tencent cloud

Feedback

Edge Computing Machine

Last updated: 2024-02-29 09:17:45

    Fundamental information

    Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
    Edge Computing Machine ecm Supported Supported Resource level Partially supported

    Note:

    The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

    • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
    • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
    • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

    API authorization granularity

    Two authorization granularity levels of API are supported: resource level, and operation level.

    • Resource level: It supports the authorization of a specific resource.
    • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

    Write operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    AllocateAddresses Create elastic public IP Operation level * Supported
    AssignIpv6Addresses Assign the Ipv6 addresses Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
    AssignPrivateIpAddresses Assign private Ip addresses to elastic network interface Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
    AssociateAddress Bind elastic public IP Operation level * Supported
    AssociateHaVipAddressIp AssociateHaVipAddressIp Operation level * not supported
    AssociateNetworkInterfaceSecurityGroups AssociateNetworkInterfaceSecurityGroups Resource level qcs::ecm::uin/:eni/${NetworkInterfaceIds} Supported
    AssociateSecurityGroups Apply the security group to the edge instances Resource level qcs::ecm::uin/:instance/${InstanceIds} Supported
    AttachDisks AttachDisks Resource level qcs::ecm::uin/${uin}:volume/${volumeId} not supported
    AttachNetworkInterface Attach network interface to cloud VM Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
    AttachSSC AttachSSC Operation level * not supported
    BatchDeregisterTargets Batch deregister the targets Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    BatchModifyTargetWeight Batch modify the target weight Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    BatchRegisterTargets Batch register the targets Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    CloneNetworkInterfaceSecurityGroup CloneNetworkInterfaceSecurityGroup Resource level qcs::ecm::uin/:eni/${TargetNetworkInterfaceIds} Supported
    ConvertVpcId ConvertVpcId Operation level * not supported
    CopySnapshotCrossRegions CopySnapshotCrossRegions Resource level qcs::ecm::uin/${uin}:snapshot/${SnapshotId} not supported
    CreateDisks CreateDisks Operation level * not supported
    CreateHaVip Create highly available virtual IP Operation level * Supported
    CreateImage Create image Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
    CreateListener Create the new listener Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    CreateLoadBalancer Create the new loadBalancer Operation level * Supported
    CreateModule Create new edge module Resource level qcs::ecm::uin/:module/* Supported
    CreateNetworkInterface Create the elastic network interface Operation level * Supported
    CreateNetworkInterfaces CreateNetworkInterfaces Resource level qcs::ecm::uin/${uin}:eni/* Supported
    CreateNodeTemplate Create node template Operation level * Supported
    CreateRouteTable Create route table Operation level * Supported
    CreateRoutes Create routing policy Operation level * Supported
    CreateSecurityGroup Create security group Resource level qcs::ecm::uin/:sg/* Supported
    CreateSecurityGroupPolicies Create security group policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
    CreateSecurityGroupWithPolicies Create security group with policies Operation level * Supported
    CreateSmartConnection Create smart connection Operation level * not supported
    CreateSubnet Create Subnet Resource level qcs::ecm::uin/:subnet/* Supported
    CreateVpc Create Virtual Private Cloud Resource level qcs::ecm::uin/:vpc/* Supported
    DeleteFailedImage DeleteFailedImage Operation level * Supported
    DeleteHaVip Delete highly available virtual IP Operation level * Supported
    DeleteImage Delete image Operation level * Supported
    DeleteInstancesActionTimer DeleteInstancesActionTimer Operation level * Supported
    DeleteListener Delete the listener Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    DeleteLoadBalancer Delete the loadBalancer Resource level qcs::ecm::uin/:lb/${LoadBalancerIds} Supported
    DeleteLoadBalancerListeners Delete the multiple loadBalancer listeners Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    DeleteModule Delete the edge module Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    DeleteNetworkInterface Delete the elastic network interface Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
    DeleteNodeTemplate Delete node template Operation level * Supported
    DeleteRouteTable Delete route table Operation level * Supported
    DeleteRoutes Delete routing policy Operation level * Supported
    DeleteSecurityGroup Delete security group Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
    DeleteSecurityGroupPolicies Delete security group policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
    DeleteSmartConnection Delete smart connection Operation level * not supported
    DeleteSnapshots DeleteSnapshots Resource level qcs::ecm::uin/${uin}:snapshot/${snapshotId} not supported
    DeleteSubnet Delete Subnet Resource level qcs::ecm::uin/:subnet/${SubnetId} Supported
    DeleteVpc Delete Virtual Private Cloud Resource level qcs::ecm::uin/:vpc/${VpcId} Supported
    DetachDisks DetachDisks Resource level qcs::ecm::uin/${uin}:volume/${volumeId} not supported
    DetachNetworkInterface Detach network interface from cloud VM Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
    DetachSSC DetachSSC Operation level * not supported
    DisableRoutes Disable subnet routing Operation level * Supported
    DisassociateAddress Disassociate elastic public IP Operation level * Supported
    DisassociateHaVipAddressIp DisassociateHaVipAddressIp Operation level * not supported
    DisassociateInstancesKeyPairs This command is used to unbind the key of the instance Operation level * Supported
    DisassociateNetworkInterfaceSecurityGroups DisassociateNetworkInterfaceSecurityGroups Resource level qcs::ecm::uin/:eni/${NetworkInterfaceIds} Supported
    DisassociateSecurityGroups Cancel the application of the security group to the edge instances Resource level qcs::ecm::uin/:instance/${InstanceIds} Supported
    EnableRoutes Enable subnet routing Operation level * Supported
    ImagePreheat ImagePreheat Operation level * Supported
    ImportCustomImage Import custom image Operation level * Supported
    ImportCvmImage ImportCvmImage Operation level * Supported
    ImportImage Import image Operation level * Supported
    MigrateNetworkInterface Migrate the elastic network interface Resource level qcs::ecm::uin/:instance/${DestinationInstanceId} Supported
    MigratePrivateIpAddress Migrate the private Ip addresses from elastic network interface Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
    ModifyAddressAttribute Modify elastic public IP attribute Operation level * Supported
    ModifyAddressesBandwidth Modify elastic public IP bandwidth Operation level * Supported
    ModifyDefaultSubnet Modify default subnet Resource level qcs::ecm::uin/:subnet/${SubnetId} Supported
    ModifyDiskAttributes ModifyDiskAttributes Resource level qcs::ecm::uin/${uin}:volume/${volumeId}
    qcs::ecm::uin/${uin}:snapshot/${SnapshotId}
    not supported
    ModifyHaVipAttribute Modify highly available virtual IP attribute Operation level * Supported
    ModifyImageAttribute Modify image attribute Operation level * Supported
    ModifyInstancesAttribute Modify the edge instance attributes Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    ModifyIpv6AddressesAttribute Modify the Ipv6 addresses attribute of elastic network interface Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
    ModifyListener Modify the listener attribute Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    ModifyLoadBalancerAttributes Modify the loadBalancer attribute Resource level qcs::ecm::uin/:lb/${LoadBalancerIds} Supported
    ModifyModuleConfig Modify the edge module configuration Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    ModifyModuleDisableWanIp Modify the edge module public IP allocation seting Resource level qcs::ecm::uin/${uin}:module/${ModuleId} Supported
    ModifyModuleImage Modify the edge module default OS image setting Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    ModifyModuleIpDirect Modify the edge module direct IP setting Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    ModifyModuleName Modify the edge module name Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    ModifyModuleNetwork Modify the edge module default bandwidth setting Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    ModifyModuleProject ModifyModuleProject Resource level qcs::ecm::uin/:module/* not supported
    ModifyModuleSecurityGroups Modify the edge module default security group setting Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    ModifyNetworkInterfaceAttribute ModifyNetworkInterfaceAttribute Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
    ModifyPrivateIpAddressesAttribute Modify the private Ip addresses of elastic network interface Resource level qcs::ecm::uin/${uin}:eni/${NetworkInterfaceId} Supported
    ModifyRouteTableAttribute Modify route table attribute Operation level * Supported
    ModifySecurityGroupAttribute Modify security group attribute Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
    ModifySecurityGroupPolicies Modify security group out and in policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
    ModifySmartConnection Modify smart connection Operation level * not supported
    ModifySnapshotAttribute ModifySnapshotAttribute Resource level qcs::ecm::uin/${uin}:snapshot/${SnapshotId} not supported
    ModifySubnetAttribute Modify Subnet attribute Resource level qcs::ecm::uin/:subnet/${SubnetId} Supported
    ModifyTargetPort Modify the target port Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    ModifyTargetWeight Modify the target weight Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    ModifyVpcAttribute Modify Virtual Private Cloud attribute Resource level qcs::ecm::uin/:vpc/${VpcId} Supported
    RebootInstances Reboot the edge instance Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    ReleaseAddresses Release elastic public IP Operation level * Supported
    ReleaseIpv6Addresses Release the Ipv6 addresses Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
    RemovePrivateIpAddresses Remove private Ip addresses from elastic network interface Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
    ReplaceRouteTableAssociation Replace route table binding relation Operation level * Supported
    ReplaceRoutes Replace routing policy Operation level * Supported
    ReplaceSecurityGroupPolicy Replace single security group routing policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
    ResetInstances Reinstall the edge instance OS Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    ResetInstancesMaxBandwidth Modify the edge instance bandwidth upper limit setting Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    ResetInstancesNewFlag ResetInstancesNewFlag Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    ResetInstancesPassword Reset the edge instance OS login password Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    ResetRoutes Reset route table name and routing policy Operation level * Supported
    RunInstances Create the edge instances Resource level qcs::ecm::uin/:instance/* Supported
    SetLoadBalancerSecurityGroups Set loadBalancer security groups Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    SetSecurityGroupForLoadbalancers Bind or unbind a security group to multiple loadBalancer instances Resource level qcs::ecm::uin/:lb/${LoadBalancerIds} Supported
    StartInstances Start the edge instances Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    StopInstances Stop the edge instances Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    TerminateDisks TerminateDisks Resource level qcs::ecm::uin/${uin}:volume/${volumeId} not supported
    TerminateInstances Terminate the edge instance Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    UpdateInstancesActionTimer UpdateInstancesActionTimer Operation level * Supported
    UpdateModuleInstanceType UpdateModuleInstanceType Resource level qcs::ecm::uin/:module/${ModuleId} Supported

    Read operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeAddressQuota Describe elastic public IP quota Operation level * Supported
    DescribeAddresses Describe elastic public IP list Operation level * Supported
    DescribeAlarmInfo DescribeAlarmInfo Operation level * Supported
    DescribeAvailableBandwidth DescribeAvailableBandwidth Operation level * Supported
    DescribeBaseOverview Describe the basic statistics of the overview page Operation level * Supported
    DescribeBlockStorages DescribeBlockStorages Operation level * Supported
    DescribeConfig Describe limit config info Operation level * Supported
    DescribeCustomImageTask Describe import image task Operation level * Supported
    DescribeCustomerConfig DescribeCustomerConfig Operation level * Supported
    DescribeCustomerLimitConfig DescribeCustomerLimitConfig Operation level * Supported
    DescribeCustomerNeedApply DescribeCustomerNeedApply Operation level * Supported
    DescribeCvmImages DescribeCvmImages Operation level * not supported
    DescribeDefaultSubnet Describe default subnet of zone Operation level * Supported
    DescribeDiskConfigQuota DescribeDiskConfigQuota Operation level * not supported
    DescribeDisks DescribeDisks Resource level qcs::ecm::uin/${uin}:volume/${volumeId} not supported
    DescribeHaVips Describe highly available virtual IP Operation level * Supported
    DescribeImage Operation level * Supported
    DescribeImage Operation level * Supported
    DescribeImageOs Operation level * not supported
    DescribeImages Describe image list Operation level * Supported
    DescribeImportImage Operation level * not supported
    DescribeInstanceInternetBandwidthConfigs DescribeInstanceInternetBandwidthConfigs Resource level qcs::ecm::uin/:instance/${InstanceId} not supported
    DescribeInstanceQuota DescribeInstanceQuota Operation level * Supported
    DescribeInstanceTypeConfig Describe Instance config Operation level * Supported
    DescribeInstanceTypeConfigs DescribeInstanceTypeConfigs Operation level * Supported
    DescribeInstanceUsage Query the usage of instances, currently supporting queries on a monthly basis Operation level * Supported
    DescribeInstanceVncUrl Describe the edge instance VNC url Resource level qcs::ecm::uin/:instance/${InstanceId} Supported
    DescribeInstancesActionTimer DescribeInstancesActionTimer Resource level qcs::ecm::uin/:instance/${InstanceIds} Supported
    DescribeInstancesDeniedActions Describe the edge instance denied actions Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    DescribeInstancesStatus DescribeInstancesStatus Resource level qcs::ecm::uin/${uin}:instance/${InstanceIds} Supported
    DescribeListeners Query the listeners list Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    DescribeLoadBalanceTaskStatus Query the loadBalancer task status Operation level * Supported
    DescribeLocalDNS DescribeLocalDNS Operation level * not supported
    DescribeModuleDetail Describe the edge module details Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    DescribeMonthPeakNetwork Describe the monthly peak and billable bandwidth on the node Operation level * Supported
    DescribeNetworkStatistics DescribeNetworkStatistics Operation level * Supported
    DescribeNode Describe the edge node list Operation level * Supported
    DescribeNodeTemplate Describe node template Operation level * Supported
    DescribeNodeTemplateDetail Describe node template detail Operation level * Supported
    DescribeNodeTraffic DescribeNodeTraffic Operation level * Supported
    DescribeOverview Operation level * not supported
    DescribePackingQuota DescribePackingQuota Operation level * Supported
    DescribePackingQuotaGroup DescribePackingQuotaGroup Operation level * Supported
    DescribePeakBaseOverview Describe basic information peak data Operation level * Supported
    DescribePeakNetworkOverview Describe network peak data Operation level * Supported
    DescribePeakOverview Operation level * not supported
    DescribePreheatedZone DescribePreheatedZone Operation level * Supported
    DescribePriceRunInstance Query the price of the ECM instance model specifications Operation level * Supported
    DescribeRegions DescribeRegions Operation level * Supported
    DescribeRouteConflicts Describe routing policy conflict list Operation level * Supported
    DescribeRouteTables Describe route table list Operation level * Supported
    DescribeScheduleImagePreheat DescribeScheduleImagePreheat Operation level * Supported
    DescribeSecurityGroupAssociationStatistics Describe security group association statistics Resource level qcs::ecm::uin/:sg/${SecurityGroupIds} Supported
    DescribeSecurityGroupLimits Describe security group limits Operation level * Supported
    DescribeSecurityGroupPolicies Describe security group policies Resource level qcs::ecm::uin/:sg/${SecurityGroupId} Supported
    DescribeSecurityGroupPolicyTemplates DescribeSecurityGroupPolicyTemplates Operation level * Supported
    DescribeSimpleInstances DescribeSimpleInstances Operation level * Supported
    DescribeSimpleNode DescribeSimpleNode Operation level * Supported
    DescribeSmartConnections Describe smart connection Operation level * not supported
    DescribeSnapshots DescribeSnapshots Resource level qcs::ecm::uin/${uin}:snapshot/${SnapshotId} not supported
    DescribeTargetHealth Get the health status of loadBalancer backend service Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    DescribeTargets Query the backend service list of loadBalancer Resource level qcs::ecm::uin/:lb/${LoadBalancerId} Supported
    DescribeTaskResult Describe async task execution result Operation level * Supported
    DescribeTaskStatus Describe task status Operation level * Supported
    DescribeUpdatableInstanceType DescribeUpdatableInstanceType Operation level * Supported
    DescribeUsedNode DescribeUsedNode Operation level * Supported
    DescribeUserNode DescribeUserNode Operation level * Supported
    DescribeUserNodeOption DescribeUserNodeOption Operation level * Supported
    DescribeZones DescribeZones Operation level * Supported
    QueryVpcTaskResult QueryVpcTaskResult Operation level * not supported

    List Operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeImportImageOs Describe OS list supported by import image Operation level * Supported
    DescribeInstances Describe the edge instance details Resource level qcs::ecm::uin/:instance/${InstanceIdSet} Supported
    DescribeLBConfLimit DescribeLBConfLimit Operation level * Supported
    DescribeLoadBalancers Query the loadBalancer list Resource level qcs::ecm::uin/:lb/${LoadBalancerIds} not supported
    DescribeModule DescribeModule Resource level qcs::ecm::uin/:module/${ModuleId} Supported
    DescribeNetworkInterfaces Query the elastic network interface list Resource level qcs::ecm::uin/:eni/${NetworkInterfaceId} Supported
    DescribeNoPreheatZone DescribeNoPreheatZone Operation level * Supported
    DescribeRegionIpv6Addresses describe ipv6 dddresses for ecm region. Operation level * Supported
    DescribeSecurityGroups Describe security groups Resource level qcs::ecm::uin/:sg/${SecurityGroupId} not supported
    DescribeSubnets Describe Subnet Resource level qcs::ecm::uin/:subnet/${SubnetId} not supported
    DescribeVpcs Describe Virtual Private Cloud List Resource level qcs::ecm::uin/:vpc/${VpcId} not supported
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support