- Product Introduction
- Tutorial
- Release Notes and Announcements
- Public Image Updates
- Announcements
- CentOS 8 End of Maintenance
- Discontinuation of Support for SUSE Commercial Images
- Price Reduction in Selected Availability Zones
- WebShell Proxy IP Addresses Updates
- Windows Server 2003 System Images End of Support Announcement
- Pay-as-you-go Price Adjustments for Standard S3 CVMs in the Silicon Valley Region
- Vulnerability repairing for Linux images
- Windows Server 2008 R2 Enterprise Edition SP1 64-bit Images End of Support Announcement
- Upgrading Virtio network card drive for Windows CVMs
- Solution to Tomcat Start Failure on Ubuntu14.04
- Stopping supporting for Ubuntu 10.04 images
- About Configuration of Security Group Port 53
- Purchase Guide
- Getting Started
- Operation Guide
- Operation Guide Overview
- Use Limits Overview
- Convenience Features
- Instances
- Creating Instances
- Working with Instance Launch Templates
- Batch Sequential Naming or Pattern String-Based Naming
- Generating API Explorer Reusable Scripts to Create Instances
- Adjusting Configuration
- Querying Information
- Renaming Instances
- Resetting Instance Password
- Managing Instance IPs
- Changing Instance Subnet
- Changing Security Group
- Searching for Instances
- Exporting Instance List
- Renewing Instances
- Querying the Repossession Status of a Spot Instance
- Shutting Down Instances
- Restarting Instances
- Logging in to Linux Instance
- Logging in to Windows instance
- Reinstalling System
- Terminating/Returning Instances
- Instance Repossession
- Spot Instances
- No Charges When Shut Down for Pay-as-You-Go Instances
- Managing Roles
- Starting Up Instances
- Managing Roles
- Reserved Instances
- Images
- Service Migration
- Cloud Disks
- Networking
- Maintenance Tasks
- Security
- Security Groups
- Protection of Sensitive Operations
- Managing Login Password
- Managing SSH Keys
- Spread Placement Group
- Unblocking Port 25
- Tags
- Monitoring and Alarms
- Sample Console Configuration
- Best Practice
- Best Practices
- Choosing the CVM Model
- Migrating CVM Instances
- Setting up a Website
- Building an Environment
- Building a Website
- Building an Application
- Data Backup
- Uploading Local Files to CVM
- Copying Local Files to CVMs
- Uploading Files from MacOS to Windows CVM Using MRD
- Uploading Files from Linux to Windows CVM using RDP
- Uploading Files from Linux to a CVM Using FTP
- Uploading files via WinSCP to a Linux CVM from Windows
- Uploading Files from Windows to a CVM Using FTP
- Uploading Files from Linux or MacOS to Linux CVM via SCP
- Uploading Files from Windows to a Windows CVM via MSTSC
- Other CVM Operations
- Network Performance Test
- High-throughput Network Performance Test
- Building a Visual GUI
- Recovering Data on Linux CVMs
- CVM Access to COS via a Private Network
- Changing Kernel of a Linux Instance Manually
- Managing Disk Space on Windows CVMs
- Setting Up Windows-based AD Domain on a CVM
- Using RemoteFx to Redirect USB Devices in Windows
- Using USB/IP to Share USB Devices in Linux
- Using AVX-512 Instructions to Accelerate AI Applications on CVM
- Building Tencent SGX Confidential Computing Environment
- Configuring Persistent Memory in M6p Instances
- Operations Guide
- Initializing Data Disks
- Environment Configurations
- Installing Software
- User Data
- Work with Operating Systems
- System Activation
- System Updates
- System Shutdown
- Configuring High-performance Power Management
- Windows Recovery Mode
- Use of the atop Monitoring Tools by Linux Instances
- Ensuring Unique SIDs for CVMs Using Sysprep
- Modifying VNC Resolution
- Introduction to Linux Kernel Parameters
- Updating the Virtio ENI Driver
- Modifying SID
- Others
- Troubleshooting
- Instance-Related Failures
- CVM Login Failures
- Windows Instance Login Failures
- Windows Instance Login Failures
- An authentication error occurred when you tried to log in to a Windows instance remotely
- Failed to Reset the CVM Password or the CVM Password Is Invalid
- Windows instance: no remote Desktop license server can provide license
- Requires network-level identity verification
- Problems occurred when you tried to log in to a Windows CVM remotely on Mac
- Failed to log in to a Windows CVM due to high CPU and memory usage
- Failed to connect to a remote computer through Remote Desktop
- Credentials Not Work
- Connection to a Windows CVM through Remote Desktop was denied
- Remote Login Failure Due To Port Issues
- Linux Instance Login Failures
- Linux Instance Login Failures
- Unable to Log in to a Linux Instance via SSH Key
- Failing to log in to a Linux CVM due to high CPU and memory usage
- Remote Login Failure due to Port Issues
- VNC Login Error (Module is Unknown)
- VNC Login Error (Account Locked due to XXX Failed Logins)
- VNC Login Error (Login Failed with Correct Password)
- VNC or SSH Login Error (Permission Denied)
- sshd Configuration File Permissions
- Infinite Loop Call in /etc/profile
- Login Failure Due to Server Isolation
- Login Failure Due to High Bandwidth Occupation
- Remote Connect Failure Due to Security Group Settings
- Failed to shut down or restart a CVM
- Network Namespace Creation Failure
- Kernel and IO Issues
- Missing System bin or lib Soft Link
- Suspected Infection with Virus
- "no space left on device" Error During File Creation
- Linux CVM Memory Issues
- Network Related Failures
- Downloading Remote Desktop for Mac
- Instance-Related Failures
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Region APIs
- Instance APIs
- DescribeInstances
- DescribeInstanceFamilyConfigs
- DescribeZoneInstanceConfigInfos
- DescribeInstanceTypeConfigs
- DescribeInstancesOperationLimit
- DescribeInstanceVncUrl
- InquiryPriceRunInstances
- InquiryPriceResetInstance
- InquiryPriceResetInstancesType
- InquiryPriceResizeInstanceDisks
- RunInstances
- StartInstances
- RebootInstances
- StopInstances
- ResetInstance
- TerminateInstances
- ResetInstancesType
- ResizeInstanceDisks
- ResetInstancesPassword
- ModifyInstancesAttribute
- ModifyInstancesProject
- InquirePricePurchaseReservedInstancesOffering
- DescribeReservedInstancesConfigInfos
- DescribeInstancesStatus
- Placement Group APIs
- Image APIs
- Key APIs
- Security Group APIs
- Network APIs
- Instance Launch Template APIs
- Data Types
- Error Codes
- FAQs
- Service Agreement
- Glossary
- Product Introduction
- Tutorial
- Release Notes and Announcements
- Public Image Updates
- Announcements
- CentOS 8 End of Maintenance
- Discontinuation of Support for SUSE Commercial Images
- Price Reduction in Selected Availability Zones
- WebShell Proxy IP Addresses Updates
- Windows Server 2003 System Images End of Support Announcement
- Pay-as-you-go Price Adjustments for Standard S3 CVMs in the Silicon Valley Region
- Vulnerability repairing for Linux images
- Windows Server 2008 R2 Enterprise Edition SP1 64-bit Images End of Support Announcement
- Upgrading Virtio network card drive for Windows CVMs
- Solution to Tomcat Start Failure on Ubuntu14.04
- Stopping supporting for Ubuntu 10.04 images
- About Configuration of Security Group Port 53
- Purchase Guide
- Getting Started
- Operation Guide
- Operation Guide Overview
- Use Limits Overview
- Convenience Features
- Instances
- Creating Instances
- Working with Instance Launch Templates
- Batch Sequential Naming or Pattern String-Based Naming
- Generating API Explorer Reusable Scripts to Create Instances
- Adjusting Configuration
- Querying Information
- Renaming Instances
- Resetting Instance Password
- Managing Instance IPs
- Changing Instance Subnet
- Changing Security Group
- Searching for Instances
- Exporting Instance List
- Renewing Instances
- Querying the Repossession Status of a Spot Instance
- Shutting Down Instances
- Restarting Instances
- Logging in to Linux Instance
- Logging in to Windows instance
- Reinstalling System
- Terminating/Returning Instances
- Instance Repossession
- Spot Instances
- No Charges When Shut Down for Pay-as-You-Go Instances
- Managing Roles
- Starting Up Instances
- Managing Roles
- Reserved Instances
- Images
- Service Migration
- Cloud Disks
- Networking
- Maintenance Tasks
- Security
- Security Groups
- Protection of Sensitive Operations
- Managing Login Password
- Managing SSH Keys
- Spread Placement Group
- Unblocking Port 25
- Tags
- Monitoring and Alarms
- Sample Console Configuration
- Best Practice
- Best Practices
- Choosing the CVM Model
- Migrating CVM Instances
- Setting up a Website
- Building an Environment
- Building a Website
- Building an Application
- Data Backup
- Uploading Local Files to CVM
- Copying Local Files to CVMs
- Uploading Files from MacOS to Windows CVM Using MRD
- Uploading Files from Linux to Windows CVM using RDP
- Uploading Files from Linux to a CVM Using FTP
- Uploading files via WinSCP to a Linux CVM from Windows
- Uploading Files from Windows to a CVM Using FTP
- Uploading Files from Linux or MacOS to Linux CVM via SCP
- Uploading Files from Windows to a Windows CVM via MSTSC
- Other CVM Operations
- Network Performance Test
- High-throughput Network Performance Test
- Building a Visual GUI
- Recovering Data on Linux CVMs
- CVM Access to COS via a Private Network
- Changing Kernel of a Linux Instance Manually
- Managing Disk Space on Windows CVMs
- Setting Up Windows-based AD Domain on a CVM
- Using RemoteFx to Redirect USB Devices in Windows
- Using USB/IP to Share USB Devices in Linux
- Using AVX-512 Instructions to Accelerate AI Applications on CVM
- Building Tencent SGX Confidential Computing Environment
- Configuring Persistent Memory in M6p Instances
- Operations Guide
- Initializing Data Disks
- Environment Configurations
- Installing Software
- User Data
- Work with Operating Systems
- System Activation
- System Updates
- System Shutdown
- Configuring High-performance Power Management
- Windows Recovery Mode
- Use of the atop Monitoring Tools by Linux Instances
- Ensuring Unique SIDs for CVMs Using Sysprep
- Modifying VNC Resolution
- Introduction to Linux Kernel Parameters
- Updating the Virtio ENI Driver
- Modifying SID
- Others
- Troubleshooting
- Instance-Related Failures
- CVM Login Failures
- Windows Instance Login Failures
- Windows Instance Login Failures
- An authentication error occurred when you tried to log in to a Windows instance remotely
- Failed to Reset the CVM Password or the CVM Password Is Invalid
- Windows instance: no remote Desktop license server can provide license
- Requires network-level identity verification
- Problems occurred when you tried to log in to a Windows CVM remotely on Mac
- Failed to log in to a Windows CVM due to high CPU and memory usage
- Failed to connect to a remote computer through Remote Desktop
- Credentials Not Work
- Connection to a Windows CVM through Remote Desktop was denied
- Remote Login Failure Due To Port Issues
- Linux Instance Login Failures
- Linux Instance Login Failures
- Unable to Log in to a Linux Instance via SSH Key
- Failing to log in to a Linux CVM due to high CPU and memory usage
- Remote Login Failure due to Port Issues
- VNC Login Error (Module is Unknown)
- VNC Login Error (Account Locked due to XXX Failed Logins)
- VNC Login Error (Login Failed with Correct Password)
- VNC or SSH Login Error (Permission Denied)
- sshd Configuration File Permissions
- Infinite Loop Call in /etc/profile
- Login Failure Due to Server Isolation
- Login Failure Due to High Bandwidth Occupation
- Remote Connect Failure Due to Security Group Settings
- Failed to shut down or restart a CVM
- Network Namespace Creation Failure
- Kernel and IO Issues
- Missing System bin or lib Soft Link
- Suspected Infection with Virus
- "no space left on device" Error During File Creation
- Linux CVM Memory Issues
- Network Related Failures
- Downloading Remote Desktop for Mac
- Instance-Related Failures
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Region APIs
- Instance APIs
- DescribeInstances
- DescribeInstanceFamilyConfigs
- DescribeZoneInstanceConfigInfos
- DescribeInstanceTypeConfigs
- DescribeInstancesOperationLimit
- DescribeInstanceVncUrl
- InquiryPriceRunInstances
- InquiryPriceResetInstance
- InquiryPriceResetInstancesType
- InquiryPriceResizeInstanceDisks
- RunInstances
- StartInstances
- RebootInstances
- StopInstances
- ResetInstance
- TerminateInstances
- ResetInstancesType
- ResizeInstanceDisks
- ResetInstancesPassword
- ModifyInstancesAttribute
- ModifyInstancesProject
- InquirePricePurchaseReservedInstancesOffering
- DescribeReservedInstancesConfigInfos
- DescribeInstancesStatus
- Placement Group APIs
- Image APIs
- Key APIs
- Security Group APIs
- Network APIs
- Instance Launch Template APIs
- Data Types
- Error Codes
- FAQs
- Service Agreement
- Glossary
Resource-level permission refers to the ability to specify which resources users are allowed to operate on. Cloud Virtual Machine(CVM) has partial support for resource-level permission. This means that for certain CVMs, you can control when users are allowed to operate on them, and what specific resources users are allowed to use. For example, you authorize users to perform operations on specific CVMs in Guangzhou.
The types of resources can be authorized in Cloud Access Management (CAM) are as follows:
| Resource Type | Resource Description Method in Authorization Policy |
|---|---|
| CVM Instance | qcs::cvm:$region::instance/* |
| CVM Key | qcs::cvm:$region::keypair/* |
| CVM Image | qcs::cvm:$region:$account:image/* |
CVM Instance, CVM Key and CVM Image introduce CVM API operations that currently support resource-level permission, as well as resources and condition keys supported by these CVM API operations. When configuring the resource path, you need to change variable parameters such as $ region, $ account into your actual parameter information. You can also use wildcard * in the path. For more information, see Operation Examples.
CVM API operations not listed in the table do not support resource-level permission. You can still authorize a user to perform these operations, but you must specify * as the resource element in the policy statement.
CVM Instance
| API Operation | Resource Path | Condition Key |
|---|---|---|
| DescribeInstanceInternetBandwidthConfigs | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| ModifyInstanceInternetChargeType | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| ModifyInstancesAttribute | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| ModifyInstancesProject | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| ModifyInstancesRenewFlag | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| RebootInstances | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| RenewInstances | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| ResetInstance | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceIdqcs::cvm:$region:$account:image/*qcs::cvm:$region:$account:image/$imageIdqcs::cvm:$region:$account:keypair/*qcs::cvm:$region:$account:keypair/$keyIdqcs::cvm:$region:$account:systemdisk/* |
cvm:region cvm:zone cvm:instance_type |
| ResetInstancesInternetMaxBandwidth | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| ResetInstancesPassword | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| ResetInstancesType | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| ResizeInstanceDisks | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| RunInstances | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:image/*qcs::cvm:$region:$account:image/$imageIdqcs::cvm:$region:$account:keypair/*qcs::cvm:$region:$account:keypair/$keyIdqcs::cvm:$region:$account:sg/*qcs::cvm:$region:$account:sg/$sgIdqcs::vpc:$region:$account:subnet/*qcs::vpc:$region:$account:subnet/$subnetIdqcs::cvm:$region:$account:systemdisk/*qcs::cvm:$region:$account:datadisk/*qcs::vpc:$region:$account:vpc/*qcs::vpc:$region:$account:vpc/$vpcId |
cvm:region cvm:zone cvm:instance_type |
| StartInstances | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| StopInstances | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
| TerminateInstances | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId |
cvm:region cvm:zone cvm:instance_type |
CVM Key
| API Operation | Resource Path | Condition Key |
|---|---|---|
| AssociateInstancesKeyPairs | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceIdqcs::cvm:$region:$account:keypair/*qcs::cvm:$region:$account:keypair/$keyId |
- |
| CreateKeyPair | qcs::cvm:$region:$account:keypair/* |
- |
| DeleteKeyPairs | qcs::cvm:$region:$account:keypair/*qcs::cvm:$region:$account:keypair/$keyId |
- |
| DescribeKeyPairs | qcs::cvm:$region:$account:keypair/* |
- |
| DescribeKeyPairsAttribute | qcs::cvm:$region:$account:keypair/*qcs::cvm:$region:$account:keypair/$keyId |
- |
| DisassociateInstancesKeyPairs | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceIdqcs::cvm:$region:$account:keypair/*qcs::cvm:$region:$account:keypair/$keyId |
- |
| ImportKeyPair | qcs::cvm:$region:$account:keypair/* |
- |
| ModifyKeyPairAttribute | qcs::cvm:$region:$account:keypair/*qcs::cvm:$region:$account:keypair/$keyId |
- |
CVM Image
| API Operation | Resource Path | Condition Key |
|---|---|---|
| CreateImage | qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceIdqcs::cvm:$region:$account:image/* |
cvm:region |
| DeleteImages | qcs::cvm:$region:$account:image/*qcs::cvm:$region:$account:image/$imageId |
cvm:region |
| DescribeImages | qcs::cvm:$region:$account:image/* |
cvm:region |
| DescribeImagesAttribute | qcs::cvm:$region:$account:image/*qcs::cvm:$region:$account:image/$imageId |
cvm:region |
| DescribeImageSharePermission | qcs::cvm:$region:$account:image/* |
cvm:region |
| ModifyImageAttribute | qcs::cvm:$region:$account:image/*qcs::cvm:$region:$account:image/$imageId |
cvm:region |
| ModifyImageSharePermission | qcs::cvm:$region:$account:image/*qcs::cvm:$region:$account:image/$imageId |
cvm:region |
| SyncImages | qcs::cvm:$region:$account:image/*qcs::cvm:$region:$account:image/$imageId |
cvm:region |
Yes
No
Was this page helpful?