Product |
Abbreviation in CAM |
Console |
Authorization by Tag |
Authorization Granularity |
IP Restriction |
Image Moderation System |
ims |
Supported |
not supported |
Operation level |
Partially supported |
Note:
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
CreateAppSecretId |
CreateAppSecretId |
Operation level |
* |
Supported |
CreateCosProvisionalToken |
Create Cos Provisional Token |
Operation level |
* |
Supported |
CreateImage |
Create Image |
Operation level |
* |
Supported |
CreateImageModerationAsyncRecognitionTask |
CreateImageModerationAsyncRecognitionTask |
Operation level |
* |
Supported |
CreateStandardResourcePost |
CreateStandardResourcePost |
Operation level |
* |
Supported |
CreateStrategy |
CreateStrategy |
Operation level |
* |
Supported |
CreateTextLib |
CreateTextLib |
Operation level |
* |
Supported |
CreateTextSample |
CreateTextSample |
Operation level |
* |
Supported |
CreateTrialResource |
CreateTrialResource |
Operation level |
* |
Supported |
DeleteImage |
Delete Image |
Operation level |
* |
Supported |
DeleteStrategy |
DeleteStrategy |
Operation level |
* |
Supported |
DeleteTextLib |
DeleteTextLib |
Operation level |
* |
Supported |
DeleteTextSample |
DeleteTextSample |
Operation level |
* |
Supported |
ExperienceService |
ExperienceService |
Operation level |
* |
Supported |
ImageModeration |
ImageModeration |
Operation level |
* |
Supported |
ImageRecognition |
ImageRecognition |
Operation level |
* |
Supported |
ModifyModerationResult |
ModifyModerationResult |
Operation level |
* |
Supported |
ModifyUserInterfaceConf |
ModifyUserInterfaceConf |
Operation level |
* |
Supported |
UpdateStrategy |
UpdateStrategy |
Operation level |
* |
Supported |
UpdateTextLib |
UpdateTextLib |
Operation level |
* |
Supported |
Other Operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
CreateImageModerationAsyncTask |
CreateImageModerationAsyncTask |
Operation level |
* |
Supported |
Read operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
DescribeAppSecretId |
DescribeAppSecretId |
Operation level |
* |
Supported |
DescribeBizCategory |
Describe Biz Category |
Operation level |
* |
Supported |
DescribeCheckResult |
DescribeCheckResult |
Operation level |
* |
Supported |
DescribeContentModerationPackage |
DescribeContentModerationPackage |
Operation level |
* |
Supported |
DescribeDefaultStrategy |
Describe Default Strategy |
Operation level |
* |
Supported |
DescribeGroup |
Describe Group |
Operation level |
* |
Supported |
DescribeGroupTag |
DescribeGroupTag |
Operation level |
* |
Supported |
DescribeImage |
Describe Image |
Operation level |
* |
Supported |
DescribeImageStat |
Describe Image Stat |
Operation level |
* |
Supported |
DescribeImsList |
DescribeImsList |
Operation level |
* |
Supported |
DescribeLevelTag |
DescribeLevelTag |
Operation level |
* |
Supported |
DescribeListBizCategory |
Describe List Biz Category |
Operation level |
* |
Supported |
DescribeListServiceTemplate |
Describe List Service Template |
Operation level |
* |
Supported |
DescribeListStrategies |
Describe List Strategies |
Operation level |
* |
Supported |
DescribeManualModerationList |
DescribeManualModerationList |
Operation level |
* |
not supported |
DescribeServiceTemplate |
Describe Service Template |
Operation level |
* |
Supported |
DescribeStaticStat |
DescribeStaticStat |
Operation level |
* |
Supported |
DescribeStrategy |
Describe Strategy |
Operation level |
* |
Supported |
DescribeSubscriptionIsOpen |
DescribeSubscriptionIsOpen |
Operation level |
* |
Supported |
DescribeTextLib |
Describe Text Lib |
Operation level |
* |
Supported |
DescribeTextSample |
Describe Text Sample |
Operation level |
* |
Supported |
DescribeUserInterfaceConf |
Describe User Interface Conf |
Operation level |
* |
Supported |
DetectObject |
DetectObject |
Operation level |
* |
Supported |
문제 해결에 도움이 되었나요?