TencentDB for PostgreSQL
Last updated: 2025-12-04 09:12:40
Fundamental information
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| TencentDB For PostgreSQL | postgres | Supported | Supported | Resource level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| AddDBInstanceToReadOnlyGroup | Add Instance to ReadOnlyGroup | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CloneDBInstance | clone instance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CloseAccountCAM | close account CAM | Resource level | qcs::postgres::uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CloseDBExtranetAccess | Close the instance\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CloseLog | close log | Resource level | qcs::postgres:${Region}:uin/${uin}:DBInstanceId/${InstanceId} | Supported |
| CreateAccount | Create account | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CreateBackupPlan | CreateBackupPlan | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CreateBaseBackup | This interface is used to create a base backup of an instance. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CreateDBInstanceNetworkAccess | You can add a network to the instance. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CreateDatabase | Create database | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CreateExportTask | create export task | Resource level | qcs::postgres:${Region}:uin/${uin}:DBInstanceId/${InstanceId} | Supported |
| CreateInstances | Create DBInstance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| CreateParameterTemplate | Create parameter template. | Operation level | * | Supported |
| CreateReadOnlyDBInstance | Create ReadOnly DBInstance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CreateReadOnlyGroup | Create ReadOnlyGroup | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CreateReadOnlyGroupNetworkAccess | CreateReadOnlyGroupNetworkAccess | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| CreateServerlessDBInstance | Create ServerlessDB instance | Operation level | * | Supported |
| DeleteAccount | Delete account | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DeleteBackupPlan | DeleteBackupPlan | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DeleteBaseBackup | This interface is used to delete the specified base backup of the instance. | Operation level | * | Supported |
| DeleteDBInstanceNetworkAccess | DeleteDBInstanceNetworkAccess | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DeleteExportTask | delete export task | Resource level | qcs::postgres:${Region}:uin/${uin}:DBInstanceId/${InstanceId} | Supported |
| DeleteLogBackup | This interface is used to delete the specified log backup of instance. | Operation level | * | Supported |
| DeleteParameterTemplate | Delete a parameter template | Operation level | * | Supported |
| DeleteReadOnlyGroup | Delete ReadOnlyGroup | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DeleteReadOnlyGroupNetworkAccess | DeleteReadOnlyGroupNetworkAccess | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DestroyDBInstance | Delete Instance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| DisIsolateDBInstances | disIsolate instances | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| IsolateDBInstances | isolate instances | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| LockAccount | Lock account | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyAccountPrivileges | Modify account privileges | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyAccountRemark | Modify account notes | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyBackupDownloadRestriction | modify backup download restriction | Operation level | * | Supported |
| ModifyBackupPlan | Used to modify the instance backup plan. The default is to start a full backup in the early morning, and the duration of the daily backup is 7 days. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyBaseBackupExpireTime | This interface is used to modify the expire time of the specified base backup of the instance. | Operation level | * | Supported |
| ModifyDBInstanceChargeType | ModifyDBInstanceChargeType | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| ModifyDBInstanceDeletionProtection | Modify the DeletionProtection configuration of a specific instance | Resource level | qcs::postgres::uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDBInstanceDeployment | Modify instance node availability zone deployment. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDBInstanceHAConfig | The API ModifyDBInstanceHAConfig is used to modify instance ha config. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDBInstanceName | Modify instance name | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDBInstanceParameters | ModifyDBInstanceParameters | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDBInstanceReadOnlyGroup | change Instance ReadOnlyGroup | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDBInstanceSSLConfig | Modify the SSL configuration of a specific instance | Resource level | qcs::postgres::uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDBInstanceSecurityGroups | Modify database instance security groups. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDBInstanceSpec | Modify instance specifications, including memory and disk. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| ModifyDBInstancesProject | Modify the project of instance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyDatabaseOwner | Modify database owner | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyExpandPlan | ModifyExpandPlan | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyLog | modify log | Resource level | qcs::postgres:${Region}:uin/${uin}:DBInstanceId/${InstanceId} | Supported |
| ModifyMaintainTimeWindow | Modify maintain time window of instance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifyParameterTemplate | Modify the base infomation and parameters about a parameter template. | Operation level | * | Supported |
| ModifyReadOnlyDBInstanceWeight | Modify ReadOnly Instance Weight | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| ModifyReadOnlyGroupConfig | Modify ReadOnlyGroup Config value | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ModifySwitchTimePeriod | When the upgrade requires switching, modify the switching, with the value of 0: switch immediately, and 1: switch at the specified time. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| OpenAccountCAM | open account CAM | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| OpenDBExtranetAccess | Open extranet | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| OpenLog | open log | Resource level | qcs::postgres:${Region}:uin/${uin}:DBInstanceId/${InstanceId} | Supported |
| RebalanceReadOnlyGroup | Rebalance ReadOnlyGroup by ReadOnly instance weight | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| RefreshAccountPassword | refresh account password | Resource level | qcs::postgres::uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| RemoveDBInstanceFromReadOnlyGroup | Remove Instance From ReadOnlyGroup | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| RenewInstance | Renewal | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | not supported |
| ResetAccountPassword | Reset account password | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| ResetInstancePassword | ssm reset cam account password | Resource level | qcs::postgres::uin/${uin}:UserResourceId/$UserResourceId | Supported |
| RestartDBInstance | Restart instance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| RestoreDBInstanceObjects | restore database objects | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| SetAutoRenewFlag | Set automatic renewal | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| SwitchDBInstancePrimary | The API SwitchDBInstancePrimary is used to switch primary. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| UnlockAccount | Unlock account | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| UpgradeDBInstanceKernelVersion | The API UpgradeDBInstanceKernelVersion is used to upgrade the kernel version. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| UpgradeDBInstanceMajorVersion | Upgrade instance kernel major version. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
Read operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeAccountPrivileges | Describe account privileges | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeAccounts | Get user list | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeAvailableRecoveryTime | query instance available recovery time. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeBackupDownloadRestriction | describe backup download restriction | Operation level | * | Supported |
| DescribeBackupDownloadURL | This interface is used to obtain the backup download URL. | Operation level | * | Supported |
| DescribeBackupOverview | This interface is used to query the user\\\'s backup overview information(capacity unit is byte). | Operation level | * | Supported |
| DescribeBackupPlans | Query all backup plans of the instance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeClasses | The API DescribeClasses is used to query instance available classes. | Operation level | * | Supported |
| DescribeCloneDBInstanceSpec | query clone instance spec. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBBackups | Querying backup list | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBErrlogs | Get error log | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBInstanceAttribute | Query instance details | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBInstanceAvailability | The API DescribeDBInstanceAvailability is used to describe instance availability. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBInstanceHAConfig | The API DescribeDBInstanceHAConfig is used to describe instance HA config. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBInstanceParameters | DescribeDBInstanceParameters | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBInstanceSSLConfig | Query the SSL configuration information for a specific instance. | Resource level | qcs::postgres::uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBInstanceSecurityGroups | Describe database instance security groups. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBInstanceSwitchOverEvents | The API DescribeDBInstanceSwitchOverRecordsis used to describe instance switchover events. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBInstanceUpgradeLogs | Describe Instance Upgrade Logs | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBSlowlogs | Get slow query log | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDBVersions | The API DescribeDBVersions is used to query database versions. | Operation level | * | Supported |
| DescribeDBXlogs | Get xlog list | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDatabaseObjects | Describe database objects | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDatabases | Query database list | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDbTknPwdRules | ssm describe db token password rules | Resource level | qcs::postgres::uin/${uin}:UserResourceId/$UserResourceId | not supported |
| DescribeDbTknResource | ssm describe db token resource | Resource level | qcs::postgres::uin/${uin}:UserResourceId/$UserResourceId | not supported |
| DescribeDedicatedClusters | DescribeDedicatedClusters | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeDefaultParameters | Query default parameters. | Operation level | * | Supported |
| DescribeEncryptionKeys | Gets a list of key information for the instance. | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeExpandPlan | DescribeExpandPlan | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeExportTasks | describe export tasks | Resource level | qcs::postgres:${Region}:uin/${uin}:DBInstanceId/${InstanceId} | Supported |
| DescribeLogs | describe log | Resource level | qcs::postgres:${Region}:uin/${uin}:DBInstanceId/${InstanceId} | Supported |
| DescribeMaintainTimeWindow | Query maintain time window of instance | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeOrders | Get order information | Operation level | * | Supported |
| DescribeParameterTemplateAttributes | Query a parameter-templates base information and parameters | Operation level | * | Supported |
| DescribeParameterTemplates | Query the list of parameter templates | Operation level | * | Supported |
| DescribeParamsEvent | DescribeParamsEvent | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeProductConfig | Check sales specifications | Operation level | * | Supported |
| DescribeRegions | Query Supported Regions | Operation level | * | Supported |
| DescribeSlowQueryAnalysis | Describe SlowQuery Analysis | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeSlowQueryList | Describe SlowQuery List | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeZones | Querying Availability Zones in Supported Regions | Operation level | * | Supported |
| InquiryPriceCreateDBInstances | Check sale price | Operation level | * | Supported |
| InquiryPriceRenewDBInstance | Query instance renewal price | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| InquiryPriceUpgradeDBInstance | Query upgrade price | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
List Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeBackupSummaries | This interface is used to query the statistical information of instance backups. | Operation level | * | Supported |
| DescribeBaseBackups | This interface is used to query the base backup list. | Operation level | * | Supported |
| DescribeDBInstances | Query instance list | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeLogBackups | This interface is used to query the log backup list. | Operation level | * | Supported |
| DescribeReadOnlyGroups | Query ReadOnlyGroup list | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeServerlessDBInstances | Query ServerlessDB instance list | Resource level | qcs::postgres:${region}:uin/${uin}:DBInstanceId/$DBInstanceId | Supported |
| DescribeTasks | This interface (DescribeTasks) is used to query the asynchronous task list and display the execution progress of asynchronous tasks. | Operation level | * | Supported |
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback