tencent cloud

PrevNext

Feedback

search by keyword

Recent Pages

Documentation
Cloud Virtual Machine
    Documentation
    Download PDF

    Authorizable Resource Type

    Last updated: 2024-01-08 09:12:28
    Download PDF
    Resource-level permission refers to the ability to specify which resources users are allowed to operate on. Cloud Virtual Machine(CVM) has partial support for resource-level permission. This means that for certain CVMs, you can control when users are allowed to operate on them, and what specific resources users are allowed to use. For example, you authorize users to perform operations on specific CVMs in Guangzhou. The types of resources can be authorized in Cloud Access Management (CAM) are as follows:
    Resource Type
    Resource Description Method in Authorization Policy
    qcs::cvm:$region::instance/*
    qcs::cvm:$region::keypair/*
    qcs::cvm:$region:$account:image/*
    CVM Instance, CVM Key and CVM Image introduce CVM API operations that currently support resource-level permission, as well as resources and condition keys supported by these CVM API operations. When configuring the resource path, you need to change variable parameters such as $ region, $ account into your actual parameter information. You can also use wildcard * in the path. For more information, see Operation Examples.
    Note:
    CVM API operations not listed in the table do not support resource-level permission. You can still authorize a user to perform these operations, but you must specify * as the resource element in the policy statement.

    CVM Instance

    API Operation
    Resource Path
    Condition Key
    DescribeInstanceInternetBandwidthConfigs
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    ModifyInstanceInternetChargeType
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    ModifyInstancesRenewFlag
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    RenewInstances
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    qcs::cvm:$region:$account:image/*
    qcs::cvm:$region:$account:image/$imageId
    qcs::cvm:$region:$account:keypair/*
    qcs::cvm:$region:$account:keypair/$keyId
    qcs::cvm:$region:$account:systemdisk/*
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:image/*
    qcs::cvm:$region:$account:image/$imageId
    qcs::cvm:$region:$account:keypair/*
    qcs::cvm:$region:$account:keypair/$keyId
    qcs::cvm:$region:$account:sg/*
    qcs::cvm:$region:$account:sg/$sgId
    qcs::vpc:$region:$account:subnet/*
    qcs::vpc:$region:$account:subnet/$subnetId
    qcs::cvm:$region:$account:systemdisk/*
    qcs::cvm:$region:$account:datadisk/*
    qcs::vpc:$region:$account:vpc/*
    qcs::vpc:$region:$account:vpc/$vpcId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    cvm:region
    cvm:zone
    cvm:instance_type

    CVM Key

    API Operation
    Resource Path
    Condition Key
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    qcs::cvm:$region:$account:keypair/*
    qcs::cvm:$region:$account:keypair/$keyId
    -
    qcs::cvm:$region:$account:keypair/*
    -
    qcs::cvm:$region:$account:keypair/*
    qcs::cvm:$region:$account:keypair/$keyId
    -
    qcs::cvm:$region:$account:keypair/*
    -
    DescribeKeyPairsAttribute
    qcs::cvm:$region:$account:keypair/*
    qcs::cvm:$region:$account:keypair/$keyId
    -
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    qcs::cvm:$region:$account:keypair/*
    qcs::cvm:$region:$account:keypair/$keyId
    -
    qcs::cvm:$region:$account:keypair/*
    -
    qcs::cvm:$region:$account:keypair/*
    qcs::cvm:$region:$account:keypair/$keyId
    -

    CVM Image

    API Operation
    Resource Path
    Condition Key
    qcs::cvm:$region:$account:instance/*
    qcs::cvm:$region:$account:instance/$instanceId
    qcs::cvm:$region:$account:image/*
    cvm:region
    qcs::cvm:$region:$account:image/*
    qcs::cvm:$region:$account:image/$imageId
    cvm:region
    qcs::cvm:$region:$account:image/*
    cvm:region
    DescribeImagesAttribute
    qcs::cvm:$region:$account:image/*
    qcs::cvm:$region:$account:image/$imageId
    cvm:region
    qcs::cvm:$region:$account:image/*
    cvm:region
    qcs::cvm:$region:$account:image/*
    qcs::cvm:$region:$account:image/$imageId
    cvm:region
    qcs::cvm:$region:$account:image/*
    qcs::cvm:$region:$account:image/$imageId
    cvm:region
    qcs::cvm:$region:$account:image/*
    qcs::cvm:$region:$account:image/$imageId
    cvm:region
    
    Contact Us

    Contact our sales team or business advisors to help your business.

    Contact Us
    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    Submit a Ticket
    7x24 Phone Support
    Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
    Privacy PolicyLegalCookie Policy