CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
If there is an Error field in the response, it means that the API call failed. For example:
{
"Response": {
"Error": {
"Code": "AuthFailure.SignatureFailure",
"Message": "The provided credentials could not be validated. Please check your signature is correct."
},
"RequestId": "ed93f3cb-f35e-473f-b9f3-0d451b8b79c6"
}
}Code in Error indicates the error code, and Message indicates the specific information of the error.
| Error Code | Description |
|---|---|
| ActionOffline | This API has been deprecated. |
| AuthFailure.InvalidAuthorization | Authorization in the request header is invalid. |
| AuthFailure.InvalidSecretId | Invalid key (not a TencentCloud API key type). |
| AuthFailure.MFAFailure | MFA failed. |
| AuthFailure.SecretIdNotFound | Key does not exist. Check if the key has been deleted or disabled in the console, and if not, check if the key is correctly entered. Note that whitespaces should not exist before or after the key. |
| AuthFailure.SignatureExpire | Signature expired. Timestamp and server time cannot differ by more than five minutes. Please ensure your current local time matches the standard time. |
| AuthFailure.SignatureFailure | Invalid signature. Signature calculation error. Please ensure you’ve followed the signature calculation process described in the Signature API documentation. |
| AuthFailure.TokenFailure | Token error. |
| AuthFailure.UnauthorizedOperation | The request is not authorized. For more information, see the CAM documentation. |
| DryRunOperation | DryRun Operation. It means that the request would have succeeded, but the DryRun parameter was used. |
| FailedOperation | Operation failed. |
| InternalError | Internal error. |
| InvalidAction | The API does not exist. |
| InvalidParameter | Incorrect parameter. |
| InvalidParameterValue | Invalid parameter value. |
| InvalidRequest | The multipart format of the request body is incorrect. |
| IpInBlacklist | Your IP is in uin IP blacklist. |
| IpNotInWhitelist | Your IP is not in uin IP whitelist. |
| LimitExceeded | Quota limit exceeded. |
| MissingParameter | A parameter is missing. |
| NoSuchProduct | The product does not exist. |
| NoSuchVersion | The API version does not exist. |
| RequestLimitExceeded | The number of requests exceeds the frequency limit. |
| RequestLimitExceeded.GlobalRegionUinLimitExceeded | Uin exceeds the frequency limit. |
| RequestLimitExceeded.IPLimitExceeded | The number of ip requests exceeds the frequency limit. |
| RequestLimitExceeded.UinLimitExceeded | The number of uin requests exceeds the frequency limit. |
| RequestSizeLimitExceeded | The request size exceeds the upper limit. |
| ResourceInUse | Resource is in use. |
| ResourceInsufficient | Insufficient resource. |
| ResourceNotFound | The resource does not exist. |
| ResourceUnavailable | Resource is unavailable. |
| ResponseSizeLimitExceeded | The response size exceeds the upper limit. |
| ServiceUnavailable | Service is unavailable now. |
| UnauthorizedOperation | Unauthorized operation. |
| UnknownParameter | Unknown parameter. |
| UnsupportedOperation | Unsupported operation. |
| UnsupportedProtocol | HTTP(S) request protocol error; only GET and POST requests are supported. |
| UnsupportedRegion | API does not support the requested region. |
| Error Code | Description |
|---|---|
| FailedOperation.Accesskey | An error occurred while manipulating the access key. |
| FailedOperation.PolicyFull | The number of user policies has exceeded the limit. |
| FailedOperation.PolicyNameInUse | The policy name specified by the PolicyName field already exists. |
| FailedOperation.PolicyVersionAlreadyDefault | The policy version is already the default policy version. |
| FailedOperation.PolicyVersionFull | The number of policy versions has reached the upper limit. |
| FailedOperation.TagResourceFailed | Failed to bind the tag. |
| FailedOperation.UnTagResourceFailed | Failed to unbind the tag |
| FailedOperation.UserNotBindPhone | No mobile number is bound to the account |
| FailedOperation.UserNotBindWechat | No WeChat Account is bound to the account |
| FailedOperation.UserUnbindNoPermission | User does not have permission. |
| InternalError.SystemError | Internal error. |
| InvalidParameter.ActionError | Action field of policy document invalid. |
| InvalidParameter.ActionMiss | The action in the policy syntax does not exist. |
| InvalidParameter.ActionNotExist | The action in the policy syntax does not exist. |
| InvalidParameter.ActionServiceNotExist | The action service in the policy syntax does not exist. |
| InvalidParameter.AttachmentFull | Limit on number of authorization object associated policies in the principal field reached. |
| InvalidParameter.ConditionContentError | The condition content in the policy syntax is incorrect. |
| InvalidParameter.ConditionError | condition field of policy document invalid. |
| InvalidParameter.ConditionTypeError | The condition operator in the policy syntax is incorrect. |
| InvalidParameter.DeletionTaskNotExist | The task does not exist. |
| InvalidParameter.DescriptionLengthOverlimit | The input parameter description cannot exceed 300 bytes in length. |
| InvalidParameter.EffectError | Effect field of policy document invalid. |
| InvalidParameter.EntityFilterError | EntityFilter field invalid. |
| InvalidParameter.GroupFull | Limit on number of user groups reached. |
| InvalidParameter.GroupIdError | GroupId field invalid. |
| InvalidParameter.GroupNameInUse | User Group name repeated. |
| InvalidParameter.GroupNotExist | User Group does not exist. |
| InvalidParameter.GroupUserFull | Limit on number of sub-users in the user group reached. |
| InvalidParameter.IdentityNameInUse | Identity provider name already in use. |
| InvalidParameter.KeywordError | Keyword field invalid. |
| InvalidParameter.MFATokenError | Multi-factor Token verification failed. |
| InvalidParameter.NotSupportProduct | CAM does not support the resource type specified in the policy document. |
| InvalidParameter.OperateEntitiesOverLimit | There were too many entities in one operation. |
| InvalidParameter.OrganizationRoleOperateError | The current role can only be operated by the organization admin. To modify it, contact the admin. |
| InvalidParameter.ParamError | Invalid input parameter. |
| InvalidParameter.PasswordViolatedRules | Password incompatible with user safety settings. |
| InvalidParameter.PolicyDocumentError | PolicyDocument field invalid. |
| InvalidParameter.PolicyDocumentLengthOverLimit | PolicyDocument field exceeds length restriction. |
| InvalidParameter.PolicyIdError | Input parameter PolicyId invalid. |
| InvalidParameter.PolicyIdNotExist | Policy ID does not exist. |
| InvalidParameter.PolicyNameError | PolicyName field invalid. |
| InvalidParameter.PolicyVersionNotExists | The policy version does not exist. |
| InvalidParameter.PrincipalError | principal field of policy document invalid. |
| InvalidParameter.PrincipalQcsCrossError | Cross-site access is not supported for this role entity. |
| InvalidParameter.PrincipalQcsError | Incorrect PrincipalQcsc. |
| InvalidParameter.PrincipalQcsNotExist | PrincipalQcs does not exist. |
| InvalidParameter.PrincipalServiceNotExist | PrincipalService does not exist. |
| InvalidParameter.ResourceContentError | The resource context in the policy syntax is incorrect. |
| InvalidParameter.ResourceError | Resource field of policy document invalid. |
| InvalidParameter.ResourceProjectError | The resource project in the policy syntax is incorrect. |
| InvalidParameter.ResourceQcsError | Incorrect resource QCS. |
| InvalidParameter.ResourceRegionError | The resource region in the policy syntax is incorrect. |
| InvalidParameter.ResourceServiceNotExist | The resource service in the policy syntax does not exist. |
| InvalidParameter.ResourceUinError | The resource root account in the policy syntax is incorrect. |
| InvalidParameter.RoleFull | Limit on number of roles reached. |
| InvalidParameter.RoleNameError | Role name invalid. |
| InvalidParameter.RoleNameInUse | A role with the same name already exists. |
| InvalidParameter.RoleNotExist | Role does not exist. |
| InvalidParameter.ScopeError | Scope field invalid. |
| InvalidParameter.SearchKeywordLengthError | An error occurred while querying the keyword length. |
| InvalidParameter.ServiceLinkedPolicyCantInPermissionBoundary | Service policies cannot be used for permission boundaries. |
| InvalidParameter.ServiceLinkedRoleCantUsePermissionBoundary | Permission boundaries cannot be used for service roles. |
| InvalidParameter.ServiceTypeError | ServiceType field invalid. |
| InvalidParameter.StatementError | Statement field of policy document invalid. |
| InvalidParameter.SubUserFull | Limit on number of sub-accounts reached. |
| InvalidParameter.SubUserNameInUse | Sub-user name repeated. |
| InvalidParameter.TagLimitExceeded | The tag limit has been exceeded. |
| InvalidParameter.TagParamError | Incorrect tag parameter. |
| InvalidParameter.UinError | Uin field invalid. |
| InvalidParameter.UserGroupFull | Limit on number of user groups joined by a sub-user reached. |
| InvalidParameter.UserNameIllegal | Invalid username. |
| InvalidParameter.UserNotExist | User object does not exist |
| InvalidParameter.UserUinAndUinNotAllNull | A user’s UIN and UID cannot be left empty at the same time. |
| InvalidParameter.VersionError | Version field of policy document invalid. |
| InvalidParameterValue.IdentityKeyError | The OIDC signature public key is incorrect. |
| InvalidParameterValue.IdentityUrlError | The IdP URL is incorrect. |
| InvalidParameterValue.MetadataError | Identity provider metadata document error. |
| InvalidParameterValue.NameError | Identity provider name error. |
| LimitExceeded.IdentityFull | Limit on number of identity providers reached. |
| OperationDenied.AccessKeyOverLimit | Each account can have up to two AccessKey. |
| OperationDenied.HaveKeys | There are undeleted API keys. |
| OperationDenied.SubUin | The sub-user is not allowed to use the root account key. |
| OperationDenied.UinNotMatch | The access key does not match the account. |
| RequestLimitExceeded.CreateUser | The frequency limit of creating sub-users has been reached. |
| ResourceNotFound.GroupNotExist | User group does not exist. |
| ResourceNotFound.IdentityNotExist | Identity provider does not exist. |
| ResourceNotFound.NotFound | Resource does not exist. |
| ResourceNotFound.PolicyIdNotFound | Resources specified by PolicyId does not exist. |
| ResourceNotFound.SecretNotExist | The key does not exist. |
| ResourceNotFound.UserNotExist | User does not exist. |
| UnauthorizedOperation.DeleteApiKey | User do not have the authorization to delete API keys. |
피드백