Product |
Abbreviation in CAM |
Console |
Authorization by Tag |
Authorization Granularity |
IP Restriction |
cat |
cat |
Supported |
not supported |
Operation level |
Partially supported |
Note:
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
CreateProbeTasks |
Create Probe Tasks |
Operation level |
* |
Supported |
DeleteProbeTask |
delete probe task |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
ModifyProbeTask |
Cloud automated testing interface of modify task |
Operation level |
* |
not supported |
ResumeProbeTask |
Resume Probe Task |
Resource level |
qcs::cat::uin/${uin}:TaskId/{TaskId} |
Supported |
SuspendProbeTask |
Suspend Probe Task |
Resource level |
qcs::cat::uin/${uin}:TaskId/{TaskId} |
Supported |
UpdateProbeTaskAttributes |
update probe task attributes |
Resource level |
qcs::cat::uin/${uin}:TaskId/{TaskId} |
Supported |
UpdateProbeTaskConfigurationList |
Update Probe Task Configuration List |
Resource level |
qcs::cat::uin/${uin}:TaskId/{TaskId} |
Supported |
Read operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
DescribeAllTaskWithUrl |
Describe all tasks |
Operation level |
* |
Supported |
DescribeChartDetail |
DescribeChartDetail |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribeConsoleConfig |
get console config |
Operation level |
* |
Supported |
DescribeDetailedSingleProbeData |
describe detail single probe data |
Operation level |
* |
Supported |
DescribeHistoryInstantProbeData |
DescribeHistoryInstantProbeData |
Operation level |
* |
Supported |
DescribeInstantTasks |
DescribeInstantTasks |
Operation level |
* |
Supported |
DescribeMultiProbeMetricData |
DescribeMultiProbeMetricData |
Operation level |
* |
Supported |
DescribeNodeGroups |
DescribeNodeGroups |
Operation level |
* |
Supported |
DescribePacketCaptureDownloadUrl |
describe PacketCapture download url |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribePaymentState |
Describe Payment State |
Operation level |
* |
Supported |
DescribeProbeMetricData |
Describe Probe Metric Data |
Operation level |
* |
Supported |
DescribeProbeMetricTagValues |
Describe Probe Metric Tag Values |
Operation level |
* |
Supported |
DescribeProbeNodeGroups |
Describe ProbeNode Groups |
Operation level |
* |
Supported |
DescribeProbeNodes |
Describe Probe Nodes |
Operation level |
* |
not supported |
DescribeProbeResultInfo |
DescribeProbeResultInfo |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribeProbeTasksByAddresses |
Describe Probe Tasks By Addresses |
Operation level |
* |
Supported |
DescribeReportAvailabilityData |
DescribeReportAvailabilityData |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribeReportMetricData |
DescribeReportMetricData |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribeReportPerformance |
DescribeReportPerformance |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribeReportQuality |
DescribeReportQuality |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribeReportSingleMetricData |
DescribeReportSingleMetricData |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribeReportTaskInfo |
DescribeReportTaskInfo |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
DescribeTargetInstantTaskAndOther |
DescribeTargetInstantTaskAndOther |
Operation level |
* |
Supported |
List Operations
API |
API Description |
Authorization Granularity |
Six-segment Resource Description |
IP Restriction |
DescribeProbeTasks |
Describe Probe Tasks |
Resource level |
qcs::cat::uin/${uin}:TaskId/${TaskId} |
Supported |
Was this page helpful?