tencent cloud

PrevNext

Feedback

search by keyword

Recent Pages

Documentation
Cloud Access Management
    Documentation

    Application Performance Management

    Last updated: 2024-05-02 09:03:29

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      Application Performance Management apm Supported Supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      CreateApmInstance CreateApmInstance Operation level * Supported
      CreateApmInstrumentationInfo create instrumentation info Operation level * Supported
      CreateApmSampleConfig CreateApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      CreateEventTask Create event task Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      CreateLogAgentConfig Add log agent configuration Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      CreateLogClusterConfig creating a cluster collection configuration Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      CreateLogOfflineExportTask Create offline export log task Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      CreateLogQueryFavorite Create Log Query Favorite Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      CreateLogQueryTask Create asynchronous query task Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      CreateLogStatsTask Create asynchronous log statistics task Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      CreatePAASInstance CreatePAASInstance Operation level * Supported
      DeleteApmSampleConfig DeleteApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DeleteLogAgentConfig Delete log agent configuration Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DeleteLogQueryFavorite Delete Log Query Favorite Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DeletePAASInstance DeletePAASInstance Operation level * Supported
      DeleteTopologyView delete topology view Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyApmApplicationConfig ModifyApmApplicationConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      ModifyApmInstance ModifyApmInstance Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyApmSampleConfig ModifyApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      ModifyGeneralApmApplicationConfig Modify application configuration information Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyLogClusterConfig modify cluster collection configuration Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyLogClusterConfigStatus modify cluster collection configuration status Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyLogFieldMapping Update log index configuration Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyLogInstanceConfig modify Log Instance Configuration Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyLogMetric Modify Log to metric Configuration Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      ModifyLogPipeOperator Modify log pipeline operator Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyLogPipeline Manage updates pipline Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      ModifyLogStandardConfig Modify Log Standardization Configuration Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      ModifyRenewalResource Enable/disable auto-renewal for APM prepaid resources Operation level * Supported
      ModifyTopologyView modify topology view Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      OpenApmPaidVersion OpenApmPaidVersion Operation level * not supported
      TerminateApmInstance TerminateApmInstance Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeAgentInfo query service agent information Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeAgentList DescribeAgentList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeApmAgent DescribeApmAgent Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeApmApplicationConfig DescribeApmApplicationConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DescribeApmComboInfo DescribeApmComboInfo Operation level * Supported
      DescribeApmConsumption consumption Operation level * Supported
      DescribeApmInfoByAppId return appId infomation Operation level * not supported
      DescribeApmInstanceOverview Querying APM instance summary inform Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeApmInstances DescribeApmInstances Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} not supported
      DescribeApmOperatorInfo get apm operator info Operation level * Supported
      DescribeApmPAASDeduplicateSpanList DescribeApmPAASDeduplicateSpanList Operation level * Supported
      DescribeApmRegions DescribeApmRegions Operation level * Supported
      DescribeApmSampleConfig DescribeApmSampleConfig Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DescribeDBTagValues Get the database tag value Operation level * Supported
      DescribeEventData Get instance gcLog log or thread deadlock related information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeExistInstances Query whether there is an APM instance being reported by the user Operation level * Supported
      DescribeFlameGraphData Get flame graph data Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeGeneralApmApplicationConfig DescribeGeneralApmApplicationConfig Resource level qcs::apm::uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeGeneralMetricData Get the general interface for indicator data. The user uploads the request parameters as needed, and the corresponding indicator data is returned. Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DescribeGeneralSpanList DescribeGeneralSpanList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeGrafanaMetricData DescribeGrafanaMetricData Operation level * Supported
      DescribeInstanceBriefs DescribeInstanceBriefs Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} not supported
      DescribeLogAgentVersion get Log Agent Version Operation level * Supported
      DescribeLogAsyncQuery Get asynchronous query results Operation level * Supported
      DescribeLogAsyncStats Get asynchronous statistics results Operation level * Supported
      DescribeLogClusterAgent get cluster agent information Operation level * Supported
      DescribeLogClusterInfo get collection cluster information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogContextQuery Query log context Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogEtlParse Log ETL parsing Operation level * Supported
      DescribeLogFieldValues Get the optional value of the searchable field Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogFields Get the searchable field name of the log Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogInstance Get log instance details Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogInstanceInfo get instance log reporting information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogMetric Get the instance log to metric configuration list Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DescribeLogMetricData General log indicator interface Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogMonitorData Log monitoring and reporting Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogOfflineExportTasks Get the export log task list Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogQuery Query log Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogQueryFavorite Describe Log Query Favorite Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeLogReportTop Obtain the instance with the largest number oflog reports and its region Operation level * Supported
      DescribeLogStats Get log minutes statistics Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeMetricLineData DescribeMetricLineData Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeMetricRecords DescribeMetricRecords Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribePAASGeneralSpanList DescribePAASGeneralSpanList Operation level * Supported
      DescribePAASMetricLineData DescribePAASMetricLineData Operation level * Supported
      DescribePAASMetricPointData DescribePAASMetricPointData Operation level * Supported
      DescribePAASTagValues DescribePAASTagValues Operation level * Supported
      DescribePAASTopology DescribePAASTopology Operation level * Supported
      DescribeResources Query user available prepaid resource packs Operation level * Supported
      DescribeService DescribeService Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DescribeServiceLink Query service upstream and downstream Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeServiceNodes DescribeServiceNodes Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeServiceOverview DescribeServiceOverview Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeSpanTagList DescribeSpanTagList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeSpanThreadAnatomyList Query thread profiling information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeSpanTreeByID DescribeSpanTreeByID Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeSqlMetricData Get the database-related indicator interface. The user uploads the request parameters as needed, and the corresponding indicator data is returned. Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DescribeTagCountValues DescribeTagCountValues Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DescribeTagValues DescribeTagValues Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeTopology DescribeTopology Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeTopologyMetricLineData DescribeTopologyMetricLineData Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeTopologyNew DescribeTopologyNew Resource level qcs::apm:${Region}:uin/:apm-instance/${InstanceId} Supported
      DescribeTopologyView get topology view Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeTraceAnalyzeSpanList Query trace time-consuming analysis information Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      DescribeTraceList DescribeTraceList Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      GetLogAgentConfig Query agent log configuration Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      GetLogClusterConfig get cluster log collection configuration Resource level qcs::apm:${region}:uin/${uin}:apm-instance/${InstanceId} Supported
      Contact Us

      Contact our sales team or business advisors to help your business.

      Contact Us
      Technical Support

      Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

      Submit a Ticket
      7x24 Phone Support
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      Privacy PolicyLegalCookie Policy