tencent cloud

PrevNext

피드백

키워드를 검색하세요

Recent Pages

문서
Cloud Access Management
    문서
    Download PDF

    Auto Scaling

    마지막 업데이트 시간:2024-11-26 09:50:51
    PDF 다운로드

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      Auto Scaling as Supported Supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      AttachInstances Attach Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      AttachLoadBalancers AttachLoadBalancers will add load balancers to auto scaling group. Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      CancelInstanceRefresh Cancel instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      ClearLaunchConfigurationAttributes ClearLaunchConfigurationAttributes Resource level qcs::as:$region:$account:launch-configuration/$launchConfigurationId Supported
      CompleteLifecycleAction Complete lifecycle action Operation level * Supported
      CreateAutoScalingGroup Create auto scaling group Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/*
      qcs::as:${region}:uin/${uin}:launch-configuration/${ascId}      		 not supported
      CreateAutoScalingGroupFromInstance Create a launch configuration and a scaling group based on an instance. Resource level qcs::as:$region:$account:auto-scaling-group/* Supported
      CreateLaunchConfiguration Create launch configuration Resource level qcs::as::uin/${uin}:launch-configuration/*
      qcs::cvm::uin/${uin}:image/${ImageId}
      qcs::as::uin/${uin}:sg/${sgId}
      qcs::as::uin/${uin}:keypair/${skeyId}      		 not supported
      CreateLifecycleHook CreateLifecycleHook Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} Supported
      CreateNotificationConfiguration Create Notification Configuration Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      CreateScalingPolicy CreateScalingPolicy Operation level * Supported
      CreateScheduledAction CreateScheduledAction Operation level * Supported
      DeleteAutoScalingGroup Delete Auto Scaling Group Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      DeleteLaunchConfiguration Delete Launch Configuration Resource level qcs::as:$region:$account:launch-configuration/$launchConfigurationId Supported
      DeleteLifecycleHook Delete Lifecycle Hook Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      DeleteNotificationConfiguration Delete Notification Configuration Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      DeleteScalingPolicy Delete Scaling Policy Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      DeleteScheduledAction Delete Scheduled Action Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      DetachInstances Detach Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      DetachLoadBalancers DetachLoadBalancers will detach load balancers from auto scaling groups, this action will not delete load balancers. Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      DisableAutoScalingGroup Disable Auto Scaling Group Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      EnableAutoScalingGroup Enable Auto Scaling Group Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      ExecuteScalingPolicy Execute Scaling Policy Operation level * not supported
      ExitStandby Instance exit standby status Operation level * Supported
      InvokeCommand InvokeCommand Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId}
      qcs::tat:${region}:uin/${uin}:command/${commandId}      		 not supported
      ModifyAutoScalingGroup Modify auto scaling group Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} Supported
      ModifyDesiredCapacity Modify desired capacity Operation level * Supported
      ModifyLaunchConfigurationAttributes Modify launch configuration attributes Operation level * Supported
      ModifyLifecycleHook modify lifecycle hook Operation level * Supported
      ModifyLoadBalancerTargetAttributes modify load balancer target attributes. Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      ModifyLoadBalancers ModifyLoadBalancers Operation level * Supported
      ModifyNotificationConfiguration Modify Notification Configuration Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      ModifyScalingPolicy Example Modify the alarm triggering policy Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} Supported
      ModifyScheduledAction Modify scheduled action Operation level * Supported
      RemoveInstances Remove Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      ResumeInstanceRefresh Resume instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      RollbackInstanceRefresh Rollback instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      ScaleInInstances scale in instances by specified number Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      ScaleOutInstances scale out instance by specified number Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      SetInstancesProtection Set Instances Protection Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      StartAutoScalingInstances Start Auto Scaling Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      StartInstanceRefresh Start instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      StopAutoScalingInstances Stop Auto Scaling Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      StopInstanceRefresh Stop instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      UpgradeLaunchConfiguration Upgrade a launch configuration in a "completely overriding" manner. Resource level qcs::as:$region:$account:launch-configuration/$launchConfigurationId Supported
      UpgradeLifecycleHook Upgrade lifecycle hooks Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeAccountLimits Describe Account Limits Operation level * Supported
      DescribeAutoScalingActivities DescribeAutoScalingActivities Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} Supported
      DescribeAutoScalingAdvices describe auto scaling advices Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
      DescribeAutoScalingGroups DescribeAutoScalingGroups Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} Supported
      DescribeAutoScalingInstances DescribeAutoScalingInstances Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} Supported
      DescribeLaunchConfigurations describe launch configuration Resource level qcs::as:${region}:uin/${uin}:launch-configuration/${LaunchConfigurationId} Supported
      DescribeLifecycleHooks DescribeLifecycleHooks Operation level * Supported
      DescribeNotificationConfigurations DescribeNotificationConfigurations Operation level * Supported
      DescribeRefreshActivities Describe instance refresh activities Operation level * Supported
      DescribeScalingPolicies DescribeScalingPolicies Operation level * Supported
      DescribeScheduledActions DescribeScheduledActions Operation level * Supported

      List Operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeAutoScalingGroupLastActivities Describe AutoScalingGroup Last Activities Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
      문의하기

      고객의 업무에 전용 서비스를 제공해드립니다.

      문의하기
      기술 지원

      더 많은 도움이 필요하시면, 티켓을 통해 연락 바랍니다. 티켓 서비스는 연중무휴 24시간 제공됩니다.

      티켓 제출
      연중무휴 24시간 전화 지원
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      개인정보 처리방침서비스 약관쿠키 정책