tencent cloud

Service roles and service-linked roles are predefined by Tencent Cloud services and, upon user authorization, the corresponding services can access and use resources by assuming these service-linked roles. This document provides detailed information on the use cases and associated authorization policies of these specific service-linked roles.

Advisor_QCSLinkedRoleInBusinessContinuity

Use Cases： The current role is the Advisor service role, this role is used to Advisor to access CVM, VPC, COS and other service resources, without the need for user escrow keys, and the operation is more efficient and safe.
Authorization Polices

• Policy Name： QcloudAccessForAdvisorLinkedRoleInBusinessContinuity
• Policy Information：

{
    "version": "2.0",
    "statement": [
        {
            "action": [
                "cvm:Describe*",
                "cvm:Inquiry*",
                "vpc:Describe*",
                "vpc:Inquiry*",
                "vpc:Get*",
                "monitor:Describe*",
                "monitor:Get*",
                "cam:ListUsersForGroup",
                "cam:ListGroups",
                "cam:GetGroup",
                "clb:Describe*",
                "cos:List*",
                "cos:Get*",
                "cos:Head*",
                "cos:OptionsObject",
                "cdb:Describe*",
                "mongodb:Describe*",
                "redis:Describe*",
                "redis:Get*",
                "redis:Inquiry*",
                "es:Describe*",
                "emr:Describe*",
                "emr:Inquiry*",
                "emr:Check*",
                "emr:List*",
                "emr:Describle*",
                "cloudaudit:LookUpEvents",
                "cdn:Describe*",
                "cdn:Get*",
                "cdn:List*",
                "ssl:Describe*",
                "tag:Get*",
                "ckafka:Get*",
                "ckafka:List*",
                "ckafka:Describe*",
                "tdmq:Describe*",
                "scf:Get*",
                "scf:List*",
                "cam:GetRole",
                "cam:ListAttachedRolePolicies",
                "cls:getLogset",
                "cls:getTopic",
                "cls:listTopic",
                "apigw:Describe*",
                "cmqtopic:GetTopicAttributes",
                "cmqtopic:GetSubscriptionAttributes",
                "tsf:Describe*",
                "tsf:Get*",
                "tsf:List*",
                "tsf:Search*",
                "tsf:Find*",
                "tsf:ImageUserIsExists",
                "tsf:ImageGetRepositoryList",
                "tsf:DscribeTasks",
                "tbase:Describe*",
                "tdach:Describe*",
                "tdapg:Describe*",
                "dcdb:Describe*",
                "tke:Describe*",
                "live:Describe*",
                "im:Describe*",
                "im:CheckIfIMNewUser",
                "cfw:Describe*",
                "waf:WafGet*",
                "waf:WAFGetUserInfo",
                "waf:WafDownloadAlerts",
                "waf:WafPackagePrice",
                "waf:WafAreaBanGetAreas",
                "waf:WafFreqGetRuleList",
                "waf:WafAntiFakeGetUrl",
                "waf:WafInterface",
                "waf:WafClsOverview",
                "waf:QueryFlows",
                "waf:WafDownloadRecords",
                "waf:WafDownloadlogs",
                "waf:WafSearchLogs",
                "waf:WafDNSdetectGet*",
                "waf:BotGet*",
                "waf:Get*",
                "waf:Search*",
                "waf:BotV2Get*",
                "wss:CertGetList",
                "waf:Describe*",
                "tag:DescribeResourceTagsByResourceIds",
                "mariadb:Describe*",
                "antiddos:Describe*",
                "cam:DescribeSafeAuthFlagColl",
                "cam:ListUsers",
                "cam:DescribeSubAccounts",
                "ccs:DescribeCluster",
                "sms:SmsPackagesStatistics",
                "domain:*",
                "sms:CallbackStatusStatistics",
                "sms:SendStatusStatistics",
                "dc:DescribeDirectConnects",
                "dc:DescribeDirectConnectTunnels",
                "trtc:Describe*",
                "trtc:Get*",
                "trtc:ShowRoomList",
                "trtc:ShowUserList",
                "trtc:RemindBalance",
                "trtc:HardDescribeMixConf",
                "memcached:DescribeInstances",
                "cynosdb:DescribeClusterDetail",
                "cynosdb:DescribeRollbackTimeValidity",
                "cynosdb:DescribeRollbackTimeRange",
                "cynosdb:DescribeInstanceSpecs",
                "cynosdb:DescribeInstances",
                "cynosdb:DescribeInstanceDetail",
                "cynosdb:DescribeDBSecurityGroups",
                "cynosdb:DescribeClusters",
                "cynosdb:DescribeClusterInstanceGrps",
                "cynosdb:DescribeBackupList",
                "cynosdb:DescribeBackupConfig",
                "cynosdb:DescribeAccounts",
                "dnspod:DescribeDomain",
                "dnspod:DescribeDomainList",
                "dnspod:DescribeDomainLogList",
                "dnspod:DescribeDomainPurview",
                "dnspod:DescribeDomainShareInfo",
                "dnspod:DescribeRecord",
                "dnspod:DescribeRecordLineList",
                "dnspod:DescribeRecordList",
                "dnspod:DescribeRecordType",
                "dnspod:DescribeUserDetail",
                "vod:DescribeCDNStatDetails",
                "vod:DescribeSubAppIds",
                "vod:DescribeDefaultDistributionConfig",
                "vod:DescribeVodDomains",
                "cwp:DescribeVulList",
                "cfs:DescribeCfsFileSystems",
                "cfs:DescribeAutoSnapshotPolicies",
                "cfs:DescribeCfsSnapshots",
                "sms:DescribeAppList",
                "sms:DescribeVerificationCodeStatistic",
                "sms:DescribeAntiBrushThreshold",
                "tke:CreateInstantInspectJob",
                "tke:DescribeInstantInspectTask",
                "cloudaudit:DescribeEvents",
                "clb:DescribeQuota",
                "cdb:QueryCDBProxy",
                "clb:DescribeClusterResources",
                "ssl:DescribeCertificateBindResources",
                "monitor:GetIntegrationProductList",
                "monitor:DescribeOneClickAlarmConfigs",
                "monitor:DescribeAlarmPolicies",
                "antiddos:DescribeListProtocolBlockConfig",
                "cloudhsm:DescribeVsms",
                "kms:GetServiceStatus",
                "as:DescribeAutoScalingInstances",
                "billing:DescribeCostSummaryByProduct",
                "finance:DescribeBillSummaryByProduct",
                "tke:ListClusterInspectionResultsItems",
                "tke:ListClusterInspectionResults",
                "dnspod:DescribeSnapshotConfig",
                "dnspod:DescribeDomainFilterList",
                "dc:DoDcHealthInspection",
                "teo:DescribeDefaultCertificates",
                "teo:DescribeHostsSetting",
                "teo:DescribeRules",
                "teo:DescribeZones",
                "csip:DescribeRiskCenterAssetViewVULRiskList",
                "csip:DescribeRiskCenterAssetViewPortRiskList",
                "csip:DescribePublicIpAssets",
                "csip:DescribeDomainAssets",
                "csip:DescribeCVMAssets",
                "csip:DescribeClusterPodAssets",
                "csip:DescribeDbAssets",
                "lighthouse:DescribeInstances",
                "dbbrain:DescribeDBDiagEvent",
                "dbbrain:DescribeDBDiagEvents",
                "live:CheckLiveHostBackupOriginSite",
                "tse:DescribeCloudNativeAPIGateways",
                "tse:DescribeSREInstances",
                "dbbrain:DescribeSqlFilters",
                "postgres:DescribeDBInstanceAttribute",
                "postgres:DescribeDBInstances",
                "postgres:DescribeZones",
                "tdmq:DescribeRocketMQCluster",
                "ckafka:DescribeInstanceAttributes",
                "teo:DescribeSecurityPolicy",
                "teo:DescribeDDoSPolicy",
                "gaap:DescribeProxies",
                "teo:DescribeZoneDDoSPolicy",
                "tdmq:DescribeRabbitMQVipInstances",
                "tcb:DescribeBillingInfo",
                "tcb:DescribeQuotaData",
                "tcb:DescribeBaasPackageList",
                "vod:DescribeTranscodeTemplates"
            ],
            "resource": "*",
            "effect": "allow"
        }
    ]
}