tencent cloud

Service roles and service-linked roles are predefined by Tencent Cloud services and, upon user authorization, the corresponding services can access and use resources by assuming these service-linked roles. This document provides detailed information on the use cases and associated authorization policies of these specific service-linked roles.

TIC_QCSLinkedRoleInInfrastructureAsCode

Use Cases： The current role is the TIC service role, this role is used to authorize TIC to orchestrate CVM, VPC, COS and other service resources, without the need for user escrow keys, and the operation is more efficient and safe.
Authorization Polices

• Policy Name： QcloudAccessForTICRoleInInfrastructureAsCode
• Policy Information：

{
    "version": "2.0",
    "statement": [
        {
            "action": [
                "cvm:*",
                "vpc:*",
                "clb:*",
                "as:*",
                "cmqtopic:*",
                "cmqqueue:*",
                "ccs:*",
                "scf:*",
                "tag:*",
                "monitor:*",
                "cfs:*",
                "cos:*",
                "ckafka:*",
                "apigw:*",
                "cdb:*",
                "mongodb:*",
                "redis:*",
                "cynosdb:*",
                "dcdb:*",
                "tcaplusdb:*",
                "cdn:*",
                "gaap:*",
                "es:*",
                "gme:*",
                "sms:*",
                "ssl:*",
                "cam:*",
                "bgpip:*",
                "waf:*",
                "finance:*",
                "cloudaudit:*",
                "sqlserver:*",
                "postgres:*",
                "vod:*",
                "cls:*",
                "sls:*",
                "tcr:*",
                "ecdn:*",
                "kms:*"
            ],
            "resource": "*",
            "effect": "allow"
        }
    ]
}