CAM 概述
产品功能
应用场景
基本概念
使用限制
用户类型
| CAM中产品名 | 角色名称 | 角色类型 | 角色载体 |
|---|---|---|---|
| 腾讯云智能顾问 | Advisor_QCSLinkedRoleInCloudDiagnosis | 服务相关角色 | cd.advisor.cloud.tencent.com |
| 腾讯云智能顾问 | Advisor_QCSLinkedRoleInBusinessContinuity | 服务相关角色 | businesscontinuity.advisor.cloud.tencent.com |
使用场景： 该策略供腾讯云顾问（Advisor）服务相关角色（Advisor_QCSLinkedRoleInCloudDiagnosis）进行关联，用于云诊断 读取云服务资源配置。包含云直播（CSS）、对象存储（COS）、数据库智能管家（DBbrain）、云解析（DNSPod）、可观测（CM）EMR 内容分发网络（CDN）等云资源配置接口读操作权限。
权限策略
{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"live:Describe*",
"cos:List*",
"cos:Get*",
"cos:Head*",
"cos:OptionsObject",
"monitor:Describe*",
"monitor:Get*",
"monitor:Export*",
"dnspod:Describe*",
"dbbrain:DescribeDBDiagEvents",
"dbbrain:DescribeDBDiagEvent",
"dbbrain:DescribeSlowLogTopSqls",
"dbbrain:DescribeSlowLogs",
"emr:Describe*",
"emr:Inquiry*",
"emr:Check*",
"emr:List*",
"emr:Describle*",
"emr:Inquire*",
"emr:Synchronize*",
"cdn:DescribeIpStatus",
"cdn:DescribeCertDomains",
"cdn:DescribeCdnIp",
"cdn:DescribeImageConfig",
"cdn:DescribeDomainsConfig",
"cdn:DescribeDomains",
"cdn:DescribePushQuota",
"cdn:DescribePurgeQuota",
"cdn:DescribeUrlViolations",
"cdn:DescribeBillingData",
"cdn:DescribeDistrictIspData",
"cdn:ListTopData",
"cdn:DescribeTopData",
"cdn:DescribeReportData",
"cdn:DescribeOriginData",
"cdn:DescribeIpVisit",
"cdn:DescribeCdnData"
],
"resource": "*"
}
]
}
使用场景： 当前角色为云顾问（Advisor）服务相关角色，用于授权 Advisor 访问 CVM、VPC、COS 等腾讯云资源，无需用户托管密钥，操作更高效、更安全。该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略
{
"version": "2.0",
"statement": [
{
"action": [
"cvm:Describe*",
"cvm:Inquiry*",
"vpc:Describe*",
"vpc:Inquiry*",
"vpc:Get*",
"monitor:Describe*",
"monitor:Get*",
"cam:ListUsersForGroup",
"cam:ListGroups",
"cam:GetGroup",
"clb:Describe*",
"cos:List*",
"cos:Get*",
"cos:Head*",
"cos:OptionsObject",
"cdb:Describe*",
"mongodb:Describe*",
"redis:Describe*",
"redis:Get*",
"redis:Inquiry*",
"es:Describe*",
"emr:Describe*",
"emr:Inquiry*",
"emr:Check*",
"emr:List*",
"emr:Describle*",
"cloudaudit:LookUpEvents",
"cdn:Describe*",
"cdn:Get*",
"cdn:List*",
"ssl:Describe*",
"tag:Get*",
"ckafka:Get*",
"ckafka:List*",
"ckafka:Describe*",
"tdmq:Describe*",
"scf:Get*",
"scf:List*",
"cam:GetRole",
"cam:ListAttachedRolePolicies",
"cls:getLogset",
"cls:getTopic",
"cls:listTopic",
"apigw:Describe*",
"cmqtopic:GetTopicAttributes",
"cmqtopic:GetSubscriptionAttributes",
"tsf:Describe*",
"tsf:Get*",
"tsf:List*",
"tsf:Search*",
"tsf:Find*",
"tsf:ImageUserIsExists",
"tsf:ImageGetRepositoryList",
"tsf:DscribeTasks",
"tbase:Describe*",
"tdach:Describe*",
"tdapg:Describe*",
"dcdb:Describe*",
"tke:Describe*",
"live:Describe*",
"im:Describe*",
"im:CheckIfIMNewUser",
"cfw:Describe*",
"waf:WafGet*",
"waf:WAFGetUserInfo",
"waf:WafDownloadAlerts",
"waf:WafPackagePrice",
"waf:WafAreaBanGetAreas",
"waf:WafFreqGetRuleList",
"waf:WafAntiFakeGetUrl",
"waf:WafInterface",
"waf:WafClsOverview",
"waf:QueryFlows",
"waf:WafDownloadRecords",
"waf:WafDownloadlogs",
"waf:WafSearchLogs",
"waf:WafDNSdetectGet*",
"waf:BotGet*",
"waf:Get*",
"waf:Search*",
"waf:BotV2Get*",
"wss:CertGetList",
"waf:Describe*",
"tag:DescribeResourceTagsByResourceIds",
"mariadb:Describe*",
"antiddos:Describe*",
"cam:DescribeSafeAuthFlagColl",
"cam:ListUsers",
"cam:DescribeSubAccounts",
"ccs:DescribeCluster",
"sms:SmsPackagesStatistics",
"sms:CallbackStatusStatistics",
"sms:SendStatusStatistics",
"dc:DescribeDirectConnects",
"dc:DescribeDirectConnectTunnels",
"trtc:Describe*",
"trtc:Get*",
"trtc:ShowRoomList",
"trtc:ShowUserList",
"trtc:RemindBalance",
"trtc:HardDescribeMixConf",
"memcached:DescribeInstances",
"cynosdb:DescribeClusterDetail",
"cynosdb:DescribeRollbackTimeValidity",
"cynosdb:DescribeRollbackTimeRange",
"cynosdb:DescribeInstanceSpecs",
"cynosdb:DescribeInstances",
"cynosdb:DescribeInstanceDetail",
"cynosdb:DescribeDBSecurityGroups",
"cynosdb:DescribeClusters",
"cynosdb:DescribeClusterInstanceGrps",
"cynosdb:DescribeBackupList",
"cynosdb:DescribeBackupConfig",
"cynosdb:DescribeAccounts",
"dnspod:DescribeDomain",
"dnspod:DescribeDomainList",
"dnspod:DescribeDomainLogList",
"dnspod:DescribeDomainPurview",
"dnspod:DescribeDomainShareInfo",
"dnspod:DescribeRecord",
"dnspod:DescribeRecordLineList",
"dnspod:DescribeRecordList",
"dnspod:DescribeRecordType",
"dnspod:DescribeUserDetail",
"vod:DescribeCDNStatDetails",
"vod:DescribeSubAppIds",
"vod:DescribeDefaultDistributionConfig",
"vod:DescribeVodDomains",
"cwp:DescribeVulList",
"cfs:DescribeCfsFileSystems",
"cfs:DescribeAutoSnapshotPolicies",
"cfs:DescribeCfsSnapshots",
"sms:DescribeAppList",
"sms:DescribeVerificationCodeStatistic",
"sms:DescribeAntiBrushThreshold",
"tke:CreateInstantInspectJob",
"tke:DescribeInstantInspectTask",
"cloudaudit:DescribeEvents",
"clb:DescribeQuota",
"cdb:QueryCDBProxy",
"clb:DescribeClusterResources",
"ssl:DescribeCertificateBindResources",
"monitor:GetIntegrationProductList",
"monitor:DescribeOneClickAlarmConfigs",
"monitor:DescribeAlarmPolicies",
"antiddos:DescribeListProtocolBlockConfig",
"cloudhsm:DescribeVsms",
"kms:GetServiceStatus",
"as:DescribeAutoScalingInstances",
"billing:DescribeCostSummaryByProduct",
"finance:DescribeBillSummaryByProduct",
"tke:ListClusterInspectionResultsItems",
"tke:ListClusterInspectionResults",
"dnspod:DescribeSnapshotConfig",
"dnspod:DescribeDomainFilterList",
"dc:DoDcHealthInspection",
"teo:DescribeDefaultCertificates",
"teo:DescribeHostsSetting",
"teo:DescribeRules",
"teo:DescribeZones",
"csip:DescribeRiskCenterAssetViewVULRiskList",
"csip:DescribeRiskCenterAssetViewPortRiskList",
"csip:DescribePublicIpAssets",
"csip:DescribeDomainAssets",
"csip:DescribeCVMAssets",
"csip:DescribeClusterPodAssets",
"csip:DescribeDbAssets",
"lighthouse:DescribeInstances",
"dbbrain:DescribeDBDiagEvent",
"dbbrain:DescribeDBDiagEvents",
"live:CheckLiveHostBackupOriginSite",
"tse:DescribeCloudNativeAPIGateways",
"tse:DescribeSREInstances",
"dbbrain:DescribeSqlFilters",
"postgres:DescribeDBInstanceAttribute",
"postgres:DescribeDBInstances",
"postgres:DescribeZones",
"tdmq:DescribeRocketMQCluster",
"ckafka:DescribeInstanceAttributes",
"teo:DescribeSecurityPolicy",
"teo:DescribeDDoSPolicy",
"gaap:DescribeProxies",
"teo:DescribeZoneDDoSPolicy",
"tdmq:DescribeRabbitMQVipInstances",
"tcb:DescribeBillingInfo",
"tcb:DescribeQuotaData",
"tcb:DescribeBaasPackageList",
"vod:DescribeTranscodeTemplates",
"cam:MonitorGetProject",
"monitor:GetProjectsList",
"redis:DescribeInstances",
"ckafka:DescribeTopicDetail",
"ckafka:DescribeInstancesDetail",
"tcb:DescribeEnvs",
"tsf:DescribeGroupAttribute",
"tsf:DescribeContainerGroups",
"tsf:DescribeGroups",
"tsf:DescribeApplications",
"vpc:DescribeCcns",
"vpc:DescribeCcnAttachedInstances",
"vpc:GetCcnRegionBandwidthLimits",
"mariadb:DescribeDBInstanceDetail",
"dcdb:DescribeDCDBInstanceDetail",
"sqlserver:DescribeDBInstances",
"cdb:DescribeRoGroups",
"tdmq:DescribeRocketMQClusters",
"tdmq:DescribeRocketMQNamespaces",
"tdmq:DescribeRocketMQTopics",
"tdmq:DescribeRocketMQGroups",
"trocket:DescribeInstanceList",
"trocket:DescribeTopicList",
"trocket:DescribeConsumerGroupList",
"cos:HeadBucket",
"es:SmartAdvisorManage",
"finance:DescribeDosageCosDetailByDate",
"cynosdb:Describe*",
"teo:Describe*",
"cetcd:Describe*",
"as:DescribeAutoScalingGroups",
"organization:DescribeOrganization",
"organization:DescribeOrganizationMembers",
"apm:DescribeApmInstances",
"apm:DescribeTagValues",
"apm:DescribeMetricRecords",
"apm:DescribeServiceNodes",
"apm:DescribeServiceOverview",
"keewidb:Describe*",
"trocket:DescribeFusionInstanceList",
"oceanus:DescribeJobs",
"oceanus:DescribeWorkSpaces",
"oceanus:DescribeClusters",
"cwp:Describe*",
"csip:Describe*",
"es:SmartAdvisor*",
"cdwdoris:Describe*",
"cdwch:Describe*",
"postgres:DescribeReadOnlyGroups",
"bh:Describe*",
"cdc:Describe*",
"cdz:Describe*",
"chc:Describe*",
"gaap:Describe*",
"tione:Describe*",
"tag:TagResources",
"tag:UnTagResources",
"tag:Describe*",
"cdwpg:Describe*",
"dlc:Describe*",
"dbbrain:DescribeRedisProcessList",
"dbbrain:DescribeMySqlProcessList",
"scf:Describe*",
"clb:Inquiry*",
"tse:Describe*",
"ckafka:Inquire*",
"es:Inquire*",
"lighthouse:Inquire*",
"lighthouse:Describe*",
"es:Query*",
"wedata:Describe*",
"domain:Describe*",
"thpc:Describe*",
"dnspod:Describe*",
"bdai:ChatAIDeepSeek"
],
"resource": "*",
"effect": "allow"
},
{
"action": [
"tke:AcquireClusterKubeConfigForProduct"
],
"effect": "allow",
"resource": [
"qcs::tke::*:cluster\/*",
"qcs::tke::*:k8s\/*\/pods\/*\/get",
"qcs::tke::*:k8s\/*\/namespaces\/*\/get",
"qcs::tke::*:k8s\/*\/namespaces\/*\/list",
"qcs::tke::*:k8s\/*\/ingresses\/*\/get",
"qcs::tke::*:k8s\/*\/ingresses\/*\/list",
"qcs::tke::*:k8s\/*\/services\/*\/get",
"qcs::tke::*:k8s\/*\/services\/*\/list",
"qcs::tke::*:k8s\/*\/deployments\/*\/get",
"qcs::tke::*:k8s\/*\/deployments\/*\/list",
"qcs::tke::*:k8s\/*\/daemonsets\/*\/get",
"qcs::tke::*:k8s\/*\/daemonsets\/*\/list",
"qcs::tke::*:k8s\/*\/statefulsets\/*\/get",
"qcs::tke::*:k8s\/*\/statefulsets\/*\/list"
]
}
]
}
文档反馈