Tencent Cloud Notices > Notice Details
Announcement of Integrating ES APIs with CAM Tag Authentication
2025-10-10 09:00:00
To provide you with more comprehensive and secure services, Tencent Cloud enables Elasticsearch Service (ES) APIs to support tag-based authentication through Cloud Access Management (CAM). If you currently perform authorization using 6-segment resource descriptions, please refer to the latest 6-segment resource format to update authorization. Otherwise, it may affect sub-user access. For the authorization guide, see CAM-Based Access Control Configuration.
Updated 6-Segment Resource Descriptions
| API Name | API Description | Authorization Granularity | 6-Segment Resource Format | IP Address Restriction |
|---|---|---|---|---|
| CheckForceRestart | Checks for a forced restart. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| CheckOperation | Checks whether an instance is allowed to perform operations involving scale-in or restarts. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| CountInstances | Obtains the number of ES clusters. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| CountLogstashInstances | Obtains the number of Logstash instances. | Resource level | qcs::es:${Region}:uin/:logstash/${InstanceId} | Supported |
| DeleteDSLBlockTask | Deletes the statement interception task. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeAuditLogStatus | Obtains the audit log status. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeClusterSnapshot | Obtains the snapshot backup list. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeDiagnose | Queries the diagnosis result report of intelligent Ops. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeDiagnoseStats | Queries the diagnosis result statistics of intelligent Ops. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeForceMergeTask | Queries the list of new Forcemerge tasks. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeInstancePluginList | Queries the instance plugin list. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeInstancesOverview | Queries a user for all eligible instances in that region in the overview page scenario. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| DescribeLogstashInstances | Obtains the Logstash instance list. | Resource level | qcs::es:${Region}:uin/:logstash/${InstanceId} | Supported |
| DescribeLogstashViews | Queries the Logstash cluster view. | Resource level | qcs::es:${Region}:uin/:logstash/${LogstashInstanceId} | Supported |
| DescribeViews | Queries all view data of a cluster, including the cluster dimension, node dimension, and Kibana dimension. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| GetAllTraceIp | Queries trace IP addresses. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| GetInstanceUpdateMode | Obtains the supported resize mode for an ES cluster instance. The response returns an integer array: 0 direct allocation, 1 rolling restart mode, 2 blue-green resize mode. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| GetIpTraceStatus | Queries the cluster IP traceability status. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| ListEsClusterTask | Lists the ES cluster task list. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| QueryAggsIpCountLog | Obtains access IP address statistics. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| QueryAggsIpFrequenceLog | Obtains access frequency statistics of IP addresses. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| QueryIpTraceLog | Queries IP traceability logs. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| SmartAdvisorManageBatch | Tencent Cloud Smart Advisor (TSA) acquires ES cluster monitoring metrics in batches. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| UpdateIndexMetaFieldToJson | Converts an index field into the JSON format. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| UpdateIndexMetaJsonToField | Updates an index field from the JSON format. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
| UpdateIpTraceStatus | Updates the IP traceability status. | Resource level | qcs::es:${Region}:uin/:instance/${InstanceId} | Supported |
