- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Access Key
- User Groups
- Role
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Policies
- Permissions Boundary
- Troubleshooting
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Practical Tutorial
- Security Practical Tutorial
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- Authorizing Sub-account Full Access to COS Resources under the Account
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- Authorizing Sub-account Read-only Access to VPCs
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- User APIs
- DescribeSafeAuthFlagColl
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Access Key
- User Groups
- Role
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Policies
- Permissions Boundary
- Troubleshooting
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Practical Tutorial
- Security Practical Tutorial
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- Authorizing Sub-account Full Access to COS Resources under the Account
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- Authorizing Sub-account Read-only Access to VPCs
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- User APIs
- DescribeSafeAuthFlagColl
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- FAQs
- Glossary
Fundamental information
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| Edge Computing Machine | ecm | Supported | Supported | Resource level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| AllocateAddresses | Create elastic public IP | Operation level | * | Supported |
| AssignIpv6Addresses | Assign the Ipv6 addresses | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceId} | Supported |
| AssignPrivateIpAddresses | Assign private Ip addresses to elastic network interface | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceId} | Supported |
| AssociateAddress | Bind elastic public IP | Operation level | * | Supported |
| AssociateHaVipAddressIp | AssociateHaVipAddressIp | Operation level | * | not supported |
| AssociateNetworkInterfaceSecurityGroups | AssociateNetworkInterfaceSecurityGroups | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceIds} | Supported |
| AssociateSecurityGroups | Apply the security group to the edge instances | Resource level | qcs::ecm::uin/:instance/${InstanceIds} | Supported |
| AttachDisks | AttachDisks | Resource level | qcs::ecm::uin/${uin}:volume/${volumeId} | not supported |
| AttachNetworkInterface | Attach network interface to cloud VM | Resource level | qcs::ecm::uin/:instance/${InstanceId} | Supported |
| AttachSSC | AttachSSC | Operation level | * | not supported |
| BatchDeregisterTargets | Batch deregister the targets | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| BatchModifyTargetWeight | Batch modify the target weight | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| BatchRegisterTargets | Batch register the targets | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| CloneNetworkInterfaceSecurityGroup | CloneNetworkInterfaceSecurityGroup | Resource level | qcs::ecm::uin/:eni/${TargetNetworkInterfaceIds} | Supported |
| ConvertVpcId | ConvertVpcId | Operation level | * | not supported |
| CopySnapshotCrossRegions | CopySnapshotCrossRegions | Resource level | qcs::ecm::uin/${uin}:snapshot/${SnapshotId} | not supported |
| CreateDisks | CreateDisks | Operation level | * | not supported |
| CreateHaVip | Create highly available virtual IP | Operation level | * | Supported |
| CreateImage | Create image | Resource level | qcs::ecm::uin/:instance/${InstanceId} | Supported |
| CreateListener | Create the new listener | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| CreateLoadBalancer | Create the new loadBalancer | Operation level | * | Supported |
| CreateModule | Create new edge module | Resource level | qcs::ecm::uin/:module/* | Supported |
| CreateNetworkInterface | Create the elastic network interface | Operation level | * | Supported |
| CreateNetworkInterfaces | CreateNetworkInterfaces | Resource level | qcs::ecm::uin/${uin}:eni/* | Supported |
| CreateNodeTemplate | Create node template | Operation level | * | Supported |
| CreateRouteTable | Create route table | Operation level | * | Supported |
| CreateRoutes | Create routing policy | Operation level | * | Supported |
| CreateSecurityGroup | Create security group | Resource level | qcs::ecm::uin/:sg/* | Supported |
| CreateSecurityGroupPolicies | Create security group policies | Resource level | qcs::ecm::uin/:sg/${SecurityGroupId} | Supported |
| CreateSecurityGroupWithPolicies | Create security group with policies | Operation level | * | Supported |
| CreateSmartConnection | Create smart connection | Operation level | * | not supported |
| CreateSubnet | Create Subnet | Resource level | qcs::ecm::uin/:subnet/* | Supported |
| CreateVpc | Create Virtual Private Cloud | Resource level | qcs::ecm::uin/:vpc/* | Supported |
| DeleteFailedImage | DeleteFailedImage | Operation level | * | Supported |
| DeleteHaVip | Delete highly available virtual IP | Operation level | * | Supported |
| DeleteImage | Delete image | Operation level | * | Supported |
| DeleteInstancesActionTimer | DeleteInstancesActionTimer | Operation level | * | Supported |
| DeleteListener | Delete the listener | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| DeleteLoadBalancer | Delete the loadBalancer | Resource level | qcs::ecm::uin/:lb/${LoadBalancerIds} | Supported |
| DeleteLoadBalancerListeners | Delete the multiple loadBalancer listeners | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| DeleteModule | Delete the edge module | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| DeleteNetworkInterface | Delete the elastic network interface | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceId} | Supported |
| DeleteNodeTemplate | Delete node template | Operation level | * | Supported |
| DeleteRouteTable | Delete route table | Operation level | * | Supported |
| DeleteRoutes | Delete routing policy | Operation level | * | Supported |
| DeleteSecurityGroup | Delete security group | Resource level | qcs::ecm::uin/:sg/${SecurityGroupId} | Supported |
| DeleteSecurityGroupPolicies | Delete security group policies | Resource level | qcs::ecm::uin/:sg/${SecurityGroupId} | Supported |
| DeleteSmartConnection | Delete smart connection | Operation level | * | not supported |
| DeleteSnapshots | DeleteSnapshots | Resource level | qcs::ecm::uin/${uin}:snapshot/${snapshotId} | not supported |
| DeleteSubnet | Delete Subnet | Resource level | qcs::ecm::uin/:subnet/${SubnetId} | Supported |
| DeleteVpc | Delete Virtual Private Cloud | Resource level | qcs::ecm::uin/:vpc/${VpcId} | Supported |
| DetachDisks | DetachDisks | Resource level | qcs::ecm::uin/${uin}:volume/${volumeId} | not supported |
| DetachNetworkInterface | Detach network interface from cloud VM | Resource level | qcs::ecm::uin/:instance/${InstanceId} | Supported |
| DetachSSC | DetachSSC | Operation level | * | not supported |
| DisableRoutes | Disable subnet routing | Operation level | * | Supported |
| DisassociateAddress | Disassociate elastic public IP | Operation level | * | Supported |
| DisassociateHaVipAddressIp | DisassociateHaVipAddressIp | Operation level | * | not supported |
| DisassociateInstancesKeyPairs | This command is used to unbind the key of the instance | Operation level | * | Supported |
| DisassociateNetworkInterfaceSecurityGroups | DisassociateNetworkInterfaceSecurityGroups | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceIds} | Supported |
| DisassociateSecurityGroups | Cancel the application of the security group to the edge instances | Resource level | qcs::ecm::uin/:instance/${InstanceIds} | Supported |
| EnableRoutes | Enable subnet routing | Operation level | * | Supported |
| ImagePreheat | ImagePreheat | Operation level | * | Supported |
| ImportCustomImage | Import custom image | Operation level | * | Supported |
| ImportCvmImage | ImportCvmImage | Operation level | * | Supported |
| ImportImage | Import image | Operation level | * | Supported |
| MigrateNetworkInterface | Migrate the elastic network interface | Resource level | qcs::ecm::uin/:instance/${DestinationInstanceId} | Supported |
| MigratePrivateIpAddress | Migrate the private Ip addresses from elastic network interface | Resource level | qcs::ecm::uin/:instance/${InstanceId} | Supported |
| ModifyAddressAttribute | Modify elastic public IP attribute | Operation level | * | Supported |
| ModifyAddressesBandwidth | Modify elastic public IP bandwidth | Operation level | * | Supported |
| ModifyDefaultSubnet | Modify default subnet | Resource level | qcs::ecm::uin/:subnet/${SubnetId} | Supported |
| ModifyDiskAttributes | ModifyDiskAttributes | Resource level | qcs::ecm::uin/${uin}:volume/${volumeId} qcs::ecm::uin/${uin}:snapshot/${SnapshotId} |
not supported |
| ModifyHaVipAttribute | Modify highly available virtual IP attribute | Operation level | * | Supported |
| ModifyImageAttribute | Modify image attribute | Operation level | * | Supported |
| ModifyInstancesAttribute | Modify the edge instance attributes | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| ModifyIpv6AddressesAttribute | Modify the Ipv6 addresses attribute of elastic network interface | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceId} | Supported |
| ModifyListener | Modify the listener attribute | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| ModifyLoadBalancerAttributes | Modify the loadBalancer attribute | Resource level | qcs::ecm::uin/:lb/${LoadBalancerIds} | Supported |
| ModifyModuleConfig | Modify the edge module configuration | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| ModifyModuleDisableWanIp | Modify the edge module public IP allocation seting | Resource level | qcs::ecm::uin/${uin}:module/${ModuleId} | Supported |
| ModifyModuleImage | Modify the edge module default OS image setting | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| ModifyModuleIpDirect | Modify the edge module direct IP setting | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| ModifyModuleName | Modify the edge module name | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| ModifyModuleNetwork | Modify the edge module default bandwidth setting | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| ModifyModuleProject | ModifyModuleProject | Resource level | qcs::ecm::uin/:module/* | not supported |
| ModifyModuleSecurityGroups | Modify the edge module default security group setting | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| ModifyNetworkInterfaceAttribute | ModifyNetworkInterfaceAttribute | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceId} | Supported |
| ModifyPrivateIpAddressesAttribute | Modify the private Ip addresses of elastic network interface | Resource level | qcs::ecm::uin/${uin}:eni/${NetworkInterfaceId} | Supported |
| ModifyRouteTableAttribute | Modify route table attribute | Operation level | * | Supported |
| ModifySecurityGroupAttribute | Modify security group attribute | Resource level | qcs::ecm::uin/:sg/${SecurityGroupId} | Supported |
| ModifySecurityGroupPolicies | Modify security group out and in policies | Resource level | qcs::ecm::uin/:sg/${SecurityGroupId} | Supported |
| ModifySmartConnection | Modify smart connection | Operation level | * | not supported |
| ModifySnapshotAttribute | ModifySnapshotAttribute | Resource level | qcs::ecm::uin/${uin}:snapshot/${SnapshotId} | not supported |
| ModifySubnetAttribute | Modify Subnet attribute | Resource level | qcs::ecm::uin/:subnet/${SubnetId} | Supported |
| ModifyTargetPort | Modify the target port | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| ModifyTargetWeight | Modify the target weight | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| ModifyVpcAttribute | ModifyVpcAttribute | Resource level | qcs::ecm::uin/:vpc/${VpcId} | Supported |
| RebootInstances | Reboot the edge instance | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| ReleaseAddresses | Release elastic public IP | Operation level | * | Supported |
| ReleaseIpv6Addresses | Release the Ipv6 addresses | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceId} | Supported |
| RemovePrivateIpAddresses | Remove private Ip addresses from elastic network interface | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceId} | Supported |
| ReplaceRouteTableAssociation | Replace route table binding relation | Operation level | * | Supported |
| ReplaceRoutes | Replace routing policy | Operation level | * | Supported |
| ReplaceSecurityGroupPolicy | Replace single security group routing policies | Resource level | qcs::ecm::uin/:sg/${SecurityGroupId} | Supported |
| ResetInstances | Reinstall the edge instance OS | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| ResetInstancesMaxBandwidth | Modify the edge instance bandwidth upper limit setting | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| ResetInstancesNewFlag | ResetInstancesNewFlag | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| ResetInstancesPassword | Reset the edge instance OS login password | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| ResetRoutes | Reset route table name and routing policy | Operation level | * | Supported |
| RunInstances | RunInstances | Resource level | qcs::ecm::uin/:instance/* | Supported |
| SetLoadBalancerSecurityGroups | Set loadBalancer security groups | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| SetSecurityGroupForLoadbalancers | Bind or unbind a security group to multiple loadBalancer instances | Resource level | qcs::ecm::uin/:lb/${LoadBalancerIds} | Supported |
| StartInstances | Start the edge instances | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| StopInstances | Stop the edge instances | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| TerminateDisks | TerminateDisks | Resource level | qcs::ecm::uin/${uin}:volume/${volumeId} | not supported |
| TerminateInstances | Terminate the edge instance | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| UpdateInstancesActionTimer | UpdateInstancesActionTimer | Operation level | * | Supported |
| UpdateModuleInstanceType | UpdateModuleInstanceType | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
Read operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeAddressQuota | Describe elastic public IP quota | Operation level | * | Supported |
| DescribeAddresses | Describe elastic public IP list | Operation level | * | Supported |
| DescribeAlarmInfo | DescribeAlarmInfo | Operation level | * | Supported |
| DescribeAvailableBandwidth | DescribeAvailableBandwidth | Operation level | * | Supported |
| DescribeBaseOverview | Describe the basic statistics of the overview page | Operation level | * | Supported |
| DescribeBlockStorages | DescribeBlockStorages | Operation level | * | Supported |
| DescribeConfig | Describe limit config info | Operation level | * | Supported |
| DescribeCustomImageTask | Describe import image task | Operation level | * | Supported |
| DescribeCustomerConfig | DescribeCustomerConfig | Operation level | * | Supported |
| DescribeCustomerLimitConfig | DescribeCustomerLimitConfig | Operation level | * | Supported |
| DescribeCustomerNeedApply | DescribeCustomerNeedApply | Operation level | * | Supported |
| DescribeCvmImages | DescribeCvmImages | Operation level | * | not supported |
| DescribeDefaultSubnet | Describe default subnet of zone | Operation level | * | Supported |
| DescribeDiskConfigQuota | DescribeDiskConfigQuota | Operation level | * | not supported |
| DescribeDisks | DescribeDisks | Resource level | qcs::ecm::uin/${uin}:volume/${volumeId} | not supported |
| DescribeHaVips | Describe highly available virtual IP | Operation level | * | Supported |
| DescribeImage | Operation level | * | Supported | |
| DescribeImage | Operation level | * | Supported | |
| DescribeImageOs | Operation level | * | not supported | |
| DescribeImages | Describe image list | Operation level | * | Supported |
| DescribeImportImage | Operation level | * | not supported | |
| DescribeInstanceInternetBandwidthConfigs | DescribeInstanceInternetBandwidthConfigs | Resource level | qcs::ecm::uin/:instance/${InstanceId} | not supported |
| DescribeInstanceQuota | DescribeInstanceQuota | Operation level | * | Supported |
| DescribeInstanceTypeConfig | Describe Instance config | Operation level | * | Supported |
| DescribeInstanceTypeConfigs | DescribeInstanceTypeConfigs | Operation level | * | Supported |
| DescribeInstanceUsage | Query the usage of instances, currently supporting queries on a monthly basis | Operation level | * | Supported |
| DescribeInstanceVncUrl | Describe the edge instance VNC url | Resource level | qcs::ecm::uin/:instance/${InstanceId} | Supported |
| DescribeInstancesActionTimer | DescribeInstancesActionTimer | Resource level | qcs::ecm::uin/:instance/${InstanceIds} | Supported |
| DescribeInstancesDeniedActions | Describe the edge instance denied actions | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| DescribeInstancesStatus | DescribeInstancesStatus | Resource level | qcs::ecm::uin/${uin}:instance/${InstanceIds} | Supported |
| DescribeListeners | Query the listeners list | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| DescribeLoadBalanceTaskStatus | Query the loadBalancer task status | Operation level | * | Supported |
| DescribeLocalDNS | DescribeLocalDNS | Operation level | * | not supported |
| DescribeModuleDetail | Describe the edge module details | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| DescribeMonthPeakNetwork | Describe the monthly peak and billable bandwidth on the node | Operation level | * | Supported |
| DescribeNetworkStatistics | DescribeNetworkStatistics | Operation level | * | Supported |
| DescribeNode | Describe the edge node list | Operation level | * | Supported |
| DescribeNodeTemplate | Describe node template | Operation level | * | Supported |
| DescribeNodeTemplateDetail | Describe node template detail | Operation level | * | Supported |
| DescribeNodeTraffic | DescribeNodeTraffic | Operation level | * | Supported |
| DescribeOverview | Operation level | * | not supported | |
| DescribePackingQuota | DescribePackingQuota | Operation level | * | Supported |
| DescribePackingQuotaGroup | DescribePackingQuotaGroup | Operation level | * | Supported |
| DescribePeakBaseOverview | Describe basic information peak data | Operation level | * | Supported |
| DescribePeakNetworkOverview | Describe network peak data | Operation level | * | Supported |
| DescribePeakOverview | Operation level | * | not supported | |
| DescribePreheatedZone | DescribePreheatedZone | Operation level | * | Supported |
| DescribePriceRunInstance | Query the price of the ECM instance model specifications | Operation level | * | Supported |
| DescribeRegions | DescribeRegions | Operation level | * | Supported |
| DescribeRouteConflicts | Describe routing policy conflict list | Operation level | * | Supported |
| DescribeRouteTables | Describe route table list | Operation level | * | Supported |
| DescribeScheduleImagePreheat | DescribeScheduleImagePreheat | Operation level | * | Supported |
| DescribeSecurityGroupAssociationStatistics | Describe security group association statistics | Resource level | qcs::ecm::uin/:sg/${SecurityGroupIds} | Supported |
| DescribeSecurityGroupLimits | Describe security group limits | Operation level | * | Supported |
| DescribeSecurityGroupPolicies | Describe security group policies | Resource level | qcs::ecm::uin/:sg/${SecurityGroupId} | Supported |
| DescribeSecurityGroupPolicyTemplates | DescribeSecurityGroupPolicyTemplates | Operation level | * | Supported |
| DescribeSimpleInstances | DescribeSimpleInstances | Operation level | * | Supported |
| DescribeSimpleNode | DescribeSimpleNode | Operation level | * | Supported |
| DescribeSmartConnections | Describe smart connection | Operation level | * | not supported |
| DescribeSnapshots | DescribeSnapshots | Resource level | qcs::ecm::uin/${uin}:snapshot/${SnapshotId} | not supported |
| DescribeTargetHealth | Get the health status of loadBalancer backend service | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| DescribeTargets | Query the backend service list of loadBalancer | Resource level | qcs::ecm::uin/:lb/${LoadBalancerId} | Supported |
| DescribeTaskResult | Describe async task execution result | Operation level | * | Supported |
| DescribeTaskStatus | Describe task status | Operation level | * | Supported |
| DescribeUpdatableInstanceType | DescribeUpdatableInstanceType | Operation level | * | Supported |
| DescribeUsedNode | DescribeUsedNode | Operation level | * | Supported |
| DescribeUserNode | DescribeUserNode | Operation level | * | Supported |
| DescribeUserNodeOption | DescribeUserNodeOption | Operation level | * | Supported |
| DescribeZones | DescribeZones | Operation level | * | Supported |
| QueryVpcTaskResult | QueryVpcTaskResult | Operation level | * | not supported |
List Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeImportImageOs | Describe OS list supported by import image | Operation level | * | Supported |
| DescribeInstances | Describe the edge instance details | Resource level | qcs::ecm::uin/:instance/${InstanceIdSet} | Supported |
| DescribeLBConfLimit | DescribeLBConfLimit | Operation level | * | Supported |
| DescribeLoadBalancers | Query the loadBalancer list | Resource level | qcs::ecm::uin/:lb/${LoadBalancerIds} | not supported |
| DescribeModule | DescribeModule | Resource level | qcs::ecm::uin/:module/${ModuleId} | Supported |
| DescribeNetworkInterfaces | Query the elastic network interface list | Resource level | qcs::ecm::uin/:eni/${NetworkInterfaceId} | Supported |
| DescribeNoPreheatZone | DescribeNoPreheatZone | Operation level | * | Supported |
| DescribeRegionIpv6Addresses | describe ipv6 dddresses for ecm region. | Operation level | * | Supported |
| DescribeSecurityGroups | DescribeSecurityGroups | Resource level | qcs::ecm::uin/:sg/${SecurityGroupId} | not supported |
| DescribeSubnets | DescribeSubnets | Resource level | qcs::ecm::uin/:subnet/${SubnetId} | not supported |
| DescribeVpcs | DescribeVpcs | Resource level | qcs::ecm::uin/:vpc/${VpcId} | not supported |
Yes
No
Was this page helpful?