tencent cloud

服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。本文档介绍具体服务相关角色的使用场景及相关权限策略信息。

VOD_LogToCLS

使用场景： 当前角色为云点播（VOD）服务相关角色，该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略

• 策略名称： QcloudAccessForVODLogToCLS
• 策略内容：

{
    "version": "2.0",
    "statement": [
        {
            "action": [
                "cls:pushLog",
                "cls:listLogset",
                "cls:getLogset",
                "cls:listTopic",
                "cls:getTopic",
                "cls:createTopic",
                "cls:modifyTopic",
                "cls:deleteTopic",
                "cls:createLogset",
                "cls:modifyLogset",
                "cls:deleteLogset",
                "cls:getIndex",
                "cls:modifyIndex",
                "cls:CreateIndex"
            ],
            "resource": "*",
            "effect": "allow"
        }
    ]
}

VOD_QCSLinkedRoleInHosting

使用场景： 当前角色为云点播（VOD）服务相关角色，该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略

• 策略名称： QcloudAccessForVODLinkedRoleInHosting
• 策略内容：

{
    "version": "2.0",
    "statement": [
        {
            "action": [
                "cos:GetService",
                "cos:GetBucket",
                "cos:HeadBucket",
                "cos:GetBucketObjectVersions",
                "cos:PutObject",
                "cos:PutObjectCopy",
                "cos:PostObject",
                "cos:GetObject",
                "cos:HeadObject",
                "cos:DeleteObject",
                "cos:DeleteMultipleObjects",
                "cos:OptionsObject",
                "cos:PostObjectRestore",
                "cos:PutObjectACL",
                "cos:GetObjectACL",
                "cos:PutObjectTagging",
                "cos:GetObjectTagging",
                "cos:DeleteObjectTagging",
                "cos:InitiateMultipartUpload",
                "cos:UploadPart",
                "cos:UploadPartCopy",
                "cos:CompleteMultipartUpload",
                "cos:AbortMultipartUpload",
                "cos:ListMultipartUploads",
                "cos:ListParts"
            ],
            "resource": "*",
            "effect": "allow"
        }
    ]
}

VOD_QCSLinkedRoleIn_EOacceleration

使用场景： 当前角色为云点播（VOD）服务相关角色，该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略

• 策略名称： QcloudAccessForVODLinkedRoleInEOacceleration
• 策略内容：

{
    "version": "2.0",
    "statement": [
        {
            "effect": "allow",
            "action": [
                "teo:DescribeHostsSetting",
                "teo:DescribeRules",
                "teo:DescribeRulesSetting",
                "teo:DescribeRulesEngine",
                "teo:CreateAccelerationDomain",
                "teo:DescribeAccelerationDomains",
                "teo:ModifyAccelerationDomain",
                "teo:ModifyAccelerationDomainStatuses",
                "teo:DescribeZones",
                "teo:ModifyRule",
                "teo:DescribeZoneSetting",
                "teo:CreateRule"
            ],
            "resource": "*"
        }
    ]
}

VOD_QCSLinkedRoleInManageSSLCertificates

使用场景： 当前角色为云点播（VOD）服务相关角色，该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略

• 策略名称： QcloudAccessForVODLinkedRoleInManageSSLCertificates
• 策略内容：

{
    "version": "2.0",
    "statement": [
        {
            "effect": "allow",
            "resource": [
                "*"
            ],
            "action": [
                "ssl:UploadCertificate",
                "ssl:DescribeCertificates",
                "ssl:DescribeCertificateDetail"
            ]
        }
    ]
}