Compute
Elastic Cloud Server
Huawei Cloud Flexus
Bare Metal Server
Auto Scaling
Image Management Service
Dedicated Host
FunctionGraph
Cloud Phone Host
Huawei Cloud EulerOS
Networking
Virtual Private Cloud
Elastic IP
Elastic Load Balance
NAT Gateway
Direct Connect
Virtual Private Network
VPC Endpoint
Cloud Connect
Enterprise Router
Enterprise Switch
Global Accelerator
Management & Governance
Cloud Eye
Identity and Access Management
Cloud Trace Service
Resource Formation Service
Tag Management Service
Log Tank Service
Config
OneAccess
Resource Access Manager
Simple Message Notification
Application Performance Management
Application Operations Management
Organizations
Optimization Advisor
IAM Identity Center
Cloud Operations Center
Resource Governance Center
Migration
Server Migration Service
Object Storage Migration Service
Cloud Data Migration
Migration Center
Cloud Ecosystem
KooGallery
Partner Center
User Support
My Account
Billing Center
Cost Center
Resource Center
Enterprise Management
Service Tickets
HUAWEI CLOUD (International) FAQs
ICP Filing
Support Plans
My Credentials
Customer Operation Capabilities
Partner Support Plans
Professional Services
Analytics
MapReduce Service
Data Lake Insight
CloudTable Service
Cloud Search Service
Data Lake Visualization
Data Ingestion Service
GaussDB(DWS)
DataArts Studio
Data Lake Factory
DataArts Lake Formation
IoT
IoT Device Access
Others
Product Pricing Details
System Permissions
Console Quick Start
Common FAQs
Instructions for Associating with a HUAWEI CLOUD Partner
Message Center
Security & Compliance
Security Technologies and Applications
Web Application Firewall
Host Security Service
Cloud Firewall
SecMaster
Anti-DDoS Service
Data Encryption Workshop
Database Security Service
Cloud Bastion Host
Data Security Center
Cloud Certificate Manager
Edge Security
Situation Awareness
Managed Threat Detection
Blockchain
Blockchain Service
Web3 Node Engine Service
Media Services
Media Processing Center
Video On Demand
Live
SparkRTC
MetaStudio
Storage
Object Storage Service
Elastic Volume Service
Cloud Backup and Recovery
Storage Disaster Recovery Service
Scalable File Service Turbo
Scalable File Service
Volume Backup Service
Cloud Server Backup Service
Data Express Service
Dedicated Distributed Storage Service
Containers
Cloud Container Engine
SoftWare Repository for Container
Application Service Mesh
Ubiquitous Cloud Native Service
Cloud Container Instance
Databases
Relational Database Service
Document Database Service
Data Admin Service
Data Replication Service
GeminiDB
GaussDB
Distributed Database Middleware
Database and Application Migration UGO
TaurusDB
Middleware
Distributed Cache Service
API Gateway
Distributed Message Service for Kafka
Distributed Message Service for RabbitMQ
Distributed Message Service for RocketMQ
Cloud Service Engine
Multi-Site High Availability Service
EventGrid
Dedicated Cloud
Dedicated Computing Cluster
Business Applications
Workspace
ROMA Connect
Message & SMS
Domain Name Service
Edge Data Center Management
Meeting
AI
Face Recognition Service
Graph Engine Service
Content Moderation
Image Recognition
Optical Character Recognition
ModelArts
ImageSearch
Conversational Bot Service
Speech Interaction Service
Huawei HiLens
Video Intelligent Analysis Service
Developer Tools
SDK Developer Guide
API Request Signing Guide
Terraform
Koo Command Line Interface
Content Delivery & Edge Computing
Content Delivery Network
Intelligent EdgeFabric
CloudPond
Intelligent EdgeCloud
Solutions
SAP Cloud
High Performance Computing
Developer Services
ServiceStage
CodeArts
CodeArts PerfTest
CodeArts Req
CodeArts Pipeline
CodeArts Build
CodeArts Deploy
CodeArts Artifact
CodeArts TestPlan
CodeArts Check
CodeArts Repo
Cloud Application Engine
MacroVerse aPaaS
KooMessage
KooPhone
KooDrive
Help Center/ Cloud Connect/ API Reference/ Permissions and Supported Actions/ Actions Supported by Policy-based Authorization

Actions Supported by Policy-based Authorization

This topic describes the actions supported by Cloud Connect in policy-based authorization.

Supported Actions

Cloud Connect provides system-defined policies that can be directly used in IAM. You can also create custom policies to supplement system-defined policies for more refined access control. Operations supported by policies are specific to APIs. The following are common concepts related to policies:

  • Permissions: allow or deny operations on specified resources under specific conditions.
  • APIs: REST APIs that can be called by a user who has been granted specific permissions.
  • Actions: specific operations that are allowed or denied.
  • Related actions: actions on which a specific action depends to take effect. When assigning permissions for the action to a user, you also need to assign permissions for the related actions.
  • IAM or enterprise projects: type of projects for which an action will take effect. Policies that contain actions for both IAM and enterprise projects can be used and take effect for both IAM and Enterprise Management. Policies that only contain actions for IAM projects can be used and only take effect for IAM. Administrators can check whether an action supports IAM projects or enterprise projects in the action list. "√" indicates that the action supports the project and "×" indicates that the action does not support the project. For details about the differences between IAM and enterprise management, see What Are the Differences Between IAM and Enterprise Management?

Cloud Connect supports the following actions in custom policies:

  • Cloud Connections: actions supported by all cloud connection APIs, such as the APIs for creating, updating, deleting a cloud connection, querying cloud connection details, and querying the cloud connection list
  • Network Instances: actions supported by all network instance APIs, such as the APIs for creating, updating, removing a network instance, querying network instance details, and querying the network instance list
  • Bandwidth Packages: actions supported by all bandwidth package APIs, such as creating, updating, and deleting a bandwidth package, querying bandwidth package details, querying the bandwidth package list, binding a bandwidth package to a cloud connection, and unbinding a bandwidth package from a cloud connection
  • Inter-Region Bandwidths: actions supported by all inter-region bandwidth APIs, such as the APIs for assigning, updating, deleting an inter-region bandwidth, querying inter-region bandwidth details, and querying the inter-region bandwidth
  • Cloud Connection Routes: actions supported by all cloud connection route APIs, such as the APIs for querying cloud connection route details and querying cloud connection routes
  • Central Networks: actions supported by all central network APIs, such as the APIs for creating, updating, and deleting a central network, querying central network details, and querying the central network list
  • Central Network Policies: actions supported by all central network policy APIs, such as the APIs for adding, applying, deleting a central network policy, querying central network policy details, querying the central network policy list, and querying policy changes
  • Central Network Connections: actions supported by all central network connection APIs, such as the APIs for querying the central network connection list and updating a central network connection
  • Central Network Attachments: actions supported for all central network attachment APIs, such as the APIs for adding a global DC gateway as an attachment, updating a global DC gateway on a central network, querying attachment details, querying the global DC gateway list, removing an attachment from a central network, and querying the attachments on a central network

Cloud Connections

Table 1 Actions supported for cloud connections

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Creating a cloud connection

POST /v3/{domain_id}/ccaas/cloud-connections

cc:cloudConnections:create

-

Updating a cloud connection

PUT /v3/{domain_id}/ccaas/cloud-connections/{id}

cc:cloudConnections:update

-

Deleting a cloud connection

DELETE /v3/{domain_id}/ccaas/cloud-connections/{id}

cc:cloudConnections:delete

-

Querying cloud connection details

GET /v3/{domain_id}/ccaas/cloud-connections/{id}

cc:cloudConnections:get

-

Querying the cloud connection list

GET /v3/{domain_id}/ccaas/cloud-connections

cc:cloudConnections:list

-

Network Instances

Table 2 Actions supported for network instances

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Creating a network instance

POST /v3/{domain_id}/ccaas/network-instances

cc:networkInstances:create

-

×

Updating a network instance

PUT /v3/{domain_id}/ccaas/network-instances/{id}

cc:networkInstances:update

-

×

Removing a network instance

DELETE /v3/{domain_id}/ccaas/network-instances/{id}

cc:networkInstances:delete

-

×

Querying network instance details

GET /v3/{domain_id}/ccaas/network-instances/{id}

cc:networkInstances:get

-

×

Querying the network instance list

GET /v3/{domain_id}/ccaas/network-instances

cc:networkInstances:list

-

×

Bandwidth Packages

Table 3 Actions supported for bandwidth packages

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Requesting a bandwidth package

POST /v3/{domain_id}/ccaas/bandwidth-packages

cc:bandwidthPackages:create

-

Updating a bandwidth package

PUT /v3/{domain_id}/ccaas/bandwidth-packages/{id}

cc:bandwidthPackages:update

-

Deleting a bandwidth package

DELETE /v3/{domain_id}/ccaas/bandwidth-packages/{id}

cc:bandwidthPackages:delete

-

Querying bandwidth package details

GET /v3/{domain_id}/ccaas/bandwidth-packages/{id}

cc:bandwidthPackages:get

-

Querying the bandwidth package list

GET /v3/{domain_id}/ccaas/bandwidth-packages

cc:bandwidthPackages:list

-

Binding a bandwidth package

POST /v3/{domain_id}/ccaas/bandwidth-packages/{id}/associate

cc:bandwidthPackages:associate

-

Unbinding a bandwidth package

POST /v3/{domain_id}/ccaas/bandwidth-packages/disassociate

cc:bandwidthPackages:disassociate

-

Inter-Region Bandwidths

Table 4 Actions supported for inter-region bandwidths

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Assigning an inter-region bandwidth

POST /v3/{domain_id}/ccaas/inter-region-bandwidths

cc:interRegionBandwidths:create

-

×

Updating an inter-region bandwidth

PUT /v3/{domain_id}/ccaas/inter-region-bandwidths/{id}

cc:interRegionBandwidths:update

-

×

Deleting an inter-region bandwidth

DELETE /v3/{domain_id}/ccaas/inter-region-bandwidths/{id}

cc:interRegionBandwidths:delete

-

×

Querying inter-region bandwidth details

GET /v3/{domain_id}/ccaas/inter-region-bandwidths/{id}

cc:interRegionBandwidths:get

-

×

Querying the inter-region bandwidth list

GET /v3/{domain_id}/ccaas/inter-region-bandwidths

cc:interRegionBandwidths:list

-

×

Cloud Connection Routes

Table 5 Actions supported for cloud connection routes

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Querying cloud connection route details

GET /v3/{domain_id}/ccaas/cloud-connection-routes/{id}

cc:cloudConnectionRoutes:get

-

×

Querying cloud connection routes

GET /v3/{domain_id}/ccaas/cloud-connection-routes

cc:cloudConnectionRoutes:list

-

×

Central Networks

Table 6 Actions supported for central networks

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Creating a central network

POST /v3/{domain_id}/gcn/central-networks

cc:centralNetwork:create

-

Updating a central network

PUT /v3/{domain_id}/gcn/central-networks/{central_network_id}

cc:centralNetwork:update

-

Deleting a central network

DELETE /v3/{domain_id}/gcn/central-networks/{central_network_id}

cc:centralNetwork:delete

-

Querying central network details

GET /v3/{domain_id}/gcn/central-networks/{central_network_id}

cc:centralNetwork:get

-

Querying the central network list

GET /v3/{domain_id}/gcn/central-networks

cc:centralNetwork:list

-

Central Network Policies

Table 7 Actions supported for central network policies

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Adding a central network policy

POST /v3/{domain_id}/gcn/central-network/{central_network_id}/policies

cc:centralNetwork:createPolicy

-

Applying a central network policy

POST /v3/{domain_id}/gcn/central-network/{central_network_id}/policies/{policy_id}/apply

cc:centralNetwork:applyPolicy

-

Deleting a central network policy

DELETE /v3/{domain_id}/gcn/central-network/{central_network_id}/policies/{policy_id}

cc:centralNetwork:deletePolicy

-

Querying the central network list

GET /v3/{domain_id}/gcn/central-network/{central_network_id}/policies

cc:centralNetwork:listPolicies

-

Querying policy changes

GET /v3/{domain_id}/gcn/central-network/{central_network_id}/policies/{policy_id}/change-set

cc:centralNetwork:listChangeSet

-

Central Network Connections

Table 8 Actions supported for central network connections

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Querying the central network connection list

GET /v3/{domain_id}/gcn/central-network/{central_network_id}/connections

cc:centralNetwork:listConnections

-

Updating a central network connection

PUT /v3/{domain_id}/gcn/central-network/{central_network_id}/connections/{connection_id}

cc:centralNetwork:updateConnection

-

Central Network Attachments

Table 9 Actions supported for central network attachments

Permission

API

Action

Related Action

IAM Project

Enterprise Project

Adding a global DC gateway to a central network as an attachment

POST /v3/{domain_id}/gcn/central-network/{central_network_id}/gdgw-attachments

cc:centralNetworkAttachment:createGdgw

-

Updating a global DC gateway on a central network

PUT /v3/{domain_id}/gcn/central-network/{central_network_id}/gdgw-attachments/{gdgw_attachment_id}

cc:centralNetworkAttachment:updateGdgw

-

Querying details of a global DC gateway on a central network

GET /v3/{domain_id}/gcn/central-network/{central_network_id}/gdgw-attachments/{gdgw_attachment_id}

cc:centralNetworkAttachment:getGdgw

-

Querying the global DC gateways on a central network

GET /v3/{domain_id}/gcn/central-network/{central_network_id}/gdgw-attachments

cc:centralNetworkAttachment:listGdgws

-

Removing an attachment from a central network

DELETE /v3/{domain_id}/gcn/central-network/{central_network_id}/attachments/{attachment_id}

cc:centralNetworkAttachment:delete

-

Querying the attachments on a central network

GET /v3/{domain_id}/gcn/central-network/{central_network_id}/attachments

cc:centralNetworkAttachment:list

-

We use cookies to improve our site and your experience. By continuing to browse our site you accept our cookie policy. Find out more

Feedback

Feedback

Feedback

0/500

Selected Content

Submit selected content with the feedback