CTSDB supports resource-level authorization. You can grant a specified sub-account the API permission of a specified resource.
APIs supporting resource-level authorization include:
Notes
CTSDB API operations not listed here do not support resource-level permissions. You can still authorize a user to perform such an API operation, but you must specify
* as the resource element of the policy statement.API | Description | Six-Segment Example of Resource |
ModifyDBInstanceUserPassword | Modifies the user password of a database instance | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
DescribeDBInstances | Queries the list of instances | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
InitDBInstance | Initializes a database instance | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
ModifyDBInstanceName | Renames a database instance | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
ModifyDBInstanceProject | Modifies the project of a database instance | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
RecycleDBInstance | Repossess a database instance | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
DescribeDBInstanceMetricInfo | Queries the metric information of a database instance | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
DescribeDBInstanceMetricList | Queries the metric list of a database instance | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
DescribeDBInstanceMetricQuery | Queries the metric queries of a database instance | qcs::ctsdb:$region:$account:instanceId/* qcs::ctsdb:$region:$account:instanceId/$instanceId |
Yes
No
Was this page helpful?