CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
| Product | Abbreviation in CAM | Console | Authorization by Tag | Authorization Granularity | IP Restriction |
|---|---|---|---|---|---|
| EventBridge | eb | Supported | Supported | Resource level | Supported |
Note：
The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.
- Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
- Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
- Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.
Two authorization granularity levels of API are supported: resource level, and operation level.
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CheckRule | This API is used to check rule | Operation level | * | Supported |
| CreateConnection | CreateConnection | Resource level | qcs::eb:${region}:uin/${uin}:connectionid/${EventBusId}/${ConnectionId} | Supported |
| CreateEventBus | CreateEventBus | Resource level | qcs::eb:${region}:uin/${uin}:eventbusid/${EventBusId} | Supported |
| CreateRule | CreateRule | Resource level | qcs::eb:${region}:uin/${uin}:eventbusid/${EventBusId} | Supported |
| CreateTarget | CreateTarget | Resource level | qcs::eb:${region}:uin/${uin}:targetid/${EventBusId}/${RuleId}/${TargetId} | Supported |
| CreateTransformation | CreateTransformation | Operation level | * | Supported |
| DeleteConnection | DeleteConnection | Resource level | qcs::eb:${region}:uin/${uin}:connectionid/${EventBusId}/${ConnectionId} | Supported |
| DeleteEventBus | DeleteEventBus | Resource level | qcs::eb:${region}:uin/${uin}:eventbusid/${EventBusId} | Supported |
| DeleteRule | DeleteRule | Resource level | qcs::eb:${region}:uin/${uin}:ruleid/${EventBusId}/${RuleId} | Supported |
| DeleteTarget | DeleteTarget | Resource level | qcs::eb:${region}:uin/${uin}:targetid/${EventBusId}/${RuleId}/${TargetId} | Supported |
| DeleteTransformation | DeleteTransformation | Operation level | * | Supported |
| PutEvents | This API is used to put events | Resource level | qcs::${ApiModule}:${Region}:uin/:eventbusid/${EventBusId} | Supported |
| UpdateConnection | UpdateConnection | Resource level | qcs::eb:${region}:uin/${uin}:connectionid/${EventBusId}/${ConnectionId} | Supported |
| UpdateEventBus | UpdateEventBus | Resource level | qcs::eb:${region}:uin/${uin}:eventbusid/${EventBusId} | Supported |
| UpdateRule | UpdateRule | Resource level | qcs::eb:${region}:uin/${uin}:ruleid/${EventBusId}/${RuleId} | Supported |
| UpdateTarget | UpdateTarget | Resource level | qcs::eb:${region}:uin/${uin}:tagetid/${EventBusId}/${RuleId}/${TargetId} | Supported |
| UpdateTransformation | UpdateTransformation | Operation level | * | Supported |
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| CheckScfFunctionHandler | CheckScfFunctionHandler | Resource level | qcs::eb:${Region}:uin/:ruleid/${EventBusId}/${RuleId} | Supported |
| CheckTransformation | CheckTransformation | Operation level | * | Supported |
| RuleCheck | RuleCheck | Operation level | * | Supported |
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| DescribeLogStats | Query log aggregation statistics interface | Operation level | * | Supported |
| DescribeLogTagValue | Query log index dimension value | Operation level | * | Supported |
| GetCloudEventTemplate | GetCloudEventTemplate | Operation level | * | Supported |
| GetConnectorEventTemplate | GetConnectorEventTemplate | Operation level | * | Supported |
| GetEventBus | GetEventBus | Resource level | qcs::eb:${region}:uin/${uin}:eventbusid/${EventBusId} | Supported |
| GetPlatformEventTemplate | GetPlatformEventTemplate | Operation level | * | Supported |
| GetRule | GetRule | Resource level | qcs::eb:${region}:uin/${uin}:ruleid/${EventBusId}/${RuleId} | Supported |
| GetTransformation | GetTransformation | Operation level | * | Supported |
| SearchLog | Search Event Log | Operation level | * | Supported |
| API | API Description | Authorization Granularity | Six-segment Resource Description | IP Restriction |
|---|---|---|---|---|
| ListCloudEventNames | ListCloudEventNames | Operation level | * | Supported |
| ListCloudEventPatterns | ListCloudEventPatterns | Operation level | * | Supported |
| ListCloudProducts | ListCloudProducts | Operation level | * | Supported |
| ListConnections | ListConnections | Operation level | * | Supported |
| ListConnectorEventNames | ListConnectorEventNames | Operation level | * | Supported |
| ListConnectorEventPatterns | ListConnectorEventPatterns | Operation level | * | Supported |
| ListConnectors | ListConnectors | Operation level | * | Supported |
| ListEventBuses | ListEventBuses | Resource level | qcs::${ApiModule}:${Region}:uin/:eventbusid/${EventBusId} | Supported |
| ListPlatformEventNames | ListPlatformEventNames | Operation level | * | Supported |
| ListPlatformEventPatterns | ListPlatformEventPatterns | Operation level | * | Supported |
| ListPlatformProducts | ListPlatformProducts | Operation level | * | Supported |
| ListRules | ListRules | Resource level | qcs::${ApiModule}:${Region}:uin/:ruleid/${EventBusId}/${RuleId} | Supported |
| ListRulesInternal | ListRulesInternal | Operation level | * | Supported |
| ListTargets | ListTargets | Resource level | qcs::eb:${region}:uin/${uin}:targetid/${EventBusId}/${RuleId}/${TargetId} | Supported |
피드백