tencent cloud

Cloud Access Management

Product Introduction
CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
Purchase Guide
Getting Started
Creating Admin User
Creating and Authorizing Sub-account
Logging In to Console with Sub-account
User Guide
Overview
Users
Access Key
User Groups
Role
Identity Provider
Policies
Permissions Boundary
Troubleshooting
Downloading Security Analysis Report
CAM-Enabled Role
Overview
Compute
Container
Microservice
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Database SaaS Service
Networking
CDN and Acceleration
Network Security
Data Security
Application Security
Domains & Websites
Big Data
Middleware
Interactive Video Services
Real-Time Interaction
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
CAM-Enabled API
Overview
Compute
Edge Computing
Container
Distributed cloud
Microservice
Serverless
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Networking
CDN and Acceleration
Network Security
Endpoint Security
Data Security
Business Security
Application Security
Domains & Websites
Office Collaboration
Big Data
Voice Technology
Image Creation
Tencent Big Model
AI Platform Service
Natural Language Processing
Optical Character Recognition
Middleware
Communication
Interactive Video Services
Real-Time Interaction
Stream Services
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Education Sevices
Medical Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
Use Cases
Security Practical Tutorial
Multi-Identity Personnel Permission Management
Authorizing Certain Operations by Tag
Supporting Isolated Resource Access for Employees
Enterprise Multi-Account Permissions Management
Reviewing Employee Operation Records on Tencent Cloud
Implementing Attribute-Based Access Control for Employee Resource Permissions Management
During tag-based authentication, only tag key matching is supported
Business Use Cases
TencentDB for MySQL
CLB
CMQ
COS
CVM
VPC
VOD
Others
API Documentation
History
Introduction
API Category
Making API Requests
User APIs
Policy APIs
Role APIs
Identity Provider APIs
Data Types
Error Codes
FAQs
Role
Key
Others
CAM Users and Permissions
Glossary

Content Delivery Network

PDF
Focus Mode
Font Size
Last updated: 2026-04-03 09:40:52

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
CDN cdn Supported Supported Resource level Partially supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AddCLSTopicDomains Add domain names to the log topic Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
AddCdnDomainConfig Used for adding and merging domain config on the console Resource level qcs::cdn:${region}:uin/${uin}:domain/* Supported
AddImageDomain add image domain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
AddOfflineLogSaveTask AddOfflineLogSaveTask Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
AppealBlockedRecord Appeal blocked record Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ApplyQuota Submit an application for a temporary or permanent quota. Operation level * Supported
ApplySaaSSSLCert apply for saas agent maintenance certificate Resource level qcs::cdn::uin/${uin}:domain/${domains} Supported
CancelAppealedRecord Cancel appealed record Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateAddon Enable the add-on Operation level * Supported
CreateCacheMd5Task Create file consistency check task Resource level qcs::cdn::$account:domain/$domain Supported
CreateClsLogSet create cls log set for cdn real-time log Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateClsLogTopic Create log topic Operation level * Supported
CreateDiagnoseTask Used to create diagnostic tasks Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateDiagnoseUrl Generate diagnostic link Resource level qcs::cdn::$account:domain/$domain Supported
CreateDomainDraft Add a domain draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateEdgePackConfig Create new edgepack configuration. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
CreateEdgePackTask For SCF to trigger CDN original APK processing Operation level * Supported
CreatePurgeFetchTask Create timed purge/prefetch task. Operation level * Supported
CreateSharedCname create shared cname Operation level * Supported
CreateSpeedLimitStrategy create domain spped limit strategy Operation level * Supported
CreateVerifyRecord create verify record Operation level * Supported
DeleteAddon Turn off the add-on Operation level * Supported
DeleteCdnDomain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DeleteClsLogTopic Delete log topics Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DeleteEdgePackConfig Delete the configuration of edgepack. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DeleteOfflineLogSaveTask DeleteOfflineLogSaveTask Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DeletePurgeFetchTask Delete the timed purge/prefetch task. Operation level * Supported
DeleteSharedCname delete shared cname Operation level * Supported
DeleteSpeedLimitStrategies delete spped limit strategies Operation level * Supported
DeployDomainDraft Deploy domain\\\'s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DisableCaches DisableCaches Operation level * Supported
DisableClsLogTopic Stop shipping the log Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DisableDomainDraft Disable domain\\\'s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DuplicateDomainConfig Copy domain configuration Resource level qcs::cdn::$account:domain/$domain Supported
EnableCaches EnableCaches Operation level * Supported
EnableClsLogTopic Start shipping the log Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
EnableDomainDraft Enable domain\\\'s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ManageClsTopicDomains Manage domain names of the log topic Operation level * Supported
ModifyCookieAuthStrategy Modify the Strategy of Cookie Authentication Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifyDomainConfig Modify Domain Config Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifyEdgePackConfig Modify the configuration of edgepack. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifyGeoBlockStrategy Modify the configuration of geo-block. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifyPurgeFetchTask Modify the timed purge/pretech task Operation level * Supported
ModifyPurgeFetchTaskStatus Modify the status of timed purge/prefetch tasks. Operation level * Supported
ModifySaaSSSLCert This interface is used to change, revoke, and delete SaaS certificates Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifySchemaConfigForKugou update domain special config Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ModifySpeedLimitStrategy modify domain speed limit strategy Operation level * Supported
ModifySpeedLimitStrategySwitch modify speed limit strategy switch Operation level * Supported
OpenCdnService Open Cdn Service Operation level * Supported
OpenChannelService Open channel business account Operation level * Supported
OpenEcdnOversea open oversea ecdn white uin list Operation level * Supported
PayCdnTrafficPackOrder Pay for orders of CDN traffic packages in the Chinese Mainland. Operation level * Supported
PlaceCdnTrafficPackOrder Place an order for CDN traffic packages in the Chinese Mainland. Operation level * Supported
PurgePathCache PurgePathCache Operation level * Supported
PurgeUrlsCache PurgeUrlsCache Operation level * Supported
PurgeUrlsCacheAsync async purge url cache Operation level * Supported
PushUrlsCache PushUrlsCache Operation level * Supported
ReclaimDomain reclaimdomain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
RefundTrafficPackage Refund Traffic Package Operation level * Supported
RegisterImageService open image optim service Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
RenewHttpsPackage Renew Https Package Operation level * Supported
RenewTrafficPackage Renew Traffic Package Operation level * Supported
StartCdnDomain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
StopCdnDomain close accelerate service Operation level * Supported
SubmitUSFinalRuleAcknowledgement Submit US Final Rule acknowledgement Operation level * Supported
TcbCheckCreate Tcb Check Create Operation level * Supported
UpdateAggregationDomain Update Aggregation Domain Operation level * Supported
UpdateCacheByFile The UpdateCacheByFile interface is used to refreshe or preheat URLs by uploaded files. Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
UpdateCustomAuthKey Provide cntv update authentication key Resource level qcs::cdn::uin/${uin}:domain Supported
UpdateCustomPublicKey Microsoft customized update authentication key interface Resource level qcs::cdn:${region}:uin/${uin}:- Supported
UpdateDiagnoseTaskInfo update diagnose task info Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
UpdateDomainConfig Modify domain config 3.0 Operation level * Supported
UpdateDomainDraft Update the configuration of the domain’s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
UpdateDomainHttps update domain https Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
UpdateDomainsCertificate update domains certificate Resource level qcs::cdn::uin/${uin}:domain/${domain} not supported
UpdateDomainsHttps Batch update domain certificate Operation level * Supported
UpdateGCSToken UpdateGCSToken Operation level * not supported
UpdateHttpsPackageAlertThreshold Update Https Package Alert Threshold Operation level * Supported
UpdateImageConfig Update CDN domain image config Resource level qcs::cdn::$account:domain/$domain Supported
UpdateOfflineLogSaveTask UpdateOfflineLogSaveTask Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
UpdatePayType Update pay type Operation level * Supported
UpdateSharedCname update shared cname Operation level * Supported
UpdateTrafficPackageAlertThreshold update the alert threshold of traffic package Operation level * Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
AddCdnDomain add cdn domain Operation level * Supported
CheckClsRegisterStatus check cls service open status Operation level * Supported
CheckDomain check domain Operation level * Supported
CheckDomainByService check domain by service Operation level * Supported
CheckDomainIsSuperior check domain is superiror Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
CheckImageServiceStatus check domain image optimization Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
CheckOrigin origin site compliance verification Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeAccountQuota check account quota Operation level * Supported
DescribeActiveDomains Describe active domains filtered by flux threshold Operation level * Supported
DescribeAddons Get the list of the addons Operation level * Supported
DescribeAppealedRecords Describe appealed records Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeAppidWhitelist check account white list config Operation level * Supported
DescribeBillingData describe billing data Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeBillingDataCustom Kuaishou obtains custom platform dimension indicators Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeCacheMd5Task Query file consistency check results Operation level * Supported
DescribeCdnData DescribeCdnData Operation level * Supported
DescribeCdnDetailData Describe cdn detail data Resource level qcs::cdn::$account:domain/$domain Supported
DescribeCdnDistrictData describe cdn district data Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeCdnDomainLogs DescribeCdnDomainLogs Operation level * Supported
DescribeCdnDomainsByCerts describe cdn domains by certs Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeCdnIp Query IP ownership Operation level * Supported
DescribeCdnOriginIp query origin ip Operation level * Supported
DescribeCdnRawData Query CDN raw data Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeCertDomains DescribeCertDomains Operation level * Supported
DescribeCookieAuthStrategies Query the strategy list of Cookie Authentication Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDiagnoseReport query diagnotic reports details Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDiagnoseReportContent query diagnose report content Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDiagnoseTaskInfo query diagnose task detail Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDiagnoseTasks List Diagnose Tasks Resource level qcs::cdn::uin/${uin}:domain/$domain Supported
DescribeDistrictIspDataCustomized query district and isp data customized Operation level * Supported
DescribeDomainCname query domain cname Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDomainCnameRecords query domain cname record list Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDomainDraft Query the configuration of the domain\'s draft Resource level qcs::cdn::uin/${uin}:domain/${domain} not supported
DescribeDomains Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDomainsByLuaScriptConfig query domain pkey info Operation level * Supported
DescribeDomainsCacheKey describe domain cache key Operation level * Supported
DescribeDomainsConfig DescribeDomainsConfig Operation level * Supported
DescribeDomainsForCos Describe CDN domains by COS origin for COS product Resource level qcs::cdn::uin/:domain/${domain} not supported
DescribeDomainsStatusCodeData query the domain statusCode data Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeDomainsTopicId Describe domains\' cls topicId Resource level qcs::cdn::uin/${uin}:domain/${Domains} Supported
DescribeEdgeData Query CDN edge layer bandwidth and edge hit rate. Resource level qcs::cdn::$account:domain/$domain Supported
DescribeEdgePackConfigs Get the edgepack configurations. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeEdgePackData Get the usage info of edgepack service. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeEdgePackTaskStatus Get the status of edgepack configuration Operation level * Supported
DescribeEdgePackTopData Get the top usage data of edgepack service. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeFogData DescribeFogData Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeGeoBlockStrategies Get the configuration of geo-block. Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeHttpsPackageAlertThreshold Describe Https Package Alert Threshold Operation level * Supported
DescribeIPAddressByISPName describe IP address by ISP name Operation level * Supported
DescribeISPName describe ISP name Operation level * Supported
DescribeImageConfig DescribeImageConfig Operation level * Supported
DescribeImageDomains DescribeImageDomains Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeIpVisit DescribeIpVisit Operation level * Supported
DescribeLogDataExpand query multidimensional detail data log of domain log Operation level * Supported
DescribeMainlandMonitorRealtimeData query mainland realtime monitor data Operation level * Supported
DescribeMapInfo query province and isp mapping Operation level * Supported
DescribeMonitorDomains Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeMonitorTrendData query monitor trend data Operation level * Supported
DescribeOfflineLogSaveDomain DescribeOfflineLogSaveDomain Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeOfflineLogSaveTask get offline log save task Operation level * Supported
DescribeOriginCostData query origin cost data Operation level * Supported
DescribeOriginData DescribeOriginData Operation level * Supported
DescribeOriginDetailData Describe origin detail data Resource level qcs::cdn::$account:domain/$domain Supported
DescribeOriginRegion check origin location Operation level * Supported
DescribeOverdueFlux query overdue flux of location Operation level * Supported
DescribeOverdueHttps Describe Overdue Https Operation level * Supported
DescribeOverseaDistrictMap check the district map of oversea monitor data Operation level * Supported
DescribeOverseaMonitorRealtimeData query realtime monitor data of oversea Operation level * Supported
DescribePayType DescribePayType Operation level * Supported
DescribePublishRecord query domain pulblish record Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribePurgeFetchTaskStatus Get the status of timed puge/prefetch task. Operation level * Supported
DescribePurgeFetchTasks Get the list of timed purge/prefetch tasks. Operation level * Supported
DescribePurgeQuota Describe Purge Quota Operation level * Supported
DescribePurgeTasks DescribePurgeTasks Operation level * Supported
DescribePushQuota Describe Push Quota Operation level * Supported
DescribePushTasks DescribePushTasks Operation level * Supported
DescribeQuicData Describe quic data Resource level qcs::cdn::$account:domain/$domain Supported
DescribeQuotaApplyList Query the customer\\\'s quota application history list. Operation level * Supported
DescribeQuotaList Query the list of quota items that the user can manage. Operation level * Supported
DescribeQuotaRestriction Query the upper and lower limits of quota application. Operation level * Supported
DescribeReportData Describe Report Data Resource level qcs::cdn::$account:domain/$domain Supported
DescribeSandboxIp Obtain the IP of the sandbox Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeSharedCnameDomainsGroup describe shared cname domains group Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeSharedCnames describe shared cnames Operation level * Supported
DescribeSogouMonitorData query monitor data for sogou Operation level * Supported
DescribeSpeedLimitStrategies get the speed limit strategies Operation level * Supported
DescribeSslCerts check credit list Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeSslDomains query the num of certificate binding domain Operation level * Supported
DescribeStageDomain get statging environment domain Operation level * Supported
DescribeTpgPolicies query list of tpg strategy Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeTrafficPackageAlertThreshold get the alert threshold of traffic package Operation level * Supported
DescribeTrafficPackages DescribeTrafficPackages Operation level * Supported
DescribeUSFinalRuleAcknowledgement Describe US Final Rule acknowledgement Operation level * Supported
DescribeUpdateDomainsCertificate describe update domains certificate result Operation level * Supported
DescribeUrlViolations DescribeUrlViolations Operation level * Supported
DescribeUserFlag query user flag info Operation level * Supported
DescribeUserMenu query user menu Operation level * Supported
DescribeUserStatus query the business info of cdn user Operation level * Supported
DescribeUserVip query use vip info Operation level * Supported
DescribeViolativeResources Describe violative resources Resource level qcs::cdn::$account:domain/$domain Supported
DescribeWildcardDomainData query wildcard domain data Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
DescribeWorkOrderDetails DescribeWorkOrderDetails Operation level * Supported
DescribeWorkOrders DescribeWorkOrders Operation level * Supported
DetectOrigins detect the port of origin site Operation level * Supported
GetAccountTpgEdgeData query tpg account statistic data Operation level * not supported
GetDisableRecords GetDisableRecords Operation level * Supported
GetDomainsAccountingData get user all domain accounting data Operation level * Supported
GetUploadURL The GetUploadURL interface is used to apply for a COS file upload URL, the URL is valid for 3 minutes by default. Operation level * Supported
GetUserHistoryOrderCountAndAmount query user history order count and amount Operation level * Supported
ListCdnAppid get the appid of cdn Operation level * Supported
ListCdnDomains query brief info of domain Operation level * Supported
ListCdnProjects query project list Operation level * Supported
ListClsOccupiedDomains show the domain that has already binding the cls topic Operation level * Supported
ListDiagnoseReport Query diagnotic reports Resource level qcs::cdn::$account:domain/$domain Supported
ListSaaSSSLCert List SaaS SSL Cert Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ListSaaSSSLCertOpLog Query the list of SaaS certificate operation logs Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ListTopClsLogData List Top Data Caculated by CLS Logs Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ListTopData ListTopData Operation level * Supported
QueryCdnTrafficPackPrice Query the unit price of CDN traffic packages in the Chinese Mainland. Operation level * Supported
SearchClsLog Search cls logs Operation level * Supported
TcbCheckResource tcb check resource Operation level * Supported
VerifyDomainRecord verify domain record Operation level * Supported
VerifySharedCnameDomains verify shared cname domains Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeHttpsPackages Describe Https Packages Operation level * Supported
DescribeSourceMd5VerifyTasks Describe source md5 verify task list Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeTopData Query TOP N ranking data Resource level qcs::cdn:${region}:uin/${uin}:domain/${domain} Supported
DescribeTrafficPackageRefund Describe Traffic Package Refund Operation level * Supported
ListClsLogTopics List log topics Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported
ListClsTopicDomains List domain names of the log topic Operation level * Supported
ListDomainDrafts List domain\\\'s drafts Resource level qcs::cdn::uin/${uin}:domain/${domain} Supported

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback