- Release Notes and Announcements
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Logging In to Linux Instances
- Logging in Windows Instance
- Managing Instances
- Working with Cloud Disks
- Managing Keys
- Managing Firewall
- Managing Snapshot
- Managing Image
- Private Network Interconnection
- OPS and Monitoring
- Access Management
- Transfering File
- Uploading Local Files to Lighthouse
- Uploading File from Windows to Linux Lighthouse Instance via WinSCP
- Uploading File from Windows to Lighthouse Instance via FTP
- Uploading File from Windows to Windows Lighthouse Instance via Remote Desktop Connection
- Uploading File from Linux or macOS to Linux Lighthouse Instance via SCP
- Uploading File from Linux or macOS to Lighthouse Instance via FTP
- Uploading File from Linux to Windows Lighthouse Instance via rdesktop
- Uploading File from macOS to Windows Lighthouse Instance via MRD
- Best Practices
- Ops Guide
- Troubleshooting
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Instance APIs
- RenewInstances
- DescribeInstanceVncUrl
- DescribeInstancesDeniedActions
- DescribeInstancesDiskNum
- DescribeInstancesReturnable
- DescribeInstancesTrafficPackages
- DescribeModifyInstanceBundles
- DescribeResetInstanceBlueprints
- IsolateInstances
- ModifyInstancesBundle
- RebootInstances
- ResetInstance
- ResetInstancesPassword
- StartInstances
- StopInstances
- ModifyInstancesAttribute
- ModifyInstancesRenewFlag
- CreateInstances
- DescribeInstances
- TerminateInstances
- CBS APIs
- Snapshot APIs
- Key APIs
- CCN APIs
- Image APIs
- Firewall APIs
- Scene APIs
- Package APIs
- Quota APIs
- Region APIs
- Other APIs
- Data Types
- Error Codes
- FAQs
- Contact Us
- lighthouse Policy
- Release Notes and Announcements
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Logging In to Linux Instances
- Logging in Windows Instance
- Managing Instances
- Working with Cloud Disks
- Managing Keys
- Managing Firewall
- Managing Snapshot
- Managing Image
- Private Network Interconnection
- OPS and Monitoring
- Access Management
- Transfering File
- Uploading Local Files to Lighthouse
- Uploading File from Windows to Linux Lighthouse Instance via WinSCP
- Uploading File from Windows to Lighthouse Instance via FTP
- Uploading File from Windows to Windows Lighthouse Instance via Remote Desktop Connection
- Uploading File from Linux or macOS to Linux Lighthouse Instance via SCP
- Uploading File from Linux or macOS to Lighthouse Instance via FTP
- Uploading File from Linux to Windows Lighthouse Instance via rdesktop
- Uploading File from macOS to Windows Lighthouse Instance via MRD
- Best Practices
- Ops Guide
- Troubleshooting
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Instance APIs
- RenewInstances
- DescribeInstanceVncUrl
- DescribeInstancesDeniedActions
- DescribeInstancesDiskNum
- DescribeInstancesReturnable
- DescribeInstancesTrafficPackages
- DescribeModifyInstanceBundles
- DescribeResetInstanceBlueprints
- IsolateInstances
- ModifyInstancesBundle
- RebootInstances
- ResetInstance
- ResetInstancesPassword
- StartInstances
- StopInstances
- ModifyInstancesAttribute
- ModifyInstancesRenewFlag
- CreateInstances
- DescribeInstances
- TerminateInstances
- CBS APIs
- Snapshot APIs
- Key APIs
- CCN APIs
- Image APIs
- Firewall APIs
- Scene APIs
- Package APIs
- Quota APIs
- Region APIs
- Other APIs
- Data Types
- Error Codes
- FAQs
- Contact Us
- lighthouse Policy
With Cloud Access Management (CAM), you can grant resource-level permissions for users.
In CAM, the types of Lighthouse resources that can be authorized are as follows:
Resource Type | Resource Description Method in Authorization Policy |
Instance | qcs::lighthouse:$region:$account:instance/* |
Image | qcs::lighthouse:$region:$account:blueprint/* |
Snapshot | qcs::lighthouse:$region:$account:snapshot/* |
Key | qcs::lighthouse:$region:$account:keypair/* |
The table below lists the API operations of Lighthouse that currently support resource-level permissions, as well as their resources and condition keys. When setting the resource path, you need to replace the variable parameters such as
$region and $account with your actual parameter values. You can also use the * wildcard in the path.
For relevant concepts such as region, action, account, and resource in CAM policies, see Resource Description Method.Note:
Lighthouse API operations not listed here do not support resource-level permissions. You can still authorize a user to perform such an API operation, but you must specify
* as the resource element of the policy statement.Instance
API | Resource |
ModifyInstancesBundle | qcs::lighthouse:$region:$account:instance/$instanceId |
RenewInstances | qcs::lighthouse:$region:$account:instance/$instanceId |
IsolateInstances | qcs::lighthouse:$region:$account:instance/$instanceId |
ModifyInstancesAttribute | qcs::lighthouse:$region:$account:instance/$instanceId |
ModifyInstancesRenewFlag | qcs::lighthouse:$region:$account:instance/$instanceId |
RebootInstances | qcs::lighthouse:$region:$account:instance/$instanceId |
ResetInstance | qcs::lighthouse:$region:$account:instance/$instanceId |
ResetInstancesPassword | qcs::lighthouse:$region:$account:instance/$instanceId |
StartInstances | qcs::lighthouse:$region:$account:instance/$instanceId |
StopInstances | qcs::lighthouse:$region:$account:instance/$instanceId |
TerminateInstances | qcs::lighthouse:$region:$account:instance/$instanceId |
DescribeInstancesDeniedActions | qcs::lighthouse:$region:$account:instance/$instanceId |
DescribeInstancesReturnable | qcs::lighthouse:$region:$account:instance/$instanceId |
DescribeInstancesTrafficPackages | qcs::lighthouse:$region:$account:instance/$instanceId |
DescribeInstanceVncUrl | qcs::lighthouse:$region:$account:instance/$instanceId |
DescribeResetInstanceBlueprints | qcs::lighthouse:$region:$account:instance/$instanceId |
Snapshot
API | Resource |
CreateInstanceSnapshot | qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:snapshot/* |
DeleteSnapshots | qcs::lighthouse:$region:$account:snapshot/$snapshotId |
ApplyInstanceSnapshot | qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:snapshot/$snapshotId |
DescribeSnapshotsDeniedActions | qcs::lighthouse:$region:$account:snapshot/$snapshotId |
ModifySnapshotAttribute | qcs::lighthouse:$region:$account:snapshot/$snapshotId |
Firewall
API | Resource |
CreateFirewallRules | qcs::lighthouse:$region:$account:instance/$instanceId |
DeleteFirewallRules | qcs::lighthouse:$region:$account:instance/$instanceId |
DescribeFirewallRules | qcs::lighthouse:$region:$account:instance/$instanceId |
ModifyFirewallRules | qcs::lighthouse:$region:$account:instance/$instanceId |
ModifyFirewallRuleDescription | qcs::lighthouse:$region:$account:instance/$instanceId |
Key
API | Resource |
DeleteKeyPairs | qcs::lighthouse:$region:$account:keypair/$keypairId |
AssociateInstancesKeyPairs | qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:keypair/$keypairId |
DescribeInstanceLoginKeyPairAttribute | qcs::lighthouse:$region:$account:instance/$instanceId |
DisassociateInstancesKeyPairs | qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:keypair/$keypairId |
ModifyInstancesLoginKeyPairAttribute | qcs::lighthouse:$region:$account:instance/$instanceId |
Image
API | Resource |
CreateBlueprint | qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:blueprint/* |
DeleteBlueprints | qcs::lighthouse:$region:$account:blueprint/$blueprintId |
DescribeBlueprintInstances | qcs::lighthouse:$region:$account:instance/$instanceId |
ModifyBlueprintAttribute | qcs::lighthouse:$region:$account:blueprint/$blueprintId |
Bundle
API | Resource |
DescribeModifyInstanceBundles | qcs::lighthouse:$region:$account:instance/$instanceId |
Billing
API | Resource |
InquirePriceRenewInstances | qcs::lighthouse:$region:$account:instance/$instanceId |
Yes
No
Was this page helpful?