Elastic IP (EIP)

The Organizations service also provides Service Control Policies (SCPs) to set access control policies.

SCPs do not actually grant any permissions to a principal. They only set the permissions boundary for the principal. When SCPs are attached to a member account or an organizational unit (OU), they do not directly grant permission to that member account or OU. Instead, the SCPs determine what permissions are available for that member account or the member accounts under that OU.

This section describes the elements used by Organizations SCPs. The elements include actions, resources, and conditions.

For details about how to use these elements to create a custom SCP, see Creating an SCP.

Actions

Actions are specific operations that are allowed or denied in an SCP.

The Access Level column describes how the action is classified (List, Read, or Write). This classification helps you understand the level of access that an action grants when you use it in an SCP.
The Resource Type column indicates whether the action supports resource-level permissions.
- You can use a wildcard (*) to indicate all resource types. If this column is empty (-), the action does not support resource-level permissions and you must specify all resources ("*") in your SCP statements.
- If this column includes a resource type, you must specify the URN in the Resource element of your statements.
- Required resources are marked with asterisks (*) in the table. If you specify a resource in a statement using this action, then it must be of this type.
For details about the resource types defined by EIP, see Resources.
The Condition Key column contains keys that you can specify in the Condition element of an SCP statement.
- If the Resource Type column has values for an action, the condition key takes effect only for the listed resource types.
- If the Resource Type column is empty (-) for an action, the condition key takes effect for all resources that action supports.
- If the Condition Key column is empty (-) for an action, the action does not support any condition keys.
For details about the condition keys defined by EIP, see Conditions.

The following table lists the actions that you can define in SCP statements for EIP.

**Table 1** Actions supported by EIP
Action	Description	Access Level	*Resource Type (: Required)**	Condition Key
eip:publicIps:create	Grants permission to assign an EIP.	write	publicip *	-
eip:publicIps:create	Grants permission to assign an EIP.	write	-	g:EnterpriseProjectId
eip:publicIps:batchCreate	Grants permission to assign EIPs in batches.	write	publicip *	-
eip:publicIps:batchCreate	Grants permission to assign EIPs in batches.	write	-	g:EnterpriseProjectId g:RequestTag/<tag-key> g:TagKeys
eip:publicIps:list	Grants permission to query EIPs.	list	publicip *	-
eip:publicIps:list	Grants permission to query EIPs.	list	-	g:EnterpriseProjectId
eip:publicIps:count	Grants permission to query the number of EIPs.	list	publicip *	-
eip:publicIps:get	Grants permission to query a specific EIP.	read	publicip *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:publicIps:update	Grants permission to modify an EIP.	write	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:enableNat64	Grants permission to enable NAT64 for an EIP.	write	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:disableNat64	Grants permission to enable NAT64 for an EIP.	write	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:associateInstance	Grants permission to bind an EIP to a network interface.	write	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:disassociateInstance	Grants permission to unbind an EIP from a network interface.	write	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:attachBandwidth	Grants permission to associate an EIP with a bandwidth.	write	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:attachBandwidth	Grants permission to associate an EIP with a bandwidth.	write	bandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:detachBandwidth	Grants permission to remove an EIP from a shared bandwidth.	write	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:detachBandwidth	Grants permission to remove an EIP from a shared bandwidth.	write	bandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:delete	Grants permission to release an EIP.	write	publicip *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:publicIps:createTags	Grants permission to add tags to an EIP.	tagging	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:createTags	Grants permission to add tags to an EIP.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
eip:publicIps:listTags	Grants permission to query tags of an EIP.	list	publicip *	-
eip:publicIps:deleteTags	Grants permission to delete tags from an EIP.	tagging	publicip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:publicIps:deleteTags	Grants permission to delete tags from an EIP.	tagging	-	g:TagKeys
eip:bandwidths:insertPublicIps	Grants permission to add EIPs to a shared bandwidth.	write	bandwidth *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:bandwidths:removePublicIps	Grants permission to remove EIPs from a shared bandwidth.	write	bandwidth *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:bandwidths:create	Grants permission to create a shared bandwidth.	write	bandwidth *	-
eip:bandwidths:create	Grants permission to create a shared bandwidth.	write	-	g:EnterpriseProjectId
eip:bandwidths:batchCreate	Grants permission to create shared bandwidths in batches.	write	bandwidth *	-
eip:bandwidths:list	Grants permission to query bandwidths.	list	bandwidth *	-
eip:bandwidths:list	Grants permission to query bandwidths.	list	-	g:EnterpriseProjectId
eip:bandwidths:update	Grants permission to modify a bandwidth.	write	bandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:bandwidths:get	Grants permission to query a bandwidth.	read	bandwidth *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:bandwidths:delete	Grants permission to delete a shared bandwidth.	write	bandwidth *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:bandwidthPkgs:list	Grants permission to query bandwidth add-on packages.	list	bandwidthPkg *	-
eip:publicipPools:get	Grants permission to query an EIP pool.	read	publicipPool *	-
eip:vpcIgws:list	Grants permission to query internet gateways.	list	vpcIgw *	-
eip:vpcIgws:get	Grants permission to query an internet gateway.	read	vpcIgw *	-
eip:vpcIgws:update	Grants permission to update an internet gateway.	write	vpcIgw *	-
eip:vpcIgws:delete	Grants permission to delete an internet gateway.	write	vpcIgw *	-
eip:vpcIgws:create	Grants permission to create an internet gateway.	write	vpcIgw *	-
eip:globalEips:list	Grants permission to query global EIPs.	list	globalEip *	-
eip:globalEips:list	Grants permission to query global EIPs.	list	-	g:EnterpriseProjectId
eip:globalEips:count	Grants permission to query the number of global EIPs.	list	globalEip *	-
eip:globalEips:get	Grants permission to query a specific global EIP.	read	globalEip *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:globalEips:create	Grants permission to assign a global EIP.	write	globalEip *	-
eip:globalEips:create	Grants permission to assign a global EIP.	write	-	g:EnterpriseProjectId g:RequestTag/<tag-key> g:TagKeys
eip:globalEips:updateGeip	Grants permission to update a global EIP.	write	globalEip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:disassociateInstance	Grants permission to unbind a global EIP from an instance.	write	globalEip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:associateInstance	Grants permission to bind a global EIP to an instance.	write	globalEip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:delete	Grants permission to release a global EIP.	write	globalEip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:attachBandwidth	Grant permission to add a global EIP to a global internet bandwidth.	write	globalEip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:attachBandwidth		write	internetBandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:detachBandwidth	Grant permission to remove a global EIP from a global internet bandwidth.	write	globalEip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:detachBandwidth		write	internetBandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:createTags	Grants permission to add tags to a global EIP.	tagging	globalEip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:createTags	Grants permission to add tags to a global EIP.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
eip:globalEips:getTags	Grants permission to query tags of a global EIP.	read	globalEip *	-
eip:globalEips:listTags	Grants permission to query tags of all global EIPs under a project.	list	globalEip *	-
eip:globalEips:deleteTags	Grants permission to delete tags from a global EIP.	tagging	globalEip *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:globalEips:deleteTags	Grants permission to delete tags from a global EIP.	tagging	-	g:TagKeys
eip:internetBandwidths:createTags	Grants permission to add tags to a global internet bandwidth.	tagging	internetBandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:internetBandwidths:createTags		tagging	-	g:RequestTag/<tag-key> g:TagKeys
eip:internetBandwidths:getTags	Grants permission to query tags of a global internet bandwidth.	read	internetBandwidth *	-
eip:internetBandwidths:listTags	Grants permission to query tags of all global internet bandwidths under a project.	list	internetBandwidth *	-
eip:internetBandwidths:deleteTags	Grants permission to delete tags from a global internet bandwidth.	tagging	internetBandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:internetBandwidths:deleteTags		tagging	-	g:TagKeys
eip:internetBandwidths:list	Grants permission to query global internet bandwidths.	list	internetBandwidth *	-
eip:internetBandwidths:list	Grants permission to query global internet bandwidths.	list	-	g:EnterpriseProjectId
eip:internetBandwidths:count	Grants permission to query the number of global internet bandwidths.	list	internetBandwidth *	-
eip:internetBandwidths:get	Grants permission to query a specific global internet bandwidth.	read	internetBandwidth *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:internetBandwidths:create	Grants permission to assign a global internet bandwidth.	write	internetBandwidth *	-
eip:internetBandwidths:create	Grants permission to assign a global internet bandwidth.	write	-	g:EnterpriseProjectId
eip:internetBandwidths:update	Grants permission to update a global internet bandwidth.	write	internetBandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:internetBandwidths:delete	Grants permission to delete a global internet bandwidth.	write	internetBandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:list	Grants permission to query global EIP ranges.	list	geipSegment *	-
eip:geipSegments:list	Grants permission to query global EIP ranges.	list	-	g:EnterpriseProjectId
eip:geipSegments:count	Grants permission to query the number of global EIP ranges.	list	geipSegment *	-
eip:geipSegments:get	Grants permission to query a specific global EIP range.	read	geipSegment *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
eip:geipSegments:create	Grants permission to assign a global EIP range.	write	geipSegment *	-
eip:geipSegments:create	Grants permission to assign a global EIP range.	write	-	g:EnterpriseProjectId g:RequestTag/<tag-key> g:TagKeys
eip:geipSegments:update	Grants permission to update a global EIP range.	write	geipSegment *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:disassociateInstance	Grants permission to unbind a global EIP range from an instance.	write	geipSegment *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:associateInstance	Grants permission to bind a global EIP range to an instance.	write	geipSegment *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:delete	Grants permission to delete a global EIP range.	write	geipSegment *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:attachBandwidth	Grant permissions to add a global EIP range to a global internet bandwidth.	write	geipSegment *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:attachBandwidth		write	internetBandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:detachBandwidth	Grant permissions to remove a global EIP range from a global internet bandwidth.	write	geipSegment *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:detachBandwidth		write	internetBandwidth *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:createTags	Grants permission to add tags to a global EIP range.	tagging	geipSegment *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:createTags	Grants permission to add tags to a global EIP range.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
eip:geipSegments:getTags	Grants permission to query tags of a global EIP range.	read	geipSegment *	-
eip:geipSegments:listTags	Grants permission to query tags of all global EIP ranges under a project.	list	geipSegment *	-
eip:geipSegments:deleteTags	Grants permission to delete tags from a global EIP range.	tagging	geipSegment *	g:EnterpriseProjectId g:ResourceTag/<tag-key>
eip:geipSegments:deleteTags	Grants permission to delete tags from a global EIP range.	tagging	-	g:TagKeys
eip:userDisclaimer:sign	Grants permission to sign exemption clauses.	write	-	-
eip:userDisclaimer:cancel	Grants permission to revoke exemption clauses.	write	-	-

Each API of EIP usually supports one or more actions. Table 2 lists the supported actions and dependencies.

**Table 2** Actions and dependencies supported by EIP APIs
API	Action	Dependencies
POST /v1/{project_id}/publicips	eip:publicIps:create	-
POST /v2/{project_id}/batchpublicips	eip:publicIps:batchCreate	-
GET /v1/{project_id}/publicips	eip:publicIps:list	-
GET /v2/{project_id}/elasticips	eip:publicIps:count	-
GET /v2/{project_id}/publicip/instances	eip:publicIps:count	-
GET /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:get	-
PUT /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:update	-
POST /v2.0/{project_id}/publicips/change-to-period	eip:publicIps:update	bss:renewal:update
PATCH /v2/{project_id}/batchpublicips	eip:publicIps:disassociateInstance	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/associate-instance	eip:publicIps:associateInstance	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/disassociate-instance	eip:publicIps:disassociateInstance	-
POST /v3/{project_id}/eip/publicips/attach-share-bandwidth	eip:publicIps:attachBandwidth	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/attach-share-bandwidth	eip:publicIps:attachBandwidth	-
POST /v3/{project_id}/eip/publicips/detach-share-bandwidth	eip:publicIps:detachBandwidth	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/detach-share-bandwidth	eip:publicIps:detachBandwidth	-
DELETE /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:delete	-
DELETE /v2/{project_id}/batchpublicips	eip:publicIps:delete	-
POST /v2.0/{project_id}/publicips/{publicip_id}/tags/action	eip:publicIps:createTags	-
POST 01 /v2.0/{project_id}/publicips/{publicip_id}/tags/action	eip:publicIps:deleteTags	-
POST /v2.0/{project_id}/publicips/{publicip_id}/tags	eip:publicIps:createTags	-
DELETE /v2.0/{project_id}/publicips/{publicip_id}/tags/{key}	eip:publicIps:deleteTags	-
POST /v2.0/{project_id}/publicips/resource_instances/action	eip:publicIps:listTags	-
GET /v2.0/{project_id}/publicips/tags	eip:publicIps:listTags	-
GET /v2.0/{project_id}/publicips/{publicip_id}/tags	eip:publicIps:listTags	-
POST /v2.0/{project_id}/bandwidths/{bandwidth_id}/insert	eip:bandwidths:insertPublicIps	-
POST /v2.0/{project_id}/bandwidths/{bandwidth_id}/remove	eip:bandwidths:removePublicIps	-
POST /v2.0/{project_id}/bandwidths	eip:bandwidths:create	-
POST /v2.0/{project_id}/batch-bandwidths	eip:bandwidths:batchCreate	-
GET /v1/{project_id}/bandwidths	eip:bandwidths:list	-
DELETE /v2.0/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:delete	-
GET /v1/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:get	-
PUT /v1/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:update	-
PUT /v2.0/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:update	-
POST /v2.0/{project_id}/bandwidths/change-to-period	eip:bandwidths:update	bss:renewal:update
GET /v2/{project_id}/bandwidthpkgs	eip:bandwidthPkgs:list	-
PUT /v2/{project_id}/bandwidthpkgs/{id}	eip:bandwidthPkgs:update	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/enable-nat64	eip:publicIps:enableNat64	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/disable-nat64	eip:publicIps:disableNat64	-
POST /v1/{project_id}/publicips	eip:publicIps:create	-
POST /v2/{project_id}/batchpublicips	eip:publicIps:batchCreate	-
GET /v1/{project_id}/publicips	eip:publicIps:list	-
GET /v2/{project_id}/elasticips	eip:publicIps:count	-
GET /v2/{project_id}/publicip/instances	eip:publicIps:count	-
GET /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:get	-
PUT /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:update	-
POST /v2.0/{project_id}/publicips/change-to-period	eip:publicIps:update	bss:renewal:update
PATCH /v2/{project_id}/batchpublicips	eip:publicIps:disassociateInstance	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/associate-instance	eip:publicIps:associateInstance	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/disassociate-instance	eip:publicIps:disassociateInstance	-
POST /v3/{project_id}/eip/publicips/attach-share-bandwidth	eip:publicIps:attachBandwidth	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/attach-share-bandwidth	eip:publicIps:attachBandwidth	-
POST /v3/{project_id}/eip/publicips/detach-share-bandwidth	eip:publicIps:detachBandwidth	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/detach-share-bandwidth	eip:publicIps:detachBandwidth	-
DELETE /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:delete	-
DELETE /v2/{project_id}/batchpublicips	eip:publicIps:delete	-
POST /v2.0/{project_id}/publicips/{publicip_id}/tags/action	eip:publicIps:createTags	-
POST 01 /v2.0/{project_id}/publicips/{publicip_id}/tags/action	eip:publicIps:deleteTags	-
POST /v2.0/{project_id}/publicips/{publicip_id}/tags	eip:publicIps:createTags	-
DELETE /v2.0/{project_id}/publicips/{publicip_id}/tags/{key}	eip:publicIps:deleteTags	-
POST /v2.0/{project_id}/publicips/resource_instances/action	eip:publicIps:listTags	-
GET /v2.0/{project_id}/publicips/tags	eip:publicIps:listTags	-
GET /v2.0/{project_id}/publicips/{publicip_id}/tags	eip:publicIps:listTags	-
POST /v2.0/{project_id}/bandwidths/{bandwidth_id}/insert	eip:bandwidths:insertPublicIps	-
POST /v2.0/{project_id}/bandwidths/{bandwidth_id}/remove	eip:bandwidths:removePublicIps	-
POST /v2.0/{project_id}/bandwidths	eip:bandwidths:create	-
POST /v2.0/{project_id}/batch-bandwidths	eip:bandwidths:batchCreate	-
GET /v1/{project_id}/bandwidths	eip:bandwidths:list	-
DELETE /v2.0/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:delete	-
GET /v1/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:get	-
PUT /v1/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:update	-
PUT /v2.0/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:update	-
POST /v2.0/{project_id}/bandwidths/change-to-period	eip:bandwidths:update	bss:renewal:update
GET /v2/{project_id}/bandwidthpkgs	eip:bandwidthPkgs:list	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/enable-nat64	eip:publicIps:enableNat64	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/disable-nat64	eip:publicIps:disableNat64	-
POST /v1/{project_id}/publicips	eip:publicIps:create	-
POST /v2/{project_id}/batchpublicips	eip:publicIps:batchCreate	-
GET /v1/{project_id}/publicips	eip:publicIps:list	-
GET /v2/{project_id}/elasticips	eip:publicIps:count	-
GET /v2/{project_id}/publicip/instances	eip:publicIps:count	-
GET /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:get	-
PUT /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:update	-
POST /v2.0/{project_id}/publicips/change-to-period	eip:publicIps:update	bss:renewal:update
PATCH /v2/{project_id}/batchpublicips	eip:publicIps:disassociateInstance	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/associate-instance	eip:publicIps:associateInstance	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/disassociate-instance	eip:publicIps:disassociateInstance	-
POST /v3/{project_id}/eip/publicips/attach-share-bandwidth	eip:publicIps:attachBandwidth	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/attach-share-bandwidth	eip:publicIps:attachBandwidth	-
POST /v3/{project_id}/eip/publicips/detach-share-bandwidth	eip:publicIps:detachBandwidth	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/detach-share-bandwidth	eip:publicIps:detachBandwidth	-
DELETE /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:delete	-
DELETE /v2/{project_id}/batchpublicips	eip:publicIps:delete	-
POST /v2.0/{project_id}/publicips/{publicip_id}/tags/action	eip:publicIps:createTags	-
POST 01 /v2.0/{project_id}/publicips/{publicip_id}/tags/action	eip:publicIps:deleteTags	-
POST /v2.0/{project_id}/publicips/{publicip_id}/tags	eip:publicIps:createTags	-
DELETE /v2.0/{project_id}/publicips/{publicip_id}/tags/{key}	eip:publicIps:deleteTags	-
POST /v2.0/{project_id}/publicips/resource_instances/action	eip:publicIps:listTags	-
GET /v2.0/{project_id}/publicips/tags	eip:publicIps:listTags	-
GET /v2.0/{project_id}/publicips/{publicip_id}/tags	eip:publicIps:listTags	-
POST /v2.0/{project_id}/bandwidths/{bandwidth_id}/insert	eip:bandwidths:insertPublicIps	-
POST /v2.0/{project_id}/bandwidths/{bandwidth_id}/remove	eip:bandwidths:removePublicIps	-
POST /v2.0/{project_id}/bandwidths	eip:bandwidths:create	-
POST /v2.0/{project_id}/batch-bandwidths	eip:bandwidths:batchCreate	-
GET /v1/{project_id}/bandwidths	eip:bandwidths:list	-
DELETE /v2.0/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:delete	-
GET /v1/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:get	-
PUT /v1/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:update	-
PUT /v2.0/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:update	-
POST /v2.0/{project_id}/bandwidths/change-to-period	eip:bandwidths:update	bss:renewal:update
GET /v2/{project_id}/bandwidthpkgs	eip:bandwidthPkgs:list	-
PUT /v2/{project_id}/bandwidthpkgs/{id}	eip:bandwidthPkgs:update	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/enable-nat64	eip:publicIps:enableNat64	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/disable-nat64	eip:publicIps:disableNat64	-
POST /v1/{project_id}/publicips	eip:publicIps:create	-
POST /v2/{project_id}/batchpublicips	eip:publicIps:batchCreate	-
GET /v1/{project_id}/publicips	eip:publicIps:list	-
GET /v2/{project_id}/elasticips	eip:publicIps:count	-
GET /v2/{project_id}/publicip/instances	eip:publicIps:count	-
GET /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:get	-
PUT /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:update	-
POST /v2.0/{project_id}/publicips/change-to-period	eip:publicIps:update	bss:renewal:update
PATCH /v2/{project_id}/batchpublicips	eip:publicIps:disassociateInstance	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/associate-instance	eip:publicIps:associateInstance	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/disassociate-instance	eip:publicIps:disassociateInstance	-
POST /v3/{project_id}/eip/publicips/attach-share-bandwidth	eip:publicIps:attachBandwidth	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/attach-share-bandwidth	eip:publicIps:attachBandwidth	-
POST /v3/{project_id}/eip/publicips/detach-share-bandwidth	eip:publicIps:detachBandwidth	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/detach-share-bandwidth	eip:publicIps:detachBandwidth	-
DELETE /v1/{project_id}/publicips/{publicip_id}	eip:publicIps:delete	-
DELETE /v2/{project_id}/batchpublicips	eip:publicIps:delete	-
POST /v2.0/{project_id}/publicips/{publicip_id}/tags/action	eip:publicIps:createTags	-
POST 01 /v2.0/{project_id}/publicips/{publicip_id}/tags/action	eip:publicIps:deleteTags	-
POST /v2.0/{project_id}/publicips/{publicip_id}/tags	eip:publicIps:createTags	-
DELETE /v2.0/{project_id}/publicips/{publicip_id}/tags/{key}	eip:publicIps:deleteTags	-
POST /v2.0/{project_id}/publicips/resource_instances/action	eip:publicIps:listTags	-
GET /v2.0/{project_id}/publicips/tags	eip:publicIps:listTags	-
GET /v2.0/{project_id}/publicips/{publicip_id}/tags	eip:publicIps:listTags	-
POST /v2.0/{project_id}/bandwidths/{bandwidth_id}/insert	eip:bandwidths:insertPublicIps	-
POST /v2.0/{project_id}/bandwidths/{bandwidth_id}/remove	eip:bandwidths:removePublicIps	-
POST /v2.0/{project_id}/bandwidths	eip:bandwidths:create	-
POST /v2.0/{project_id}/batch-bandwidths	eip:bandwidths:batchCreate	-
GET /v1/{project_id}/bandwidths	eip:bandwidths:list	-
DELETE /v2.0/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:delete	-
GET /v1/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:get	-
PUT /v1/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:update	-
PUT /v2.0/{project_id}/bandwidths/{bandwidth_id}	eip:bandwidths:update	-
POST /v2.0/{project_id}/bandwidths/change-to-period	eip:bandwidths:update	bss:renewal:update
GET /v2/{project_id}/bandwidthpkgs	eip:bandwidthPkgs:list	-
PUT /v2/{project_id}/bandwidthpkgs/{id}	eip:bandwidthPkgs:update	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/enable-nat64	eip:publicIps:enableNat64	-
POST /v3/{project_id}/eip/publicips/{publicip_id}/disable-nat64	eip:publicIps:disableNat64	-

Resources

A resource type indicates the resources that an SCP is applied. If you specify a resource type for any action in Table 3, a resource URN must be specified in the SCP policy statements using that action, and the SCP policy applies only to the resource. If no resource type is specified, the Resource element is marked with an asterisk (*) and the SCP policy applies to all resources. You can also set condition keys in an SCP to define resource types.

The following table lists the resource types that you can define in an SCP for EIP.

**Table 3** Resource types supported by EIP
Resource Type	URN
globalEip	eip:<region>:<account-id>:globalEip:<globalEip-id>
internetBandwidth	eip:<region>:<account-id>:internetBandwidth:<internetBandwidth-id>
bandwidthRule	eip:<region>:<account-id>:bandwidthRule:<bandwidthRule-id>
bandwidthPkg	eip:<region>:<account-id>:bandwidthPkg:<bandwidthPkg-id>
publicipPool	eip:<region>:<account-id>:publicipPool:<publicipPool-id>
vpcIgw	eip:<region>:<account-id>:vpcIgw:<vpcIgw-id>
geipSegment	eip:<region>:<account-id>:geipSegment:<geipSegment-id>
globalEip	eip:<region>:<account-id>:globalEip:<globalEip-id>
internetBandwidth	eip:<region>:<account-id>:internetBandwidth:<internetBandwidth-id>
bandwidthPkg	eip:<region>:<account-id>:bandwidthPkg:<bandwidthPkg-id>
publicipPool	eip:<region>:<account-id>:publicipPool:<publicipPool-id>
vpcIgw	eip:<region>:<account-id>:vpcIgw:<vpcIgw-id>
geipSegment	eip:<region>:<account-id>:geipSegment:<geipSegment-id>
globalEip	eip:<region>:<account-id>:globalEip:<globalEip-id>
internetBandwidth	eip:<region>:<account-id>:internetBandwidth:<internetBandwidth-id>
bandwidthRule	eip:<region>:<account-id>:bandwidthRule:<bandwidthRule-id>
bandwidthPkg	eip:<region>:<account-id>:bandwidthPkg:<bandwidthPkg-id>
publicipPool	eip:<region>:<account-id>:publicipPool:<publicipPool-id>
vpcIgw	eip:<region>:<account-id>:vpcIgw:<vpcIgw-id>
geipSegment	eip:<region>:<account-id>:geipSegment:<geipSegment-id>
globalEip	eip:<region>:<account-id>:globalEip:<globalEip-id>
internetBandwidth	eip:<region>:<account-id>:internetBandwidth:<internetBandwidth-id>
bandwidthRule	eip:<region>:<account-id>:bandwidthRule:<bandwidthRule-id>
bandwidthPkg	eip:<region>:<account-id>:bandwidthPkg:<bandwidthPkg-id>
publicipPool	eip:<region>:<account-id>:publicipPool:<publicipPool-id>
vpcIgw	eip:<region>:<account-id>:vpcIgw:<vpcIgw-id>
geipSegment	eip:<region>:<account-id>:geipSegment:<geipSegment-id>

Conditions

EIP does not support service-specific condition keys in SCPs. It can only use global condition keys applicable to all services. For details, see Global Condition Keys.

Parent topic: Networking

Previous topic: Virtual Private Cloud (VPC)

Next topic: NAT Gateway