CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| Auto Scaling | as | Supported | Supported | Resource level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
Two authorization granularity levels of API are supported: resource level, and operation level.
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| AttachInstances | Attach instances | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| AttachLoadBalancers | AttachLoadBalancers will add load balancers to auto scaling group. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} qcs::as:${region}:uin/${uin}:clb/${lbId} |
Supported |
| CancelInstanceRefresh | Cancel instance refresh | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| ClearLaunchConfigurationAttributes | ClearLaunchConfigurationAttributes | Resource level | qcs::as:$region:$account:launch-configuration/$launchConfigurationId | Supported |
| CompleteLifecycleAction | Complete lifecycle action | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| CreateAutoScalingGroup | Create auto scaling group | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/* qcs::as:${region}:uin/${uin}:launch-configuration/${ascId} |
not supported |
| CreateAutoScalingGroupFromInstance | CreateAutoScalingGroupFromInstance | Resource level | qcs::as:$region:$account:auto-scaling-group/* | Supported |
| CreateLaunchConfiguration | Create launch configuration | Resource level | qcs::as:${region}:uin/${uin}:launch-configuration/* qcs::as:${region}:uin/${uin}:image/${imageId} qcs::as:${region}:uin/${uin}:sg/${securityGroupId} qcs::as:${region}:uin/${uin}:keypair/${keyId} |
not supported |
| CreateLifecycleHook | CreateLifecycleHook | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} | Supported |
| CreateNotificationConfiguration | Create notification configuration. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| CreateScalingPolicy | CreateScalingPolicy | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${AutoScalingGroupId} | Supported |
| CreateScheduledAction | CreateScheduledAction | Operation level | * | Supported |
| DeleteAutoScalingGroup | Delete auto scaling group. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DeleteLaunchConfiguration | Delete launch configuration. | Resource level | qcs::as:${region}:uin/${uin}:launch-configuration/${launchConfigurationId} | Supported |
| DeleteLifecycleHook | Delete Lifecycle Hook. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DeleteNotificationConfiguration | Delete notification configuration. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DeleteScalingPolicy | DeleteScalingPolicy | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DeleteScheduledAction | Delete scheduled action | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DetachInstances | Detach instances | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DetachLoadBalancers | DetachLoadBalancers will detach load balancers from auto scaling groups, this action will not delete load balancers. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} qcs::as:${region}:uin/${uin}:clb/${lbId} |
Supported |
| DisableAutoScalingGroup | Disable auto scaling group | Resource level | qcs::as::uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| EnableAutoScalingGroup | Enable auto scaling group. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| EnterStandby | Instance enter standby status | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} | Supported |
| ExecuteScalingPolicy | Execute Scaling Policy | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | not supported |
| ExitStandby | Instance exit standby status | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| InvokeCommand | InvokeCommand | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} qcs::tat:${region}:uin/${uin}:command/${commandId} |
Supported |
| ModifyAutoScalingGroup | Modify auto scaling group | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} | Supported |
| ModifyDesiredCapacity | Modify desired capacity | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| ModifyLaunchConfigurationAttributes | Modify launch configuration attributes | Resource level | qcs::as:${region}:uin/${uin}:launch-configuration/${launchConfigurationId} qcs::as:${region}:uin/${uin}:image/${imageId} qcs::as:${region}:uin/${uin}:sg/${securityGroupId} qcs::as:${region}:uin/${uin}:ps/${psId} qcs::as::uin/${uin}:keypair/${keyId} |
Supported |
| ModifyLifecycleHook | modify lifecycle hook | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| ModifyLoadBalancerTargetAttributes | ModifyLoadBalancerTargetAttributes will modify load balancer target attributes. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} qcs::as:${region}:uin/${uin}:clb/${lbId} |
Supported |
| ModifyLoadBalancers | ModifyLoadBalancers | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} qcs::as:${region}:uin/${uin}:clb/${lbId} |
Supported |
| ModifyNotificationConfiguration | Modify Notification Configuration. | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| ModifyScalingPolicy | Example Modify the alarm triggering policy | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} | Supported |
| ModifyScheduledAction | Modify scheduled action | Operation level | * | Supported |
| RemoveInstances | Remove instances | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| ResumeInstanceRefresh | Resume instance refresh | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| RollbackInstanceRefresh | Rollback instance refresh | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| ScaleInInstances | scale in instances by specified number | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| ScaleOutInstances | scale out instance by specified number | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| SetInstancesProtection | Set instances protection | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| StartAutoScalingInstances | Start auto scaling instances | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| StartInstanceRefresh | Start instance refresh | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| StopAutoScalingInstances | Stop auto scaling instances | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| StopInstanceRefresh | Stop instance refresh | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| UpgradeLaunchConfiguration | UpgradeLaunchConfiguration | Resource level | qcs::as:$region:$account:launch-configuration/$launchConfigurationId | Supported |
| UpgradeLifecycleHook | Upgrade lifecycle hooks | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeAccountLimits | Describe Account Limits | Operation level | * | Supported |
| DescribeAutoScalingActivities | DescribeAutoScalingActivities | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} | Supported |
| DescribeAutoScalingAdvices | describe auto scaling advices | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DescribeAutoScalingGroups | DescribeAutoScalingGroups | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} | Supported |
| DescribeAutoScalingInstances | DescribeAutoScalingInstances | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${asgId} | Supported |
| DescribeLaunchConfigurations | describe launch configuration | Resource level | qcs::as:${region}:uin/${uin}:launch-configuration/${LaunchConfigurationId} | Supported |
| DescribeLifecycleHooks | DescribeLifecycleHooks | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/* | Supported |
| DescribeNotificationConfigurations | DescribeNotificationConfigurations | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DescribeRefreshActivities | Describe instance refresh activities | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DescribeScalingPolicies | DescribeScalingPolicies | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| DescribeScheduledActions | DescribeScheduledActions | Resource level | qcs::as:${region}:uin/${uin}:auto-scaling-group/${autoScalingGroupId} | Supported |
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeAutoScalingGroupLastActivities | Describe AutoScalingGroup Last Activities | Resource level | qcs::as:$region:$account:auto-scaling-group/$autoScalingGroupId | Supported |
피드백