Permission's explanation on the console

Last updated: 2020-03-19 17:57:05

PDF

After specifying that Action and Resource create a custom policy, you can directly call API to operate on related resources. The mapping relationship between the console function point and Action is described below.

Tencent Cloud CDN authorized resource dimension is a domain name, which does not support Permission Assign within and outside the same domain name.

Service Overview

The service overview is divided into four modules according to the content displayed:

Function module Authorized Action Notes
Service usage display DescribeCdnData
DescribeBillingData
If only part of the domain name is authorized, you can only query the usage of each domain name independently.
Domain name situation DescribeDomains Returns the total number of authorized domain names
Billing Details DescribePayType Changing the billing method of authorized sub-accounts is not supported for the time being.
Traffic's bag situation DescribeTrafficPackages Traffic's package is account-level data, and Associate can query any resources.

Domain Name Management

Function module Authorized Action Notes
Domain name list and query DescribeDomains Query / display / download basic configuration of domain name
Full detailed configuration requires authorized DescribeDomainsConfig
Add Domain Name DescribeDomains Domain names that can be added to any acceleration service area
Close the domain name StopCdnDomain -
Launch domain name StartCdnDomain -
Delete domain name DeleteCdnDomain -
Modify the project to which the domain name belongs UpdateDomainConfig The project to which the domain name belongs is part of the domain name configuration.
All configurations of the domain name can be modified after authorization
Domain name configuration management UpdateDomainConfig
DescribeDomainsConfig
After authorization, you can view / modify all configurations of the domain name.

Certificate Management

Function module Authorized Action Notes
Query the list of certificates DescribeDomainsConfig After authorization, you can view all the configurations of the domain name.
Configure a Certificate UpdateDomainConfig All configurations of the domain name can be modified after authorization
Batch configuration certificate UpdateDomainsHttps Used to configure certificates in bulk

Statistical Analysis

Function module Authorized Action Notes
Access data details query DescribeCdnData After authorization, you can query all Access data of the domain name Metric
Origin-pull data details query DescribeOriginData After authorization, you can query all Origin-pull data of the domain name Metric
Traffic / number of requests Top query
Domain name Top ranking query
Domain name status code ranking query
Inquiry on the ranking of consumption in domestic provinces
Ranking of ISP consumption in China
Ranking of overseas regional usage
ListTopData After authorization, you can query all kinds of data / dimension ranking.
Independent IP number query DescribeIpVisit -

Purge and Prefetch

Function module Authorized Action
URL Refresh submission PurgeUrlsCache
Directory refresh submission PurgePathCache
Query refresh record DescribePurgeTasks
Submitted by prefetch job PushUrlsCache
Query prefetch's records DescribePushTasks

Cloud Log Service

Function module Authorized Action
Query log download link DescribeCdnDomainLogs

Entire network status monitoring

The console entire network status monitoring page supports viewing all sub-accounts without authorization.

Operation report

Function module Authorized Action Notes
Access data details query DescribeCdnData After authorization, you can query all Access data of the domain name Metric
Origin-pull data details query DescribeOriginData After authorization, you can query all Origin-pull data of the domain name Metric
Traffic / number of requests Top query
Domain name Top ranking query
Domain name status code ranking query
Inquiry on the ranking of consumption in domestic provinces
Ranking of ISP consumption in China
Ranking of overseas regional usage
ListTopData After authorization, you can query all kinds of data / dimension ranking.
Independent IP number query DescribeIpVisit -

Traffic bag management

Function module Authorized Action Notes
Query the list of Traffic's bags. DescribeTrafficPackages The returned content of the API has nothing to do with Resource, and any resource authorized can be queried.

Traffic package renewal / stop renewal logic, authorization is not supported for the time being.

IP attribution query

Function module Authorized Action Notes
Query whether IP belongs to Tencent Cloud CDN DescribeCdnIp The returned content of the API has nothing to do with Resource, and any resource authorized can be queried.

Self-diagnose tools

Self-diagnose tool does not hold sub-accounts for authorization for the time being.