tencent cloud

Tencent Cloud Lighthouse

Release Notes and Announcements
Image Release Notes
Announcements
Product Introduction
Overview
Basic Concepts
Strengths
Scenarios
Use Limits
Region and Network Connectivity
Product Comparison
User Guide
Billing
Billing Overview
Instance Package
Pricing Details
Purchase Methods
Configuration Adjustment (for Upgrade Only)
Overdue Payments
Refund
Getting Started
One-Click Application Creation Using Lighthouse
Quick Instance Creation
User Guide
Instances
Cloud Disks
Images
Firewall
Private Network Interconnection
Data Backup and Restoration Using Snapshots
Cloud Access Management
OPS and Monitoring
File Transfer
Use Cases
Website Building
Development Environment Building
Cloud Storage System Building
E-commerce Platform Building
Personal Live Streaming Room Building
FTP Service Building
SSL Certificate Installation
Troubleshooting
Windows Instance: RDP Connection to the Remote Computer Fails
Windows Instance: Offline Password Resetting Fails or Invalid
Linux/Windows Instance: Online Password Resetting Fails or Invalid
API Documentation
History
Introduction
API Category
Making API Requests
Image APIs
Firewall APIs
Key APIs
Instance APIs
Snapshot APIs
CCN APIs
Other APIs
Cloud Disk APIs
Scene APIs
Package APIs
Quota APIs
Region APIs
Data Types
Error Codes
FAQs
Agreements
Privacy Policy
Data Processing And Security Agreement
Contact Us
DokumentasiTencent Cloud LighthouseUser GuideCloud Access ManagementAuthorizable Resource Types

Authorizable Resource Types

PDF
Mode fokus
Ukuran font
Terakhir diperbarui: 2025-04-24 14:47:15
With Cloud Access Management (CAM), you can grant resource-level permissions for users. In CAM, the types of Lighthouse resources that can be authorized are as follows:
Resource Type
Resource Description Method in Authorization Policy
Instance
qcs::lighthouse:$region:$account:instance/*
Image
qcs::lighthouse:$region:$account:blueprint/*
Snapshot
qcs::lighthouse:$region:$account:snapshot/*
Key
qcs::lighthouse:$region:$account:keypair/*

The table below lists the API operations of Lighthouse that currently support resource-level permissions, as well as their resources and condition keys. When setting the resource path, you need to replace the variable parameters such as $region and $account with your actual parameter values. You can also use the * wildcard in the path. For relevant concepts such as region, action, account, and resource in CAM policies, see Resource Description Method.
Note:
Lighthouse API operations not listed here do not support resource-level permissions. You can still authorize a user to perform such an API operation, but you must specify * as the resource element of the policy statement.

Instance

API
Resource
ModifyInstancesBundle
qcs::lighthouse:$region:$account:instance/$instanceId
RenewInstances
qcs::lighthouse:$region:$account:instance/$instanceId
IsolateInstances
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyInstancesAttribute
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyInstancesRenewFlag
qcs::lighthouse:$region:$account:instance/$instanceId
RebootInstances
qcs::lighthouse:$region:$account:instance/$instanceId
ResetInstance
qcs::lighthouse:$region:$account:instance/$instanceId
ResetInstancesPassword
qcs::lighthouse:$region:$account:instance/$instanceId
StartInstances
qcs::lighthouse:$region:$account:instance/$instanceId
StopInstances
qcs::lighthouse:$region:$account:instance/$instanceId
TerminateInstances
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesDeniedActions
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesReturnable
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstancesTrafficPackages
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeInstanceVncUrl
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeResetInstanceBlueprints
qcs::lighthouse:$region:$account:instance/$instanceId


Snapshot

API
Resource
CreateInstanceSnapshot
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:snapshot/*
DeleteSnapshots
qcs::lighthouse:$region:$account:snapshot/$snapshotId
ApplyInstanceSnapshot
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:snapshot/$snapshotId
DescribeSnapshotsDeniedActions
qcs::lighthouse:$region:$account:snapshot/$snapshotId
ModifySnapshotAttribute
qcs::lighthouse:$region:$account:snapshot/$snapshotId


Firewall

API
Resource
CreateFirewallRules
qcs::lighthouse:$region:$account:instance/$instanceId
DeleteFirewallRules
qcs::lighthouse:$region:$account:instance/$instanceId
DescribeFirewallRules
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyFirewallRules
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyFirewallRuleDescription
qcs::lighthouse:$region:$account:instance/$instanceId


Key

API
Resource
DeleteKeyPairs
qcs::lighthouse:$region:$account:keypair/$keypairId
AssociateInstancesKeyPairs
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:keypair/$keypairId
DisassociateInstancesKeyPairs
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:keypair/$keypairId


Image

API
Resource
CreateBlueprint
qcs::lighthouse:$region:$account:instance/$instanceIdqcs::lighthouse:$region:$account:blueprint/*
DeleteBlueprints
qcs::lighthouse:$region:$account:blueprint/$blueprintId
DescribeBlueprintInstances
qcs::lighthouse:$region:$account:instance/$instanceId
ModifyBlueprintAttribute
qcs::lighthouse:$region:$account:blueprint/$blueprintId


Bundle

API
Resource
DescribeModifyInstanceBundles
qcs::lighthouse:$region:$account:instance/$instanceId


Billing

API
Resource
InquirePriceRenewInstances
qcs::lighthouse:$region:$account:instance/$instanceId

Topik sebelumnya: CAM OverviewTopik selanjutnya: Authorization Policy Syntax

Bantuan dan Dukungan

Apakah halaman ini membantu?

masukan