tencent cloud

Feedback

Auto Scaling

Last updated: 2024-05-26 09:21:39

    Fundamental information

    Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
    Auto Scaling as Supported Supported Resource level Partially supported

    Note:

    The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

    • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
    • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
    • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

    API authorization granularity

    Two authorization granularity levels of API are supported: resource level, and operation level.

    • Resource level: It supports the authorization of a specific resource.
    • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

    Write operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    AttachInstances Attach Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    AttachLoadBalancers add load balancers to auto scaling group. Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    CancelInstanceRefresh Cancel instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    ClearLaunchConfigurationAttributes Clear specific attributes of the launch configuration. Resource level qcs::as:$region:$account:launch-configuration/$launchConfigurationId Supported
    CompleteLifecycleAction Complete Lifecycle Action Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    CreateAutoScalingGroup Create Auto Scaling Group Resource level qcs::as:$region:$account:auto-scaling-group/* not supported
    CreateAutoScalingGroupFromInstance Create a launch configuration and a scaling group based on an instance. Resource level qcs::as:$region:$account:auto-scaling-group/* Supported
    CreateLaunchConfiguration Create Launch Configuration Resource level qcs::as:$region:$account:launch-configuration/* not supported
    CreateLifecycleHook Create Lifecycle Hook Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    CreateNotificationConfiguration Create Notification Configuration Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    CreateScalingPolicy Create Scaling Policy Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    CreateScheduledAction Create Scheduled Action Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DeleteAutoScalingGroup Delete Auto Scaling Group Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DeleteLaunchConfiguration Delete Launch Configuration Resource level qcs::as:$region:$account:launch-configuration/$launchConfigurationId Supported
    DeleteLifecycleHook Delete Lifecycle Hook Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DeleteNotificationConfiguration Delete Notification Configuration Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DeleteScalingPolicy Delete Scaling Policy Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DeleteScheduledAction Delete Scheduled Action Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DetachInstances Detach Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DetachLoadBalancers detach load balancers from auto scaling groups Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    DisableAutoScalingGroup Disable Auto Scaling Group Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    EnableAutoScalingGroup Enable Auto Scaling Group Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    ExitStandby Instance exit standby status Operation level * Supported
    InvokeCommand InvokeCommand Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId}
    qcs::tat:${region}:uin/${uin}:command/${commandId}
    not supported
    ModifyLaunchConfigurationAttributes Modify Launch Configuration Attributes Resource level qcs::as:$region:$account:launch-configuration/$launchConfigurationId not supported
    ModifyLifecycleHook modify lifecycle hook Operation level * Supported
    ModifyLoadBalancerTargetAttributes modify load balancer target attributes. Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    ModifyLoadBalancers Modify Load Balancers Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    ModifyNotificationConfiguration Modify Notification Configuration Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    ModifyScalingPolicy Modify Scaling Policy Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    ModifyScheduledAction Modify Scheduled Action Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    RemoveInstances Remove Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    ResumeInstanceRefresh Resume instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    RollbackInstanceRefresh Rollback instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    ScaleInInstances scale in instances by specified number Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    ScaleOutInstances scale out instance by specified number Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    SetInstancesProtection Set Instances Protection Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    StartAutoScalingInstances Start Auto Scaling Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    StartInstanceRefresh Start instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    StopAutoScalingInstances Stop Auto Scaling Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    StopInstanceRefresh Stop instance refresh Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} not supported
    UpgradeLaunchConfiguration Upgrade a launch configuration in a "completely overriding" manner. Resource level qcs::as:$region:$account:launch-configuration/$launchConfigurationId Supported
    UpgradeLifecycleHook Upgrade Lifecycle Hook Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported

    Read operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeAccountLimits Describe Account Limits Operation level * not supported
    DescribeAutoScalingAdvices describe auto scaling advices Resource level qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} Supported
    DescribeRefreshActivities Describe instance refresh activities Operation level * Supported
    ExecuteScalingPolicy Execute Scaling Policy Operation level * not supported
    ModifyAutoScalingGroup Modify auto scaling group Operation level * Supported
    ModifyDesiredCapacity Modify desired capacity Operation level * Supported

    List Operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeAutoScalingActivities Describe Auto Scaling Activities Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DescribeAutoScalingGroupLastActivities Describe AutoScalingGroup Last Activities Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DescribeAutoScalingGroups Describe Auto Scaling Groups Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DescribeAutoScalingInstances Describe Auto Scaling Instances Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DescribeLaunchConfigurations Describe Launch Configurations Resource level qcs::as:$region:$account:launch-configuration/$launchConfigurationId Supported
    DescribeLifecycleHooks Describe Lifecycle Hooks Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DescribeNotificationConfigurations Describe Notification Configurations Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DescribeScalingPolicies Describe Scaling Policies Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    DescribeScheduledActions Describe Scheduled Actions Resource level qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId Supported
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support