tencent cloud

Cloud Access Management

문서Cloud Access ManagementCAM-Enabled APICDN and AccelerationContent Delivery Network

Content Delivery Network

다운로드
포커스 모드
폰트 크기
마지막 업데이트 시간: 2026-06-18 09:12:11

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
CDN cdn Supported Supported Resource level Partially supported

Note：

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AddCLSTopicDomains Add domain names to the log topic Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
AddCdnDomainConfig Used for adding and merging domain config on the console Resource level qcs::cdn:${region}:uin/${uin}:domain/* Supported
AddImageDomain add image domain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
AddOfflineLogSaveTask AddOfflineLogSaveTask Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
AppealBlockedRecord Appeal blocked record Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ApplyQuota Submit an application for a temporary or permanent quota. Operation level * Supported
ApplySaaSSSLCert apply for saas agent maintenance certificate Resource level qcs::cdn::uin/${uin}:domain/${domains} Supported
CancelAppealedRecord Cancel appealed record Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateAddon Enable the add-on Operation level * Supported
CreateCacheMd5Task Create file consistency check task Resource level qcs::cdn::$account:domain/$domain Supported
CreateClsLogSet create cls log set for cdn real-time log Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateClsLogTopic Create log topic Operation level * Supported
CreateDiagnoseTask Used to create diagnostic tasks Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateDiagnoseUrl Generate diagnostic link Resource level qcs::cdn::$account:domain/$domain Supported
CreateDomainDraft Add a domain draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateEdgePackConfig Create new edgepack configuration. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateEdgePackTask For SCF to trigger CDN original APK processing Operation level * Supported
CreatePurgeFetchTask Create timed purge/prefetch task. Operation level * Supported
CreateSharedCname create shared cname Operation level * Supported
CreateSpeedLimitStrategy create domain spped limit strategy Operation level * Supported
CreateVerifyRecord create verify record Operation level * Supported
DeleteAddon Turn off the add-on Operation level * Supported
DeleteCdnDomain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DeleteClsLogTopic Delete log topics Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DeleteEdgePackConfig Delete the configuration of edgepack. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DeleteOfflineLogSaveTask DeleteOfflineLogSaveTask Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DeletePurgeFetchTask Delete the timed purge/prefetch task. Operation level * Supported
DeleteSharedCname delete shared cname Operation level * Supported
DeleteSpeedLimitStrategies delete spped limit strategies Operation level * Supported
DeployDomainDraft Deploy domain\\\'s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DisableCaches DisableCaches Operation level * Supported
DisableClsLogTopic Stop shipping the log Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DisableDomainDraft Disable domain\\\'s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DuplicateDomainConfig Copy domain configuration Resource level qcs::cdn::$account:domain/$domain Supported
EnableCaches EnableCaches Operation level * Supported
EnableClsLogTopic Start shipping the log Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
EnableDomainDraft Enable domain\\\'s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ManageClsTopicDomains Manage domain names of the log topic Operation level * Supported
ModifyCookieAuthStrategy Modify the Strategy of Cookie Authentication Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifyDomainConfig Modify Domain Config Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifyEdgePackConfig Modify the configuration of edgepack. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifyGeoBlockStrategy Modify the configuration of geo-block. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifyPurgeFetchTask Modify the timed purge/pretech task Operation level * Supported
ModifyPurgeFetchTaskStatus Modify the status of timed purge/prefetch tasks. Operation level * Supported
ModifySaaSSSLCert This interface is used to change, revoke, and delete SaaS certificates Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifySchemaConfigForKugou update domain special config Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifySpeedLimitStrategy modify domain speed limit strategy Operation level * Supported
ModifySpeedLimitStrategySwitch modify speed limit strategy switch Operation level * Supported
OpenCdnService Open Cdn Service Operation level * Supported
OpenChannelService Open channel business account Operation level * Supported
OpenEcdnOversea open oversea ecdn white uin list Operation level * Supported
PayCdnTrafficPackOrder Pay for orders of CDN traffic packages in the Chinese Mainland. Operation level * Supported
PlaceCdnTrafficPackOrder Place an order for CDN traffic packages in the Chinese Mainland. Operation level * Supported
PurgePathCache PurgePathCache Operation level * Supported
PurgeUrlsCache PurgeUrlsCache Operation level * Supported
PurgeUrlsCacheAsync async purge url cache Operation level * Supported
PushUrlsCache PushUrlsCache Operation level * Supported
ReclaimDomain reclaimdomain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
RefundTrafficPackage Refund Traffic Package Operation level * Supported
RegisterImageService open image optim service Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
RenewHttpsPackage Renew Https Package Operation level * Supported
RenewTrafficPackage Renew Traffic Package Operation level * Supported
StartCdnDomain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
StopCdnDomain close accelerate service Operation level * Supported
SubmitUSFinalRuleAcknowledgement Submit US Final Rule acknowledgement Operation level * Supported
TcbCheckCreate Tcb Check Create Operation level * Supported
TcbConvertPayMode Tcb Convert Pay Mode Operation level * not supported
TcbCreateResource add tcb domain Operation level * not supported
TcbDestroyResource Tcb Destroy Resource Operation level * not supported
TcbIsolateResource Tcb Isolate Resource Operation level * not supported
TcbModifyAttribute Tcb Modify Attribute Operation level * not supported
TcbModifyResource Tcb Modify Resource Operation level * not supported
TcbReinstateResource Tcb Reinstate Resource Operation level * not supported
TcbResetResource Tcb Reset Resource Operation level * not supported
UpdateAggregationDomain Update Aggregation Domain Operation level * Supported
UpdateCacheByFile The UpdateCacheByFile interface is used to refreshe or preheat URLs by uploaded files. Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
UpdateCustomAuthKey Provide cntv update authentication key Resource level qcs::cdn::uin/${uin}:domain Supported
UpdateCustomPublicKey Microsoft customized update authentication key interface Resource level qcs::cdn:${region}:uin/${uin}:- Supported
UpdateDiagnoseTaskInfo update diagnose task info Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
UpdateDomainConfig Modify domain config 3.0 Operation level * Supported
UpdateDomainDraft Update the configuration of the domain’s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
UpdateDomainHttps update domain https Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
UpdateDomainsCertificate update domains certificate Resource level qcs::cdn::uin/${uin}:domain/${domain} not supported
UpdateDomainsHttps Batch update domain certificate Operation level * Supported
UpdateGCSToken UpdateGCSToken Operation level * not supported
UpdateHttpsPackageAlertThreshold Update Https Package Alert Threshold Operation level * Supported
UpdateImageConfig Update CDN domain image config Resource level qcs::cdn::$account:domain/$domain Supported
UpdateOfflineLogSaveTask UpdateOfflineLogSaveTask Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
UpdatePayType Update pay type Operation level * Supported
UpdateSharedCname update shared cname Operation level * Supported
UpdateTrafficPackageAlertThreshold update the alert threshold of traffic package Operation level * Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AddCdnDomain add cdn domain Operation level * Supported
CheckClsRegisterStatus check cls service open status Operation level * Supported
CheckDomain check domain Operation level * Supported
CheckDomainByService check domain by service Operation level * Supported
CheckDomainIsSuperior check domain is superiror Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
CheckImageServiceStatus check domain image optimization Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
CheckOrigin origin site compliance verification Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeAccountQuota check account quota Operation level * Supported
DescribeActiveDomains Describe active domains filtered by flux threshold Operation level * Supported
DescribeAddons Get the list of the addons Operation level * Supported
DescribeAppealedRecords Describe appealed records Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeAppidWhitelist check account white list config Operation level * Supported
DescribeBillingData describe billing data Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeBillingDataCustom Kuaishou obtains custom platform dimension indicators Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeCacheMd5Task Query file consistency check results Operation level * Supported
DescribeCdnData DescribeCdnData Operation level * Supported
DescribeCdnDetailData Describe cdn detail data Resource level qcs::cdn::$account:domain/$domain Supported
DescribeCdnDistrictData describe cdn district data Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeCdnDomainLogs DescribeCdnDomainLogs Operation level * Supported
DescribeCdnDomainsByCerts describe cdn domains by certs Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeCdnIp Query IP ownership Operation level * Supported
DescribeCdnOriginIp query origin ip Operation level * Supported
DescribeCdnRawData Query CDN raw data Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeCertDomains DescribeCertDomains Operation level * Supported
DescribeCertTasks Query certificate deployment tasks Operation level * Supported
DescribeCookieAuthStrategies Query the strategy list of Cookie Authentication Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDiagnoseReport query diagnotic reports details Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDiagnoseReportContent query diagnose report content Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDiagnoseTaskInfo query diagnose task detail Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDiagnoseTasks List Diagnose Tasks Resource level qcs::cdn::uin/${uin}:domain/$domain Supported
DescribeDistrictIspDataCustomized query district and isp data customized Operation level * Supported
DescribeDomainCname query domain cname Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDomainCnameRecords query domain cname record list Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDomainDraft Query the configuration of the domain\'s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} not supported
DescribeDomains Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDomainsByLuaScriptConfig query domain pkey info Operation level * Supported
DescribeDomainsCacheKey describe domain cache key Operation level * Supported
DescribeDomainsConfig DescribeDomainsConfig Operation level * Supported
DescribeDomainsForCos Describe CDN domains by COS origin for COS product Resource level qcs::cdn::uin/:domain/${domain} not supported
DescribeDomainsStatusCodeData query the domain statusCode data Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDomainsTopicId Describe domains\' cls topicId Resource level qcs::cdn::uin/${uin}:domain/${Domains} Supported
DescribeEdgeData Query CDN edge layer bandwidth and edge hit rate. Resource level qcs::cdn::$account:domain/$domain Supported
DescribeEdgePackConfigs Get the edgepack configurations. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeEdgePackData Get the usage info of edgepack service. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeEdgePackTaskStatus Get the status of edgepack configuration Operation level * Supported
DescribeEdgePackTopData Get the top usage data of edgepack service. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeFogData DescribeFogData Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeGeoBlockStrategies Get the configuration of geo-block. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeHttpsPackageAlertThreshold Describe Https Package Alert Threshold Operation level * Supported
DescribeIPAddressByISPName describe IP address by ISP name Operation level * Supported
DescribeISPName describe ISP name Operation level * Supported
DescribeImageConfig DescribeImageConfig Operation level * Supported
DescribeImageDomains DescribeImageDomains Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeIpVisit DescribeIpVisit Operation level * Supported
DescribeLogDataExpand query multidimensional detail data log of domain log Operation level * Supported
DescribeMainlandMonitorRealtimeData query mainland realtime monitor data Operation level * Supported
DescribeMapInfo query province and isp mapping Operation level * Supported
DescribeMonitorDomains Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeMonitorTrendData query monitor trend data Operation level * Supported
DescribeOfflineLogSaveDomain DescribeOfflineLogSaveDomain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeOfflineLogSaveTask get offline log save task Operation level * Supported
DescribeOriginCostData query origin cost data Operation level * Supported
DescribeOriginData DescribeOriginData Operation level * Supported
DescribeOriginDetailData Describe origin detail data Resource level qcs::cdn::$account:domain/$domain Supported
DescribeOriginRegion check origin location Operation level * Supported
DescribeOverdueFlux query overdue flux of location Operation level * Supported
DescribeOverdueHttps Describe Overdue Https Operation level * Supported
DescribeOverseaDistrictMap check the district map of oversea monitor data Operation level * Supported
DescribeOverseaMonitorRealtimeData query realtime monitor data of oversea Operation level * Supported
DescribePayType DescribePayType Operation level * Supported
DescribePublishRecord query domain pulblish record Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribePurgeFetchTaskStatus Get the status of timed puge/prefetch task. Operation level * Supported
DescribePurgeFetchTasks Get the list of timed purge/prefetch tasks. Operation level * Supported
DescribePurgeQuota Describe Purge Quota Operation level * Supported
DescribePurgeTasks DescribePurgeTasks Operation level * Supported
DescribePushQuota Describe Push Quota Operation level * Supported
DescribePushTasks DescribePushTasks Operation level * Supported
DescribeQuicData Describe quic data Resource level qcs::cdn::$account:domain/$domain Supported
DescribeQuotaApplyList Query the customer\\\'s quota application history list. Operation level * Supported
DescribeQuotaList Query the list of quota items that the user can manage. Operation level * Supported
DescribeQuotaRestriction Query the upper and lower limits of quota application. Operation level * Supported
DescribeReportData Describe Report Data Resource level qcs::cdn::$account:domain/$domain Supported
DescribeSandboxIp Obtain the IP of the sandbox Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeSharedCnameDomainsGroup describe shared cname domains group Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeSharedCnames describe shared cnames Operation level * Supported
DescribeSogouMonitorData query monitor data for sogou Operation level * Supported
DescribeSpeedLimitStrategies get the speed limit strategies Operation level * Supported
DescribeSslCerts check credit list Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeSslDomains query the num of certificate binding domain Operation level * Supported
DescribeStageDomain get statging environment domain Operation level * Supported
DescribeTpgPolicies query list of tpg strategy Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeTrafficPackageAlertThreshold get the alert threshold of traffic package Operation level * Supported
DescribeTrafficPackages DescribeTrafficPackages Operation level * Supported
DescribeUSFinalRuleAcknowledgement Describe US Final Rule acknowledgement Operation level * Supported
DescribeUpdateDomainsCertificate describe update domains certificate result Operation level * Supported
DescribeUrlViolations DescribeUrlViolations Operation level * Supported
DescribeUserFlag query user flag info Operation level * Supported
DescribeUserMenu query user menu Operation level * Supported
DescribeUserStatus query the business info of cdn user Operation level * Supported
DescribeUserVip query use vip info Operation level * Supported
DescribeViolativeResources Describe violative resources Resource level qcs::cdn::$account:domain/$domain Supported
DescribeWildcardDomainData query wildcard domain data Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeWorkOrderDetails DescribeWorkOrderDetails Operation level * Supported
DescribeWorkOrders DescribeWorkOrders Operation level * Supported
DetectOrigins detect the port of origin site Operation level * Supported
GetAccountTpgEdgeData query tpg account statistic data Operation level * not supported
GetDisableRecords GetDisableRecords Operation level * Supported
GetDomainsAccountingData get user all domain accounting data Operation level * Supported
GetUploadURL The GetUploadURL interface is used to apply for a COS file upload URL, the URL is valid for 3 minutes by default. Operation level * Supported
GetUserHistoryOrderCountAndAmount query user history order count and amount Operation level * Supported
ListCdnAppid get the appid of cdn Operation level * Supported
ListCdnDomains query brief info of domain Operation level * Supported
ListCdnProjects query project list Operation level * Supported
ListClsOccupiedDomains show the domain that has already binding the cls topic Operation level * Supported
ListDiagnoseReport Query diagnotic reports Resource level qcs::cdn::$account:domain/$domain Supported
ListSaaSSSLCert List SaaS SSL Cert Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ListSaaSSSLCertOpLog Query the list of SaaS certificate operation logs Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ListTopClsLogData List Top Data Caculated by CLS Logs Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ListTopData ListTopData Operation level * Supported
QueryCdnTrafficPackPrice Query the unit price of CDN traffic packages in the Chinese Mainland. Operation level * Supported
SearchClsLog Search cls logs Operation level * Supported
TcbCheckResource tcb check resource Operation level * Supported
VerifyDomainRecord verify domain record Operation level * Supported
VerifySharedCnameDomains verify shared cname domains Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeHttpsPackages Describe Https Packages Operation level * Supported
DescribeSourceMd5VerifyTasks Describe source md5 verify task list Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeTopData Query TOP N ranking data Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeTrafficPackageRefund Describe Traffic Package Refund Operation level * Supported
ListClsLogTopics List log topics Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ListClsTopicDomains List domain names of the log topic Operation level * Supported
ListDomainDrafts List domain\\\'s drafts Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported

Other Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
TcbCheckModify Tcb Check Modify Operation level * not supported
이전 주제: Direct Connect다음 주제: Enterprise Content Delivery Network

도움말 및 지원

문제 해결에 도움이 되었나요?

피드백