Help Center/ ServiceStage/ API Reference/ Permissions and Supported Actions/ Actions Supported by Identity Policy-based Authorization
Updated on 2026-06-22 GMT+08:00
View PDF
Share

Actions Supported by Identity Policy-based Authorization

IAM provides system-defined identity policies to define common actions supported by cloud services. You can also create custom identity policies using the actions supported by cloud services for more refined access control.

In addition to IAM, the Organizations service also provides Service Control Policies (SCPs) to set access control policies.

SCPs do not actually grant any permissions to a principal. They only set the permissions boundary for the principal. When SCPs are attached to a member account or an organizational unit (OU), they do not directly grant permissions to that member account or OU. Instead, the SCPs just determine what permissions are available for that member account or the member accounts under that OU. The granted permissions can be applied only if they are allowed by the SCPs.

To learn more about how IAM is different from Organizations for access control, see How IAM Is Different from Organizations for Access Control?

This section describes the elements used by IAM custom identity policies and Organizations SCPs. The elements include actions, resources, and conditions.

Actions

Actions are specific operations that are allowed or denied in an identity policy.

  • The Access Level column describes how the action is classified (List, Read, or Write). This classification helps you understand the level of access that an action grants when you use it in an identity policy.
  • The Resource Type column indicates whether the action supports resource-level permissions.
    • You can use a wildcard (*) to indicate all resource types. If this column is empty (-), the action does not support resource-level permissions and you must specify all resources ("*") in your policy statements.
    • If this column includes a resource type, you must specify the URN in the Resource element of your statements.
    • Required resources are marked with asterisks (*) in the table. If you specify a resource in a statement using this action, then it must be of this type.

    For details about the resource types defined by ServiceStage, see Resources.

  • The Condition Key column contains keys that you can specify in the Condition element of an identity policy statement.
    • If the Resource Type column has values for an action, the condition key takes effect only for the listed resource types.
    • If the Resource Type column is empty (-) for an action, the condition key takes effect for all resources that action supports.
    • If the Condition Key column is empty (-) for an action, the action does not support any condition keys.

    For details about the condition keys defined by ServiceStage, see Condition.

  • The Alias column lists the policy actions that are configured in identity policies. With these actions, you can use APIs for policy-based authorization. For details, see Policies and Identity Policies.

The following table lists the actions that you can define in identity policy statements for ServiceStage.

Table 1 Actions supported by ServiceStage

Action

Description

Access Level

Resource Type (*: required)

Condition Key

Alias

servicestage:app:getApplication

Querying an application

read

app *

servicestage:app:get

servicestage:app:createApplication

Creating an application

write

-

servicestage:app:create

app *

-

servicestage:app:modifyApplication

Updating an application

write

-

servicestage:app:modify

app *

servicestage:app:deleteApplication

Deleting an application

write

app *

servicestage:app:delete

servicestage:app:listApplication

Querying the application list

list

-

-

servicestage:app:list

servicestage:app:getConfiguration

Querying application configuration

read

app *

servicestage:app:get

servicestage:app:deleteConfiguration

Deleting application configuration

write

app *

servicestage:app:modify

servicestage:app:modifyConfiguration

Updating application configuration

write

app *

servicestage:app:modify

servicestage:app:getComponent

Querying an application component

read

app *

servicestage:app:get

servicestage:app:createComponent

Creating an application component

write

app *

servicestage:app:create

servicestage:app:modifyComponent

Updating an application component

write

app *

servicestage:app:modify

servicestage:app:deleteComponent

Deleting an application component

write

app *

servicestage:app:delete

servicestage:app:listComponent

Querying the application component list

list

-

-

servicestage:app:list

servicestage::approveContract

Approving a contract

write

-

-

servicestage:app:approve

servicestage::createEventReport

Creating an event report

write

-

-

servicestage:app:create

servicestage:app:createGovernanceRule

Creating a governance rule

write

app *

-

servicestage:app:create

servicestage:app:deleteGovernanceRule

Deleting a governance rule

write

app *

-

servicestage:app:delete

servicestage:app:getGovernanceRule

Obtaining a governance rule

read

app *

-

servicestage:app:get

servicestage:app:listGovernanceRule

Obtaining the governance rule list

list

app *

-

servicestage:app:list

servicestage:app:modifyGovernanceRule

Modifying a governance rule

write

app *

-

servicestage:app:modify

servicestage:app:createRoute

Creating a component route

write

app *

-

servicestage:app:create

servicestage:app:deleteRoute

Deleting a component route

write

app *

-

servicestage:app:delete

servicestage:app:modifyRoute

Modifying a component route

write

app *

-

servicestage:app:modify

servicestage:environment:create

Creating an environment

write

-

-

environment *

-

servicestage:environment:get

Querying an environment

read

environment *

servicestage:app:get

servicestage:environment:list

Querying the environment list

list

-

-

servicestage:app:list

servicestage:environment:modify

Updating an environment

write

-

-

environment *

servicestage:environment:delete

Deleting an environment

write

environment *

-

servicestage:environment:refresh

Updating an environment

write

environment *

-

servicestage:environment:tag

(TMS users) Creating an environment tag

tagging

-

servicestage:environment:modify

environment *

servicestage:app:tag

(TMS users) Creating an application tag

tagging

-

servicestage:app:modify

app *

servicestage:environment:listResourcesByTag

(TMS users) Querying environments by tag

read

-

servicestage:app:list

environment *

-

servicestage:app:listResourcesByTag

(TMS users) Querying applications by tag

read

-

servicestage:app:list

app *

-

servicestage:environment:unTagResource

(TMS users) Deleting an environment tag

tagging

-

servicestage:environment:modify

environment *

servicestage:app:unTagResource

(TMS users) Deleting an application tag

tagging

-

servicestage:app:modify

app *

servicestage:environment:listTags

(TMS users) Querying the environment tag list

read

-

-

servicestage:app:list

servicestage:app:listTags

(TMS users) Querying the application tag list

read

-

-

servicestage:app:list

servicestage:environment:createAddon

Creating a plug-in

write

environment *

-

servicestage:app:create

servicestage:environment:listAddon

Querying a plug-in list

list

environment *

-

servicestage:app:list

servicestage:environment:getAddon

Querying the plug-in details

read

environment *

-

servicestage:app:get

servicestage:environment:modifyAddon

Modifying a plug-in

write

environment *

-

servicestage:app:modify

servicestage:environment:deleteAddon

Deleting a plug-in

write

environment *

-

servicestage:app:delete

servicestage:environment:createCell

Creating a deployment unit

write

environment *

-

servicestage:app:create

servicestage:environment:deleteCell

Deleting a deployment unit

write

environment *

-

servicestage:app:delete

servicestage:environment:listCell

Obtaining the deployment unit list

list

environment *

-

servicestage:app:list

servicestage:environment:modifyCell

Modifying a deployment unit

write

environment *

-

servicestage:app:modify

servicestage:environment:provisionResources

Enabling environment resources

write

environment *

-

servicestage:environment:rollback

Rolling back an environment

write

environment *

-

servicestage:config:createGroup

Creating a configuration group

write

-

-

configGroup *

-

servicestage:config:getGroup

Obtaining group details based on the configured group ID

read

configGroup *

-

servicestage:config:modifyGroup

Modifying group permissions

write

-

-

configGroup *

servicestage:config:listGroup

Configuring group permissions

list

-

-

-

servicestage:config:deleteGroup

Deleting a group based on the group ID

write

configGroup *

-

servicestage:configGroup:listResourcesByTag

(TMS users) Querying configuration group resources by tag

list

-

g:TagKeys

servicestage:configGroup:list

configGroup *

-

servicestage:configGroup:listTags

(TMS users) Querying the configuration group resource tag list

read

-

-

servicestage:configGroup:list

servicestage:configGroup:listTagsForResource

(EPS users) Querying the configuration group resource tag list

read

configGroup *

servicestage:configGroup:list

servicestage:configGroup:tag

(TMS users) Creating a configuration group tag

tagging

-

servicestage:configGroup:modify

configGroup *

servicestage:configGroup:unTagResource

(TMS users) Deleting a configuration group resource tag

tagging

-

servicestage:configGroup:modify

configGroup *

servicestage:config:get

Obtaining configuration file information based on the configuration file ID

read

config *

g:EnterpriseProjectId

-

servicestage:config:list

Obtaining the configuration file information

list

-

-

-

servicestage:config:create

Creating a configuration file

write

config *

g:EnterpriseProjectId

-

servicestage:config:modify

Modifying a configuration file based on the configuration file ID

write

config *

g:EnterpriseProjectId

-

servicestage:config:delete

Deleting a configuration file based on the configuration file ID

write

config *

g:EnterpriseProjectId

-

servicestage:config:import

Importing a configuration file

write

-

-

-

servicestage:config:listHistories

Obtaining configuration file history based on the configuration file ID

list

config *

g:EnterpriseProjectId

-

servicestage:config:getHistory

Obtaining configuration file historical information based on the configuration file history ID

read

config *

g:EnterpriseProjectId

-

servicestage:config:deleteHistory

Deleting configuration file history based on the configuration file history ID

write

config *

g:EnterpriseProjectId

-

servicestage::getRuntimeStack

Querying a technology stack based on the technology stack ID

read

-

-

servicestage:runtimestack:get

servicestage::createRuntimeStack

Creating a technology stack

write

-

-

servicestage:runtimestack:create

servicestage::modifyRuntimeStack

Modifying a technology stack based on the technology stack ID

write

-

-

servicestage:runtimestack:modify

servicestage::deleteRuntimeStack

Deleting a technology stack based on the technology stack ID

write

-

-

servicestage:runtimestack:delete

servicestage::switchRuntimeStackStatus

Releasing a technology stack or canceling the release of a technology stack

write

-

-

servicestage:runtimestack:switchStatus

servicestage::createReleasePlan

Creating a release task

write

-

-

servicestage:app:create

servicestage::getReleasePlan

Obtaining information about a release task based on the release task ID

read

-

-

servicestage:app:get

servicestage::listReleasePlan

Obtaining a release task list

list

-

-

servicestage:app:list

servicestage::modifyReleasePlan

Modifying a release task based on the release task ID

write

-

-

servicestage:app:modify

servicestage::deleteReleasePlan

Deleting a release task based on the release task ID

write

-

-

servicestage:app:delete

servicestage:pipeline:get

Querying a pipeline

read

pipeline *

-

-

servicestage:pipeline:create

Creating a pipeline

write

pipeline *

-

-

servicestage:pipeline:modify

Updating a pipeline

write

pipeline *

-

servicestage:pipeline:execute

servicestage:pipeline:delete

Deleting a pipeline

write

pipeline *

-

-

servicestage:pipeline:list

Querying the pipeline list

list

-

-

-

servicestage:assembling:runtimeList

Querying the technology stack list

read

-

-

servicestage:assembling:get

servicestage:assembling:getInfo

Querying a build task

read

assembling *

-

servicestage:assembling:get

servicestage:assembling:create

Creating a build task

write

assembling *

-

-

servicestage:assembling:modify

Updating a build task

write

assembling *

-

-

servicestage:assembling:delete

Deleting a build task

write

assembling *

-

-

servicestage:assembling:list

Querying the build task list

list

-

-

-

servicestage:repositoryAuth:list

Obtaining the repository authorization list

list

-

-

servicestage:app:list

servicestage:repositoryAuth:get

Obtaining repository authorization

read

repositoryAuth *

-

servicestage:app:get

servicestage:repositoryAuth:create

Creating repository authorization

write

repositoryAuth *

-

servicestage:app:create

servicestage:repositoryAuth:delete

Deleting repository authorization

write

repositoryAuth *

-

servicestage:app:delete

servicestage:environment:listTagsForResource

(EPS users) Querying the environment tag list

read

environment *

servicestage:app:list

servicestage:app:listTagsForResource

(EPS users) Querying the application tag list

read

app *

servicestage:app:list

Each API of ServiceStage usually supports one or more actions. Table 2 lists the actions and dependencies supported by ServiceStage APIs.

Table 2 Actions and dependencies supported by ServiceStage APIs

API

Action

Dependencies

POST /v3/{project_id}/cas/environments

servicestage:environment:create

-

GET /v3/{project_id}/cas/environments

servicestage:environment:list

-

PUT /v3/{project_id}/cas/environments/{environment_id}

servicestage:environment:modify

-

DELETE /v3/{project_id}/cas/environments/{environment_id}

servicestage:environment:delete

-

GET /v3/{project_id}/cas/environments/{environment_id}

servicestage:environment:get

-

PUT /v3/{project_id}/cas/environments/{environment_id}/resources

servicestage:environment:modify

-

GET /v3/{project_id}/cas/environments/{environment_id}/resources

servicestage:environment:list

-

GET /v3/{project_id}/cas/environments/resources

servicestage:environment:list

-

POST /v3/{project_id}/cas/environments/{environment_id}/refresh

servicestage:environment:refresh

-

POST /v3/{project_id}/cas/applications

servicestage:app:createApplication

-

GET /v3/{project_id}/cas/applications

servicestage:app:listApplication

-

PUT /v3/{project_id}/cas/applications/{application_id}

servicestage:app:modifyApplication

-

GET /v3/{project_id}/cas/applications/{application_id}

servicestage:app:getApplication

-

DELETE /v3/{project_id}/cas/applications/{application_id}

servicestage:app:deleteApplication

-

POST /v3/{project_id}/cas/applications/{application_id}/action

servicestage:app:modifyApplication

-

GET /v3/{project_id}/cas/applications/{application_id}/configuration

servicestage:app:getConfiguration

-

PUT /v3/{project_id}/cas/applications/{application_id}/configuration

servicestage:app:modifyConfiguration

-

DELETE /v3/{project_id}/cas/applications/{application_id}/configuration

servicestage:app:deleteConfiguration

-

POST /v3/{project_id}/cas/applications/{application_id}/components

servicestage:app:createComponent
  • aom:discoveryRule:list
  • aom:discoveryRule:set
  • as:scalingConfig:create
  • as:scalingConfig:get
  • as:scalingConfig:list
  • as:scalingPolicy:create
  • as:scalingPolicy:get
  • as:scalingPolicy:list
  • cce:cluster:get
  • dcs:instance:get
  • dns:recordset:create
  • dns:recordset:get
  • ecs:cloudServers:get
  • elb:l7policies:create
  • elb:l7policies:get
  • elb:l7policies:list
  • elb:listeners:create
  • elb:listeners:get
  • elb:listeners:list
  • elb:members:create
  • elb:members:get
  • elb:members:list
  • ims:dataImages:create
  • ims:images:create
  • ims:images:get
  • ims:images:list
  • ims:wholeImages:create
  • rds:instance:get
  • servicestage:assembling:create
  • servicestage:assembling:getInfo
  • vpc:addressGroups:get
  • vpc:networks:get
  • vpc:routeTables:get
  • vpc:securityGroupRules:get
  • vpc:securityGroups:get
  • vpc:subnets:get
  • vpc:subnets:get
  • vpc:vpcs:get

GET /v3/{project_id}/cas/applications/{application_id}/components

servicestage:app:listComponent

-

GET /v3/{project_id}/cas/components

servicestage:app:listComponent

-

PUT /v3/{project_id}/cas/applications/{application_id}/components/{component_id}

servicestage:app:modifyComponent
  • aom:discoveryRule:list
  • aom:discoveryRule:set
  • as:scalingConfig:create
  • as:scalingConfig:delete
  • as:scalingConfig:get
  • as:scalingConfig:list
  • as:scalingPolicy:get
  • as:scalingPolicy:list
  • as:scalingPolicy:update
  • cce:cluster:get
  • dcs:instance:get
  • dns:recordset:create
  • dns:recordset:delete
  • dns:recordset:get
  • ecs:cloudServers:get
  • elb:l7policies:get
  • elb:l7policies:list
  • elb:l7policies:update
  • elb:listeners:get
  • elb:listeners:list
  • elb:listeners:update
  • elb:members:get
  • elb:members:list
  • elb:members:update
  • rds:instance:get
  • vpc:addressGroups:get
  • vpc:networks:get
  • vpc:routeTables:get
  • vpc:securityGroupRules:get
  • vpc:securityGroups:get
  • vpc:subnets:get
  • vpc:subnets:get
  • vpc:vpcs:get

DELETE /v3/{project_id}/cas/applications/{application_id}/components/{component_id}

servicestage:app:deleteComponent
  • aom:discoveryRule:delete
  • aom:discoveryRule:list
  • as:scalingConfig:delete
  • as:scalingConfig:get
  • as:scalingConfig:list
  • as:scalingPolicy:delete
  • as:scalingPolicy:get
  • as:scalingPolicy:list
  • cce:cluster:get
  • dcs:instance:get
  • dns:recordset:delete
  • dns:recordset:get
  • ecs:cloudServers:get
  • elb:l7policies:delete
  • elb:l7policies:get
  • elb:l7policies:list
  • elb:listeners:delete
  • elb:listeners:get
  • elb:listeners:list
  • elb:members:delete
  • elb:members:get
  • elb:members:list
  • rds:instance:get
  • vpc:addressGroups:get
  • vpc:networks:get
  • vpc:routeTables:get
  • vpc:securityGroupRules:get
  • vpc:securityGroups:get
  • vpc:subnets:get
  • vpc:subnets:get
  • vpc:vpcs:get

GET /v3/{project_id}/cas/applications/{application_id}/components/{component_id}

servicestage:app:getComponent

-

POST /v3/{project_id}/cas/applications/{application_id}/components/{component_id}/action

servicestage:app:modifyComponent
  • aom:discoveryRule:list
  • aom:discoveryRule:set
  • as:scalingConfig:create
  • as:scalingConfig:delete
  • as:scalingConfig:get
  • as:scalingConfig:list
  • as:scalingPolicy:get
  • as:scalingPolicy:list
  • as:scalingPolicy:update
  • cce:cluster:get
  • dcs:instance:get
  • dns:recordset:create
  • dns:recordset:delete
  • dns:recordset:get
  • ecs:cloudServers:get
  • elb:l7policies:get
  • elb:l7policies:list
  • elb:l7policies:update
  • elb:listeners:get
  • elb:listeners:list
  • elb:listeners:update
  • elb:members:get
  • elb:members:list
  • elb:members:update
  • rds:instance:get
  • vpc:addressGroups:get
  • vpc:networks:get
  • vpc:routeTables:get
  • vpc:securityGroupRules:get
  • vpc:securityGroups:get
  • vpc:subnets:get
  • vpc:subnets:get
  • vpc:vpcs:get

GET /v3/{project_id}/cas/applications/{application_id}/components/{component_id}/records

servicestage:app:listComponent

-

PUT /v3/{project_id}/cas/applications/{application_id}/components/{component_id}/refresh

servicestage:app:modifyComponent
  • aom:discoveryRule:list
  • aom:discoveryRule:set
  • as:scalingConfig:create
  • as:scalingConfig:delete
  • as:scalingConfig:get
  • as:scalingConfig:list
  • as:scalingPolicy:get
  • as:scalingPolicy:list
  • as:scalingPolicy:update
  • cce:cluster:get
  • dcs:instance:get
  • dns:recordset:create
  • dns:recordset:delete
  • dns:recordset:get
  • ecs:cloudServers:get
  • elb:l7policies:get
  • elb:l7policies:list
  • elb:l7policies:update
  • elb:listeners:get
  • elb:listeners:list
  • elb:listeners:update
  • elb:members:get
  • elb:members:list
  • elb:members:update
  • rds:instance:get
  • vpc:addressGroups:get
  • vpc:networks:get
  • vpc:routeTables:get
  • vpc:securityGroupRules:get
  • vpc:securityGroups:get
  • vpc:subnets:get
  • vpc:subnets:get
  • vpc:vpcs:get

GET /v3/{project_id}/cas/components/filterOptions

servicestage:app:listComponent

-

POST /v3/{project_id}/cas/components/action

servicestage:app:modifyComponent
  • aom:discoveryRule:list
  • aom:discoveryRule:set
  • as:scalingConfig:create
  • as:scalingConfig:delete
  • as:scalingConfig:get
  • as:scalingConfig:list
  • as:scalingPolicy:get
  • as:scalingPolicy:list
  • as:scalingPolicy:update
  • cce:cluster:get
  • dcs:instance:get
  • dns:recordset:create
  • dns:recordset:delete
  • dns:recordset:get
  • ecs:cloudServers:get
  • elb:l7policies:get
  • elb:l7policies:list
  • elb:l7policies:update
  • elb:listeners:get
  • elb:listeners:list
  • elb:listeners:update
  • elb:members:get
  • elb:members:list
  • elb:members:update
  • rds:instance:get
  • vpc:addressGroups:get
  • vpc:networks:get
  • vpc:routeTables:get
  • vpc:securityGroupRules:get
  • vpc:securityGroups:get
  • vpc:subnets:get
  • vpc:subnets:get
  • vpc:vpcs:get

POST /v3/{project_id}/cas/components

servicestage:app:createComponent
  • aom:discoveryRule:list
  • aom:discoveryRule:set
  • as:scalingConfig:create
  • as:scalingConfig:get
  • as:scalingConfig:list
  • as:scalingPolicy:create
  • as:scalingPolicy:get
  • as:scalingPolicy:list
  • cce:cluster:get
  • dcs:instance:get
  • dns:recordset:create
  • dns:recordset:get
  • ecs:cloudServers:get
  • elb:l7policies:create
  • elb:l7policies:get
  • elb:l7policies:list
  • elb:listeners:create
  • elb:listeners:get
  • elb:listeners:list
  • elb:members:create
  • elb:members:get
  • elb:members:list
  • ims:dataImages:create
  • ims:images:create
  • ims:images:get
  • ims:images:list
  • ims:wholeImages:create
  • rds:instance:get
  • servicestage:assembling:create
  • servicestage:assembling:getInfo
  • vpc:addressGroups:get
  • vpc:networks:get
  • vpc:routeTables:get
  • vpc:securityGroupRules:get
  • vpc:securityGroups:get
  • vpc:subnets:get
  • vpc:subnets:get
  • vpc:vpcs:get

POST /v3/{project_id}/cas/components/parse-template-package

servicestage:app:getComponent

-

PUT /v3/{project_id}/cas/applications/{application_id}/components/{component_id}/redeployment

servicestage:app:modifyComponent
  • aom:discoveryRule:list
  • aom:discoveryRule:set
  • as:scalingConfig:create
  • as:scalingConfig:delete
  • as:scalingConfig:get
  • as:scalingConfig:list
  • as:scalingPolicy:get
  • as:scalingPolicy:list
  • as:scalingPolicy:update
  • cce:cluster:get
  • dcs:instance:get
  • dns:recordset:create
  • dns:recordset:delete
  • dns:recordset:get
  • ecs:cloudServers:get
  • elb:l7policies:get
  • elb:l7policies:list
  • elb:l7policies:update
  • elb:listeners:get
  • elb:listeners:list
  • elb:listeners:update
  • elb:members:get
  • elb:members:list
  • elb:members:update
  • rds:instance:get
  • vpc:addressGroups:get
  • vpc:networks:get
  • vpc:routeTables:get
  • vpc:securityGroupRules:get
  • vpc:securityGroups:get
  • vpc:subnets:get
  • vpc:subnets:get
  • vpc:vpcs:get

GET /v3/{project_id}/cas/jobs/{job_id}

servicestage:app:listApplication

-

POST /v3/{project_id}/cas/config-groups

servicestage:config:createGroup

-

GET /v3/{project_id}/cas/config-groups

servicestage:config:listGroup

-

POST /v3/{project_id}/cas/configs

servicestage:config:create

-

POST /v3/{project_id}/cas/configs/import

servicestage:config:import

-

GET /v3/{project_id}/cas/configs

servicestage:config:list

-

GET /v3/{project_id}/cas/configs/{config_id}

servicestage:config:get

-

DELETE /v3/{project_id}/cas/configs/{config_id}

servicestage:config:delete

-

PUT /v3/{project_id}/cas/configs/{config_id}

servicestage:config:modify

-

GET /v3/{project_id}/cas/configs/{config_id}/histories

servicestage:config:listHistories

-

GET /v3/{project_id}/cas//configs/{config_id}/histories/{config_history_id}

servicestage:config:getHistory

-

DELETE /v3/{project_id}/cas/configs/{config_id}/histories/{config_history_id}

servicestage:config:deleteHistory

-

GET /v3/{project_id}/cas/config-groups/{config_group_id}

servicestage:config:getGroup

-

DELETE /v3/{project_id}/cas/config-groups/{config_group_id}

servicestage:config:deleteGroup

-

POST /v3/{project_id}/cas/environments/{environment_id}/addons

servicestage:environment:createAddon

-

GET /v3/{project_id}/cas/environments/{environment_id}/addons

servicestage:environment:listAddon

-

GET /v3/{project_id}/cas/environments/{environment_id}/addons-metadata

servicestage:environment:listAddon

-

GET /v3/{project_id}/cas/environments/{environment_id}/addons/{addon_id}

servicestage:environment:getAddon

-

POST /v3/{project_id}/cas/environments/{environment_id}/addons/{addon_id}/action

servicestage:environment:modifyAddon

-

DELETE /v3/{project_id}/cas/environments/{environment_id}/addons/{addon_id}

servicestage:environment:deleteAddon

-

GET /v3/{project_id}/assembling/base-images

servicestage:assembling:list

-

POST /v3/{project_id}/cas/release-plans

servicestage::createReleasePlan

-

PUT /v3/{project_id}/cas/release-plans/{release_plan_id}

servicestage::modifyReleasePlan

-

DELETE /v3/{project_id}/cas/release-plans/{release_plan_id}

servicestage::deleteReleasePlan

-

GET /v3/{project_id}/cas/release-plans

servicestage::listReleasePlan

-

GET /v3/{project_id}/cas/release-plans/{release_plan_id}

servicestage::getReleasePlan

-

GET /v3/{project_id}/cas/release-plans/{release_plan_id}/deploy-info

servicestage::getReleasePlan

-

POST /v3/{project_id}/cas/release-plans/{release_plan_id}/execute

servicestage::createReleasePlan

-

POST /v3/{project_id}/cas/release-plans/{release_plan_id}/rollback

servicestage::createReleasePlan

-

POST /v3/{project_id}/cas/release-plans/{release_plan_id}/abort

servicestage::createReleasePlan

-

POST /v3/{project_id}/pipeline/pipelines

servicestage:pipeline:create

-

GET /v3/{project_id}/pipeline/pipelines

servicestage:pipeline:list
  • servicestage:environment:get
  • servicestage:environment:list

PUT /v3/{project_id}/pipeline/pipelines/{pipeline_id}

servicestage:pipeline:modify

-

POST /v3/{project_id}/pipeline/pipelines/{pipeline_id}/action

servicestage:pipeline:modify

-

GET /v3/{project_id}/pipeline/pipelines/{pipeline_id}

servicestage:pipeline:get

-

GET /v3/{project_id}/pipeline/pipelines/{id}/records

servicestage:pipeline:get

-

POST /v3/{project_id}/pipeline/pipelines/{pipeline_id}/hooks

servicestage:pipeline:create

-

PUT /v3/{project_id}/pipeline/pipelines/{pipeline_id}/hooks

servicestage:pipeline:modify

-

GET /v3/{project_id}/pipeline/pipelines/{pipeline_id}/hooks

servicestage:pipeline:list
  • servicestage:environment:get
  • servicestage:environment:list

POST /v3/{project_id}/pipeline/pipelines/parse-template-package

servicestage:pipeline:get

-

POST /v3/{project_id}/cas/runtimestacks

servicestage::createRuntimeStack

-

GET /v3/{project_id}/cas/runtimestacks

servicestage:app:listApplication

-

GET /v3/{project_id}/cas/runtimestacks/{runtimestack_id}

servicestage::getRuntimeStack

-

PUT /v3/{project_id}/cas/runtimestacks/{runtimestack_id}

servicestage::modifyRuntimeStack

-

DELETE /v3/{project_id}/cas/runtimestacks/{runtimestack_id}

servicestage::deleteRuntimeStack

-

POST /v3/{project_id}/cas/runtimestacks/action

servicestage::switchRuntimeStackStatus

-

GET /v3/{project_id}/cas/innerimages

servicestage:app:listApplication

-

GET /v1/{project_id}/git/auths

servicestage:repositoryAuth:list

-

GET /v1/{project_id}/git/auths/{repo_type}/redirect

servicestage:repositoryAuth:get

-

POST /v1/{project_id}/git/auths/{repo_type}/oauth

servicestage:repositoryAuth:create

-

POST /v1/{project_id}/git/auths/{repo_type}/personal

servicestage:repositoryAuth:create

-

POST /v1/{project_id}/git/auths/{repo_type}/password

servicestage:repositoryAuth:create

-

DELETE /v1/{project_id}/git/auths/{name}

servicestage:repositoryAuth:delete

-

GET /v1/{project_id}/git/auths/{repo_type}/password/valid

servicestage:repositoryAuth:get

-

POST /v1/{project851_id}/kie/file

cse:config:upload

-

POST /v1/{project_id}/kie/download

cse:config:download

-

GET /v2/{project_id}/enginemgr/engines

cse:engine:list

-

POST /v2/{project_id}/enginemgr/engines

cse:engine:create

-

GET /v2/{project_id}/enginemgr/engines/{engine_id}

cse:engine:get

-

DELETE /v2/{project_id}/enginemgr/engines/{engine_id}

cse:engine:delete

-

GET /v2/{project_id}/enginemgr/engines/{engine_id}/jobs/{job_id}

cse:engine:get

-

POST /v1/{project_id}/kie/kv

cse:namespace:update

-

PUT /v1/{project_id}/kie/kv/{kv_id}

cse:namespace:update

-

GET /v1/{project_id}/kie/kv

cse:namespace:get

-

DELETE /v1/{project_id}/kie/kv/{kv_id}

cse:namespace:update

-

DELETE /v1/{project_id}/kie/kv

cse:namespace:update

-

Resources

A resource type indicates the resources that an identity policy applies to. If a resource type has been specified for any action in Table 3, you can specify a resource URN in the identity policy statements using that action, and the identity policy applies only to the specified resource. If no resource URN is specified, the identity policy applies to all resources of the specified resource type. If no resource type is specified, the Resource element is marked with an asterisk (*) and the identity policy applies to all resources. You can also set condition keys in an identity policy to define resource types.

The following table lists the resource types that you can define in identity policy statements for ServiceStage.

Table 3 Resource types supported by ServiceStage

Resource Type

URN

app

servicestage:<region>:<account-id>:app:<app-id>

environment

servicestage:<region>:<account-id>:environment:<environment-id>

pipeline

servicestage:<region>:<account-id>:pipeline:<pipeline-id>

assembling

servicestage:<region>:<account-id>:assembling:<assembling-id>

repositoryAuth

servicestage:<region>:<account-id>:repositoryAuth:<repositoryAuth-id>

configGroup

servicestage:<region>:<account-id>:configGroup:<config-group-id>

config

servicestage:<region>:<account-id>:config:<config-group-id>/<config-id>

Condition

ServiceStage does not support service-specific condition keys in policies.

It can only use global condition keys applicable to all services. For details, see Global Condition Keys.