tencent cloud

Feedback

TencentDB for PostgreSQL

Last updated: 2024-05-26 09:26:22

    Fundamental information

    Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
    TencentDB For PostgreSQL postgres Supported Supported Resource level Partially supported

    Note:

    The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

    • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
    • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
    • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

    API authorization granularity

    Two authorization granularity levels of API are supported: resource level, and operation level.

    • Resource level: It supports the authorization of a specific resource.
    • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

    Write operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    AddDBInstanceToReadOnlyGroup Add Instance to ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    CloneDBInstance clone instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    CloseDBExtranetAccess Close the instance\\\\\'s external network Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    CloseServerlessDBExtranetAccess Close serverless instance extranet Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    CreateBaseBackup This interface is used to create a base backup of an instance. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    CreateDBInstanceNetworkAccess You can add a network to the instance. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    CreateDBInstances Create instance Operation level * Supported
    CreateInstances Create instance Operation level * not supported
    CreateParameterTemplate Create parameter template. Operation level * Supported
    CreateReadOnlyDBInstance Create ReadOnly DBInstance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    CreateReadOnlyGroup Create ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    CreateReadOnlyGroupNetworkAccess CreateReadOnlyGroupNetworkAccess Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    CreateServerlessDBInstance Create ServerlessDB instance Operation level * Supported
    DeleteBaseBackup This interface is used to delete the specified base backup of the instance. Operation level * Supported
    DeleteDBInstanceNetworkAccess DeleteDBInstanceNetworkAccess Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DeleteLogBackup This interface is used to delete the specified log backup of instance. Operation level * Supported
    DeleteParameterTemplate Delete a parameter template Operation level * Supported
    DeleteReadOnlyGroup Delete ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DeleteReadOnlyGroupNetworkAccess DeleteReadOnlyGroupNetworkAccess Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DeleteServerlessDBInstance Delete ServerlessDB instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DestroyDBInstance Delete Instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    DisIsolateDBInstances disIsolate instances Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    InitDBInstances Initialize the instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    IsolateDBInstances isolate instances Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    ModifyAccountRemark Modify account notes Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyBackupDownloadRestriction modify backup download restriction Operation level * Supported
    ModifyBackupPlan Used to modify the instance backup plan. The default is to start a full backup in the early morning, and the duration of the daily backup is 7 days. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyBaseBackupExpireTime This interface is used to modify the expire time of the specified base backup of the instance. Operation level * Supported
    ModifyDBInstanceChargeType ModifyDBInstanceChargeType Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    ModifyDBInstanceDeployment Modify instance node availability zone deployment. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyDBInstanceHAConfig The API ModifyDBInstanceHAConfig is used to modify instance ha config. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyDBInstanceName Modify instance name Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyDBInstanceParameters ModifyDBInstanceParameters Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyDBInstanceReadOnlyGroup change Instance ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyDBInstanceSecurityGroups Modify database instance security groups. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyDBInstanceSpec Modify instance specifications, including memory and disk. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    ModifyDBInstancesProject Modify the project of instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyMaintainTimeWindow Modify maintain time window of instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifyParameterTemplate Modify the base infomation and parameters about a parameter template. Operation level * Supported
    ModifyReadOnlyGroupConfig Modify ReadOnlyGroup Config value Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    ModifySwitchTimePeriod When the upgrade requires switching, modify the switching, with the value of 0: switch immediately, and 1: switch at the specified time. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    OpenDBExtranetAccess Open extranet Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    OpenServerlessDBExtranetAccess Open serverless instance extranet Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    RebalanceReadOnlyGroup Rebalance ReadOnlyGroup by ReadOnly instance weight Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    RemoveDBInstanceFromReadOnlyGroup Remove Instance From ReadOnlyGroup Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    RenewInstance Renews instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    ResetAccountPassword Reset account password Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    RestartDBInstance Restart instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    SetAutoRenewFlag Set automatic renewal Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    SwitchDBInstancePrimary The API SwitchDBInstancePrimary is used to switch primary. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    UpgradeDBInstance Upgrade instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    UpgradeDBInstanceKernelVersion The API UpgradeDBInstanceKernelVersion is used to upgrade the kernel version. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    UpgradeDBInstanceMajorVersion Upgrade instance kernel major version. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported

    Read operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeAccounts Get user list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeAvailableRecoveryTime query instance available recovery time. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeBackupDownloadRestriction describe backup download restriction Operation level * Supported
    DescribeBackupDownloadURL This interface is used to obtain the backup download URL. Operation level * Supported
    DescribeBackupOverview This interface is used to query the user\'s backup overview information(capacity unit is byte). Operation level * Supported
    DescribeBackupPlans Query all backup plans of the instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeClasses The API DescribeClasses is used to query instance available classes. Operation level * Supported
    DescribeCloneDBInstanceSpec query clone instance spec. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBBackups Querying backup list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBErrlogs Get error log Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBInstanceAttribute Query instance details Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBInstanceAvailability The API DescribeDBInstanceAvailability is used to describe instance availability. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBInstanceHAConfig The API DescribeDBInstanceHAConfig is used to describe instance HA config. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBInstanceParameters DescribeDBInstanceParameters Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBInstanceSecurityGroups Describe database instance security groups. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBInstanceSwitchOverEvents The API DescribeDBInstanceSwitchOverRecordsis used to describe instance switchover events. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBSlowlogs Get slow query log Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDBVersions The API DescribeDBVersions is used to query database versions. Operation level * Supported
    DescribeDBXlogs Get xlog list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDatabases Query database list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeDefaultParameters Query default parameters. Operation level * Supported
    DescribeEncryptionKeys Gets a list of key information for the instance. Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeMaintainTimeWindow Query maintain time window of instance Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeOrders Get order information Operation level * Supported
    DescribeParameterTemplateAttributes Query a parameter-template\'s base information and parameters Operation level * Supported
    DescribeParameterTemplates Query the list of parameter templates Operation level * Supported
    DescribeParamsEvent DescribeParamsEvent Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeProductConfig Check sales specifications Operation level * not supported
    DescribeRegions Query Supported Regions Operation level * not supported
    DescribeSlowQueryAnalysis Describe SlowQuery Analysis Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeSlowQueryList Describe SlowQuery List Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeZones Querying Availability Zones in Supported Regions Operation level * not supported
    InquiryPriceCreateDBInstances Check sale price Operation level * Supported
    InquiryPriceRenewDBInstance Query instance renewal price Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    InquiryPriceUpgradeDBInstance Query upgrade price Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported

    List Operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeBackupSummaries This interface is used to query the statistical information of instance backups(capacity unit is byte). Operation level * Supported
    DescribeBaseBackups This interface is used to query the base backup list. Operation level * Supported
    DescribeDBInstances Query instance list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId not supported
    DescribeLogBackups This interface is used to query the log backup list. Operation level * Supported
    DescribeReadOnlyGroups Query ReadOnlyGroup list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    DescribeServerlessDBInstances Query ServerlessDB instance list Resource level qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId Supported
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support