Tenant Cloud Domain Name Service VPC DNS Cloud Access Management

Policy Examples

Last Updated At: 2025-10-30 15:17:18

Full Read-Write Policy of VPCDNS

  • Authorize sub-account full management permission (creating, managing, etc.) for the VPC DNS service.

  • Policy name: QcloudVPCDNSFullAccess

    {
  "version": "2.0",
  "statement": [
      {
          "action": [
              "vpcdns:*"
          ],
          "resource": "*",
          "effect": "allow"
      }
  ]
}

Read-only Policy of VPC DNS

  • Authorize sub-account read-only access to VPC DNS (i.e., the permission to view all resources under VPC DNS), but the sub-account cannot create, update, or delete them. In the console, the prerequisite to manipulate a resource is the ability to view that resource; therefore, we recommend you grant the sub-account full read access to VPC DNS.

  • Policy name: QcloudVPCDNSReadOnlyAccess

    {
  "version": "2.0",
  "statement": [
      {
          "action": [
              "name/vpcdns:Describe*"
          ],
          "resource": "*",
          "effect": "allow"
      }
  ]
}