- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Access Key
- User Groups
- Role
- Policies
- Troubleshooting
- Permissions Boundary
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Natural Language Processing
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Best Practice
- Security Best Practice
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to COS Resources under the Account
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Read-only Access to VPCs
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- User APIs
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSafeAuthFlagColl
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Getting Started
- User Guide
- Overview
- Users
- Identity Provider
- SSO Overview
- Practical Scenarios for SSO
- User-Based SSO
- Role-Based SSO
- Overview
- Overview of SAML Role-Based SSO
- Overview of OIDC Role-Based Single Sign-On
- SAML 2.0-Based Federation
- Accessing Tencent Cloud Console as SAML 2.0 Federated Users
- Creating a SAML IdP
- Creating an OIDC Identity Provider
- Managing IdPs
- Azure Active Directory Single Sign-On
- OneLogin Single Sign-On
- Okta Single Sign-On
- ADFS SSO to Tencent Cloud
- Implementing OIDC-Based Role-Based SSO
- Access Key
- User Groups
- Role
- Policies
- Troubleshooting
- Permissions Boundary
- Downloading Security Analysis Report
- CAM-Enabled Role
- Overview
- Compute
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- CAM-Enabled API
- Overview
- Compute
- Edge Computing
- Container
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Endpoint Security
- Data Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Natural Language Processing
- Middleware
- Communication
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- More
- Best Practice
- Security Best Practice
- Multi-Identity Personnel Permission Management
- Authorizing Certain Operations by Tag
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Reviewing Employee Operation Records on Tencent Cloud
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- During tag-based authentication, only tag key matching is supported
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- Authorizing Sub-account Full Access to COS Resources under the Account
- Authorizing Sub-account Full Access to Specific Directory
- Authorizing Sub-account Read-only Access to Files in Specific Directory
- Authorizing Sub-account Read/Write Access to Specific File
- Authorizing Sub-account Read-only Access to COS Resources
- Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
- Authorizing Sub-account Read/Write Access to Files with Specified Prefix
- Authorizing Another Account Read/Write Access to Specific Files
- Authorizing Cross-Account ’s Sub-account Read/Write Access to Specified File
- CVM
- Authorizing Sub-account Full Access to CVMs
- Authorizing Sub-account Read-only Access to CVMs
- Authorizing Sub-account Read-only Access to CVM-related Resources
- Authorizing Sub-account Access to Perform Operations on CBSs
- Authorizing Sub-account Access to Perform Operations on Security Groups
- Authorizing Sub-account Access to Perform Operations on EIPs
- Authorizing Sub-account Access to Perform Operations on Specific CVM
- Authorizing Sub-account Access to Perform Operations on CVMs in Specific Region
- Authorizing Sub-account Full Access to CVMs Except Payment
- VPC
- Authorizing Sub-account Read-only Access to VPCs
- Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC
- Authorizing Sub-account Access to Perform Operations on VPC Except on Routing Table
- Authorizing Sub-account Access to Perform Operations on VPN
- Authorizing Sub-account Full Access to VPCs
- Authorizing a Sub-account Full Access to VPCs Except Payment
- VOD
- Others
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Identity Provider APIs
- Policy APIs
- UpdatePolicy
- ListPolicies
- ListEntitiesForPolicy
- ListAttachedUserPolicies
- ListAttachedGroupPolicies
- GetPolicy
- DetachUserPolicy
- DetachGroupPolicy
- DeletePolicy
- CreatePolicy
- AttachUserPolicy
- AttachGroupPolicy
- SetDefaultPolicyVersion
- ListPolicyVersions
- GetPolicyVersion
- DeletePolicyVersion
- CreatePolicyVersion
- ListAttachedUserAllPolicies
- User APIs
- CreateGroup
- UpdateUser
- UpdateGroup
- RemoveUserFromGroup
- ListUsersForGroup
- ListUsers
- ListGroupsForUser
- ListGroups
- GetUser
- GetGroup
- DeleteUser
- DeleteGroup
- AddUserToGroup
- AddUser
- SetMfaFlag
- GetCustomMFATokenInfo
- ConsumeCustomMFAToken
- ListCollaborators
- ListAccessKeys
- PutUserPermissionsBoundary
- DeleteUserPermissionsBoundary
- DescribeSafeAuthFlagColl
- DescribeSubAccounts
- GetSecurityLastUsed
- GetAccountSummary
- GetUserAppId
- UpdateAccessKey
- DeleteAccessKey
- CreateAccessKey
- Role APIs
- UpdateRoleDescription
- UpdateAssumeRolePolicy
- ListAttachedRolePolicies
- GetRole
- DetachRolePolicy
- DescribeRoleList
- DeleteRole
- CreateRole
- AttachRolePolicy
- UpdateRoleConsoleLogin
- GetServiceLinkedRoleDeletionStatus
- DeleteServiceLinkedRole
- CreateServiceLinkedRole
- PutRolePermissionsBoundary
- DeleteRolePermissionsBoundary
- DescribeSafeAuthFlag
- DescribeSafeAuthFlagIntl
- UntagRole
- TagRole
- Data Types
- Error Codes
- FAQs
- Glossary
Data Security Center
最終更新日:2024-05-02 09:05:53
Fundamental information
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| Data Security Governance Center | dsgc | Supported | not supported | Operation level | Partially supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
API authorization granularity
Two authorization granularity levels of API are supported: resource level, and operation level.
- Resource level: It supports the authorization of a specific resource.
- Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.
Write operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| AuthorizeDSPAMetaResources | AuthorizeDSPAMetaResources | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| CreateDSPAAssessmentTask | CreateDSPAAssessmentTask | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| CreateDSPACOSDiscoveryTask | create cos discovery task | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| CreateDSPACategory | create dspa category info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| CreateDSPACluster | CreateDSPACluster | Operation level | * | Supported |
| CreateDSPAComplianceGroup | create dspa compliance group info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| CreateDSPACosMetaResources | CreateDSPACosMetaResources | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| CreateDSPADbMetaResources | CreateDSPADbMetaResources | Resource level | qcs::dsgc::uin/${uin}:DspaId/${DspaId} | Supported |
| CreateDSPADiscoveryRule | create discovery rule | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| CreateDSPADiscoveryTask | create discovery task | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| CreateDSPALevelGroup | create dspa level group | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| CreateDSPAMetaResources | CreateDSPAMetaResources | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| CreateDSPASelfBuildMetaResource | CreateDSPASelfBuildMetaResource | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| CreateDsgcDataLevelItem | Operation level | * | Supported | |
| DeleteDSPAAssessmentTask | DeleteDSPAAssessmentTask | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| DeleteDSPACOSDiscoveryTask | delete cos discovery task | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DeleteDSPACOSDiscoveryTaskResult | delete cos discovery task result | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DeleteDSPACategory | delete discovery category info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DeleteDSPACluster | DeleteDSPACluster | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| DeleteDSPAComplianceGroup | delete discovery compliance group info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DeleteDSPADiscoveryRule | delete cos discovery rule info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DeleteDSPADiscoveryTask | delete discovery task | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DeleteDSPADiscoveryTaskResult | delete discovery task result | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DeleteDSPALevelGroup | delete discovery level group | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DeleteDSPAMetaResource | DeleteDSPAMetaResource | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| DeleteDsgcDataLevelItems | Operation level | * | Supported | |
| DisableDSPAMetaResourceAuth | DisableDSPAMetaResourceAuth | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| EnableDSPADiscoveryRule | enable & disable discovery rule | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| ModifyDSPAAssessmentRisk | ModifyDSPAAssessmentRisk | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| ModifyDSPACOSDiscoveryTask | modify cos discovery task | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| ModifyDSPACOSTaskResult | adjust cos task scan result | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| ModifyDSPACategory | modify category info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| ModifyDSPAClusterInfo | ModifyDSPAClusterInfo | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| ModifyDSPAComplianceGroup | modify discovery compliance group info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| ModifyDSPADiscoveryRule | modify discovery rule info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| ModifyDSPADiscoveryTask | modify discovery task info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| ModifyDSPATaskResult | adjust discovery task scan result | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| ModifyDsgcAlertTabAbnormalStatus | Operation level | * | Supported | |
| ModifyDsgcClientInfo | Operation level | * | Supported | |
| ModifyDsgcDataLevelItem | Operation level | * | Supported | |
| RestartDSPAAssessmentTask | RestartDSPAAssessmentTask | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| StartDSPADiscoveryTask | start exec discovery task | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| StopDSPADiscoveryTask | stop exec discovery task | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| UpdateDSPASelfBuildResource | UpdateDSPASelfBuildResource | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
Read operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeDSPAAssessmentCOSAsset | DescribeDSPAAssessmentCOSAsset | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPAAssessmentControlItems | DescribeDSPAAssessmentControlItems | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| DescribeDSPAAssessmentRDBAsset | DescribeDSPAAssessmentRDBAsset | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPAAssessmentRisks | DescribeDSPAAssessmentRisks | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| DescribeDSPAAssessmentTasks | DescribeDSPAAssessmentTasks | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| DescribeDSPAAssessmentTemplateControlItems | DescribeDSPAAssessmentTemplateControlItems | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| DescribeDSPAAssessmentTemplates | DescribeDSPAAssessmentTemplates | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACOSDataAssetBuckets | describe cos sensitive data asset buckets list | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACOSDataAssetByComplianceId | describe cos asset statistics | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACOSDataAssetDetail | describe cos discovery data asset detail | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACOSDiscoveryTaskDetail | describe cos discovery task detail | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACOSDiscoveryTaskFiles | describe cos discovery task result detail file list | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACOSDiscoveryTaskResult | describe cos discovery task result | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACOSDiscoveryTasks | describe cos discovery task list | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACOSTaskResultDetail | describe cos discovery task result detail | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPACategories | describe sensitive data category list | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPAComplianceGroups | describe identify compliance groups | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPADataSourceDbInfo | describe discovery data source database info | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPADiscoveryRules | describe discovery rule list | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPADiscoveryServiceStatus | query service status | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPADiscoveryTaskDetail | describe discovery task detail | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPADiscoveryTaskResult | describe discovery task result | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPADiscoveryTaskResultDetail | describe discovery task result detail | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPADiscoveryTaskTables | describe discovery scanned table list | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPADiscoveryTasks | describe discovery task list | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPALevelDetail | describe discovery level detail | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPALevelGroups | describe discovery level group list | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPARDBDataAssetByComplianceId | describe rdb data asset statistics | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPARDBDataAssetDetail | describe rdb data asset detail | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDSPATaskResultDataSample | describe scanned result data sample | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| DescribeDsgcAbnormalDataInfo | Operation level | * | Supported | |
| DescribeDsgcAbnormalOperationInstanceStatistics | Operation level | * | Supported | |
| DescribeDsgcAbnormalOperationStatistics | Operation level | * | Supported | |
| DescribeDsgcAbnormalOperationTrend | Operation level | * | Supported | |
| DescribeDsgcAbnormalUserInfos | Operation level | * | Supported | |
| DescribeDsgcAlertLevelAmount | Operation level | * | Supported | |
| DescribeDsgcAlertTabs | Operation level | * | not supported | |
| DescribeDsgcAlertTagsCount | Operation level | * | Supported | |
| DescribeDsgcAmount | Operation level | * | Supported | |
| DescribeDsgcClientInfo | Operation level | * | Supported | |
| DescribeDsgcDataLevelInfos | Operation level | * | Supported | |
| DescribeDsgcDataLevelList | Operation level | * | Supported | |
| DescribeDsgcDataTrend | Operation level | * | Supported | |
| DescribeDsgcHostAmount | Operation level | * | Supported | |
| DescribeDsgcHostSafeTrend | Operation level | * | Supported | |
| DescribeDsgcRiskDataTopList | Operation level | * | Supported | |
| DescribeDsgcRiskUserTopList | Operation level | * | Supported | |
| DescribeDsgcSafeTrendList | Operation level | * | Supported | |
| DescribeDsgcSensitiveDataDetailInfo | Operation level | * | Supported | |
| DescribeDsgcSensitiveDataInfo | Operation level | * | Supported | |
| DescribeDsgcSensitiveDataLevelInfo | Operation level | * | Supported | |
| DescribeDsgcSensitiveDataTypeInfo | Operation level | * | Supported | |
| DescribeDsgcSensitiveDataTypeInfoByTable | Operation level | * | Supported | |
| DescribeDsgcSensitiveGroupTypeCount | Operation level | * | Supported | |
| DescribeDsgcTypeGroups | Operation level | * | Supported | |
| DescribeDsgcaAssociateSetting | Operation level | * | Supported | |
| GetResourceConnectionStatus | GetResourceConnectionStatus | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| GetUserQuotaInfo | GetUserQuotaInfo | Resource level | qcs::dsgc::uin/${uin}:uin/{uin} | Supported |
| VerifyDSPACOSRule | verify cos discovery rule | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
| VerifyDSPADiscoveryRule | verify discovery rule | Resource level | qcs::${ApiModule}::uin/:DspaId/${DspaId} | Supported |
List Operations
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeDSPASupportedMetas | DescribeDSPASupportedMetas | Operation level | * | not supported |
| DescribeResourceAsyncTaskList | DescribeResourceAsyncTaskList | Resource level | qcs::dsgc::uin/${uin}:DspaId/${DspaId} | Supported |
| ListDSPAClusters | ListDSPAClusters | Resource level | qcs::dsgc:${region}:uin/${uin}:DspaId/* | Supported |
| ListDSPACosMetaResources | ListDSPACosMetaResources | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
| ListDSPAMetaResources | ListDSPAMetaResources | Resource level | qcs::${ApiModule}:${Region}:uin/:DspaId/${DspaId} | Supported |
はい
いいえ
この記事はお役に立ちましたか？