可授权的资源类型

最近更新时间:2019-10-28 16:22:06

资源级权限指的是能够指定用户对哪些资源具有执行操作的能力。Redis 部分支持资源级权限,即表示针对支持资源级权限的 Redis 操作,您可以控制何时允许用户执行操作或是允许用户使用特定资源。访问管理 CAM 中可授权的资源类型如下:

资源类型 授权策略中的资源描述方法
Redis 实例相关 qcs::redis:$region::instance/*
qcs::redis:$region:$account:instanceId/$instanceId

下表将介绍当前支持资源级权限的 Redis API 操作,以及每个操作支持的资源。指定资源路径的时候,您可以在路径中使用 * 通配符。

说明:

如果某一个 Redis API 操作在下表中没有列出,则它不支持资源级权限。如果 Redis API 操作不支持资源级权限,那么您还是可以向用户授予使用该操作的权限,但是必须为策略语句的资源元素指定 *。

Redis 实例相关

API 操作 资源路径
AssignProject qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
AssociateSecurityGroups qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
AutoRenew qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
BackupInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
CleanInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
CleanUpInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ClearInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ClearRedis qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
CreateInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
CreateInstanceAccount qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
CreateInstanceHour qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
CreateInstances qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
CreateRedis qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DeleteInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DeleteInstanceAccount qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeAutoBackupConfig qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeBackupUrl qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeDBSecurityGroupsDetail qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceAccount qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceBackups qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceDealDetail qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceParamRecords qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceParams qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceSecurityGroup qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceSecurityGroupsAssociated qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceShards qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstanceSlowlog qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeInstances qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeProjectSecurityGroup qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeRedis qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeRedisDealDetail qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeRedisProduct qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeRedisProductList qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeRedisRegions qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeRedisZones qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeSlowLog qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeTaskInfo qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeTaskList qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeTasks qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DescribeVPCRedis qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DestroyPostpaidInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DestroyPrepaidInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
DisableReplicaReadonly qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
EnableReplicaReadonly qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ExportRedisBackup qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
GetBackupDownloadUrl qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
GetRedisBackupList qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
GetRedisPerformance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
GetRedisSlowLogList qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
GetRedisTaskList qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
InitRedisPassword qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
InquiryRedisPrice qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ManualBackupInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModfiyInstancePassword qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModfiyRedisPassword qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyAutoBackupConfig qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyDBInstanceSecurityGroups qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyInstanceAccount qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyInstanceParams qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyInstanceSecurityGroup qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyNetworkConfig qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyRedisName qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyRedisParams qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ModifyRedisProject qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
RenewInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
RenewRedis qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ResetPassword qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
ResetRedisPassword qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
RestoreInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
SetRedisAutoRenew qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
StartupInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
SwitchInstanceVip qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
UnAssociateSecurityGroups qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
UpgradeInstance qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
UpgradeRedis qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId
UpgradeRedisInquiryPrice qcs::redis:$region:$account:instanceId/* qcs::redis:$region:$account:instanceId/$instanceId