tencent cloud

Service roles and service-linked roles are predefined by Tencent Cloud services and, upon user authorization, the corresponding services can access and use resources by assuming these service-linked roles. This document provides detailed information on the use cases and associated authorization policies of these specific service-linked roles.

DLC_QCSLinkedRoleInCheckDLCResource

Use Cases： The current role is the DLC service role, which will access your other service resources within the scope of the permissions of the associated policy.
Authorization Polices

• Policy Name： QcloudAccessForDLCLinkedRoleInCheckDLCResource
• Policy Information：

  {
    "version": "2.0",
    "statement": [
        {
            "effect": "allow",
            "action": [
                "cos:GetService",
                "cos:GetBucket",
                "cos:ListMultipartUploads",
                "cos:GetObject*",
                "cos:HeadObject",
                "cos:GetBucketObjectVersions",
                "cos:OptionsObject",
                "cos:ListParts",
                "cos:DeleteObject",
                "cos:PostObject",
                "cos:PostObjectRestore",
                "cos:PutObject*",
                "cos:InitiateMultipartUpload",
                "cos:UploadPart",
                "cos:UploadPartCopy",
                "cos:CompleteMultipartUpload",
                "cos:AbortMultipartUpload",
                "cos:DeleteMultipleObjects",
                "cos:AppendObject",
                "cos:HeadBucket",
                "vpc:DescribeRouteTable",
                "vpc:CreateRoute",
                "vpc:AcceptVpcPeeringConnection",
                "vpc:CreateVpcPeeringConnectionEx",
                "vpc:CreateVpcPeeringConnection",
                "vpc:DeleteVpcPeeringConnection",
                "vpc:DeleteVpcPeeringConnectionEx",
                "vpc:AcceptVpcPeeringConnectionEx",
                "vpc:DescribeVpcPeeringConnections",
                "cloudaudit:DescribeEvents",
                "cos:GetBucket*",
                "cos:PutBucket*",
                "cos:DeleteBucket*",
                "cos:RenameObject",
                "monitor:GetMonitorData",
                "chdfs:DescribeMountPoint",
                "chdfs:DescribeFileSystem",
                "chdfs:DescribeAccessGroups",
                "chdfs:DescribeAccessRules",
                "chdfs:ModifyFileSystem",
                "chdfs:ModifyAccessRules",
                "chdfs:CreateAccessGroup",
                "chdfs:CreateAccessRules",
                "chdfs:AssociateAccessGroups",
                "chdfs:DisassociateAccessGroups",
                "chdfs:DeleteAccessGroup",
                "chdfs:DeleteAccessRules",
                "vpc:DescribeAssistantCidr",
                "vpc:DescribeVpcEx",
                "chdfs:DescribeMountPoints",
                "oceanus:DescribeWorkSpaces",
                "oceanus:DescribeClusters",
                "oceanus:DescribeCHDFSAccessGroups",
                "oceanus:CreateCHDFSAccessGroup",
                "vpc:DescribeVpcEndPoint",
                "vpc:CreateVpcEndPoint",
                "vpc:DeleteVpcEndPoint",
                "tcr:CreateServiceAccount",
                "tcr:DeleteServiceAccount",
                "tcr:DescribeServiceAccounts",
                "tcr:CreateMultipleSecurityPolicy",
                "tcr:DescribeSecurityPolicies",
                "tcr:DescribeRepositories",
                "tcr:DescribeExternalEndpointStatus",
                "tcr:ManageExternalEndpoint",
                "tccatalog:DescribeTccCatalog",
                "tccatalog:DescribeTccCatalogs",
                "tccatalog:BindTccVpcEndPointServiceWhiteList",
                "tccatalog:AcceptTccVpcEndPointConnect",
                "tccatalog:DescribeTccVipInternal",
                "ssm:GetSecretValue",
                "tccatalog:DescribeMetastoreInstances",
                "tccatalog:CreateTCCatalogEndpoint",
                "tccatalog:CreateCatalog",
                "tccatalog:DescribeCatalogs",
                "tccatalog:DescribeCatalog",
                "tccatalog:ModifyCatalog",
                "tccatalog:DropCatalog",
                "tccatalog:CreateSchema",
                "tccatalog:DescribeSchema",
                "tccatalog:DescribeSchemaNamesPage",
                "tccatalog:DescribeSchemaNames",
                "tccatalog:DropSchema",
                "tccatalog:CreateTable",
                "tccatalog:DescribeTable",
                "tccatalog:DropTable",
                "tccatalog:ModifyTableComment",
                "tccatalog:DescribeTableNamesPage",
                "tccatalog:DescribeTableNames",
                "tccatalog:DescribeTables",
                "tccatalog:AddTableColumn",
                "tccatalog:DeleteTableColumn",
                "tccatalog:ModifyFunction",
                "tccatalog:CreateFunction",
                "tccatalog:DropFunction",
                "tccatalog:DescribeFunction",
                "tccatalog:DescribeFunctionNamesPage",
                "tccatalog:DescribeFunctions",
                "tccatalog:DropView",
                "tccatalog:DescribeView",
                "tccatalog:DescribeViewNamesPage",
                "tccatalog:DescribeViews",
                "tccatalog:AddPartitionField",
                "tccatalog:RemovePartitionField",
                "tccatalog:DescribeTableInfo",
                "tccatalog:DescribeOptimizerGroups",
                "tccatalog:ModifyTableProperties",
                "tccatalog:DescribeStrategyStatus",
                "tccatalog:DescribeTableDataOptimization",
                "tccatalog:CreateOptimizationStrategy",
                "tccatalog:DescribeCatalogDataOptimization",
                "tccatalog:DescribeTableOptimizationStrategy",
                "tccatalog:ModifyTableOptimizationStrategy",
                "tccatalog:RegisterTable",
                "tccatalog:DescribeModelNamesPage",
                "tccatalog:DescribeModelVersionNumbersPage",
                "tccatalog:DescribeModels",
                "tccatalog:CreateModel",
                "tccatalog:CreateModelVersion",
                "tccatalog:DescribeModel",
                "tccatalog:DescribeModelNames",
                "tccatalog:DescribeModelVersion",
                "tccatalog:DescribeModelVersionNumbers",
                "tccatalog:DescribeModelVersions",
                "tccatalog:ModifyModelComment",
                "tccatalog:ModifyModelName",
                "tccatalog:ModifyModelProperties",
                "tccatalog:ModifyModelVersionAliases",
                "tccatalog:ModifyModelVersionComment",
                "tccatalog:ModifyModelVersionProperties",
                "tccatalog:RegisterModel",
                "tccatalog:SearchModels",
                "tccatalog:DropModel",
                "tccatalog:DropModelVersion",
                "tccatalog:SearchModelVersions",
                "tccatalog:CreateUsers",
                "tccatalog:DeleteUsers",
                "tccatalog:DescribeUsers",
                "tccatalog:ModifyUser",
                "tccatalog:CreateRole",
                "tccatalog:DeleteRoles",
                "tccatalog:DescribeRoles",
                "tccatalog:ModifyRole",
                "tccatalog:GrantRolesToUser",
                "tccatalog:RevokeRolesFromUser",
                "tccatalog:GrantUsersToRole",
                "tccatalog:RevokeUsersFromRole",
                "tccatalog:GrantPermissionToRole",
                "tccatalog:RevokePermissionToRole",
                "tccatalog:GrantPermissionToUser",
                "tccatalog:RevokePermissionToUser",
                "tccatalog:UpdatePermissionToResource",
                "tccatalog:DescribeRolePermissionList",
                "tccatalog:DescribeRolesPrivilegeList",
                "tccatalog:CheckUserRoleGranted",
                "tccatalog:DescribeSchemas",
                "tccatalog:DescribeCatalogsByNames"
            ],
            "resource": "*"
        }
    ]
  }