tencent cloud

Feedback

TDMQ for RocketMQ

Last updated: 2024-05-26 09:28:40

    Fundamental information

    Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
    RocketMQ trocket Supported not supported Resource level Partially supported

    Note:

    The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

    • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
    • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
    • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

    API authorization granularity

    Two authorization granularity levels of API are supported: resource level, and operation level.

    • Resource level: It supports the authorization of a specific resource.
    • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

    Write operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    AddMQTTClientSubscription AddMQTTClientSubscription Operation level * Supported
    ChangeMigratingTopicToNextStage Move a migrating topic to next stage Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    CreateConsumerGroup Create a consumer group Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/* Supported
    CreateInstance Create a new instance Resource level qcs::trocket:${region}:uin/${uin}:instance/* Supported
    CreateInstanceEndpoint Create endpoint Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    CreateMQTTInsInternalEndpoint CreateMQTTInsInternalEndpoint Operation level * not supported
    CreateMQTTInsPublicEndpoint CreateMQTTInsPublicEndpoint Operation level * Supported
    CreateMQTTInstance CreateMQTTInstance Operation level * Supported
    CreateMQTTJWKSAuthenticator CreateMQTTJWKSAuthenticator Operation level * Supported
    CreateMQTTTopic CreateMQTTTopic Operation level * Supported
    CreateMQTTUser CreateMQTTUser Operation level * Supported
    CreateMigrationTask create migration task Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} not supported
    CreateRole Create a role Resource level qcs::trocket:${region}:uin/${uin}:role/${instanceId}/* Supported
    CreateSmoothMigrationTask Create a smooth migration task Operation level * Supported
    CreateTopic Create a topic Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/* Supported
    DeleteConsumerGroup Delete a consumer group Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    DeleteInstance Delete an instance Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    DeleteInstanceEndpoint Delete an endpoint Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    DeleteMQTTAuthenticator DeleteMQTTAuthenticator Operation level * Supported
    DeleteMQTTClientSubscription DeleteMQTTClientSubscription Operation level * Supported
    DeleteMQTTInsInternalEndpoint DeleteMQTTInsInternalEndpoint Operation level * not supported
    DeleteMQTTInsPublicEndpoint DeleteMQTTInsPublicEndpoint Operation level * Supported
    DeleteMQTTInstance DeleteMQTTInstance Operation level * Supported
    DeleteMQTTTopic DeleteMQTTTopic Operation level * Supported
    DeleteMQTTUser DeleteMQTTUser Operation level * Supported
    DeleteRole Delete a role Resource level qcs::trocket:${region}:uin/${uin}:role/${instanceId}/${role} Supported
    DeleteSmoothMigrationTask Delete a smooth migration task Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DeleteTopic Delet a topic Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported
    DoHealthCheckOnMigratingTopic Do health check on a migrating topic Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    ImportACLForSmoothMigration Import ACL in a smooth migration task. Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    ImportSourceClusterConsumerGroups Import consumer groups from migrating cluster Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    ImportSourceClusterTopics Import topics from cluster which is in migration Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    ModifyConsumerGroup Modify a consumer group Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    ModifyInstance Modify an instance Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    ModifyInstanceEndpoint Modify an endpoint Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    ModifyInstancePayMode Modify an instance pay mode. Resource level qcs::trocket::uin/${uin}:instance/${instanceId} not supported
    ModifyInstanceStatus Modify an instance status Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    ModifyMQTTInsPublicEndpoint ModifyMQTTInsPublicEndpoint Operation level * Supported
    ModifyMQTTInstance ModifyMQTTInstance Operation level * Supported
    ModifyMQTTInstanceCertBinding ModifyMQTTInstanceCertBinding Operation level * Supported
    ModifyMQTTJWKSAuthenticator ModifyMQTTJWKSAuthenticator Operation level * Supported
    ModifyMQTTTopic ModifyMQTTTopic Operation level * Supported
    ModifyMQTTUser ModifyMQTTUser Operation level * Supported
    ModifyRole Modify a role Resource level qcs::trocket:${region}:uin/${uin}:role/${instanceId}/${role} Supported
    ModifySmoothMigrationTask Modify a smooth migration task Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    ModifyTopic modify topic Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported
    PublishMQTTMessage PublishMQTTMessage Operation level * Supported
    RemoveMigratingTopic Remove a migrating topic Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    ResendDeadLetterMessage resend deadLetter message Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} not supported
    ResetConsumerGroupOffset Reset consumer group offset Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    RollbackMigratingTopicStage Rollback migrating topic to previous stage Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    SendMessage Send a message Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported

    Other Operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    CheckMQTTJWKSEndpointConnection CheckMQTTJWKSEndpointConnection Operation level * Supported

    Read operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeConsumerClient Describe a consumer client Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    DescribeConsumerClientLag Describe a consumer client lag Resource level qcs::trocket::uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} not supported
    DescribeConsumerClientList Describe consumer clients Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    DescribeConsumerGroup Describe a consumer group Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    DescribeConsumerStack describe consumer stack. Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    DescribeInstance Describe an instance Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    DescribeInstanceDeliveryProgress Describe an instance delivery progress Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    DescribeInstanceTopUsages Describe instance usages Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    DescribeMQTTAuthenticator DescribeMQTTAuthenticator Operation level * Supported
    DescribeMQTTClient DescribeMQTTClient Operation level * Supported
    DescribeMQTTInsInternalEndpoint DescribeMQTTInsInternalEndpoint Operation level * not supported
    DescribeMQTTInsPublicEndpoints DescribeMQTTInsPublicEndpoints Operation level * Supported
    DescribeMQTTInsVPCEndpoints DescribeMQTTInsVPCEndpoints Operation level * Supported
    DescribeMQTTInstance DescribeMQTTInstance Operation level * Supported
    DescribeMQTTInstanceCert DescribeMQTTInstanceCert Operation level * Supported
    DescribeMQTTInstanceRealtimeStats DescribeMQTTInstanceRealtimeStats Operation level * Supported
    DescribeMQTTMessage DescribeMQTTMessage Operation level * Supported
    DescribeMQTTTopic DescribeMQTTTopic Operation level * Supported
    DescribeMessage Describe a message Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported
    DescribeMessageList Describe message list Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported
    DescribeMessageTrace Describe message traces Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported
    DescribeMigratingGroupStats Describe a consumer group\\\\\\\'s realtime stats Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId] Supported
    DescribeMigratingTopicAccessInfo Describe access info of a migrating topic Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeMigratingTopicList Describe a list of migrating topics Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeMigratingTopicStats Describe statistics of a migrating topic Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeMigrationEndpoints Describe access endpoints of a migration task Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeMigrationTask describe migration task Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} not supported
    DescribeMigrationTaskList describe migration task list Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} not supported
    DescribeProductSKUs Describe product skus Operation level * Supported
    DescribeRocketMQRetryMessageList describe rocketMQ retry message list Operation level * not supported
    DescribeSmoothMigrationTask Describe detail of a migration task Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeSourceClusterGroupList Describe consume groups of source cluster Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeSourceClusterTopicList Describe topics of source cluster Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeTopic Describe a topic Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported
    DescribeTopicListByGroup Describe topic list by group Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    DescribeTopicStatisticalList Describe topic type and count Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    ExportMessage Export messages Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported
    VerifyMessageConsumption Verify message consumption Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported

    List Operations

    API API Description Authorization Granularity Six-segment Resource Description IP Restriction
    DescribeConsumerGroupList Describe consumer group list Resource level qcs::trocket:${region}:uin/${uin}:consumerGroup/${instanceId}/${consumerGroup} Supported
    DescribeFusionInstanceList describe fusion instance list Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    DescribeFusionMigrationTaskList describe fusion migration task list Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeInstanceList Describe a list of instances Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    DescribeMQTTClientList DescribeMQTTClientList Operation level * Supported
    DescribeMQTTInstanceList DescribeMQTTInstanceList Operation level * Supported
    DescribeMQTTMessageList DescribeMQTTMessageList Operation level * Supported
    DescribeMQTTProductSKUList DescribeMQTTProductSKUList Operation level * Supported
    DescribeMQTTSubTopic DescribeMQTTSubTopic Operation level * Supported
    DescribeMQTTSubscription DescribeMQTTSubscription Operation level * Supported
    DescribeMQTTTopicList DescribeMQTTTopicList Operation level * Supported
    DescribeMQTTUserList DescribeMQTTUserList Operation level * Supported
    DescribeRetryMessageList describe rocketMQ retry message list Resource level qcs::trocket:${region}:uin/${uin}:instance/${instanceId} Supported
    DescribeRoleList Describe role list Resource level qcs::trocket:${region}:uin/${uin}:role/${instanceId}/${role} Supported
    DescribeSmoothMigrationTaskList Describe a list of smooth migration tasks Resource level qcs::trocket:${region}:uin/${uin}:taskId/${taskId} Supported
    DescribeTopicList Describe topic list Resource level qcs::trocket:${region}:uin/${uin}:topic/${instanceId}/${topic} Supported
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support