Authorizable VPC DNS Resource Types in CAM
Resource-level permissions refer to the ability to specify which resources a user can perform operations on. Most VPC DNS APIs support resource-level authorization, which means that VPC DNS operations allow resource-level permissions to control which specific resources are permissible for user use.
| Resource Type | Resource Description Method in Authorization Policies |
|---|---|
| Private Domain | qcs::vpcdns::$account:privatezone/$zoneid |
Where:
- All
$accountshould be the AccountId of the resource owner, which defaults to ownerUin and can be left blank. - All
$zoneidshould be the ID of a private domain, or "*".
And so on.
APIs Authorizable for VPC DNS in CAM
In CAM, you can authorize the following actions for a VPC DNS resource.
Related to Private Domain
| API Operations | Resource Description | API Description |
|---|---|---|
| DescribeVpcDnsDomainList | Retrieve VPC DNS domain list. | qcs::vpcdns::$account:privatezone/$zoneid |
| CreateVpcDnsDomain | Create VPC DNS domain. | * authenticate only the API. |
| DeleteVpcDnsDomain | Delete VPC DNS domain. | qcs::vpcdns::$account:privatezone/$zoneid |
| CreateVpcDnsDomainRemark | Create VPC DNS domain remarks. | qcs::vpcdns::$account:privatezone/$zoneid |
| DescribeVpcDnsRecordList | Retrieve VPC DNS record list. | qcs::vpcdns::$account:privatezone/$zoneid |
| CreateVpcDnsRecord | Create VPC DNS record. | qcs::vpcdns::$account:privatezone/$zoneid |
| ModifyVpcDnsRecord | Modify VPC DNS record. | qcs::vpcdns::$account:privatezone/$zoneid |
| DeleteVpcDnsRecord | Delete VPC DNS record. | qcs::vpcdns::$account:privatezone/$zoneid |
| BindVpcDnsDomain | Associate with VpcId. | qcs::vpcdns::$account:privatezone/$zoneid |
| ModifyVpcDnsDomain | Modify VPC DNS domain. | qcs::vpcdns::$account:privatezone/$zoneid |