Resource-Level Permissions Supported by VPC APIs

Recent Pages

Resource-Level Permissions Supported by VPC APIs

Last updated: 2024-01-29 16:29:27
You can authorize the following API operations for VPC resources in CAM. Resources supported by specific APIs and the corresponding conditions are as follows:
Note：
Any VPC API operation that is not listed in the table does not support resource-level permissions. For such an operation, you can still authorize a user to perform it, but you must specify * as the resource element in the policy statement.
Configuring using API
Resources
Condition
Remark
AcceptVp
cPeeringConnection
VPC resource 
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:regionrepresents the region where the VPC is located.
—
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:regionrepresents the region where the VPC is located.
—
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId (the receiver’s vpcId)
vpc:region
vpc:region represents the region where the VPC is located.
AcceptVp
cPeeringConnectionEx
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:accepter_vpc_region represents the receiver's region.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:requester_vpc_region represents the region where the initiator is located.
—
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
AddVpnCo
nnEx

VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—

VPN gateway resource
qcs::vpc:$region:$account:vpngw/*
qcs::vpc:$region:$account:vpngw/$vpnGwId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
—

Customer gateway resource
qcs::vpc:$region:$account:cgw/*
vpc:region
vpc:region represents the region where the VPC is located.
—
VPN tunnel resource
qcs::vpc:$region:$account:vpnx/*
vpc:vpc
vpc:vpngw
vpc:region
vpc:vpc represents the developer's VPC.
vpc:vpngw represents the developer’s VPN gateway.
vpc:region represents the region where the VPC is located.
AssignPrivateIpAddresses
ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
AssociateRouteTable
Subnet resource
qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpcvpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region the VPC is in.
—
Route table resource
qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.

AttachClassicLinkVpc
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId
cvm:region
cvm:region represents the region where the CVM is located.
AttachNetworkInterface
ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
—
CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId
cvm:region
cvm:region represents the region where the Cloud Virtual Machine is located.
CreateAndAttachNetworkInterface
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId
cvm:region
cvm:region represents the region where the CVM is located.
—
ENI resource
qcs::vpc:$region:$account:eni/*
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer's subnet.
vpc:region represents the region where the VPC is located.
CreateDirectConnectGateway
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateLocalDestinationIPPortTranslationNatRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateLocalIPTranslationAclRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.

CreateLocalIPTranslationNatRule

Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateLocalSourceIPPortTranslationAclRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateLocalSourceIPPortTranslationNatRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreatePeerIPTranslationNatRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateNatGateway
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
NAT gateway resource
qcs::vpc:$region:$account:nat/*
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateNetworkAcl
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Network ACL resource qcs::vpc:$region:$account:acl/*
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC. vpc:region represents the region the VPC is in.
CreateNetworkInterface
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Subnet resource
qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
—
ENI resource
qcs::vpc:$region:$account:eni/*
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
CreateRoute
Route table resource
qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateRouteTable
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Route table resource
qcs::vpc:$region:$account:rtb/*
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region there the VPC is located.
CreateSubnet

VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Subnet gateway resource
qcs::vpc:$region:$account:subnet/*
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateSubnetAclRule
Network ACL resource
qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
—
Subnet gateway resource
qcs::vpc:$region:$account:subnet/*
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
CreateVpcPeeringConnection
VPC resource (initiator)
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Peering connection resource
qcs::vpc:$region:$account:pcx/*
vpc:accepter_vpc
vpc:requester_vpc
vpc:region
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:region represents the region where the VPC is located.
CreateVpcPeeringConnectionEx
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Peering connection resource
qcs::vpc:$region:$account:pcx/*
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpcvpc:requester_vpc_region
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:accepter_vpc_region represents the region where the receiver is located.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:requester_vpc_region represents the region where the initiator is located.
DeleteDirectConnectGateway
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
DeleteLocalDestinationIPPortTranslationNatRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
DeleteLocalIPTranslationAclRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
DeleteLocalIPTranslationNatRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.vpc:region represents the region where the VPC is located.
DeleteLocalSourceIPPortTranslationAclRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC. vpc:region represents the region where the VPC is located.
DeletePeerIPTranslationNatRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC. vpc:region represents the region where the VPC is located.
DeleteLocalSourceIPPortTranslationNatRule
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC. vpc:region represents the region where the VPC is located.
DeleteNatGateway
NAT gateway resource
qcs::vpc:$region:$account:nat/*
qcs::vpc:$region:$account:nat/$natId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC. vpc:region represents the region where the VPC is located.
DeleteNetworkAcl
Network ACL resource qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC. vpc:region represents the region where the VPC is located.
DeleteNetworkInterface
ENI resource qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC. vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
DeleteRoute
Route table resource qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
DeleteRouteTable
Route table resource qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
DeleteSubnet
Subnet resource qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
DeleteUserGw
Customer gateway resource qcs::vpc:$region:$account:cgw/*
qcs::vpc:$region:$account:cgw/$userGwId
vpc:region
vpc:region represents the region where the VPC is located.
DeleteVpc
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:vpc
vpc:region represents the region where the VPC is located.
DeleteVpcPeeringConnection
Peering connection resource qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:region represents the region where the VPC is located.
DeleteVpcPeeringConnectionEx
Peering connection resource qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:accepter_vpc_region represents the region where the receiver is located.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:requester_vpc_region represents the region where the initiator is located.
DeleteVpnConn
VPN tunnel resource qcs::vpc:$region:$account:vpnx/*qcs::vpc:$region:$account:vpnx/$vpnConnId
vpc:vpc
vpc:vpngw
vpc:usergw
vpc:region
vpc:vpc represents the developer's VPC.
vpc:vpngw represents the developer’s gateway.
vpc:usergw represents the developer’s customer gateway.
vpc:region represents the region where the VPC is located.
DetachClassicLinkVpc
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:vpc
vpc:region represents the region where the VPC is located.
—
CVM resource qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId
cvm:region
cvm:regionrepresents the region where the CVM is located.
DetachNetworkInterface
CVM resource qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId
cvm:region
cvm:region represents the region where the CVM is located.

—
ENI resource qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
DeteleSubnetAclRule
Subnet resource qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
—
Network ACL resource qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
EipBindNatGateway
NAT gateway resource qcs::vpc:$region:$account:nat/*
qcs::vpc:$region:$account:nat/$natId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
EipUnBindNatGateway
NAT gateway resource qcs::vpc:$region:$account:nat/*
qcs::vpc:$region:$account:nat/$natId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
EnableVpcPeeringConnection
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Peering connection resource qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:region represents the region where the VPC is located.
EnableVpcPeeringConnectionEx
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Peering connection resource qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:accepter_vpc_region represents the region where the receiver is located.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:requester_vpc_region represents the region where the initiator is located.
MigrateNetworkInterface
ENI resource qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
—
CVM Resource qcs::cvm:$region:$account:instance/*qcs::cvm:$region:$account:instance/$instanceId (permission is required before and after the migration)
cvm:region
cvm:region represents the region where the CVM is located.
MigratePrivateIpAddress
ENI resource qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
ModifyDirectConnectGateway
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyLocalDestinationIPPortTranslationNatRule
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyLocalIPTranslationAclRule
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyLocalIPTranslationNatRule
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyLocalSourceIPPortTranslationAclRule
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyPeerIPTranslationNatRule
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyLocalSourceIPPortTranslationNatRule
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyNatGateway
NAT gateway resource qcs::vpc:$region:$account:nat/*
qcs::vpc:$region:$account:nat/nat-dc7cdf
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyNetworkAcl
Network ACL resource qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyNetworkAclEntry
Network ACL resource qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyNetworkInterface
ENI resource qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
ModifyPrivateIpAddress
ENI resource qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
 vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.
ModifyRouteTableAttribute
Route table resource qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifySubnetAttribute
Subnet resource qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
ModifyUserGw
Customer gateway resource qcs::vpc:$region:$account:cgw/*
qcs::vpc:$region:$account:cgw/$userGwId
vpc:region
vpc:region represents the region where the VPC is located.
ModifyVpcAttribute
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:Region
vpc:region represents the region where the VPC is located.
ModifyVpcPeeringConnection
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Peering connection resource qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:region represents the region where the VPC is located.
ModifyVpcPeeringConnectionEx
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Peering connection resource qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:accepter_vpc_region represents the region where the receiver is located.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:requester_vpc_region represents the region where the initiator is located.
ModifyVpnConnEx
VPN tunnel resource qcs::vpc:$region:$account:vpnx/*
qcs::vpc:$region:$account:vpnx/$vpnConnId
vpc:vpc
vpc:vpngw
vpc:usergw
vpc:region
vpc:vpc represents the developer's VPC.
vpc:vpngw represents the developer’s gateway.
vpc:usergw represents the developer’s customer gateway.
vpc:region represents the region where the VPC is located.
ModifyVpnGw
VPN gateway resource qcs::vpc:$region:$account:vpngw/*
qcs::vpc:$region:$account:vpngw/$vpnGwId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
RejectVpcPeeringConnection
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Peering connection resource qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:region represents the region where the VPC is located.
RejectVpcPeeringConnectionEx
VPC resource qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:region represents the region where the VPC is located.
—
Peering connection resource qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
vpc:accepter_vpc represents the receiver's VPC. The value is the receiver's VPC.
vpc:accepter_vpc_region represents the region where the receiver is located.
vpc:requester_vpc represents the initiator's VPC. The value is the initiator's VPC.
vpc:requester_vpc_region represents the region where the initiator is located.
ResetVpnConnSA
VPN tunnel resource qcs::vpc:$region:$account:vpnx/*
qcs::vpc:$region:$account:vpnx/$vpnConnId
vpc:vpc
vpc:vpngw
vpc:usergw
vpc:region
vpc:vpc represents the developer's VPC.
vpc:vpngw represents the developer’s gateway.
vpc:usergw represents the developer’s customer gateway.
vpc:region represents the region where the VPC is located.
SetLocalIPTranslationAclRule
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
SetLocalSourceIPPortTranslationAclRule
Direct connect gateway resource qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
SetSSLVpnDomain
VPN gateway resource qcs::vpc:$region:$account:vpngw/*
qcs::vpc:$region:$account:vpngw/$vpnGwId
vpc:vpc
vpc:region
vpc:vpc represents the developer's VPC.
vpc:region represents the region where the VPC is located.
UnassignPrivateIpAddresses
ENI resource qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
vpc:subnet represents the developer’s subnet.
vpc:region represents the region where the VPC is located.

﻿