tencent cloud

PrevNext

Feedback

search by keyword

Recent Pages

Documentation
Cloud Access Management
    Documentation
    Download PDF

    TencentDB for PostgreSQL

    Last updated: 2024-11-22 09:21:32
    Download PDF

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      TencentDB For PostgreSQL postgres Supported Supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      AddDBInstanceToReadOnlyGroup Add Instance to ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CloneDBInstance clone instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      CloseDBExtranetAccess Close the instance\\\\\'s external network Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CloseServerlessDBExtranetAccess Close serverless instance extranet Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CreateAccount Create account Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CreateBaseBackup This interface is used to create a base backup of an instance. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CreateDBInstanceNetworkAccess You can add a network to the instance. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CreateDBInstances Create DBInstance Operation level * Supported
      CreateDatabase Create database Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CreateInstances Create DBInstance Operation level * not supported
      CreateParameterTemplate Create parameter template. Operation level * Supported
      CreateReadOnlyDBInstance Create ReadOnly DBInstance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      CreateReadOnlyGroup Create ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CreateReadOnlyGroupNetworkAccess CreateReadOnlyGroupNetworkAccess Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      CreateServerlessDBInstance Create ServerlessDB instance Operation level * Supported
      DeleteAccount Delete account Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DeleteBaseBackup This interface is used to delete the specified base backup of the instance. Operation level * Supported
      DeleteDBInstanceNetworkAccess DeleteDBInstanceNetworkAccess Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DeleteLogBackup This interface is used to delete the specified log backup of instance. Operation level * Supported
      DeleteParameterTemplate Delete a parameter template Operation level * Supported
      DeleteReadOnlyGroup Delete ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DeleteReadOnlyGroupNetworkAccess DeleteReadOnlyGroupNetworkAccess Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DeleteServerlessDBInstance Delete ServerlessDB instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DestroyDBInstance Delete Instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      DisIsolateDBInstances disIsolate instances Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      InitDBInstances Initialize the instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      IsolateDBInstances isolate instances Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      LockAccount Lock account Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyAccountPrivileges Modify account privileges Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyAccountRemark Modify account notes Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyBackupDownloadRestriction modify backup download restriction Operation level * Supported
      ModifyBackupPlan Used to modify the instance backup plan. The default is to start a full backup in the early morning, and the duration of the daily backup is 7 days. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyBaseBackupExpireTime This interface is used to modify the expire time of the specified base backup of the instance. Operation level * Supported
      ModifyDBInstanceChargeType ModifyDBInstanceChargeType Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      ModifyDBInstanceDeployment Modify instance node availability zone deployment. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyDBInstanceHAConfig The API ModifyDBInstanceHAConfig is used to modify instance ha config. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyDBInstanceName Modify instance name Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyDBInstanceParameters ModifyDBInstanceParameters Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyDBInstanceReadOnlyGroup change Instance ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyDBInstanceSecurityGroups Modify database instance security groups. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyDBInstanceSpec Modify instance specifications, including memory and disk. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      ModifyDBInstancesProject Modify the project of instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyDatabaseOwner Modify database owner Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyMaintainTimeWindow Modify maintain time window of instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifyParameterTemplate Modify the base infomation and parameters about a parameter template. Operation level * Supported
      ModifyReadOnlyGroupConfig Modify ReadOnlyGroup Config value Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      ModifySwitchTimePeriod When the upgrade requires switching, modify the switching, with the value of 0: switch immediately, and 1: switch at the specified time. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      OpenDBExtranetAccess Open extranet Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      OpenServerlessDBExtranetAccess Open serverless instance extranet Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      RebalanceReadOnlyGroup Rebalance ReadOnlyGroup by ReadOnly instance weight Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      RemoveDBInstanceFromReadOnlyGroup Remove Instance From ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      RenewInstance Renews instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      ResetAccountPassword Reset account password Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      RestartDBInstance Restart instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      RestoreDBInstanceObjects restore database objects Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      SetAutoRenewFlag Set automatic renewal Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
      SwitchDBInstancePrimary The API SwitchDBInstancePrimary is used to switch primary. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      UnlockAccount Unlock account Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      UpgradeDBInstance Upgrade instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      UpgradeDBInstanceKernelVersion The API UpgradeDBInstanceKernelVersion is used to upgrade the kernel version. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      UpgradeDBInstanceMajorVersion Upgrade instance kernel major version. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeAccountPrivileges Describe account privileges Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeAccounts Get user list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeAvailableRecoveryTime query instance available recovery time. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeBackupDownloadRestriction describe backup download restriction Operation level * Supported
      DescribeBackupDownloadURL This interface is used to obtain the backup download URL. Operation level * Supported
      DescribeBackupOverview This interface is used to query the user\'s backup overview information(capacity unit is byte). Operation level * Supported
      DescribeBackupPlans Query all backup plans of the instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeClasses The API DescribeClasses is used to query instance available classes. Operation level * Supported
      DescribeCloneDBInstanceSpec query clone instance spec. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBBackups Querying backup list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBErrlogs Get error log Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBInstanceAttribute Query instance details Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBInstanceAvailability The API DescribeDBInstanceAvailability is used to describe instance availability. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBInstanceHAConfig The API DescribeDBInstanceHAConfig is used to describe instance HA config. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBInstanceParameters DescribeDBInstanceParameters Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBInstanceSecurityGroups Describe database instance security groups. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBInstanceSwitchOverEvents The API DescribeDBInstanceSwitchOverRecordsis used to describe instance switchover events. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBSlowlogs Get slow query log Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDBVersions The API DescribeDBVersions is used to query database versions. Operation level * Supported
      DescribeDBXlogs Get xlog list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDatabaseObjects Describe database objects Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDatabases Query database list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDedicatedClusters DescribeDedicatedClusters Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeDefaultParameters Query default parameters. Operation level * Supported
      DescribeEncryptionKeys Gets a list of key information for the instance. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeMaintainTimeWindow Query maintain time window of instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeOrders Get order information Operation level * Supported
      DescribeParameterTemplateAttributes Query a parameter-template\\\'s base information and parameters Operation level * Supported
      DescribeParameterTemplates Query the list of parameter templates Operation level * Supported
      DescribeParamsEvent DescribeParamsEvent Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeProductConfig Check sales specifications Operation level * Supported
      DescribeRegions Query Supported Regions Operation level * Supported
      DescribeSlowQueryAnalysis Describe SlowQuery Analysis Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeSlowQueryList Describe SlowQuery List Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeZones Querying Availability Zones in Supported Regions Operation level * Supported
      InquiryPriceCreateDBInstances Check sale price Operation level * Supported
      InquiryPriceRenewDBInstance Query instance renewal price Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      InquiryPriceUpgradeDBInstance Query upgrade price Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported

      List Operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeBackupSummaries This interface is used to query the statistical information of instance backups(capacity unit is byte). Operation level * Supported
      DescribeBaseBackups This interface is used to query the base backup list. Operation level * Supported
      DescribeDBInstances Query instance list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeLogBackups This interface is used to query the log backup list. Operation level * Supported
      DescribeReadOnlyGroups Query ReadOnlyGroup list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      DescribeServerlessDBInstances Query ServerlessDB instance list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
      Contact Us

      Contact our sales team or business advisors to help your business.

      Contact Us
      Technical Support

      Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

      Submit a Ticket
      7x24 Phone Support
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      Privacy PolicyLegalCookie Policy