- Release Notes
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Access Management
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Private DNS APIs
- CreatePrivateDNSAccount
- CreatePrivateZone
- CreatePrivateZoneRecord
- DeletePrivateZoneRecord
- DescribeAccountVpcList
- DescribeAuditLog
- DescribeDashboard
- DescribePrivateDNSAccountList
- DescribePrivateZoneList
- DescribePrivateZoneRecordList
- DescribePrivateZoneService
- DescribeQuotaUsage
- DescribeRequestData
- ModifyPrivateZone
- ModifyPrivateZoneRecord
- ModifyPrivateZoneVpc
- ModifyRecordsStatus
- SubscribePrivateZoneService
- DescribePrivateZone
- DeletePrivateDNSAccount
- DeletePrivateZone
- Data Types
- Error Codes
- FAQs
- PDNS Policy
- Glossary
- Service Agreement
- Release Notes
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Access Management
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Private DNS APIs
- CreatePrivateDNSAccount
- CreatePrivateZone
- CreatePrivateZoneRecord
- DeletePrivateZoneRecord
- DescribeAccountVpcList
- DescribeAuditLog
- DescribeDashboard
- DescribePrivateDNSAccountList
- DescribePrivateZoneList
- DescribePrivateZoneRecordList
- DescribePrivateZoneService
- DescribeQuotaUsage
- DescribeRequestData
- ModifyPrivateZone
- ModifyPrivateZoneRecord
- ModifyPrivateZoneVpc
- ModifyRecordsStatus
- SubscribePrivateZoneService
- DescribePrivateZone
- DeletePrivateDNSAccount
- DeletePrivateZone
- Data Types
- Error Codes
- FAQs
- PDNS Policy
- Glossary
- Service Agreement
Resource-Level permission can be used to specify which resources a user can manipulate. Most APIs of Private DNS support resource-level authorization to allow users to operate on specific private domains.
Private DNS Resources That Can Be Authorized in CAM
| Resource Type | Six-Segment Resource Format |
|---|---|
| Private domain | qcs::privatedns::$accountid:zone/$zoneId |
Here:
$accountidshould always be theAccountIdof the resource owner or left empty.$zoneIdshould always be the ID of a specific private domain. If you want to authorize all private domains, you can enter*.
Private DNS Operations That Can Be Authorized in CAM
| API Operation | API Description | Resource Path |
|---|---|---|
| DescribeUserConfig | Gets current user configuration | * |
| DescribeAuditLog | Gets the list of operation logs | qcs::privatedns::zone/${ZoneId} |
| DescribePrivateZoneList | Gets the list of private domains | qcs::privatedns::zone/${ZoneId} |
| ModifyPrivateZoneVpc | Modifies VPC associated with private domain | qcs::privatedns::zone/${ZoneId} |
| DeletePrivateZoneRecord | Deletes DNS record for private domain | qcs::privatedns::zone/${ZoneId} |
| ModifyPrivateZoneRecord | Modifies DNS record for private domain | qcs::privatedns::zone/${ZoneId} |
| DeletePrivateZone | Deletes private domain | qcs::privatedns::zone/${ZoneId} |
| DescribeRequestData | Gets the DNS request volume of private domain | qcs::privatedns::zone/${ZoneId} |
| DescribePrivateZone | Gets private domain information | qcs::privatedns::zone/${ZoneId} |
| DescribePrivateZoneRecordList | Gets the list of records for private domain | qcs::privatedns::zone/${ZoneId} |
| ModifyPrivateZone | Modifies private domain | qcs::privatedns::zone/${ZoneId} |
| CreatePrivateZoneRecord | Adds DNS record for private domain | qcs::privatedns::zone/${ZoneId} |
| DescribeDashboard | Gets the overview of Private DNS | * |
| DescribePrivateZoneService | Queries Private DNS activation status | * |
| SubscribePrivateZoneService | Activates Private DNS | * |
| ModifyUserConfig | Modifies current user configuration | * |
| CreatePrivateZone | Creates private domain | * |
Yes
No
Was this page helpful?