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeScdnConfig | Describe configuration of SCDN domain | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeScdnData | Describe SCDN data | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeScdnPackage | Describe Scdn Package | Operation level | * | Supported |
| DescribeScdnWafRuleWhitePath | Describe WAF White List URL | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeSharedCnameDomainsGroup | describe shared cname domains group | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeSharedCnames | describe shared cnames | Operation level | * | Supported |
| DescribeSogouMonitorData | query monitor data for sogou | Operation level | * | Supported |
| DescribeSpeedLimitStrategies | get the speed limit strategies | Operation level | * | Supported |
| DescribeSslCerts | check credit list | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeSslDomains | query the num of certificate binding domain | Operation level | * | Supported |
| DescribeStageDomain | get statging environment domain | Operation level | * | Supported |
| DescribeTpgPolicies | query list of tpg strategy | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeTrafficPackageAlertThreshold | get the alert threshold of traffic package | Operation level | * | Supported |
| DescribeTrafficPackages | Operation level | * | Supported | |
| DescribeUpdateDomainsCertificate | describe update domains certificate result | Operation level | * | Supported |
| DescribeUrlViolations | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| DescribeUserFlag | query user flag info | Operation level | * | Supported |
| DescribeUserMenu | query user menu | Operation level | * | Supported |
| DescribeUserStatus | query the business info of cdn user | Operation level | * | Supported |
| DescribeUserVip | query use vip info | Operation level | * | Supported |
| DescribeViolativeResources | Describe violative resources | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| DescribeWafRules | query waf rules list | Operation level | * | Supported |
| DescribeWildcardDomainData | query wildcard domain data | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| DescribeWorkOrderDetails | DescribeWorkOrderDetails | Operation level | * | Supported |
| DescribeWorkOrders | DescribeWorkOrders | Operation level | * | Supported |
| DetectOrigins | detect the port of origin site | Operation level | * | Supported |
| GetAccountTpgEdgeData | query tpg account statistic data | Operation level | * | not supported |
| GetDisableRecords | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| GetDomainsAccountingData | get user all domain accounting data | Operation level | * | Supported |
| GetUploadURL | The GetUploadURL interface is used to apply for a COS file upload URL, the URL is valid for 3 minutes by default. | Operation level | * | Supported |
| GetUserHistoryOrderCountAndAmount | query user history order count and amount | Operation level | * | Supported |
| ListCdnAppid | get the appid of cdn | Operation level | * | Supported |
| ListCdnDomains | query brief info of domain | Operation level | * | Supported |
| ListCdnProjects | query project list | Operation level | * | Supported |
| ListClsOccupiedDomains | show the domain that has already binding the cls topic | Operation level | * | Supported |
| ListDiagnoseReport | Query diagnotic reports | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| ListSaaSSSLCert | List SaaS SSL Cert | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListSaaSSSLCertOpLog | Query the list of SaaS certificate operation logs | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListScdnTopBotData | List Scdn Top Bot Data | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListTopClsLogData | List Top Data Caculated by CLS Logs | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListTopData | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported | |
| ListTopScdnData | List SCDN top data | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| OpenEcdnOversea | open oversea ecdn white uin list | Operation level | * | Supported |
| QueryCdnTrafficPackPrice | Query the unit price of CDN traffic packages in the Chinese Mainland. | Operation level | * | Supported |
| ReclaimDomain | reclaimdomain | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| SearchClsLog | Search cls logs | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| TcbCheckResource | tcb check resource | Operation level | * | Supported |
| VerifyDomainRecord | verify domain record | Operation level | * | Supported |
| VerifySharedCnameDomains | verify shared cname domains | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
Other Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CreateVerifyRecord | create verify record | Operation level | * | Supported |
List Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeBotData | DescribeBotData | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeBotPublicRule | DescribeBotPublicRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeBotRecords | DescribeBotRecords | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeBotUCBFeatureRule | DescribeBotUCBFeatureRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeBotUCBPreinstallRule | DescribeBotUCBPreinstallRule | Resource level | qcs::cdn::$account:domain/$domain | not supported |
| DescribeCcData | Query CC statistics | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| DescribeDDoSAttacksData | Query DDoS attack event | Operation level | * | not supported |
| DescribeDDoSData | Query DDoS statistics | Operation level | * | Supported |
| DescribeHttpsPackages | Describe Https Packages | Operation level | * | Supported |
| DescribeSourceMd5VerifyTasks | Describe source md5 verify task list | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| DescribeTopData | Query TOP N ranking data | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| DescribeTrafficPackageRefund | Describe Traffic Package Refund | Operation level | * | Supported |
| DescribeWafData | Query WAF statistics | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| ListClsLogTopics | List log topics | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListClsTopicDomains | List domain names of the log topic | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListDomainDrafts | List domain\\\'s drafts | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListScdnDomains | List SCDN domains | Resource level | qcs::cdn::$account:domain/$domain | Supported |
| ListScdnLogTasks | List SCDN log tasks | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListTopBotData | ListTopBotData | Resource level | qcs::cdn::uin/${uin}:domain/${domain} | Supported |
| ListTopCcData | Acquire Top List of CC attack. | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
| ListTopDDoSData | Acquire Top list of DDos attack | Operation level | * | Supported |
| ListTopWafData | Acquire Top List of WAF attack | Resource level | qcs::cdn:${region}:uin/${uin}:domain/${domain} | Supported |
Yes
No
Was this page helpful?