tencent cloud

PrevNext

Feedback

search by keyword

Recent Pages

Documentation
TencentDB for Redis
    Documentation
    Download PDF

    Authorizable Resource Types

    Last updated: 2023-05-23 10:31:25
    Download PDF
      Resource-level permission can be used to specify which resources a user can manipulate. Redis supports certain resource-level permission. This means that for Redis operations that support resource-level permission, you can control the time when a user is allowed to perform operations or to use specified resources. The following table describes the types of resources that can be authorized in CAM.
      Resource Type
      Resource Description in Authorization Policy
      TencentDB for Redis instance
      qcs::redis:$region::instance/*
      qcs::redis:$region:$account:instance/$instance
      The table below lists the TencentDB for Redis API operations that currently support resource-level permission control, as well as the resources that each operation supports. You can use the * wildcard in a resource path when defining it.

      List of APIs supporting resource-level authorization

      API Name
      Resource Path
      AssignProject
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      AssociateSecurityGroups
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      AutoRenew
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      BackupInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      CleanInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      CleanUpInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ClearInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ClearRedis
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      CreateInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      CreateInstanceAccount
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      CreateInstanceHour
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      CreateInstances
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      CreateRedis
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DeleteInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DeleteInstanceAccount
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeAutoBackupConfig
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeBackupUrl
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeDBSecurityGroupsDetail
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceAccount
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceBackups
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceDealDetail
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceParamRecords
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceParams
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceSecurityGroup
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceSecurityGroupsAssociated
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceShards
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstanceSlowlog
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeInstances
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeProjectSecurityGroup
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeRedis
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeRedisDealDetail
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeRedisProduct
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeRedisProductList
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeRedisRegions
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeRedisZones
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeSlowLog
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeTaskInfo
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeTaskList
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeTasks
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DescribeVPCRedis
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DestroyPostpaidInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DestroyPrepaidInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      DisableReplicaReadonly
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      EnableReplicaReadonly
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ExportRedisBackup
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      GetBackupDownloadUrl
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      GetRedisBackupList
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      GetRedisPerformance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      GetRedisSlowLogList
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      GetRedisTaskList
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      InitRedisPassword
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      InquiryRedisPrice
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ManualBackupInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModfiyInstancePassword
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModfiyRedisPassword
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyAutoBackupConfig
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyDBInstanceSecurityGroups
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyInstanceAccount
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyInstanceParams
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyInstanceSecurityGroup
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyNetworkConfig
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyRedisName
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyRedisParams
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ModifyRedisProject
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      RenewInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      RenewRedis
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ResetPassword
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      ResetRedisPassword
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      RestoreInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      SetRedisAutoRenew
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      StartupInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      SwitchInstanceVip
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      UnAssociateSecurityGroups
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      UpgradeInstance
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      UpgradeRedis
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance
      UpgradeRedisInquiryPrice
      qcs::redis:$region:$account:instance/* qcs::redis:$region:$account:instance/$instance

      List of APIs not supporting resource-level authorization

      For a TencentDB API operation that does not support authorization at the resource level, you can still authorize a user to perform it, but you must specify * as the resource element in the policy statement.
      API Name
      Description
      CreateInstances
      Creates a TencentDB for Redis instance
      CreateParamTemplate
      Creates a parameter template
      DeleteParamTemplate
      Deletes a parameter template
      DescribeInstanceDealDetail
      Queries the order information
      DescribeParamTemplateInfo
      Gets the details of parameter template
      DescribeParamTemplates
      Queries the list of parameter templates
      DescribeTaskInfo
      DescribeTasks
      DescribeTasks
      Queries the list of tasks
      ModifyParamTemplate
      Modifies a parameter template
      ListUsers
      Queries sub-account names
      ListCollaborators
      Queries collaborator account names
      ListWeChatWorkSubAccounts
      Queries WeChat usernames
      Contact Us

      Contact our sales team or business advisors to help your business.

      Contact Us
      Technical Support

      Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

      Submit a Ticket
      7x24 Phone Support
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      Privacy PolicyLegalCookie Policy