tencent cloud

PrevNext

Feedback

search by keyword

Recent Pages

Documentation
Cloud Access Management
    Documentation

    Edge Computing Machine

    Last updated: 2024-04-30 09:20:18

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      Edge Computing Machine ecm Supported Supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      AllocateAddresses Create elastic public IP Operation level * Supported
      AssignIpv6Addresses Assign the Ipv6 addresses Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
      AssignPrivateIpAddresses Assign private Ip addresses to elastic network interface Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
      AssociateAddress Bind elastic public IP Operation level * Supported
      AssociateHaVipAddressIp AssociateHaVipAddressIp Operation level * not supported
      AssociateNetworkInterfaceSecurityGroups AssociateNetworkInterfaceSecurityGroups Resource level qcs::ecm::uin/:eni/${NetworkInterfaceIds} Supported
      AssociateSecurityGroups Apply the security group to the edge instances Resource level qcs::ecm::uin/:instance/${InstanceIds} Supported
      AttachDisks AttachDisks Resource level qcs::ecm::uin/${uin}:volume/${volumeId} not supported
      AttachNetworkInterface Attach network interface to cloud VM Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
      AttachSSC AttachSSC Operation level * not supported
      BatchDeregisterTargets Batch deregister the targets Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      BatchModifyTargetWeight Batch modify the target weight Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      BatchRegisterTargets Batch register the targets Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      CloneNetworkInterfaceSecurityGroup CloneNetworkInterfaceSecurityGroup Resource level qcs::ecm::uin/:eni/${TargetNetworkInterfaceIds} Supported
      ConvertVpcId ConvertVpcId Operation level * not supported
      CopySnapshotCrossRegions CopySnapshotCrossRegions Resource level qcs::ecm::uin/${uin}:snapshot/${SnapshotId} not supported
      CreateDisks CreateDisks Operation level * not supported
      CreateHaVip Create highly available virtual IP Operation level * Supported
      CreateImage Create image Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
      CreateListener Create the new listener Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      CreateLoadBalancer Create the new loadBalancer Operation level * Supported
      CreateModule Create new edge module Resource level qcs::ecm::uin/:module/* Supported
      CreateNetworkInterface Create the elastic network interface Operation level * Supported
      CreateNetworkInterfaces CreateNetworkInterfaces Resource level qcs::ecm::uin/${uin}:eni/* Supported
      CreateNodeTemplate Create node template Operation level * Supported
      CreateRouteTable Create route table Operation level * Supported
      CreateRoutes Create routing policy Operation level * Supported
      CreateSecurityGroup Create security group Resource level qcs::ecm::uin/:sg/* Supported
      CreateSecurityGroupPolicies Create security group policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
      CreateSecurityGroupWithPolicies Create security group with policies Operation level * Supported
      CreateSmartConnection Create smart connection Operation level * not supported
      CreateSubnet Create Subnet Resource level qcs::ecm::uin/:subnet/* Supported
      CreateVpc Create Virtual Private Cloud Resource level qcs::ecm::uin/:vpc/* Supported
      DeleteFailedImage DeleteFailedImage Operation level * Supported
      DeleteHaVip Delete highly available virtual IP Operation level * Supported
      DeleteImage Delete image Operation level * Supported
      DeleteInstancesActionTimer DeleteInstancesActionTimer Operation level * Supported
      DeleteListener Delete the listener Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      DeleteLoadBalancer Delete the loadBalancer Resource level qcs::ecm::uin/:lb/${LoadBalancerIds} Supported
      DeleteLoadBalancerListeners Delete the multiple loadBalancer listeners Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      DeleteModule Delete the edge module Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      DeleteNetworkInterface Delete the elastic network interface Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
      DeleteNodeTemplate Delete node template Operation level * Supported
      DeleteRouteTable Delete route table Operation level * Supported
      DeleteRoutes Delete routing policy Operation level * Supported
      DeleteSecurityGroup Delete security group Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
      DeleteSecurityGroupPolicies Delete security group policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
      DeleteSmartConnection Delete smart connection Operation level * not supported
      DeleteSnapshots DeleteSnapshots Resource level qcs::ecm::uin/${uin}:snapshot/${snapshotId} not supported
      DeleteSubnet Delete Subnet Resource level qcs::ecm::uin/:subnet/${SubnetId} Supported
      DeleteVpc Delete Virtual Private Cloud Resource level qcs::ecm::uin/:vpc/${VpcId} Supported
      DetachDisks DetachDisks Resource level qcs::ecm::uin/${uin}:volume/${volumeId} not supported
      DetachNetworkInterface Detach network interface from cloud VM Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
      DetachSSC DetachSSC Operation level * not supported
      DisableRoutes Disable subnet routing Operation level * Supported
      DisassociateAddress Disassociate elastic public IP Operation level * Supported
      DisassociateHaVipAddressIp DisassociateHaVipAddressIp Operation level * not supported
      DisassociateInstancesKeyPairs This command is used to unbind the key of the instance Operation level * Supported
      DisassociateNetworkInterfaceSecurityGroups DisassociateNetworkInterfaceSecurityGroups Resource level qcs::ecm::uin/:eni/${NetworkInterfaceIds} Supported
      DisassociateSecurityGroups Cancel the application of the security group to the edge instances Resource level qcs::ecm::uin/:instance/${InstanceIds} Supported
      EnableRoutes Enable subnet routing Operation level * Supported
      ImagePreheat ImagePreheat Operation level * Supported
      ImportCustomImage Import custom image Operation level * Supported
      ImportCvmImage ImportCvmImage Operation level * Supported
      ImportImage Import image Operation level * Supported
      MigrateNetworkInterface Migrate the elastic network interface Resource level qcs::ecm::uin/:instance/${DestinationInstanceId} Supported
      MigratePrivateIpAddress Migrate the private Ip addresses from elastic network interface Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
      ModifyAddressAttribute Modify elastic public IP attribute Operation level * Supported
      ModifyAddressesBandwidth Modify elastic public IP bandwidth Operation level * Supported
      ModifyDefaultSubnet Modify default subnet Resource level qcs::ecm::uin/:subnet/${SubnetId} Supported
      ModifyDiskAttributes ModifyDiskAttributes Resource level qcs::ecm::uin/${uin}:volume/${volumeId}
      qcs::ecm::uin/${uin}:snapshot/${SnapshotId}      		 not supported
      ModifyHaVipAttribute Modify highly available virtual IP attribute Operation level * Supported
      ModifyImageAttribute Modify image attribute Operation level * Supported
      ModifyInstancesAttribute Modify the edge instance attributes Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      ModifyIpv6AddressesAttribute Modify the Ipv6 addresses attribute of elastic network interface Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
      ModifyListener Modify the listener attribute Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      ModifyLoadBalancerAttributes Modify the loadBalancer attribute Resource level qcs::ecm::uin/:lb/${LoadBalancerIds} Supported
      ModifyModuleConfig Modify the edge module configuration Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      ModifyModuleDisableWanIp Modify the edge module public IP allocation seting Resource level qcs::ecm::uin/${uin}:module/${ModuleId} Supported
      ModifyModuleImage Modify the edge module default OS image setting Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      ModifyModuleIpDirect Modify the edge module direct IP setting Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      ModifyModuleName Modify the edge module name Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      ModifyModuleNetwork Modify the edge module default bandwidth setting Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      ModifyModuleProject ModifyModuleProject Resource level qcs::ecm::uin/:module/* not supported
      ModifyModuleSecurityGroups Modify the edge module default security group setting Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      ModifyNetworkInterfaceAttribute ModifyNetworkInterfaceAttribute Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
      ModifyPrivateIpAddressesAttribute Modify the private Ip addresses of elastic network interface Resource level qcs::ecm::uin/${uin}:eni/${NetworkInterfaceId} Supported
      ModifyRouteTableAttribute Modify route table attribute Operation level * Supported
      ModifySecurityGroupAttribute Modify security group attribute Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
      ModifySecurityGroupPolicies Modify security group out and in policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
      ModifySmartConnection Modify smart connection Operation level * not supported
      ModifySnapshotAttribute ModifySnapshotAttribute Resource level qcs::ecm::uin/${uin}:snapshot/${SnapshotId} not supported
      ModifySubnetAttribute Modify Subnet attribute Resource level qcs::ecm::uin/:subnet/${SubnetId} Supported
      ModifyTargetPort Modify the target port Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      ModifyTargetWeight Modify the target weight Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      ModifyVpcAttribute Modify Virtual Private Cloud attribute Resource level qcs::ecm::uin/:vpc/${VpcId} Supported
      RebootInstances Reboot the edge instance Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      ReleaseAddresses Release elastic public IP Operation level * Supported
      ReleaseIpv6Addresses Release the Ipv6 addresses Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
      RemovePrivateIpAddresses Remove private Ip addresses from elastic network interface Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
      ReplaceRouteTableAssociation Replace route table binding relation Operation level * Supported
      ReplaceRoutes Replace routing policy Operation level * Supported
      ReplaceSecurityGroupPolicy Replace single security group routing policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
      ResetInstances Reinstall the edge instance OS Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      ResetInstancesMaxBandwidth Modify the edge instance bandwidth upper limit setting Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      ResetInstancesNewFlag ResetInstancesNewFlag Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      ResetInstancesPassword Reset the edge instance OS login password Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      ResetRoutes Reset route table name and routing policy Operation level * Supported
      RunInstances Create the edge instances Resource level qcs::ecm::uin/:instance/* Supported
      SetLoadBalancerSecurityGroups Set loadBalancer security groups Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      SetSecurityGroupForLoadbalancers Bind or unbind a security group to multiple loadBalancer instances Resource level qcs::ecm::uin/:lb/${LoadBalancerIds} Supported
      StartInstances Start the edge instances Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      StopInstances Stop the edge instances Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      TerminateDisks TerminateDisks Resource level qcs::ecm::uin/${uin}:volume/${volumeId} not supported
      TerminateInstances Terminate the edge instance Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      UpdateInstancesActionTimer UpdateInstancesActionTimer Operation level * Supported
      UpdateModuleInstanceType UpdateModuleInstanceType Resource level qcs::ecm::uin/:module/${ModuleId} Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeAddressQuota Describe elastic public IP quota Operation level * Supported
      DescribeAddresses Describe elastic public IP list Operation level * Supported
      DescribeAlarmInfo DescribeAlarmInfo Operation level * Supported
      DescribeAvailableBandwidth DescribeAvailableBandwidth Operation level * Supported
      DescribeBaseOverview Describe the basic statistics of the overview page Operation level * Supported
      DescribeBlockStorages DescribeBlockStorages Operation level * Supported
      DescribeConfig Describe limit config info Operation level * Supported
      DescribeCustomImageTask Describe import image task Operation level * Supported
      DescribeCustomerConfig DescribeCustomerConfig Operation level * Supported
      DescribeCustomerLimitConfig DescribeCustomerLimitConfig Operation level * Supported
      DescribeCustomerNeedApply DescribeCustomerNeedApply Operation level * Supported
      DescribeCvmImages DescribeCvmImages Operation level * not supported
      DescribeDefaultSubnet Describe default subnet of zone Operation level * Supported
      DescribeDiskConfigQuota DescribeDiskConfigQuota Operation level * not supported
      DescribeDisks DescribeDisks Resource level qcs::ecm::uin/${uin}:volume/${volumeId} not supported
      DescribeHaVips Describe highly available virtual IP Operation level * Supported
      DescribeImage Operation level * Supported
      DescribeImage Operation level * Supported
      DescribeImageOs Operation level * not supported
      DescribeImages Describe image list Operation level * Supported
      DescribeImportImage Operation level * not supported
      DescribeInstanceInternetBandwidthConfigs DescribeInstanceInternetBandwidthConfigs Resource level qcs::ecm::uin/:instance/${InstanceId} not supported
      DescribeInstanceQuota DescribeInstanceQuota Operation level * Supported
      DescribeInstanceTypeConfig Describe Instance config Operation level * Supported
      DescribeInstanceTypeConfigs DescribeInstanceTypeConfigs Operation level * Supported
      DescribeInstanceUsage Query the usage of instances, currently supporting queries on a monthly basis Operation level * Supported
      DescribeInstanceVncUrl Describe the edge instance VNC url Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
      DescribeInstancesActionTimer DescribeInstancesActionTimer Resource level qcs::ecm::uin/:instance/${InstanceIds} Supported
      DescribeInstancesDeniedActions Describe the edge instance denied actions Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      DescribeInstancesStatus DescribeInstancesStatus Resource level qcs::ecm::uin/${uin}:instance/${InstanceIds} Supported
      DescribeListeners Query the listeners list Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      DescribeLoadBalanceTaskStatus Query the loadBalancer task status Operation level * Supported
      DescribeLocalDNS DescribeLocalDNS Operation level * not supported
      DescribeModuleDetail Describe the edge module details Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      DescribeMonthPeakNetwork Describe the monthly peak and billable bandwidth on the node Operation level * Supported
      DescribeNetworkStatistics DescribeNetworkStatistics Operation level * Supported
      DescribeNode Describe the edge node list Operation level * Supported
      DescribeNodeTemplate Describe node template Operation level * Supported
      DescribeNodeTemplateDetail Describe node template detail Operation level * Supported
      DescribeNodeTraffic DescribeNodeTraffic Operation level * Supported
      DescribeOverview Operation level * not supported
      DescribePackingQuota DescribePackingQuota Operation level * Supported
      DescribePackingQuotaGroup DescribePackingQuotaGroup Operation level * Supported
      DescribePeakBaseOverview Describe basic information peak data Operation level * Supported
      DescribePeakNetworkOverview Describe network peak data Operation level * Supported
      DescribePeakOverview Operation level * not supported
      DescribePreheatedZone DescribePreheatedZone Operation level * Supported
      DescribePriceRunInstance Query the price of the ECM instance model specifications Operation level * Supported
      DescribeRegions DescribeRegions Operation level * Supported
      DescribeRouteConflicts Describe routing policy conflict list Operation level * Supported
      DescribeRouteTables Describe route table list Operation level * Supported
      DescribeScheduleImagePreheat DescribeScheduleImagePreheat Operation level * Supported
      DescribeSecurityGroupAssociationStatistics Describe security group association statistics Resource level qcs::ecm::uin/:sg/${SecurityGroupIds} Supported
      DescribeSecurityGroupLimits Describe security group limits Operation level * Supported
      DescribeSecurityGroupPolicies Describe security group policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
      DescribeSecurityGroupPolicyTemplates DescribeSecurityGroupPolicyTemplates Operation level * Supported
      DescribeSimpleInstances DescribeSimpleInstances Operation level * Supported
      DescribeSimpleNode DescribeSimpleNode Operation level * Supported
      DescribeSmartConnections Describe smart connection Operation level * not supported
      DescribeSnapshots DescribeSnapshots Resource level qcs::ecm::uin/${uin}:snapshot/${SnapshotId} not supported
      DescribeTargetHealth Get the health status of loadBalancer backend service Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      DescribeTargets Query the backend service list of loadBalancer Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
      DescribeTaskResult Describe async task execution result Operation level * Supported
      DescribeTaskStatus Describe task status Operation level * Supported
      DescribeUpdatableInstanceType DescribeUpdatableInstanceType Operation level * Supported
      DescribeUsedNode DescribeUsedNode Operation level * Supported
      DescribeUserNode DescribeUserNode Operation level * Supported
      DescribeUserNodeOption DescribeUserNodeOption Operation level * Supported
      DescribeZones DescribeZones Operation level * Supported
      QueryVpcTaskResult QueryVpcTaskResult Operation level * not supported

      List Operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeImportImageOs Describe OS list supported by import image Operation level * Supported
      DescribeInstances Describe the edge instance details Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
      DescribeLBConfLimit DescribeLBConfLimit Operation level * Supported
      DescribeLoadBalancers Query the loadBalancer list Resource level qcs::ecm::uin/:lb/${LoadBalancerIds} not supported
      DescribeModule DescribeModule Resource level qcs::ecm::uin/:module/${ModuleId} Supported
      DescribeNetworkInterfaces Query the elastic network interface list Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
      DescribeNoPreheatZone DescribeNoPreheatZone Operation level * Supported
      DescribeRegionIpv6Addresses describe ipv6 dddresses for ecm region. Operation level * Supported
      DescribeSecurityGroups Describe security groups Resource level qcs::ecm::uin/:sg/${SecurityGroupId} not supported
      DescribeSubnets Describe Subnet Resource level qcs::ecm::uin/:subnet/${SubnetId} not supported
      DescribeVpcs Describe Virtual Private Cloud List Resource level qcs::ecm::uin/:vpc/${VpcId} not supported
      Contact Us

      Contact our sales team or business advisors to help your business.

      Contact Us
      Technical Support

      Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

      Submit a Ticket
      7x24 Phone Support
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      Privacy PolicyLegalCookie Policy