Resource-Level Permissions Supported by VPC APIs

Last updated: 2020-04-02 18:00:03

You can authorize the following API operations for VPC resources in CAM. Resources supported by specific APIs and the corresponding conditions are as follows:

Any VPC API operation that is not listed in the table does not support resource-level permissions. For such an operation, you can still authorize a user to perform it, but you must specify * as the resource element in the policy statement.

API Operation Resource Condition Notes
AcceptVpcPeeringConnection VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:region` represents the region where the VPC is located.
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId (the receiver’s vpcId)
vpc:region `vpc:region` represents the region where the VPC is located.
AcceptVpcPeeringConnectionEx Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:accepter_vpc_region` represents the receiver's region.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:requester_vpc_region` represents the region where the initiator is located.
VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
AddVpnConnEx VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
VPN gateway resource
qcs::vpc:$region:$account:vpngw/*
qcs::vpc:$region:$account:vpngw/$vpnGwId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
Customer gateway resource
qcs::vpc:$region:$account:cgw/*
vpc:region `vpc:region` represents the region where the VPC is located.
VPN tunnel resource
qcs::vpc:$region:$account:vpnx/*
vpc:vpc
vpc:vpngw
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:vpngw` represents the developer’s VPN gateway.
`vpc:region` represents the region where the VPC is located.
AssignPrivateIpAddresses ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
AssociateVip VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region vpc:vpc
vpc:region
AssociateRouteTable Subnet resource
qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
Route table resource
qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
AttachClassicLinkVpc VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId
cvm:region `cvm:region` represents the region where the CVM is located.
AttachNetworkInterface ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId
cvm:region `cvm:region` represents the region where the CVM is located .
CreateAndAttachNetworkInterface VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId
cvm:region `cvm:region` represents the region where the CVM is located .
ENI resource
qcs::vpc:$region:$account:eni/*
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer's subnet.
`vpc:region` represents the region where the VPC is located.
CreateDirectConnectGateway VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateLocalDestinationIPPortTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateLocalIPTranslationAclRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateLocalIPTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateLocalSourceIPPortTranslationAclRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateLocalSourceIPPortTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreatePeerIPTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateNatGateway VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
NAT gateway resource
qcs::vpc:$region:$account:nat/*
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateNetworkAcl VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Network ACL resource
qcs::vpc:$region:$account:acl/*
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateNetworkInterface VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Subnet resource
qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ENI resource
qcs::vpc:$region:$account:eni/*
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
CreateRoute Route table resource
qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateRouteTable VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Route table resource
qcs::vpc:$region:$account:rtb/*
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region there the VPC is located.
CreateSubnet VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Subnet gateway resource
qcs::vpc:$region:$account:subnet/*
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateSubnetAclRule Network ACL resource
qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
Subnet gateway resource
qcs::vpc:$region:$account:subnet/*
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
CreateVpcPeeringConnection VPC resource (initiator)
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
vpc:accepter_vpc
vpc:requester_vpc
vpc:region
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:region` represents the region where the VPC is located.
CreateVpcPeeringConnectionEx VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:accepter_vpc_region` represents the region where the receiver is located.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:requester_vpc_region` represents the region where the initiator is located.
DeleteDirectConnectGateway Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteLocalDestinationIPPortTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteLocalIPTranslationAclRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteLocalIPTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteLocalSourceIPPortTranslationAclRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeletePeerIPTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteLocalSourceIPPortTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteNatGateway NAT gateway resource
qcs::vpc:$region:$account:nat/*
qcs::vpc:$region:$account:nat/$natId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteNetworkAcl Network ACL resource
qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteNetworkInterface ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
DeleteRoute Route table resource
qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteRouteTable Route table resource
qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteSubnet Subnet resource
qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteUserGw Customer gateway resource
qcs::vpc:$region:$account:cgw/*
qcs::vpc:$region:$account:cgw/$userGwId
vpc:region `vpc:region` represents the region where the VPC is located.
DeleteVpc VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:vpc
`vpc:region` represents the region where the VPC is located.
DeleteVpcPeeringConnection Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:region` represents the region where the VPC is located.
DeleteVpcPeeringConnectionEx Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:accepter_vpc_region` represents the region where the receiver is located.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:requester_vpc_region` represents the region where the initiator is located.
DeleteVpnConn VPN tunnel resource
qcs::vpc:$region:$account:vpnx/*
qcs::vpc:$region:$account:vpnx/$vpnConnId
vpc:vpc
vpc:vpngw
vpc:usergw
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:vpngw` represents the developer’s gateway.
`vpc:usergw` represents the developer’s customer gateway.
`vpc:region` represents the region where the VPC is located.
DetachClassicLinkVpc VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region
vpc:vpc
`vpc:region` represents the region where the VPC is located.
CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId
cvm:region `cvm:region` represents the region where the CVM is located .
DetachNetworkInterface CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId
cvm:region `cvm:region` represents the region where the CVM is located .
ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
DeteleSubnetAclRule Subnet resource
qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
Network ACL resource
qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
EipBindNatGateway NAT gateway resource
qcs::vpc:$region:$account:nat/*
qcs::vpc:$region:$account:nat/$natId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
EipUnBindNatGateway NAT gateway resource
qcs::vpc:$region:$account:nat/*
qcs::vpc:$region:$account:nat/$natId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
EnableVpcPeeringConnection VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:region` represents the region where the VPC is located.
EnableVpcPeeringConnectionEx VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:accepter_vpc_region` represents the region where the receiver is located.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:requester_vpc_region` represents the region where the initiator is located.
MigrateNetworkInterface ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
CVM resource
qcs::cvm:$region:$account:instance/*
qcs::cvm:$region:$account:instance/$instanceId(authorization is required before and after migration)
cvm:region `cvm:region` represents the region where the CVM is located .
MigratePrivateIpAddress ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
ModifyDirectConnectGateway Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyLocalDestinationIPPortTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyLocalIPTranslationAclRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyLocalIPTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyLocalSourceIPPortTranslationAclRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyPeerIPTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyLocalSourceIPPortTranslationNatRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyNatGateway NAT gateway resource
qcs::vpc:$region:$account:nat/*
qcs::vpc:$region:$account:nat/nat-dc7cdf
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyNetworkAcl Network ACL resource
qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyNetworkAclEntry Network ACL resource
qcs::vpc:$region:$account:acl/*
qcs::vpc:$region:$account:acl/$networkAclId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyNetworkInterface ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
ModifyPrivateIpAddress ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
vpc:vpc represents the developer's VPC. `vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.
ModifyRouteTableAttribute Route table resource
qcs::vpc:$region:$account:rtb/*
qcs::vpc:$region:$account:rtb/$routeTableId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifySubnetAttribute Subnet resource
qcs::vpc:$region:$account:subnet/*
qcs::vpc:$region:$account:subnet/$subnetId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyUserGw Customer gateway resource
qcs::vpc:$region:$account:cgw/*
qcs::vpc:$region:$account:cgw/$userGwId
vpc:region `vpc:region` represents the region where the VPC is located.
ModifyVpcAttribute VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:Region `vpc:region` represents the region where the VPC is located.
ModifyVpcPeeringConnection VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:region` represents the region where the VPC is located.
ModifyVpcPeeringConnectionEx VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:accepter_vpc_region` represents the region where the receiver is located.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:requester_vpc_region` represents the region where the initiator is located.
ModifyVpnConnEx VPN tunnel resource
qcs::vpc:$region:$account:vpnx/*
qcs::vpc:$region:$account:vpnx/$vpnConnId
vpc:vpc
vpc:vpngw
vpc:usergw
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:vpngw` represents the developer’s gateway.
`vpc:usergw` represents the developer’s customer gateway.
`vpc:region` represents the region where the VPC is located.
ModifyVpnGw VPN gateway resource
qcs::vpc:$region:$account:vpngw/*
qcs::vpc:$region:$account:vpngw/$vpnGwId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
RejectVpcPeeringConnection VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:region
vpc:requester_vpc
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:region` represents the region where the VPC is located.
RejectVpcPeeringConnectionEx VPC resource
qcs::vpc:$region:$account:vpc/*
qcs::vpc:$region:$account:vpc/$vpcId
vpc:region `vpc:region` represents the region where the VPC is located.
Peering connection resource
qcs::vpc:$region:$account:pcx/*
qcs::vpc:$region:$account:pcx/$peeringConnectionId
vpc:accepter_vpc
vpc:accepter_vpc_region
vpc:requester_vpc
vpc:requester_vpc_region
`vpc:accepter_vpc` represents the receiver's VPC. The value is the receiver's VPC.
`vpc:accepter_vpc_region` represents the region where the receiver is located.
`vpc:requester_vpc` represents the initiator's VPC. The value is the initiator's VPC.
`vpc:requester_vpc_region` represents the region where the initiator is located.
ResetVpnConnSA VPN tunnel resource
qcs::vpc:$region:$account:vpnx/*
qcs::vpc:$region:$account:vpnx/$vpnConnId
vpc:vpc
vpc:vpngw
vpc:usergw
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:vpngw` represents the developer’s gateway.
`vpc:usergw` represents the developer’s customer gateway.
`vpc:region` represents the region where the VPC is located.
SetLocalIPTranslationAclRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
SetLocalSourceIPPortTranslationAclRule Direct connect gateway resource
qcs::vpc:$region:$account:dcg/*
qcs::vpc:$region:$account:dcg/$directConnectGatewayId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
SetSSLVpnDomain VPN gateway resource
qcs::vpc:$region:$account:vpngw/*
qcs::vpc:$region:$account:vpngw/$vpnGwId
vpc:vpc
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:region` represents the region where the VPC is located.
UnassignPrivateIpAddresses ENI resource
qcs::vpc:$region:$account:eni/*
qcs::vpc:$region:$account:eni/$networkInterfaceId
vpc:vpc
vpc:subnet
vpc:region
`vpc:vpc` represents the developer's VPC.
`vpc:subnet` represents the developer’s subnet.
`vpc:region` represents the region where the VPC is located.

Was this page helpful?

Was this page helpful?

  • Not at all
  • Not very helpful
  • Somewhat helpful
  • Very helpful
  • Extremely helpful
Send Feedback
Help