Cloud Access Management
- Product Introduction
- Getting Started
- User Guide
- Users
- Sub-Users
- Sub-User Security Credentials
- Collaborators
- Collaborator Security Credentials
- Message Recipients
- User Settings
- User Groups
- Role
- Identity Provider
- User-Based SSO
- Role-Based SSO
- Policies
- Definition
- Authorization Guide
- Syntax Logic
- Element Reference
- CAM-Enabled Role
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Compute
- Edge Computing
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- Database SaaS Tool
- CDN and Acceleration
- Network Security
- Endpoint Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- Practical Tutorial
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- CVM
- VPC
- API Documentation
- User APIs
- Role APIs
- Making API Requests
- Identity Provider APIs
- Policy APIs
Direct Connect
Last updated: 2025-03-26 09:58:28
Fundamental information
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| Physical Direct Connect | dc | Supported | Supported | Resource level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| AcceptDirectConnectTunnel | This interface is used to accept Direct Connect Tunnel | Resource level | qcs::dc::uin/${Uin}:dcx/${InstanceId} | Supported |
| ApplyCloudAttachServiceBandwidthChange | ApplyCloudAttachServiceBandwidthChange | Operation level | * | Supported |
| ApplyInternetAddress | Apply Internet Address | Operation level | * | not supported |
| ApproveCloudAttachServiceBandwidthChange | ApproveCloudAttachServiceBandwidthChange | Operation level | * | Supported |
| CancelCloudAttachServiceBandwidthChange | CancelCloudAttachServiceBandwidthChange | Operation level | * | Supported |
| CreateCloudAttachService | Create Cloud Attach Service | Operation level | * | Supported |
| CreateCloudAttachServiceGateway | Create a high-speed cloud gateway | Operation level | * | Supported |
| CreateDirectConnect | Create Direct Connect | Resource level | qcs::dc::uin/${uin}:dc/${DirectConnectId} | Supported |
| CreateDirectConnectTunnel | This interface is used to create Direct Connect Tunnel | Resource level | qcs::dc::uin/${uin}:dcx/${DirectConnectTunnelId} | Supported |
| CreateDirectConnectTunnelDetectionTask | This interface is used to create Direct Connect Tunnel Detection task | Resource level | qcs::dc::uin/${Uin}:dcx/${InstanceId} | Supported |
| CreateLetterOfAuthorization | CreateLetterOfAuthorization | Operation level | * | Supported |
| CreatePublicDirectConnectTunnel | This interface is used to create Public Direct Connect Tunnel | Resource level | qcs::dc::uin/${uin}:dcx/${DirectConnectTunnelId} | Supported |
| CreateTcapIpCertificate | Create tcap ip certificate | Operation level | * | Supported |
| CreateTcapIps | Create tcap ip network segment | Operation level | * | Supported |
| CreateTcapVif | Create tcap channel | Operation level | * | Supported |
| DeleteCloudExchange | Delete Cloud Exchange Service | Operation level | * | Supported |
| DeleteDirectConnectTunnel | This interface is used to delete Direct Connect Tunnel | Resource level | qcs::dc::uin/${Uin}:dcx/${DirectConnectTunnelId} | Supported |
| DeleteDirectConnectTunnelDetectionTask | This interface is used to delete Direct Connect Tunnel Detection task | Resource level | qcs::dc::uin/${Uin}:dcx/${InstanceId} | Supported |
| DeleteTcapIpCertificate | delete tcap ip certificate | Operation level | * | Supported |
| DeleteTcapIps | Delete tcap ip network segment | Operation level | * | Supported |
| DeleteTcapVif | Delete tcap channel | Operation level | * | Supported |
| DisableInternetAddress | Disable Internet Address | Operation level | * | not supported |
| EnableInternetAddress | Enable Internet Address | Operation level | * | not supported |
| ModifyDirectConnectAttribute | Modify Direct Connect Attribute | Resource level | qcs::dc::uin/${uin}:dc/${DirectConnectId} | Supported |
| ModifyDirectConnectTunnelAttribute | This interface is used to modify Direct Connect Tunnel | Resource level | qcs::dc::uin/${Uin}:dcx/${DirectConnectTunnelId} | Supported |
| ModifyDirectConnectTunnelExtra | This interface is used to modify Direct Connect Tunnels extra attributes | Resource level | qcs::dc::uin/${Uin}:dcx/${DirectConnectTunnelId} | Supported |
| ModifyDirectConnectTunnelUpOrDown | This interface is used to modify Direct Connect Tunnel\\\'s up down status | Resource level | qcs::dc::uin/:dcx/${DirectConnectTunnelId} | Supported |
| ModifyLetterOfAuthorization | ModifyLetterOfAuthorization | Operation level | * | Supported |
| RejectDirectConnectTunnel | This interface is used to reject Direct Connect Tunnel | Resource level | qcs::dc::uin/${Uin}:dcx/${InstanceId} | Supported |
| ReleaseInternetAddress | Release Internet Address | Operation level | * | not supported |
| UpdateCloudAttachServiceGateway | Update high-speed cloud service gateway information | Operation level | * | Supported |
| UpdateTcapVif | Update tcap channel | Operation level | * | Supported |
| UpdateVifNetDetect | Update private channel network probe | Operation level | * | Supported |
Other Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| ConfirmCloudAttachServiceBandwidthChange | Confirm the completion of the high-speed cloud instance configuration change acceptance | Operation level | * | Supported |
| InquirePriceCloudAttachServiceBandwidthChange | High-speed cloud configuration inquiry | Operation level | * | Supported |
| RejectCloudAttachServiceBandwidthChange | Reject high-speed cloud instance changes | Operation level | * | Supported |
Read operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DeleteDirectConnect | Delete Direct Connect | Resource level | qcs::dc::uin/${uin}:dc/${DeleteDirectConnect} | Supported |
| DescribeAccessPoints | This interface is used to query Direct Connect access point | Operation level | * | Supported |
| DescribeAccessRegions | Query access region list | Operation level | * | Supported |
| DescribeCloudExchangePrice | Describe Cloud Exchange Price | Operation level | * | Supported |
| DescribeDirectConnectAlarms | Query all alarm information related to Directconnect | Operation level | * | Supported |
| DescribeDirectConnectAlarmsAdmin | Query all alarm information related to Directconnect | Operation level | * | Supported |
| DescribeDirectConnectGatewaysOverView | Get overview information of directconnect gateway | Operation level | * | Supported |
| DescribeDirectConnectOverView | Obtain directconnect overview information | Operation level | * | Supported |
| DescribeDirectConnectTunnelDetectionTasks | This interface is used to query Direct Connect Tunnel Detection tasks | Resource level | qcs::dc::uin/${Uin}/:dcx/${InstanceId} | Supported |
| DescribeDirectConnectTunnelExtra | This interface is used to query Direct Connect Tunnel\\\'s extra attributes | Resource level | qcs::dc::uin/${Uin}:dcx/${InstanceId} | Supported |
| DescribeDirectConnectTunnelOverView | Describe DirectConnect Tunnel OverView | Operation level | * | Supported |
| DescribeDirectConnects | query Direct Connect | Resource level | qcs::dc::uin/${uin}:dc/${InstanceId} | Supported |
| DescribeDirectConnectsAdmin | Describe Direct Connects Admin | Operation level | * | Supported |
| DescribeInternetAddress | Describe Internet IP Address | Operation level | * | not supported |
| DescribeInternetAddressQuota | Get Internet IP Address Quota | Operation level | * | Supported |
| DescribeInternetAddressStatistics | Describe Internet IP Address Statistics | Operation level | * | Supported |
| DescribeLetterOfAuthorizations | DescribeLetterOfAuthorizations | Operation level | * | Supported |
| DescribePublicDirectConnectTunnelRoutes | This interface is used to query Public Direct Connect Tunnel\\\\\\\'s routes | Resource level | qcs::dc::uin/${Uin}:dcx/${InstanceId} | Supported |
| DescribeQosQueueStatisticsByDCID | Query QOS queue statistics based on dedicated line ID | Operation level | * | Supported |
| DoDcHealthInspection | DoDcHealthInspection | Operation level | * | Supported |
| IsDirectConnectUplinkAccess | IsDirectConnectUplinkAccess | Operation level | * | Supported |
| IsNonStandardTunnel | This interface is used to check Direct Connect Tunnel | Operation level | * | Supported |
| IsSameRegion | This interface is used to check access points is same region | Operation level | * | Supported |
List Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeAccessPointList | Retrieve information about the carrier and port type under the access point. | Operation level | * | Supported |
| DescribeDirectConnectTunnels | This interface is used to query Direct Connect Tunnel information | Resource level | qcs::dc::uin/${Uin}:dcx/${InstanceId} | not supported |
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No