用户指南

支持CAM的业务接口

商用案例

API 文档

诚邀爱技术、爱分享的你,成为文档内容共建者> HOT

基本信息

CAM中产品名 CAM中简称 授权粒度
全球应用加速 gaap 资源级
说明:

云产品的授权粒度按照粒度粗细分为服务级、操作级和资源级三个级别。

  • 服务级:定义对服务的整体是否拥有访问权限,分为允许对服务拥有全部操作权限或者拒绝对服务拥有全部操作权限。服务级授权粒度的云产品,不支持对具体的接口进行授权。
  • 操作级:定义对服务的特定接口(API)是否拥有访问权限,例如:授权某账号对云服务器服务进行只读操作。
  • 资源级:定义对特定资源是否有访问权限,这是最细的授权粒度,例如:授权某账号仅读写操作某台云服务器实例。能支持资源级接口授权的产品,则会被认定为资源级授权粒度。

接口授权粒度

接口授权粒度分为资源级和操作级两个级别:

  • 资源级接口:此类型接口支持对某一个具体特定的资源进行授权。
  • 操作级接口:此类型接口不支持对某一个特定的资源进行授权。

    资源级接口在鉴权时,云产品会将具体的资源六段式传给CAM鉴权,故支持对某一个具体特定的资源进行授权和鉴权 。
    操作级接口在鉴权时,云产品不会将具体的资源六段式传给CAM鉴权,只会传递任意资源“*”。因此授权时策略语法若限定了具体的资源,鉴权时此接口不传递该资源,CAM会判断此接口不在授权范围,会判断为无权限。

读操作

接口名 授权粒度 资源六段式
DescribeProxyGroupDetails 资源级 qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
DescribeGroupDomainConfig 资源级 qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
DescribeCountryAreaMapping 操作级 *
DescribeSecurityPolicyDetail 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeProxyAccessIPs 操作级 *
GetProxyStatisticsData 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeDestRegions 操作级 *
DescribeAccessRegions 操作级 *
DescribeAccessRegionsByDestRegion 操作级 *
DescribeProxiesStatus 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeL4Listeners 资源级 qcs::gaap::uin/${uin}:proxy/${proxyId}
DescribeL4ListenerBindRealServers 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeL4ListenerAvailableRealServers 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
InquiryPriceCreateProxy 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeRealServersStatus 资源级 qcs::gaap::uin/${uin}:realServer/${RealServerId}
DescribeUinWhiteLists 操作级 *
DescribeRules 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeRuleRealServers 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CheckProxyCreate 操作级 *
DescribeUDPListeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeHTTPListeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeRealServerStatistics 资源级 qcs::gaap::uin/${uin}:realServer/${RealServerId}
DescribeProxyStatistics 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeProxyGroupStatistics 资源级 qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
DescribeListenerStatistics 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeRegionAndPrice 操作级 *
DescribeProxyAndStatisticsListeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeGroupAndStatisticsProxy 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeProxyDetail 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribePlatformUDPListeners 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
DescribePlatformTCPListeners 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
DescribePlatformSecurityPolicy 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
DescribePlatformListenerStatistics 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
DescribePlatformStatistics 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
DescribeLogList 操作级 *
DescribeRuleDomainStatistics 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeFirstLinkStatistics 资源级 qcs::gaap::uin/${uin}:Template/${TemplateId}
DescribeCertificateDetail 资源级 qcs::gaap::uin/${uin}:Certificate/${CertificateId}
DescribeProxyDisasterRecoveryPolicy 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeRealServerStatusStatistics 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeRuleDomains 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeNoneBgpIpList 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribePlatformServerIPs 资源级 qcs::${ApiModule}::uin/:platform/${PlatformId}

列表操作

接口名 授权粒度 资源六段式
DescribeProxyGroupList 资源级 qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
DescribeProxyInstances 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeProxies 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeRealServers 资源级 qcs::gaap::uin/${uin}:realServer/${RealServerId}
DescribeCertificates 资源级 qcs::gaap::uin/${uin}:Certificate/${CertificateId}
DescribeListenerRealServers 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeTCPListeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeHTTPSListeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeResourcesByTag 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeGlobalDomainDns 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
DescribeGlobalDomains 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
DescribePlatforms 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
DescribeCustomHeader 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeFirstLinkTemplates 资源级 qcs::gaap::uin/${uin}:Template/${TemplateId}
DescribeRulesByRuleIds 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DescribeSecurityRules 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}

写操作

接口名 授权粒度 资源六段式
CreateProxyGroup 资源级 qcs::gaap::uin/${uin}:proxyGroup/*
DeleteProxyGroup 资源级 qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
ModifyProxyGroupAttribute 资源级 qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
CreateProxyGroupDomain 资源级 qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
ModifyGroupDomainConfig 资源级 qcs::gaap::uin/${uin}:proxyGroup/${GroupId}
CreateSecurityPolicy 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DeleteSecurityPolicy 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
OpenSecurityPolicy 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CloseSecurityPolicy 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateSecurityRules 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifySecurityRule 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DeleteSecurityRules 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateProxy 资源级 qcs::gaap::uin/${uin}:proxy/*
ModifyProxiesProject 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyProxyConfiguration 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyProxiesAttribute 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
OpenProxies 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CloseProxies 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
AddRealServers 资源级 qcs::gaap::uin/${uin}:realServer/*
RemoveRealServers 资源级 qcs::gaap::uin/${uin}:realServer/${RealServerId}
ModifyRealServerName 资源级 qcs::gaap::uin/${uin}:realServer/${RealServerId}
CreateL4Listeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
RemoveL4Listener 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyL4Listener 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
BindL4ListenerRealServers 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DestroyProxies 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateRule 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyRuleAttribute 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyDomain 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DeleteDomain 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DeleteRule 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
BindRuleRealServers 资源级 qcs::gaap::uin/${uin}:realServer/${RealServerId}
CreateTCPListeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateUDPListeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateHTTPSListener 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateHTTPListener 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyTCPListenerAttribute 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyUDPListenerAttribute 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
DeleteListeners 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyHTTPListenerAttribute 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyHTTPSListenerAttribute 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
BindListenerRealServers 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
UploadCertificate 操作级 *
ModifyGlobalDomainAttribute 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
EnableGlobalDomain 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
DeleteGlobalDomain 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
CreateGlobalDomain 资源级 qcs::gaap::uin/${uin}:domain/*
DisableGlobalDomain 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
CreateGlobalDomainDns 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
ModifyGlobalDomainDns 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
DeleteGlobalDomainDns 资源级 qcs::gaap::uin/${uin}:domain/${DomainId}
DisablePlatforms 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
EnablePlatforms 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
ModifyPlatform 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
DeletePlatforms 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
CreatePlatform 资源级 qcs::gaap::uin/${uin}:platform/*
CreatePlatformTCPListeners 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
DeletePlatformListeners 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
ModifyPlatformSecurityPolicy 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
ModifyPlatformTCPListenerAttribute 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
CreatePlatformUDPListeners 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
ModifyPlatformUDPListenerAttribute 资源级 qcs::gaap::uin/${uin}:platform/${PlatformId}
CreateFirstLinkTemplate 资源级 qcs::gaap::uin/${uin}:Template/*
DeleteFirstLinkTemplate 资源级 qcs::gaap::uin/${uin}:Template/${TemplateId}
CreateFirstLinkSession 资源级 qcs::gaap::uin/${uin}:Template/${TemplateId}
BindFirstLinkTemplate 资源级 qcs::gaap::uin/${uin}:Template/${TemplateId}
ModifyFirstLinkTemplate 资源级 qcs::gaap::uin/${uin}:Template/${TemplateId}
CreateCertificate 资源级 qcs::gaap::uin/${uin}:Certificate/*
ModifyCertificateAttributes 资源级 qcs::gaap::uin/${uin}:Certificate/${CertificateId}
DeleteCertificate 资源级 qcs::gaap::uin/${uin}:Certificate/${CertificateId}
OpenProxyGroup 资源级 qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}
ModifyGroupConfiguration 资源级 qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}
CloseProxyGroup 资源级 qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}
CloneGroup 资源级 qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}
ModifyProxyDisasterRecoveryPolicy 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateGroupProxies 资源级 qcs::gaap::uin/${uin}:proxyGroup/${ProxyGroupId}
SetDomainHttp3 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
SetCustomHeader 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
ModifyCertificate 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
SetAuthentication 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateCustomHeader 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
CreateDomain 资源级 qcs::gaap::uin/${uin}:proxy/${ProxyId}
OpenServiceProtocol 操作级 *
目录