tencent cloud

Policy syntax

{     
     "version":"2.0", 
     "statement": 
     [ 
        { 
           "effect":"effect", 
           "action":["action"], 
           "resource":["resource"], 
            "condition": {"key":{"value"}} 
        } 
    ] 
} 

Sample CAM Policy for Lighthouse

The following policy grants the permission to view the list of Lighthouse instances and prohibits the user xxxxxx from viewing the details of the instance lhins-e31oxxxx.

{
  "version": "2.0",
  "statement": [
      {
          "effect": "allow",
          "action": [
              "lighthouse:DescribeInstances"
          ],
          "resource": [
              "*"
          ]
      },
      {
          "effect": "deny",
          "action": [
              "lighthouse:DescribeInstances"
          ],
          "resource": [
              "qcs::lighthouse::uin/xxxxxx:instance/lhins-e31oxxxx"
          ]
      }
  ]
}

Lighthouse Resource Path

Each Lighthouse policy statement has its own applicable resources generally in the following format:

qcs:project_id:service_type:region:account:resource

project_id: Describes the project information, which is only used to enable compatibility with legacy CAM logic and can be left empty.
service_type: Describes the product abbreviation such as lighthouse.
region: Describes the region information, such as ap-guangzhou.
account: Describes the root account of the resource owner, such as uin/xxxxxx.
resource: Detailed resource information of each product, for example, instance/instance_id1 or instance/*.