tencent cloud

Feedback

Tencent Cloud Elastic Microservice

Last updated: 2024-07-23 09:12:44

    Fundamental information

    Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
    Tencent Cloud Elastic Microservice tem Supported Supported Resource level Partially supported

    Note:

    The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

    • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
    • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
    • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

    API authorization granularity

    Two authorization granularity levels of API are supported: resource level, and operation level.

    • Resource level: It supports the authorization of a specific resource.
    • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

    Write operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    CopyLogConfig CopyLogConfig Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateApplication create application Operation level * Supported
    CreateApplicationAutoscaler CreateApplicationAutoscaler Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateApplicationCronHorizontalAutoscaler create cron scale policy Operation level * Supported
    CreateApplicationHorizontalAutoscaler create scale policy Operation level * Supported
    CreateApplicationService CreateApplicationService Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateApplicationServiceMonitor CreateApplicationServiceMonitor Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateConfigData create configuration Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateCosToken generate the Cos temporary secret key Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateEnvironment create environment Operation level * Supported
    CreateGateway CreateGateway Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateLogConfig CreateLogConfig Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateNamespace create namespace Operation level * Supported
    CreateResource create resource by binding Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateSecretData CreateSecretData Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    CreateService create service Operation level * Supported
    CreateServiceVersion create service version Operation level * Supported
    DeleteApplication delete application Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DeleteApplicationAutoscaler delete scale policy Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DeleteApplicationDeploymentHistory delete deployment history Resource level qcs::tem::uin/${uin}:role/${roleId} not supported
    DeleteApplicationPackageHistory DeleteApplicationPackageHistory Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DeleteApplicationService DeleteApplicationService Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DeleteApplicationServiceMonitor DeleteApplicationServiceMonitor Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DeleteIngress delete ingress Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DeleteResource delete resource by unbinding Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DeleteService delete service Operation level * Supported
    DeleteServiceVersion delete service version Operation level * Supported
    DeployApplication deploy application Resource level qcs::tem::uin/${uin}:role/${roleId}
    qcs::tem::uin/${uin}:application/${applicationId}
    qcs::tem::uin/${uin}:environment/${environmentId}
    Supported
    DeployServiceVersion deploy ervice version Operation level * Supported
    DestroyConfigData destroy configuration Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DestroyEnvironment destroy environment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DestroyGateway DestroyGateway Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DestroyLogConfig DestroyLogConfig Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DestroyMultiLogConfigs DestroyMultiLogConfigs Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DestroyNamespace delete namespace Operation level * Supported
    DestroySecretData DestroySecretData Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DisableApplicationAutoscaler DisableApplicationAutoscaler Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    EnableApplicationAutoscaler EnableApplicationAutoscaler Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ForwardToApiServer ForwardToApiServer Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    GenerateApplicationPackageDownloadUrl generate download URL Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyApplicationAutoscaler ModifyApplicationAutoscaler Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyApplicationCronHorizontalAutoscaler modify cron scale policy Operation level * Supported
    ModifyApplicationHorizontalAutoscaler modify scale policy Operation level * Supported
    ModifyApplicationInfo modify application info Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyApplicationInstance modify instance specification Operation level * Supported
    ModifyApplicationPortMapping modify port mapping Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyApplicationPortMappingList ModifyApplicationPortMappingList Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyApplicationReplicas modify instance numbers Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyApplicationService ModifyApplicationService Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyApplicationServiceMonitor ModifyApplicationServiceMonitor Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyApplicationTraits Modify application traits Operation level * not supported
    ModifyCloudBaseGWAPI Turn on or off public network access Operation level * Supported
    ModifyConfigData modify configuration Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyEnvironment modify environment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyGatewayIngress ModifyGatewayIngress Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyIngress modify ingress Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyInstanceSpec modify instance spec Operation level * Supported
    ModifyLogConfig ModifyLogConfig Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyNamespace modify namespace Operation level * Supported
    ModifyResourceConfig ModifyResourceConfig Resource level qcs::tem::uin/${uin}:role/${roleId} not supported
    ModifySecretData ModifySecretData Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ModifyServiceRouteConf modify service route config Operation level * Supported
    ModifyServiceVersion modify service version spec Operation level * Supported
    ModifyVersionEsConf modify service version elastic config Operation level * Supported
    RestartApplication Restart the application Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    RestartApplicationPod restart instance Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    ResumeDeployApplication resume deployment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    RevertDeployApplication revert deployment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    RollingUpdateApplicationByVersion RollingUpdateApplicationByVersion Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    SpeedUpApplication SpeedUpApplication Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    StartEnvironment start the environment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    StopApplication stop application Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    StopEnvironment stop the environment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    StopServiceVersion stop service version Operation level * Supported

    List Operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeAlertApplications DescribeAlertApplications Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeAlertEnvironments get user alert environments Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeAllEnvironments get all environments list Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationAutoscalerList DescribeApplicationAutoscalerList Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeDeployApplicationHistory describe the history of the deployment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeEnvironments describe environments Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeGatewayList DescribeGatewayList Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeIngresses describe ingresses Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeLogConfigList DescribeLogConfigList Operation level * not supported
    DescribePagedLogConfigList DescribePagedLogConfigList Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeSecretDataList describe the list of the secrets Resource level qcs::tem::uin/${uin}:role/${roleId} Supported

    Read operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeApplicationActiveNamespaces describe active environments for the application Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationContainerSpec describe instance specification Operation level * Supported
    DescribeApplicationDemoInfos describe demo infos Operation level * Supported
    DescribeApplicationDeploymentHistory describe deployment history Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationException describe exception Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationExceptionRecords describe list of the abnormal interfaces Operation level * Supported
    DescribeApplicationImageRepo describe image repository Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationImages describe images Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationInfo describe base application info Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationInterfaceRecords describe the list of monitored interfaces Operation level * Supported
    DescribeApplicationInvolvedResources DescribeApplicationInvolvedResources Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationLogs describe logs Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationMonitorData describe monitor data Operation level * not supported
    DescribeApplicationMonitorStatistics describe monitor statistics data Operation level * Supported
    DescribeApplicationPackageHistory describe package history Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationPods describe instances Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationPresetEnv DescribeApplicationPresetEnv Resource level qcs::tem::uin/${uin}:role/${roleId} not supported
    DescribeApplicationServiceList DescribeApplicationServiceList Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationServiceMonitors DescribeApplicationServiceMonitors Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationSpeedUpStatus DescribeApplicationSpeedUpStatus Resource level qcs::tem::uin/${uin}:role/${roleId} not supported
    DescribeApplications describe applications Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeApplicationsStatus describe the status of applications Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeBaseService obtain basic service information Operation level * Supported
    DescribeBaseServiceVersion Obtain basic service version information Operation level * Supported
    DescribeChangeRecordDetail Obtain change record detail Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeChangeRecordTypes describe record types Operation level * Supported
    DescribeChangeRecords Obtain change records Operation level * Supported
    DescribeCloudBaseRunPodList get the list of running Pods below the service version Operation level * Supported
    DescribeConfigData describe configuration Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeConfigDataList describe configurations Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeCurveData obtaining monitoring data Operation level * Supported
    DescribeDemoInfos get demo info Operation level * Supported
    DescribeDeployApplicationDetail describe deployment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeDestroyLimit get the number of namespace deletes remaining Operation level * Supported
    DescribeEnvStatus get env status Operation level * Supported
    DescribeEnvironment describe environment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeEnvironmentStatistics describe statistics data of the environment Resource level qcs::tem::uin/${uin}:role/${roleId} not supported
    DescribeEnvironmentStats query environment stats Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeEnvironmentStatus describe status of the environment Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeEventLogs DescribeEventLogs Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeEventObjects gets the event object Operation level * Supported
    DescribeGateway DescribeGateway Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeGatewayIngress DescribeGatewayIngress Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeImages query image information Operation level * Supported
    DescribeIngress DescribeIngress Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeLogConfig DescribeLogConfig Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeLogs search logs Operation level * Supported
    DescribeNamespaces gets the list of tenant namespaces Operation level * Supported
    DescribeRegistryResourceEnv describe instance environments for registry Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeRelatedIngresses describe application-related ingresses Operation level * Supported
    DescribeResourceCategories describe resource categories Operation level * Supported
    DescribeResourceInUseApplications DescribeResourceInUseApplications Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeResources describe resources Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeSecretData DescribeSecretData Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeService describe EKS service Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeServiceImageRepoGuide query push guidance of image repository Operation level * Supported
    DescribeServiceList describe EKS services Resource level qcs::tem::uin/${uin}:role/${roleId} not supported
    DescribeServiceVersions get the service version list Operation level * Supported
    DescribeServices gets a list of running services Operation level * Supported
    DescribeTopApplicationUsage list top usage application list Resource level qcs::tem::uin/${uin}:role/${roleId} Supported
    DescribeVersionContainerSpec uery the image specification information Operation level * Supported
    DescribeVersionException query version exception details Operation level * Supported
    DescribeVersionName get service version drop down list Operation level * Supported
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support