Updated on 2025-11-06 GMT+08:00

API Overview

Type

API

Description

Management plane

IAM User Management

Used to create, query, modify, and delete an IAM user.

Credential Management

Used to create, query, modify, and delete a permanent access key or user login information.

Virtual MFA Device Management

Used to enable, disable, create, query, and delete a virtual MFA device.

Security Settings

Used to query and modify the password policy and login policy of an account.

User Group Management

Used to create, query, modify, and delete a user group, and add a user to or remove a user from a specified user group.

Identity Policy Management

Used to create, query, and delete an identity policy.

Identity Policy Version Management

Used to create, query, modify, and delete an identity policy version.

Permissions Management

Used to attach an identity policy to or detach an identity policy from an identity, and query an identity policy.

Service-linked Agency Management

Used to create, query, and delete a service-linked agency.

Service Principal Query

Used to obtain all service principals.

Authorization Summary Query

Used to query the authorization summary of a specified service and the list of registered cloud services.

Agency and Trust Agency Management

Used to create, query, modify, and delete an agency or trust agency.

Account Summary Query

Used to obtain summary information about the IAM principal usage and IAM quota of an account.

Account Function Query

Used to obtain the function status of an account.

Resource Tag Management

Used to create, query, and delete tags for IAM resources.

Asymmetric Signature Management

Used to enable or disable the asymmetric signature for a tenant, and obtain the asymmetric signature status of a tenant.

Temporary security credential

Obtaining a Temporary Access Key Through an Agency or Trust Agency

Used to obtain a temporary access key through an agency or trust agency. The temporary access key can be used to control access to cloud resources.

Obtaining the Identity Information of a Caller

Used to obtain the identity information of a caller (such as a user or agency).

Decoding the Authentication Failure Cause

Used to decode the authentication failure cause.