tencent cloud

CAM Overview

Cloud Access Management (CAM) is a web-based Tencent Cloud service that helps you securely manage and control access permissions, resources, and use permissions of your Tencent Cloud account. Using CAM, you can create, manage, and terminate users (groups), and control the Tencent Cloud resources that can be used by the specified user through identity and policy management.

Tencent Cloud SLS supports resource-level authorization. You can use policy syntax to grant sub-accounts permissions to manage individual resources. For more information, please see Authorization Scheme Examples.

Authorizable Resource Types

SLS supports resource-level authorization. You can grant a specified sub-account the API permission of a specified resource. APIs supporting resource-level authorization include:

Authorization Scheme Examples

Six-Segment resource description

Sample

You can log in to the CAM console as a root account to configure and manage the permissions of Serverless Framework. Currently, Serverless Framework provides two preset policies for full access permission and read-only access permission:

Full access permission

• Grant a sub-account full access to Serverless Framework (SLS).
• Policy name: QcloudSLSFullAccess

{
"version": "2.0",
"statement": [
  {
    "action": [
      "sls:*"
    ],
    "resource": "*",
    "effect": "allow"
  }
]
}

Read-only access permission

• Grant a sub-account read-only access to Serverless SSR (SLS).
• Policy name: QcloudSLSReadOnlyAccess

{
"version": "2.0",
"statement": [
  {
    "action": [
      "sls:Get*",
      "sls:List*"
    ],
    "resource": "*",
    "effect": "allow"
  }
]
}

Sub-account Resource Management

• The sub-account can access and manage the resources authorized to it by the root account.
• If the sub-account has the permission to create resources and pay bills, it can purchase resources by itself in the normal process, and the root account will be charged.