tencent cloud

Cloud Access Management

Product Introduction
CAM Overview
Features
Scenarios
Basic Concepts
Use Limits
User Types
Purchase Guide
Getting Started
Creating Admin User
Creating and Authorizing Sub-account
Logging In to Console with Sub-account
User Guide
Overview
Users
Access Key
User Groups
Role
Identity Provider
Policies
Permissions Boundary
Troubleshooting
Downloading Security Analysis Report
CAM-Enabled Role
Overview
Compute
Container
Microservice
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Database SaaS Service
Networking
CDN and Acceleration
Network Security
Data Security
Application Security
Domains & Websites
Big Data
Middleware
Interactive Video Services
Real-Time Interaction
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
CAM-Enabled API
Overview
Compute
Edge Computing
Container
Distributed cloud
Microservice
Serverless
Essential Storage Service
Data Process and Analysis
Data Migration
Relational Database
Enterprise Distributed DBMS
NoSQL Database
Database SaaS Tool
Networking
CDN and Acceleration
Network Security
Endpoint Security
Data Security
Business Security
Application Security
Domains & Websites
Office Collaboration
Big Data
Voice Technology
Image Creation
Tencent Big Model
AI Platform Service
Natural Language Processing
Optical Character Recognition
Middleware
Communication
Interactive Video Services
Real-Time Interaction
Stream Services
Media On-Demand
Media Process Services
Media Process
Cloud Real-time Rendering
Game Services
Education Sevices
Medical Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
More
Use Cases
Security Practical Tutorial
Multi-Identity Personnel Permission Management
Authorizing Certain Operations by Tag
Supporting Isolated Resource Access for Employees
Enterprise Multi-Account Permissions Management
Reviewing Employee Operation Records on Tencent Cloud
Implementing Attribute-Based Access Control for Employee Resource Permissions Management
During tag-based authentication, only tag key matching is supported
Business Use Cases
TencentDB for MySQL
CLB
CMQ
COS
CVM
VPC
VOD
Others
API Documentation
History
Introduction
API Category
Making API Requests
User APIs
Policy APIs
Role APIs
Identity Provider APIs
Data Types
Error Codes
FAQs
Role
Key
Others
CAM Users and Permissions
Glossary

TDMQ for RabbitMQ

PDF
Modo Foco
Tamanho da Fonte
Última atualização: 2026-04-03 09:47:43

Fundamental information

Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
RabbitMQ Serverless trabbit Supported Supported Resource level Supported

Note:

The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

  • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
  • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
  • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

API authorization granularity

Two authorization granularity levels of API are supported: resource level, and operation level.

  • Resource level: It supports the authorization of a specific resource.
  • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

Write operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
BatchDeleteRabbitMQServerlessQueue batch delete rabbitmq queue Resource level qcs::trabbit:${Region}:uin/:instance/${InstanceId} Supported
CreateRabbitMQServerlessBinding Create RabbitMQ binding Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
CreateRabbitMQServerlessDataStreamPoint Add endpoint Resource level qcs::trabbit:${region}:uin/${uin}:instance/${ClusterId} Supported
CreateRabbitMQServerlessExchange create rabbitmq exchange Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
CreateRabbitMQServerlessInstance Create RabbitMQ Serverless Cluster Operation level * Supported
CreateRabbitMQServerlessQueue create rabbitmq queue Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
CreateRabbitMQServerlessUser create rabbitmq user Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
CreateRabbitMQServerlessVirtualHost create rabbitmq vhost Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DeleteRabbitMQServerlessBinding delete rabbitmq binding Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DeleteRabbitMQServerlessDataStreamPoint delete data panel endpoint Resource level qcs::trabbit:${region}:uin/${uin}:instance/${ClusterId} Supported
DeleteRabbitMQServerlessExchange delete rabbitmq exchange Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DeleteRabbitMQServerlessPermission delete rabbitmq permission Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DeleteRabbitMQServerlessQueue delete rabbitmq queue Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DeleteRabbitMQServerlessUser delete rabbitmq user Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DeleteRabbitMQServerlessVirtualHost delete rabbitmq vhost Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DestroyRabbitMQServerlessInstance Destroy RabbitMQ Serverless cluster Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
ImportRabbitMQServerlessDefinitions import rabbitmq metadata Resource level qcs::trabbit:${Region}:uin/:instance/${InstanceId} Supported
ModifyRabbitMQServerlessExchange modify rabbitmq exchange info Resource level qcs::trabbit:${Region}:uin/:instance/${InstanceId} Supported
ModifyRabbitMQServerlessInstance modify rabbitmq instance info Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
ModifyRabbitMQServerlessInstanceConf modify rabbitmq instance conf Resource level qcs::trabbit:${Region}:uin/:instance/${InstanceId} Supported
ModifyRabbitMQServerlessPermission modify rabbitmq permission Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
ModifyRabbitMQServerlessQueue modify rabbitmq queue Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
ModifyRabbitMQServerlessUser modify rabbitmq user Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
ModifyRabbitMQServerlessVirtualHost modify rabbitmq vhost info Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
ModifyServerlessInstancePayMode ModifyServerlessInstancePayMode Resource level qcs::trabbit:${Region}:uin/${uin}:instance/${InstanceId} Supported
PurgeRabbitMQServerlessQueue purge rabbitmq queue Resource level qcs::trabbit:${Region}:uin/:instance/${InstanceId} Supported
UpgradeRabbitMQServerlessInstance Upgrade RabbitMQ Serverless Cluster Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported

Read operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
DescribeNewOrderDetail DescribeNewOrderDetail Operation level * Supported
DescribeRabbitMQServerlessBindings get binding list Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessConnection get rabbitmq connection list Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessConsumers get rabbitmq consumer list Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessCreateInstanceProgress get the progress of creating the cluster Resource level qcs::trabbit:${region}:uin/${uin}:instance/${ClusterId} Supported
DescribeRabbitMQServerlessExchangeDetail get rabbitmq exchange detail info Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessExchanges get rabbitmq exchange list Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessInstance Get overall information of RabbitMQ Serverless instances Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessMessage get message info Resource level qcs::trabbit:${Region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessPermission get rabbitmq permission list Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessQueueDetail get rabbitmq queue Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessQueues get rabbitmq queue list Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessSkuConfig Obtain configuration information for creating a cluster Operation level * Supported
DescribeRabbitMQServerlessUser get rabbitmq users Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeRabbitMQServerlessVirtualHost get rabbitmq vhost list Resource level qcs::trabbit:${region}:uin/${uin}:instance/${InstanceId} Supported
DescribeReNewOrderDetail DescribeReNewOrderDetail Resource level qcs::trabbit:${Region}:uin/${uin}:instance/${InstanceId} Supported
DescribeUpgradeOrderDetails DescribeUpgradeOrderDetails Resource level qcs::trabbit:${Region}:uin/${uin}:instance/${InstanceId} Supported
GetRabbitMQServerlessInstanceConfig get instance configs Operation level * Supported
ListRabbitMQServerlessChannels list channles Resource level qcs::trabbit:${Region}:uin/${uin}:instance/${InstanceId} Supported
ListRabbitMQServerlessInstances List RabbitMQ Serverless Resource level qcs::trabbit:${region}:uin/${uin}:instance/* Supported
ListRabbitMQServerlessMessages get queue messages Resource level qcs::trabbit:${Region}:uin/${uin}:instance/${InstanceId} Supported
VerifyRabbitMQServerlessImportDefinitions verify imported metadata Resource level qcs::trabbit:${Region}:uin/:instance/${InstanceId} Supported

List Operations

API API Description Authorization Granularity Six-segment Resource Description IP Restriction
ListRabbitMQServerlessImportDefinitionTasks Get RabbitMQ import metadata task list Resource level qcs::trabbit:${Region}:uin/:instance/${InstanceId} Supported

Ajuda e Suporte

Esta página foi útil?

comentários