Cloud Access Management
- Product Introduction
- Getting Started
- User Guide
- Users
- Sub-Users
- Sub-User Security Credentials
- Collaborators
- Collaborator Security Credentials
- Message Recipients
- User Settings
- User Groups
- Role
- Identity Provider
- User-Based SSO
- Role-Based SSO
- Policies
- Definition
- Authorization Guide
- Syntax Logic
- Element Reference
- CAM-Enabled Role
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Compute
- Edge Computing
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- Database SaaS Tool
- CDN and Acceleration
- Network Security
- Endpoint Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- Practical Tutorial
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- CVM
- VPC
- API Documentation
- User APIs
- Role APIs
- Making API Requests
- Identity Provider APIs
- Policy APIs
Elasticsearch Service
Last updated: 2025-03-26 09:59:16
Fundamental information
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| Elasticsearch Service | es | Supported | Supported | Resource level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| AddCVMInstancesOfCollector | add cvm instance for a collector | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| AddForceMergeTask | Add force merge task | Operation level | * | Supported |
| BindSpaceToAnotherCluster | bind space to another cluster | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| CancelEsClusterTask | Cancel Es Cluster Task | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| CreateCdcEsQuota | Create CDC cluster es quota | Operation level | * | Supported |
| CreateCollector | create collector | Operation level | * | Supported |
| CreateCosMigrateToServerlessInstance | CreateCosMigrateToServerlessInstance | Resource level | qcs::es:${Region}:uin/${uin}:instance/${ServerlessId} | Supported |
| CreateDSLBlockTask | Create Cluster DSL Block Task | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| CreateDataImport | Create dataimport integration | Operation level | * | Supported |
| CreateIndex | CreateIndex | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| CreateIndexKibanaPattern | Create Index Kibana Pattern | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| CreateIndexMetaFieldToJson | Create Index Meta Field To Json | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| CreateIndexMetaJsonToField | Create Index Meta Json To Field | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| CreateIndexMigrateToNewSpace | Create Index Migrate To NewSpace | Resource level | qcs::es:${region}:uin/${uin}:index/${ServerlessId} | Supported |
| CreateInstance | Create an ES cluster instance | Operation level | * | not supported |
| CreateInstanceLogExport | Create instance log export | Operation level | * | Supported |
| CreateLogstashInstance | Create logstash instance | Operation level | * | not supported |
| CreateMappingsFromSample | Create Mappings From Sample | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| CreateOperationDurationEvent | create operation duration event | Operation level | * | Supported |
| CreateOrUpdateServerlessWatcher | CreateOrUpdateServerlessWatcher | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| CreateSearchIndex | Create search index | Operation level | * | Supported |
| CreateSearchSpace | Create search index space | Operation level | * | Supported |
| CreateServerlessDi | Create Serverless Di | Resource level | qcs::es:${region}:uin/${uin}:index/${ServerlessId} | Supported |
| CreateServerlessInstance | Create Serverless Index | Operation level | * | Supported |
| CreateServerlessInstanceUser | CreateServerlessInstanceUser | Resource level | qcs::es:${region}:uin/${uin}:index/${InstanceId} | Supported |
| CreateServerlessSpace | create Serverless Space of Index | Operation level | * | Supported |
| CreateServerlessSpaceUser | Create a serverless space user | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| CreateServerlessSpaceV2 | create new Serverless Space | Operation level | * | Supported |
| CreateTradeSignAuth | create sign auth for trade | Operation level | * | Supported |
| DeleteCVMInstancesOfCollector | delete cvm instance of a collector | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| DeleteClusterSnapshot | Delete Cluster Snapshot | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| DeleteCollector | delete collector | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| DeleteDSLBlockTask | Delete DSL Block Task | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| DeleteDataImport | delete data import | Resource level | qcs::es::uin/${uin}:IntegrationId/${IntegrationId} | Supported |
| DeleteIndex | DeleteIndex | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| DeleteInstance | Delete an ES cluster instance | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| DeleteLogstashInstance | Delete logstash instance | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| DeleteLogstashPipelines | Delete logstash pipelines | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| DeleteSearchIndex | Delete search index | Resource level | qcs::es::uin/${uin}:index/${IndexId} | Supported |
| DeleteSearchSpace | Delete Search Space | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DeleteServerlessDi | Delete Serverless Di | Resource level | qcs::es:${region}:uin/${uin}:index/${ServerlessId} | Supported |
| DeleteServerlessInstance | delete serverlessIndex | Resource level | qcs::${ApiModule}:${Region}:uin/:index/${InstanceId} | Supported |
| DeleteServerlessInstanceUser | DeleteServerlessInstanceUser | Resource level | qcs::es:${region}:uin/${uin}:index/${InstanceId} | Supported |
| DeleteServerlessSpace | Delete ServerlessSpace | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DeleteServerlessSpaceUser | Delete a serverless space user | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DeleteServerlessWatcher | DeleteServerlessWatcher | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| MarkCosMigrateTask | MarkCosMigrateTask | Operation level | * | Supported |
| MigrateEsInstance | Migrate ES Instance from one zone to another zone | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| ModifyEsVipSecurityGroup | Modify ES cluster security group | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| ModifyInstanceDisasterRecoverGroup | Modify es instance disaster recover group configuration | Resource level | qcs::es::uin/${uin}:instance/$instanceId | Supported |
| ModifyInstanceEsVipStatus | modify instance es vip rs status | Resource level | qcs::es:${region}:uin/${uin}:instanceId/${InstanceId} | Supported |
| PrepayInstanceTransferToPost | Convert prepaid instance to postpaid. | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| ReinstallCollector | reinstall collecotr | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| RestartCollector | restart collector | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| RestartInstance | Restart an ES cluster instance | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| RestartKibana | Restart kibana nodes of ES cluster | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| RestartLogstashInstance | Restart logstash instance | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| RestartNodes | Restart nodes of ES Cluster | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| RestoreClusterSnapshot | Restore Cluster Snapshot | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| SaveAndDeployLogstashPipeline | Save and deploy logstash pipelines | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| SendVerificationCode | SendVerificationCode | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| StartCollector | start collector | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| StartLogstashPipelines | Start logstash pipelines | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| StopCollector | stop collector | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| StopLogstashPipelines | Stop logstash pipelines | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpdateAuditLogStatus | Update AuditLog Status | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateCdcEsQuota | Update cdc cluster es quota. | Operation level | * | Supported |
| UpdateCollector | update beats collector | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| UpdateCollectorName | update collector\'s name | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| UpdateDSLBlockTask | Update DSL Block Task | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateDataImport | update data import | Resource level | qcs::es::uin/${uin}:integrationId/${IntegrationId} | Supported |
| UpdateDataImportName | update data import name | Resource level | qcs::es::uin/${uin}:integrationId/${IntegrationId} | Supported |
| UpdateDiagnoseSettings | this interface(UpdateDiagnoseSettings) use to update diagnose settings | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| UpdateDictionaries | this interface(UpdateDictionaries) use to update dictionaries | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| UpdateDns | Update Dns | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateEsOperationDurations | batch update es operation duration | Resource level | qcs::es::uin/${uin}:instanceId/${InstanceId} | Supported |
| UpdateForceMergeTask | Update force merge task | Operation level | * | Supported |
| UpdateHeteroDelayScaleIn | Update hetero scale in status | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateIndex | UpdateIndex | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| UpdateIndexMetaFieldToJson | Update Index Meta Field To Json | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateIndexMetaJsonToField | Update Index Meta Json To Field | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateInstance | Update an ES cluster instance | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpdateInstancePublicAccess | Update ES Instance Kibana And Cerebro Public Access | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpdateInstanceScalingHetero | Scaling es instance with heterogeneous cvm | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateInternal | Update Internal | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateIpTraceStatus | Update es instance ip trace status | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateJdk | Update Jdk config | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpdateKibanaSoftware | Update Kibana Software | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| UpdateLogstashInstance | Update logstash instance | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpdateLogstashPipelineDesc | update logstash pipeline desc | Resource level | qcs::es::uin/${uin}:logstash/${InstanceId} | Supported |
| UpdateLsOperationDurations | batch update logstash operation duration | Resource level | qcs::es::uin/${uin}:instanceId/${InstanceId} | Supported |
| UpdateNodesStatus | Used to start or shut down the node | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpdatePlugins | Update an ES cluster\\\\\\\'s plugins | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpdateRequestTargetNodeTypes | Update the target node types of es vip | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpdateSearchIndex | Update search index | Resource level | qcs::es::uin/${uin}:index/${IndexId} | Supported |
| UpdateSearchSpace | Update search space | Resource level | qcs::es::uin/${uin}:space/${SpaceId} | Supported |
| UpdateServerlessDi | Update Serverless Di | Resource level | qcs::es:${region}:uin/${uin}:index/${ServerlessId} | Supported |
| UpdateServerlessInstance | Update ServerlessInstance | Resource level | qcs::${ApiModule}:${Region}:uin/:index/${InstanceId} | Supported |
| UpdateServerlessInstanceUser | UpdateServerlessInstanceUser | Resource level | qcs::es:${region}:uin/${uin}:index/${InstanceId} | Supported |
| UpdateServerlessSpace | Update ServerlessSpace | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| UpdateServerlessSpaceUser | Update a serverless space user | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| UpdateServerlessWatcher | UpdateServerlessWatcher | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| UpdateUserBundles | Update user bundles | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| UpgradeInstance | UpgradeInstance | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| UpgradeLicense | Upgrade an ES cluster\\\\\\\\\\\\\\\'s X-Pack license | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
Read operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CheckCamLinkedRole | check user has service role | Operation level | * | not supported |
| CheckClusterName | use to check cluster name valid or repeat | Operation level | * | Supported |
| CheckCreateIndex | Check index with creating | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| CheckForceRestart | check force restart | Operation level | * | Supported |
| CheckOperation | check operation is valid for scale in or restart | Operation level | * | Supported |
| CheckScaleUpgrade | check scale or upgrade is valid | Operation level | * | Supported |
| CheckSearchSpaceName | Check search space name | Operation level | * | Supported |
| CheckServerlessIndexName | Check index name | Operation level | * | Supported |
| CheckServerlessSpaceName | Check serverless space name | Operation level | * | Supported |
| CheckServerlessUsername | Check username at index level | Resource level | qcs::es::uin/${uin}:index/${InstanceId} | Supported |
| CheckUpdateInstance | check update instance is valid | Resource level | qcs::es::uin/${uin}:instanceId/${InstanceId} | Supported |
| CountCollectors | get collector\\\\\\\'s count | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| CountDataImport | data import count | Resource level | qcs::es::uin/${uin}:collectorId/${CollectorId} | Supported |
| CountInstances | describe es instance count | Operation level | * | Supported |
| CountLogstashInstances | describe logstash instance count | Operation level | * | Supported |
| CreateSearchIndexFieldToMeta | CreateSearchIndexFieldToMeta | Operation level | * | Supported |
| CreateSearchIndexMappings | Create mappings from sample data | Operation level | * | Supported |
| CreateSearchIndexMetaToField | CreateSearchIndexMetaToField | Operation level | * | Supported |
| CreateServerlessIndexMetaFieldToJson | Converting metadata fields to JSON when creating a Serverless index | Operation level | * | Supported |
| CreateServerlessIndexMetaJsonToField | Converting metadata JSON to fields when creating a Serverless index | Operation level | * | Supported |
| CreateServerlessMappingsFromSample | Create index mapping from Serverless data sample | Operation level | * | Supported |
| DescribeApmSearch | search for apm | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| DescribeAuditLogStatus | Describe AuditLog Status | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| DescribeCVMInstancesOfCollector | Get the dispatched cvm instances of the collector | Resource level | qcs::es:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| DescribeCVMInstancesOfSameCollector | get collector\\\\\\\\\\\\\\\'s cvm of a very type | Operation level | * | Supported |
| DescribeClientIp | get user ip | Operation level | * | Supported |
| DescribeDataImportDetail | describe data import detail | Resource level | qcs::es::uin/${uin}:IntegrationId/${IntegrationId} | Supported |
| DescribeDataImportOperations | describe data import operation detail | Resource level | qcs::es::uin/${uin}:instanceId/${InstanceId} | Supported |
| DescribeDataImports | Describe data import | Operation level | * | Supported |
| DescribeDiagnose | this interface(DescribeDiagnose) use to query diagnose | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeDiagnoseStats | describe diagnose stats for intelligence operations | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| DescribeForceMergeTask | Query the list of added forcemerge tasks | Operation level | * | Supported |
| DescribeIndexList | DescribeIndexList | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| DescribeIndexLogs | DescribeIndexLogs | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeIndexMeta | DescribeIndexMeta | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| DescribeIndexOperations | DescribeIndexOperations | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeIndices | describe index mode | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| DescribeInstanceBundleList | this interface(DescribeInstanceBundleList) use to query instance bundle list | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | not supported |
| DescribeInstanceLogExportIndex | Obtain the logs and export them to serverless | Operation level | * | Supported |
| DescribeInstanceLogs | Describes ES cluster\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'s logs | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| DescribeInstanceOperations | Describe ES cluster\'s activity records | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| DescribeInstancePluginList | get the plugin list of a es cluster | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeInstanceUpgradePlanList | describe instance upgrade plan list | Operation level | * | Supported |
| DescribeKibanaTools | embed kibana | Resource level | qcs::es:${region}:uin/${uin}:index/${InstanceId} | Supported |
| DescribeKibanaUrl | describe kibana url | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| DescribeLogstashInstanceLogs | Query logs of logstash instance | Resource level | qcs::es:${region}:uin/${uin}:logstash/$instanceId | Supported |
| DescribeLogstashInstanceOperations | Query operations of logstash instance | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| DescribeLogstashPipelineTemplates | describe logstash template pipeline list | Operation level | * | Supported |
| DescribeLogstashPipelines | Query list of logstash pipelines | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| DescribeLogstashViews | DescribeLogstashViews | Operation level | * | not supported |
| DescribeNetworkConnection | describe instance ldap connection | Resource level | qcs::es::uin/${uin}:instanceId/${InstanceId} | Supported |
| DescribeNodes | Used to query the cluster node list, including: node IP, node ID, node type and other information | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| DescribeOperationDurationEvent | Describe Operation Duration Event | Operation level | * | Supported |
| DescribePocQuota | Get poc code for user | Operation level | * | Supported |
| DescribeRegions | describe regions for es support | Operation level | * | Supported |
| DescribeSearchIndexOperations | Describe search index operations | Resource level | qcs::es::uin/${uin}:index/${IndexId} | Supported |
| DescribeSearchIndices | Describe search indices | Resource level | qcs::es::uin/${uin}:index/${IndexId} | Supported |
| DescribeSearchSpaceOperations | Search Space describe space operation | Resource level | qcs::es::uin/${uin}:space/${SpaceId} | Supported |
| DescribeSearchSpaceUsers | Describe search space users | Resource level | qcs::es::uin/${uin}:space/${SpaceId} | Supported |
| DescribeSearchSpaces | Describe search index list | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DescribeSecurityGroupBindEs | describe Security Group Bind Es | Resource level | qcs::es::uin/${uin}:SecurityGroupId/${SecurityGroupId} | Supported |
| DescribeServerlessDi | Describe Serverless Di | Resource level | qcs::es:${region}:uin/${uin}:index/${ServerlessId} | Supported |
| DescribeServerlessInstanceLogs | Describe serverless instance logs | Resource level | qcs::es::uin/${uin}:instance/${InstanceId} | Supported |
| DescribeServerlessInstanceMeta | Describe ServerlessInstanceMeta | Resource level | qcs::${ApiModule}:${Region}:uin/:index/${InstanceId} | Supported |
| DescribeServerlessInstanceOperation | Describe ServerlessInstance Operation | Resource level | qcs::${ApiModule}:${Region}:uin/:index/${InstanceId} | Supported |
| DescribeServerlessInstanceUsers | DescribeServerlessInstanceUsers | Resource level | qcs::es:${region}:uin/${uin}:index/${InstanceId} | Supported |
| DescribeServerlessInstances | describe serverlessInstance List | Resource level | qcs::es:${region}:uin/${uin}:index/${InstanceId} | Supported |
| DescribeServerlessMappingFields | DescribeServerlessMappingFields | Operation level | * | Supported |
| DescribeServerlessMetrics | DescribeServerlessMetrics | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DescribeServerlessQuota | Get Serverless quota | Operation level | * | Supported |
| DescribeServerlessSpaceOperations | ServerlessSpace describe space operation | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DescribeServerlessSpaceUser | Describe a serverless space user | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DescribeServerlessSpaces | describe ServerlessSpace List | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DescribeServerlessWatchers | DescribeServerlessWatchers | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DescribeSpaceDomain | Describe a serverless space domain | Resource level | qcs::es:${Region}:uin/${uin}:space/${SpaceId}, | Supported |
| DescribeSpaceKibanaTools | Obtain the token required for space embed kibana | Resource level | qcs::es:${region}:uin/${uin}:space/${SpaceId} | Supported |
| DescribeUpgrade | Describe Upgrade | Operation level | * | Supported |
| DescribeUserCosSnapshotList | DescribeUserCosSnapshotList | Operation level | * | Supported |
| DescribeUserCosSnapshotTaskList | DescribeUserCosSnapshotTaskList | Resource level | qcs::es:${Region}:uin/${uin}:instance/${InstanceId} | Supported |
| DescribeUserIndexMigrateStatus | DescribeUserIndexMigrateStatus | Resource level | qcs::es:${region}:uin/${uin}:index/${InstanceId} | Supported |
| DescribeViews | Describe instance view info， include cluster/node/kibana | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| DiagnoseInstance | diagnose ES Instance Intelligently | Resource level | qcs::es:${region}:uin/${uin}:instance/${InstanceId} | Supported |
| DownloadCerts | Download es instance certificate | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| ExportIpTraceLog | Export pure ip and request timestamp trace log | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| GenDiCollectorRule | GenDiCollectorRule | Operation level | * | Supported |
| GetAllIndexName | get all index name | Resource level | qcs::es:${region}:uin/${uin}:Instance/${InstanceId} | Supported |
| GetAllTraceIp | Get all trace ip | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| GetCDCInstanceCnt | Count es instance number on CDC cluster. | Operation level | * | Supported |
| GetCDCTotalResources | Get CDC cluster total es quota. | Operation level | * | Supported |
| GetCDCUsedResources | Get CDC cluster es quota has beed used. | Operation level | * | Supported |
| GetClientIp | get client ip | Operation level | * | Supported |
| GetClusterMetric | get cluster metric for es instance | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | not supported |
| GetCosMonitorData | this interface(GetCosMonitorData) use to query cos monitor data | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| GetDiCollectorSetting | GetDiCollectorSetting | Operation level | * | Supported |
| GetDiagnoseSettings | Get diagnose settings | Operation level | * | Supported |
| GetEsCreateGoodsInfo | Get Es Create Goods Info | Operation level | * | Supported |
| GetEsYmlConfig | get es yml config | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | not supported |
| GetFederationToken | Get federation token | Operation level | * | Supported |
| GetHeteroScalingCvmInfo | Get hetero scaling cvm list | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| GetInstanceUpdateMode | get instance update mode | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| GetInternalAccountUinToJudge | Get internal account uin | Operation level | * | Supported |
| GetIpTraceStatus | Get Es instance ip trace status | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| GetJvmHeapInfo | get jvm heap | Resource level | qcs::es:${region}:uin/${uin}:Instance/${InstanceId} | Supported |
| GetNodesMetric | get es cluster nodes metric | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| GetRequestTargetNodeTypes | Get the target node types of es vip | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| GetTaskFlow | Get task process information | Resource level | qcs::es:${Region}:uin/${uin}:instance/${InstanceId} | Supported |
| InquirePriceCreateInstance | Inquire Price CreateInstance | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| InquirePriceRenewInstance | inquire instance price when renew instance | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| InstallInstanceModel | Install Instance Model | Operation level | * | Supported |
| ListEsClusterTask | List Es Cluster Task | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| PredictCluster | Predict Cluster | Operation level | * | Supported |
| PredictInstance | Predict Instance | Operation level | * | Supported |
| QueryAggsIpCountLog | Aggs query access ip | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| QueryAggsIpFrequenceLog | Count ip access frequence | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| QueryAndCheckServerlessWatcher | QueryAndCheckServerlessWatcher | Resource level | qcs::es::uin/${uin}:serverlessId/${ServerlessId} | Supported |
| QueryIpTraceLog | Query ip trace log | Resource level | qcs::es::uin/${uin}:InstanceId/${InstanceId} | Supported |
| QueryRegionZone | Query Region Zone | Operation level | * | Supported |
| QueryRegionZoneForLogstash | describe logstash region and zone | Operation level | * | not supported |
| QueryRegionZoneForSearch | Query search index region zone | Resource level | qcs::es::uin/${uin}:* | Supported |
| QueryRegionZoneForServerless | QueryRegionZoneForServerless | Resource level | qcs::es::uin/${uin}:* | Supported |
| QuerySearchIndex | Search index query endpoint | Resource level | qcs::es::uin/${uin}:index/${IndexId} | Supported |
| QueryZoneResource | Query zone resource | Operation level | * | Supported |
| QueryZoneResourceForLogstash | describe zone resource for logstash | Operation level | * | not supported |
| ReconcileIndex | auto reconcile | Resource level | qcs::es::uin/${uin}:index/${ServerlessId} | Supported |
| SearchServerlessData | Internal interface for obtaining serverless index data | Resource level | qcs::es:${region}:uin/${uin}:index/${ServerlessId} | Supported |
| SearchServerlessInstance | Search Serverless Instance data | Resource level | qcs::es:${region}:uin/${uin}:index/${ServerlessId} | Supported |
| SmartAdvisorManage | ES Smart Advisor Manage | Resource level | qcs::es:${Region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| SmartAdvisorManageBatch | ES Smart Advisor Manage batch | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| UpdateSearchIndexFieldToMeta | Update search index field to meta | Operation level | * | Supported |
| UpdateSearchIndexMetaToField | UpdateSearchIndexMetaToField | Operation level | * | Supported |
| UpdateServerlessIndexMetaFieldToJson | Convert metadata fields to JSON when updating Serverless index | Resource level | qcs::es::uin/${uin}:index/${InstanceId} | Supported |
| UpdateServerlessIndexMetaJsonToField | Convert metadata JSON to fields when updating Serverless index | Resource level | qcs::es::uin/${uin}:index/${ServerlessId} | Supported |
Other Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CheckMigrateIndexMetaData | CheckMigrateIndexMetaData | Resource level | qcs::es:${Region}:uin/${uin}:instance/${ServerlessId} | Supported |
| CreateClusterSnapshot | create cluster snapshot | Resource level | qcs::es:${region}:uin/${uin}:Instance/${InstanceId} | Supported |
| CreateOnlineReindex | online reindex | Resource level | qcs::es:${region}:uin/${uin}:Instance/${InstanceId} | Supported |
| NotifyEsServerless | NotifyEsServerless | Operation level | * | Supported |
| RenewInstance | Renew the specified ES cluster instance by year and month | Resource level | qcs::${ApiModule}:${Region}:uin/:instance/${InstanceId} | Supported |
| RenewLogstashInstance | Renew the specified Logstash monthly subscription instance | Resource level | qcs::${ApiModule}:${Region}:uin/:logstash/${InstanceId} | Supported |
| UpdateJvmHeap | update jvm heap | Resource level | qcs::es:${region}:uin/${uin}:Instance/${InstanceId} | Supported |
List Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeClusterSnapshot | Describe Cluster Snapshot List | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| DescribeCollectors | Get the list of collectors | Resource level | qcs::${ApiModule}:${region}:uin/${uin}:collector/${CollectorId} | Supported |
| DescribeDSLBlockTask | Describe Cluster DSL Block Task | Resource level | qcs::es:${region}:uin/${uin}:InstanceId/${InstanceId} | Supported |
| DescribeInstances | Query all eligible instances | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
| DescribeInstancesOverview | Get the overview info of all es clusters | Resource level | qcs::es:${region}:uin/${uin}:instance/${instanceId} | Supported |
| DescribeLogstashInstances | Get the list of logstash instances | Resource level | qcs::es:${region}:uin/${uin}:instance/$instanceId | Supported |
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No