tencent cloud

이 페이지는 현재 영어 만 지원하며보고있는 언어를 준비 중입니다.
关闭
전체 제품 문서
Cloud Access Management
문서Cloud Access ManagementCAM-Enabled APIEssential Storage ServiceCloud File Storage
Cloud File Storage
PDF 다운로드
마지막 업데이트 시간:2025-03-26 09:56:37
Cloud File Storage
마지막 업데이트 시간: 2025-03-26 09:56:37
PDF 다운로드

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
Cloud File Storage cfs Supported Supported Resource level Supported

Note：

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
ActivateAccessCert ActivateAccessCert Operation level * Supported
AddMountTarget Add a mount target Resource level qcs::cfs:$region:$account:filesystem/$fileSystemId Supported
ApplyPathLifecyclePolicy Configure the Lifecycle Policy Association directory Resource level qcs::cfs::uin/${uin}:* Supported
BindAccessCert BindAccessCert Resource level qcs::cfs::uin/${uin}:filesystem/${FileSystemId} Supported
BindAutoSnapshotPolicy bind auto policy Resource level qcs::cfs:${Region}:uin/:asp/${AutoSnapshotPolicyId} Supported
CreateAccessCert CreateAccessCert Operation level * Supported
CreateAutoSnapshotPolicy create auto policy Operation level * Supported
CreateCfsPGroup Creates a permission group Operation level * Supported
CreateCfsPackageDetailDownloadTask CreateCfsPackageDetailDownloadTask Resource level qcs::cfs:${Region}:uin/:resource/${ResourcePackageId} Supported
CreateCfsRule Creates a permission group rule Resource level qcs::cfs:$region:$account:pgroup/$pGroupId Supported
CreateCfsSnapshot create cfs filesystem snapshot Resource level qcs::cfs:${region}:uin/${uin}:filesystem/${FileSystemId} Supported
CreateLifecycleDataTask Create a lifecycle data task Operation level * Supported
CreateMigrationTask create migration task Operation level * Supported
DeactivateAccessCert DeactivateAccessCert Operation level * Supported
DeleteAccessCert DeleteAccessCert Operation level * Supported
DeleteAutoSnapshotPolicy delete snapshot policy Resource level qcs::cfs:${Region}:uin/:asp/${AutoSnapshotPolicyId} Supported
DeleteCfsFileSystem Deletes a file system Resource level qcs::cfs:$region:$account:filesystem/$fileSystemId Supported
DeleteCfsPGroup Deletes a permission group Resource level qcs::cfs:$region:$account:pgroup/$pGroupId Supported
DeleteCfsRule Deletes a permission group rule Resource level qcs::cfs:$region:$account:pgroup/$pGroupId Supported
DeleteCfsSnapshot delete cfs filesystem snapshot Resource level qcs::cfs:${Region}:uin/:snap/${SnapshotId} Supported
DeleteMigrationTask delete migration task Operation level * Supported
DeleteMountTarget Deletes a mount target Resource level qcs::cfs:$region:$account:filesystem/$fileSystemId Supported
DeleteUserQuota Delete the file system quota Resource level qcs::cfs::uin/${uin}:filesystem/${FileSystemId} Supported
DoDirectoryOperation Directory Operation Interface Resource level qcs::cfs::uin/${uin}:filesystem/${FileSystemId} Supported
ModifyFileSystemAutoScaleUpRule ModifyFileSystemAutoScaleUpRule Resource level qcs::cfs:${region}:uin/${uin}:filesystem/${FileSystemId} Supported
ModifyLifecyclePolicy Update the lifecycle policy Resource level qcs::cfs::uin/${uin}:* Supported
OverrideCfsRules Overwrite a list of permission group rules Resource level qcs::cfs:$region:$account:pgroup/$pGroupId Supported
ScaleUpFileSystem ScaleUpFileSystem Resource level qcs::cfs:${region}:uin/${uin}:filesystem/${FileSystemId} Supported
SetUserQuota Set the file system quota Resource level qcs::cfs::uin/${uin}:filesystem/${FileSystemId} Supported
SignUpCfsService Activates the CFS service Operation level * Supported
StopLifecycleDataTask Terminates a lifecycle task Operation level * Supported
StopMigrationTask stop migration task Operation level * Supported
UnbindAccessCert UnbindAccessCert Resource level qcs::cfs::uin/${uin}:filesystem/${FileSystemId} Supported
UnbindAutoSnapshotPolicy unbind auto policy Resource level qcs::cfs:${Region}:uin/:asp/${AutoSnapshotPolicyId} Supported
UpdateAccessCert UpdateAccessCert Operation level * Supported
UpdateAccessChannel UpdateAccessChannel Resource level qcs::cfs::uin/${uin}:filesystem/${FileSystemId} Supported
UpdateAutoSnapshotPolicy update auto policy Resource level qcs::cfs:${Region}:uin/:asp/${AutoSnapshotPolicyId} Supported
UpdateCfsFileSystemName Updates a file system name Resource level qcs::cfs:$region:$account:filesystem/$fileSystemId Supported
UpdateCfsFileSystemPGroup Updates the permission group for a file system Resource level qcs::cfs:$region:$account:filesystem/$fileSystemId Supported
UpdateCfsFileSystemSizeLimit Updates the capacity limit of a file system Resource level qcs::cfs:$region:$account:filesystem/$fileSystemId Supported
UpdateCfsPGroup Updates the information of a permission group Resource level qcs::cfs:$region:$account:pgroup/$pGroupId Supported
UpdateCfsRule Updates a permission group rule Resource level qcs::cfs:$region:$account:pgroup/$pGroupId Supported
UpdateCfsSnapshotAttribute update snapshot name or alive days Resource level qcs::cfs:${Region}:uin/:snap/${SnapshotId} Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
CreateCfsFileSystem Create a file system Operation level * Supported
CreateLifecyclePolicyDownloadTask Create the download life cycle file list task Operation level * Supported
DescribeAccessChannels DescribeAccessChannels Operation level * Supported
DescribeAvailableZoneInfo Query area availability Operation level * Supported
DescribeBucketList describe buckets list Operation level * Supported
DescribeCfsFileSystemClients Queries clients of a file system Resource level qcs::cfs:$region:$account:filesystem/$fileSystemId Supported
DescribeCfsFileSystems Query the file system Resource level qcs::cfs::uin/${uin}:filesystem/${FileSystemId} Supported
DescribeCfsFileSystemsStatistics describe the count of all the region Resource level qcs::cfs::uin/${uin}:filesystem/${FileSystemId} Supported
DescribeCfsPGroups Queries the list of permission groups Operation level * Supported
DescribeCfsPackageDetailDownloadTask DescribeCfsPackageDetailDownloadTask Resource level qcs::cfs:${Region}:uin/:resource/* Supported
DescribeCfsPrepayDeductionRules Query file system prepaid resource bundle deduction rules Operation level * Supported
DescribeCfsRules Queries permission group rules Resource level qcs::cfs:$region:$account:pgroup/$pGroupId Supported
DescribeCfsServiceStatus Query CFS service status Operation level * Supported
DescribeCfsSnapshotOverview An overview of file system snapshots Operation level * Supported
DescribeKmsKeys Queries the list of KMS keys Operation level * Supported
DescribeMigrationTasks describe migration tasks list Operation level * Supported
DescribeMountTargets Queries the mount targets of a file system Resource level qcs::cfs:$region:$account:filesystem/$fileSystemId Supported
DescribeSnapshotOperationLogs get snapshot operation logs Resource level qcs::cfs:${Region}:uin/:snap/${SnapshotId} Supported
DescribeStatistics Query the file system statistics for each region Operation level * Supported
DescribeVipStatus Querying Vip availability status Operation level * Supported
DownloadAccessCert DownloadAccessCert Operation level * Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeAccessCerts DescribeAccessCerts Operation level * Supported
DescribeAutoSnapshotPolicies describe snapshot policy Resource level qcs::cfs:${Region}:uin/:asp/${AutoSnapshotPolicyId} Supported
DescribeCfsResourcePackageList DescribeCfsResourcePackageList Resource level qcs::cfs:${region}:uin/${uin}:resource/${ResourcePackageId} Supported
DescribeCfsSnapshots describe snapshots Resource level qcs::cfs::uin/${uin}:snap/${SnapshotId} Supported
DescribeLifecycleDataTask An interface for querying life cycle tasks Operation level * Supported
DescribeUserQuota Query the user quota Resource level qcs::cfs:${region}:uin/${uin}:filesystem/${FileSystemId} Supported
문제 해결에 도움이 되었나요?
더 자세한 내용은 문의하기 또는 티켓 제출 을 통해 문의할 수 있습니다.
예
아니오

피드백

문의하기

고객의 업무에 전용 서비스를 제공해드립니다.

문의하기
기술 지원

더 많은 도움이 필요하시면, 티켓을 통해 연락 바랍니다. 티켓 서비스는 연중무휴 24시간 제공됩니다.

티켓 제출
연중무휴 24시간 전화 지원
중국 홍콩
+852 800 906 020 (무료)
캐나다
+1 888 605 7930 (무료)
영국
+44 808 196 4551 (무료)
미국
+1 844 606 0804 (무료)
호주
+61 1300 986 386 (무료)
EdgeOne 전화 번호
+852 300 80699
현지 서비스 핫라인은 지속적으로 추가 중입니다