tencent cloud

PrevNext

Feedback

search by keyword

Recent Pages

Documentation
Cloud Access Management
    Documentation

    Global Application Acceleration Platform

    Last updated: 2024-05-02 09:06:26

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      Global Application Acceleration Platform gaap Supported Supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      AddRealServers Adds an origin server. Resource level qcs::gaap::uin/${uin}:realServer/* Supported
      BindFirstLinkTemplate Bind FirstLink Template Resource level qcs::gaap::uin/${uin}:Template/${TemplateId} not supported
      BindL4ListenerRealServers Binds L4 listeners with an origin server. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:realServer/${RealServerId}      		 not supported
      BindListenerRealServers Binds listeners with an origin server. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
      qcs::gaap::uin/${uin}:realServer/${RealServerId}      		 Supported
      BindRuleRealServers Binds forwarding rules with origin server. Resource level qcs::gaap::uin/${uin}:realServer/${RealServerId}
      qcs::gaap::uin/${uin}:proxy/${ProxyId}      		 Supported
      CloneGroup Clone Group Resource level qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId} Supported
      CloseProxies Disables a connection. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      CloseProxyGroup Close ProxyGroup Resource level qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId} Supported
      CloseSecurityPolicy Disables a security policy. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      CreateCertificate Create Certificate Resource level qcs::gaap::uin/${uin}:Certificate/* Supported
      CreateCustomHeader Create Custom Header Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      CreateDomain Create Domain Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      CreateFirstLinkSession Create FirstLink Session Resource level qcs::gaap::uin/${uin}:Template/${TemplateId} Supported
      CreateFirstLinkTemplate Create FirstLink Template Resource level qcs::gaap::uin/${uin}:Template/* Supported
      CreateGlobalDomain Create Domain Resource level qcs::gaap::uin/${uin}:domain/* Supported
      CreateGlobalDomainDns CreateGlobalDomainDns Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      CreateGroupProxies Create GroupProxies Resource level qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId} Supported
      CreateHTTPListener Creates an HTTP listener. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      CreateHTTPSListener Creates an HTTPS listener. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      CreateL4Listeners Creates a L4 listener. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 not supported
      CreatePlatform create gaap platform Resource level qcs::gaap::uin/${uin}:platform/* Supported
      CreatePlatformTCPListeners create platform TCP listeners Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      CreatePlatformUDPListeners create platform UDP listeners Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      CreateProxy Creates a connection. Resource level qcs::gaap::uin/${uin}:proxy/* Supported
      CreateProxyGroup Creates a connection group. Resource level qcs::gaap::uin/${uin}:proxyGroup/* Supported
      CreateProxyGroupDomain Enables a connection group domain name. Resource level qcs::gaap::uin/${uin}:proxyGroup/${GroupId} not supported
      CreateRule Creates listener forwarding rules. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      CreateSecurityPolicy Creates security policies. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      CreateSecurityRules Adds security policy rules. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      CreateTCPListeners Creates a TCP listener. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      CreateUDPListeners Creates an UDP listener. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      DeleteCertificate Delete Certificate Resource level qcs::gaap::uin/${uin}:Certificate/${CertificateId} Supported
      DeleteDomain Deletes a forwarding rule based on domain names. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DeleteFirstLinkTemplate Delete FirstLink Template Resource level qcs::gaap::uin/${uin}:Template/${TemplateId} Supported
      DeleteGlobalDomain DeleteGlobalDomain Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      DeleteGlobalDomainDns DeleteGlobalDomainDns Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      DeleteListeners Deletes a connection listener. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      DeletePlatformListeners delete platform listeners Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      DeletePlatforms delete platforms Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      DeleteProxyGroup Deletes a connection group. Resource level qcs::gaap::uin/${uin}:proxyGroup/${GroupId} Supported
      DeleteRule Deletes a forwarding rule of a layer-7 listener. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DeleteSecurityPolicy Deletes a security policy. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DeleteSecurityRules Deletes a security policy rule. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DestroyProxies Terminates a connection. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DisableGlobalDomain Disable Dns Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      DisablePlatforms disable platforms Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      EnableGlobalDomain EnableGlobalDomain Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      EnablePlatforms enable platforms Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      ModifyCertificate Modify Certificate Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      ModifyCertificateAttributes Modify Certificate Attributes Resource level qcs::gaap::uin/${uin}:Certificate/${CertificateId} Supported
      ModifyDomain Updates the domain name of a listener forwarding rule. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      ModifyFirstLinkTemplate Modify FirstLink Template Resource level qcs::gaap::uin/${uin}:Template/${TemplateId} Supported
      ModifyGlobalDomainAttribute ModifyGlobalDomainAttribute Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      ModifyGlobalDomainDns ModifyGlobalDomainDns Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      ModifyGroupConfiguration Modify GroupConfiguration Resource level qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId} Supported
      ModifyGroupDomainConfig Configures the nearest access domain name of a connection group. Resource level qcs::gaap::uin/${uin}:proxyGroup/${GroupId} not supported
      ModifyHTTPListenerAttribute Modifies HTTP listener configuration. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      ModifyHTTPSListenerAttribute Modifies HTTPS listener configuration. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      ModifyL4Listener Modifies L4 listener configuration. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 not supported
      ModifyPlatform modify platform Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      ModifyPlatformSecurityPolicy modify platform security policy Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      ModifyPlatformTCPListenerAttribute modify platform TCP listener attribute Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      ModifyPlatformUDPListenerAttribute modify platform UDP listener attribute Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      ModifyProxiesAttribute Modifies connection attributes. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      ModifyProxiesProject Modifies the project to which a connection belongs. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      ModifyProxyConfiguration Modifies connection configuration. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      ModifyProxyDisasterRecoveryPolicy Modify ProxyDisasterRecoveryPolicy Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      ModifyProxyGroupAttribute Modifies connection group attributes. Resource level qcs::gaap::uin/${uin}:proxyGroup/${GroupId} Supported
      ModifyRealServerName Modifies an origin server name. Resource level qcs::gaap::uin/${uin}:realServer/${RealServerId} Supported
      ModifyRuleAttribute Modifies forwarding rule information. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      ModifySecurityRule Modifies a security policy rule name. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      ModifyTCPListenerAttribute Modifies TCP listener configuration. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      ModifyUDPListenerAttribute Modifies UDP listener configuration. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      OpenProxies Enables a connection. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      OpenProxyGroup Open ProxyGroup Resource level qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId} Supported
      OpenSecurityPolicy Enables a security policy. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      OpenServiceProtocol Open Service Protocol Operation level * Supported
      RemoveL4Listener Deletes a L4 connection listener. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 not supported
      RemoveRealServers Deletes an origin server. Resource level qcs::gaap::uin/${uin}:realServer/${RealServerId} Supported
      SetAuthentication Set Authentication Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      SetCustomHeader Set CustomHeader Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 not supported
      SetDomainHttp3 Set DomainHttp3 Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 not supported
      SetTlsVersion set listener TLS Operation level * not supported
      UploadCertificate Operation level * Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      CheckProxyCreate Operation level * not supported
      DescribeAccessRegions Describe Access Regions Operation level * not supported
      DescribeAccessRegionsByDestRegion Operation level * not supported
      DescribeCertificateDetail Describe Certificate Detail Resource level qcs::gaap::uin/${uin}:Certificate/${CertificateId} Supported
      DescribeCountryAreaMapping Operation level * not supported
      DescribeDestRegions Operation level * not supported
      DescribeFirstLinkStatistics Describe FirstLink Statistics Resource level qcs::gaap::uin/${uin}:Template/${TemplateId} not supported
      DescribeGroupAndStatisticsProxy Queries the information of connections and connection groups from which the statisticscan be derived. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      DescribeGroupDomainConfig Obtains the domain name resolution configuration details a connection group. Resource level qcs::gaap::uin/${uin}:proxyGroup/${GroupId} not supported
      DescribeHTTPListeners Queries HTTP listener information. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DescribeL4ListenerAvailableRealServers Queries a L4 listener origin server list. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 not supported
      DescribeL4ListenerBindRealServers Binds L4 listeners with an origin server. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
      qcs::gaap::uin/${uin}:realServer/${RealServerId}      		 not supported
      DescribeL4Listeners Queries a L4 listener list. Resource level qcs::gaap::uin/${uin}:proxy/${proxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 not supported
      DescribeListenerStatistics Queries listener statistics. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DescribeLogList Describe L7 domain log info. Operation level * Supported
      DescribeNoneBgpIpList Describe None Bgp Ip List Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribePlatformListenerStatistics pull gaap platform listener statistics data Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      DescribePlatformSecurityPolicy get platform security policy Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      DescribePlatformServerIPs Describe back-to-source ip lists of platforms. Resource level qcs::${ApiModule}::uin/:platform/${PlatformId} Supported
      DescribePlatformStatistics pull gaap platform statistics data Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      DescribePlatformTCPListeners pull platform TCP listeners Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      DescribePlatformUDPListeners get platform UDP listeners Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      DescribeProxiesStatus Queries a connection status list. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DescribeProxyAccessIPs Operation level * not supported
      DescribeProxyAndStatisticsListeners Queries the information of listeners and connections from which the statistics can bederived. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DescribeProxyDetail Queries connection details. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeProxyDisasterRecoveryPolicy Describe Proxy DisasterRecoveryPolicy Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeProxyGroupDetails Queries connection group details. Resource level qcs::gaap::uin/${uin}:proxyGroup/${GroupId} Supported
      DescribeProxyGroupStatistics Queries connection group statistics. Resource level qcs::gaap::uin/${uin}:proxyGroup/${GroupId} Supported
      DescribeProxyStatistics Queries connection statistics. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DescribeRealServerStatistics Queries the health check statistics of the bound origin server. Resource level qcs::gaap::uin/${uin}:realServer/${RealServerId} not supported
      DescribeRealServerStatusStatistics Describe RealServer Status Statistics Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeRealServersStatus Queries origin server binding status. Resource level qcs::gaap::uin/${uin}:realServer/${RealServerId} Supported
      DescribeRegionAndPrice Operation level * not supported
      DescribeRuleDomainStatistics Describe RuleDomain Statistics Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeRuleDomains Describe Rule Domains Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeRuleRealServers Queries the origin server information related to forwarding rules. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:realServer/${RealServerId}      		 Supported
      DescribeRules Queries forwarding rule information. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeSecurityPolicyDetail Obtains security policy details. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DescribeUDPListeners Queries an UDP listener list. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      DescribeUinWhiteLists Operation level * not supported
      GetProxyStatisticsData Queries connection statistics. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} not supported
      InquiryPriceCreateProxy Creates acceleration connection price inquiries. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} not supported

      List Operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeCertificates DescribeCertificates Resource level qcs::gaap::uin/${uin}:Certificate/${CertificateId} Supported
      DescribeCustomHeader Describe Custom Header Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId} Supported
      DescribeFirstLinkTemplates Describe FirstLink Templates Resource level qcs::gaap::uin/${uin}:Template/${TemplateId} Supported
      DescribeGlobalDomainDns DescribeGlobalDomainDns Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      DescribeGlobalDomains DescribeGlobalDomains Resource level qcs::gaap::uin/${uin}:domain/${DomainId} Supported
      DescribeHTTPSListeners Queries the HTTPS listener information. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeListenerRealServers Queries a listener origin server list. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
      qcs::gaap::uin/${uin}:realServer/${RealServerId}      		 Supported
      DescribePlatforms pull gaap platform list Resource level qcs::gaap::uin/${uin}:platform/${PlatformId} Supported
      DescribeProxies Queries a connection instance list. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 not supported
      DescribeProxyGroupList Pulls a connection group list. Resource level qcs::gaap::uin/${uin}:proxyGroup/${GroupId} Supported
      DescribeProxyInstances Queries a connection instance list. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      DescribeRealServers Queries origin server information. Resource level qcs::gaap::uin/${uin}:realServer/${RealServerId} not supported
      DescribeResourcesByTag Pulls a resource list by tags. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
      qcs::gaap::uin/${uin}:realServer/${RealServerId}      		 not supported
      DescribeRulesByRuleIds Describe Rules By RuleIds Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeSecurityRules Describe SecurityRules Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}      		 Supported
      DescribeTCPListeners Queries a TCP listener list. Resource level qcs::gaap::uin/${uin}:proxy/${ProxyId}
      qcs::gaap::uin/${uin}:proxyGroup/${GroupId}      		 Supported
      Contact Us

      Contact our sales team or business advisors to help your business.

      Contact Us
      Technical Support

      Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

      Submit a Ticket
      7x24 Phone Support
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      Privacy PolicyLegalCookie Policy