Product Introduction

CAM Overview

Features

Scenarios

Basic Concepts

Use Limits

User Types

Purchase Guide

Getting Started

Creating Admin User

Creating and Authorizing Sub-account

Logging In to Console with Sub-account

User Guide

Overview

Users

Access Key

User Groups

Role

Identity Provider

Policies

Permissions Boundary

Troubleshooting

Downloading Security Analysis Report

CAM-Enabled Role

Overview

Compute

Container

Microservice

Essential Storage Service

Data Process and Analysis

Data Migration

Relational Database

Enterprise Distributed DBMS

NoSQL Database

Database SaaS Tool

Database SaaS Service

Networking

CDN and Acceleration

Network Security

Data Security

Application Security

Domains & Websites

Big Data

Middleware

Interactive Video Services

Real-Time Interaction

Media On-Demand

Media Process Services

Media Process

Cloud Real-time Rendering

Game Services

Cloud Resource Management

Management and Audit Tools

Developer Tools

Monitor and Operation

CAM-Enabled API

Overview

Compute

Edge Computing

Container

Distributed cloud

Microservice

Serverless

Essential Storage Service

Data Process and Analysis

Data Migration

Relational Database

Enterprise Distributed DBMS

NoSQL Database

Database SaaS Tool

Networking

CDN and Acceleration

Network Security

Endpoint Security

Data Security

Business Security

Application Security

Domains & Websites

Office Collaboration

Big Data

Voice Technology

Image Creation

Tencent Big Model

AI Platform Service

Natural Language Processing

Optical Character Recognition

Middleware

Communication

Interactive Video Services

Real-Time Interaction

Stream Services

Media On-Demand

Media Process Services

Media Process

Cloud Real-time Rendering

Game Services

Education Sevices

Medical Services

Cloud Resource Management

Management and Audit Tools

Developer Tools

Monitor and Operation

Use Cases

Security Practical Tutorial

Multi-Identity Personnel Permission Management

Authorizing Certain Operations by Tag

Supporting Isolated Resource Access for Employees

Enterprise Multi-Account Permissions Management

Reviewing Employee Operation Records on Tencent Cloud

Implementing Attribute-Based Access Control for Employee Resource Permissions Management

During tag-based authentication, only tag key matching is supported

Business Use Cases

TencentDB for MySQL

CLB

CMQ

COS

CVM

VPC

VOD

Others

API Documentation

History

Introduction

API Category

Making API Requests

User APIs

Policy APIs

Role APIs

Identity Provider APIs

Data Types

Error Codes

FAQs

Role

Key

Others

CAM Users and Permissions

Glossary

Condition Keys and Condition Operators

PDF

포커스 모드

폰트 크기

마지막 업데이트 시간: 2024-01-23 17:54:33

When creating a policy through the Cloud Access Management Console's Creating Custom Policy,, you can set the policy's effective conditions as needed.
Condition Keys
The naming format for Tencent Cloud's general condition keys is: qcs:<condition-key>. Currently, only five condition keys are supported. The content and descriptions of these keys are as follows:
General Condition Keys
Local Disk Types
Description
qcs:current_time
Date and time
The time when the Web Server receives a request. This is represented in the ISO8601 standard and must use UTC time.
qcs:ip
IP address
The IP address from which the request is initiated. It must comply with CIDR standards.
qcs:resource_tag
String
Controls access to resources based on the tags attached to them. The policy's specified tag key/value pairs can be compared with the key/value pairs bound to the resource, and the resource can only be accessed when a match is found.
qcs:request_tag
String
Determines which tags can be passed in a request. The policy can compare the specified tag key/value pairs with the key/value pairs passed in the request. Tags can only be bound or unbound when they match.
Note
The current condition key can be applied to both global services and specific services.
Condition keys are case sensitive.
Operator
In the application condition (Condition), use condition operators to match the condition keys and values in the policy with the values in the request context.
Condition operators are divided into seven categories according to their types: String, Number, Date and Time, Boolean, IP Address, Binary, and Null.
Condition Operator Types
Condition Operators
Description
String Condition Operators
string_equal
String is equal to (case-sensitive)
﻿
string_not_equal
String is not equal to (case-sensitive)
﻿
string_equal_ignore_case
String is equal to (case insensitive)
﻿
string_not_equal_ignore_case
String is not equal to (case insensitive)
Numeric Condition Operators
numeric_equal
Number is equal to
﻿
numeric_not_equal
Value is not equal to
﻿
numeric_less_than
Less than
﻿
numeric_less_than_equal
Value is less than or equal to
﻿
numeric_greater_than
Greater than or equal to
﻿
numeric_greater_than_equal
Value is greater than or equal to
Date Condition Operators
date_equal
The date and time is equal to
﻿
date_not_equal
The date and time is not equal to
﻿
date_less_than
Date and Time Less Than
﻿
date_less_than_equal
Date and time is less than or equal to
﻿
date_greater_than
Date and Time Greater Than
﻿
date_greater_than_equal
Date and time is greater than or equal to
Boolean Condition Operators
bool_equal
Boolean Value Matching
Binary Condition Operators
binary_equal
Number is equal to
IP Address Condition Operators
ip_equal
IP address is equal to
﻿
ip_not_equal
IP address is not equal to
Empty Condition Key Operators
null_equal
Empty Condition Key Matching
﻿
Mapping Relationship
In the effective statement, the conditions (Condition) that can be used depend on the selected condition key. The mapping relationship between the condition key and the operator is as follows:
Note
The condition values corresponding to the operators string_like and string_not_like only support uppercase and lowercase letters, numbers, -, and _, and do not support list-type interfaces. For list-type interfaces, please see Overview.
Condition Keys
Operator
qcs:resource_tagqcs:request_tag
string_equal
﻿
string_not_equal
﻿
string_equal_ignore_case
﻿
string_not_equal_ignore_case
﻿
string_like
﻿
string_not_like
qcs:current_time
date_equal
﻿
date_not_equal
﻿
date_less_than
﻿
date_less_than_equal
﻿
date_greater_than
﻿
date_greater_than_equal
qcs:ip
ip_equal
﻿
ip_not_equal
﻿

도움말 및 지원

문제 해결에 도움이 되었나요?

더 자세한 내용은 문의하기 또는 티겟 제출 을 통해 문의할 수 있습니다.

피드백

General Condition Keys	Local Disk Types	Description
qcs:current_time	Date and time	The time when the Web Server receives a request. This is represented in the ISO8601 standard and must use UTC time.
qcs:ip	IP address	The IP address from which the request is initiated. It must comply with CIDR standards.
qcs:resource_tag	String	Controls access to resources based on the tags attached to them. The policy's specified tag key/value pairs can be compared with the key/value pairs bound to the resource, and the resource can only be accessed when a match is found.
qcs:request_tag	String	Determines which tags can be passed in a request. The policy can compare the specified tag key/value pairs with the key/value pairs passed in the request. Tags can only be bound or unbound when they match.

Condition Operator Types	Condition Operators	Description
String Condition Operators	string_equal	String is equal to (case-sensitive)
		string_not_equal	String is not equal to (case-sensitive)
		string_equal_ignore_case	String is equal to (case insensitive)
		string_not_equal_ignore_case	String is not equal to (case insensitive)
Numeric Condition Operators	numeric_equal	Number is equal to
		numeric_not_equal	Value is not equal to
		numeric_less_than	Less than
		numeric_less_than_equal	Value is less than or equal to
		numeric_greater_than	Greater than or equal to
		numeric_greater_than_equal	Value is greater than or equal to
Date Condition Operators	date_equal	The date and time is equal to
		date_not_equal	The date and time is not equal to
		date_less_than	Date and Time Less Than
		date_less_than_equal	Date and time is less than or equal to
		date_greater_than	Date and Time Greater Than
		date_greater_than_equal	Date and time is greater than or equal to
Boolean Condition Operators	bool_equal	Boolean Value Matching
Binary Condition Operators	binary_equal	Number is equal to
IP Address Condition Operators	ip_equal	IP address is equal to
IP Address Condition Operators		ip_not_equal	IP address is not equal to
Empty Condition Key Operators	null_equal	Empty Condition Key Matching

Condition Keys	Operator
qcs:resource_tagqcs:request_tag	string_equal
		string_not_equal
		string_equal_ignore_case
		string_not_equal_ignore_case
		string_like
		string_not_like
qcs:current_time	date_equal
		date_not_equal
		date_less_than
		date_less_than_equal
		date_greater_than
		date_greater_than_equal
qcs:ip	ip_equal
qcs:ip		ip_not_equal

tencent cloud

Cloud Access Management

Condition Keys and Condition Operators

Condition Keys

Operator

Mapping Relationship

도움말 및 지원