更新时间:2025-06-11 GMT+08:00
分享

函数工作流 FunctionGraph

Organizations服务中的服务控制策略(Service Control Policy,以下简称SCP)可以使用以下授权项元素设置访问控制策略。

SCP不直接进行授权,只划定权限边界。将SCP绑定到组织单元或者成员账号时,并没有直接对组织单元或成员账号授予操作权限,而是规定了成员账号或组织单元包含的成员账号的授权范围。

本章节介绍组织服务中SCP使用的元素,这些元素包含了操作(Action)、资源(Resource)和条件(Condition)。

如何使用这些元素编辑SCP自定义策略,请参考创建SCP

操作(Action)

操作(Action)即为SCP中支持的授权项。

  • “访问级别”列描述如何对操作进行分类(List、Read和Write等)。此分类可帮助您了解在SCP中相应操作对应的访问级别。
  • “资源类型”列指每个操作是否支持资源级权限。
    • 资源类型支持通配符号*表示所有。如果此列没有值(-),则必须在SCP语句的Resource元素中指定所有资源类型(“*”)。
    • 如果该列包含资源类型,则必须在具有该操作的语句中指定该资源的URN。
    • 资源类型列中必需资源在表中用星号(*)标识,表示使用此操作必须指定该资源类型。

    关于FunctionGraph定义的资源类型的详细信息请参见资源类型(Resource)

  • “条件键”列包括了可以在SCP语句的Condition元素中支持指定的键值。
    • 如果该授权项资源类型列存在值,则表示条件键仅对列举的资源类型生效。
    • 如果该授权项资源类型列没有值(-),则表示条件键对整个授权项生效。
    • 如果此列条件键没有值(-),表示此操作不支持指定条件键。

    关于FunctionGraph定义的条件键的详细信息请参见条件(Condition)

您可以在SCP语句的Action元素中指定以下FunctionGraph的相关操作。

表1 支持的授权项

授权项

描述

访问级别

资源类型(*为必须)

条件键

别名

functiongraph:function:createFunction

授予权限以创建函数。

Write

function *

functiongraph:function:create

-

functiongraph:function:deleteFunction

授予权限以删除函数。

Write

function *

functiongraph:function:delete

-

functiongraph:function:listFunctions

授予权限以查询函数列表。

List

function *

functiongraph:function:list

-

functiongraph:function:getFunctionCode

授予权限以获取指定函数代码信息。

Read

function *

functiongraph:function:getCode

-

functiongraph:function:updateFunctionCode

授予权限以修改指定的函数的代码。

Write

function *

functiongraph:function:updateCode

-

functiongraph:function:getFunctionConfig

授予权限以获取指定函数的metadata。

Read

function *

functiongraph:function:getConfig

-

functiongraph:function:updateFunctionConfig

授予权限以修改指定的函数的metadata信息。

Write

function *

functiongraph:function:updateConfig

-

functiongraph:function:updateMaxInstanceConfig

授予权限以更新函数最大实例数。

Write

function *

functiongraph:function:updateConfig

-

functiongraph:function:updateSnapshot

授予权限以启动/禁用函数快照。

Write

function *

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph:function:getSnapshotState

授予权限以查询函数快照制作状态。

Read

function *

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph:function:createUrl

授予权限以创建函数URL。

Write

function *

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph:function:deleteUrl

授予权限以删除函数URL。

Write

function *

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph:function:updateUrl

授予权限以更新函数URL。

Write

function *

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph:function:getUrl

授予权限以获取指定函数的URL。

Read

function *

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph::getResourceInstance

授予权限以查询资源实例。

Read

-

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph::createTag

授予权限以创建资源标签。

Tagging

-

functiongraph:function:updateConfig

functiongraph::deleteTag

授予权限以删除资源标签。

Tagging

-

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph::listTags

授予权限以获取资源标签列表。

List

-

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph::createFunctionApp

授予权限以创建应用程序。

Write

-

g:EnterpriseProjectId

functiongraph:function:list

functiongraph::deleteFunctionApp

授予权限以删除应用程序。

Write

-

g:EnterpriseProjectId

functiongraph:function:delete

functiongraph::getFunctionApp

授予权限以查询应用程序详情。

Read

-

g:EnterpriseProjectId

functiongraph:function:list

functiongraph::listFunctionApps

授予权限以查询应用程序列表。

List

-

g:EnterpriseProjectId

functiongraph:function:list

functiongraph::getFunctionAppTemplate

授予权限以查询应用程序模板详情。

Read

-

g:EnterpriseProjectId

functiongraph:function:list

functiongraph::listFunctionAppTemplates

授予权限以查询应用程序模板列表。

List

-

g:EnterpriseProjectId

functiongraph:function:list

functiongraph::createVpcEndpoint

授予权限以创建下沉入口。

Write

-

g:EnterpriseProjectId

functiongraph:function:updateConfig

functiongraph::deleteVpcEndpoint

授予权限以删除下沉入口。

Write

-

g:EnterpriseProjectId

functiongraph:function:delete

functiongraph:function:export

授予权限以导出函数。

Read

function *

g:EnterpriseProjectId

functiongraph:function:getconfig

functiongraph:function:import

授予权限以导入函数。

Write

function *

g:EnterpriseProjectId

functiongraph:function:create

functiongraph::exportPackage

授予权限以导出函数应用。

Read

-

g:EnterpriseProjectId

functiongraph:function:list

functiongraph::importPackage

授予权限以导入函数应用。

Write

-

g:EnterpriseProjectId

functiongraph:function:create

functiongraph:function:createVersion

授予权限以发布函数版本。

Write

function *

g:EnterpriseProjectId

-

functiongraph:function:listVersion

授予权限以获取指定函数的版本列表。

List

function *

g:EnterpriseProjectId

-

functiongraph:function:createAlias

授予权限以创建函数灰度版本别名。

Write

function *

g:EnterpriseProjectId

-

functiongraph:function:deleteAlias

授予权限以删除函数版本别名。

Write

function *

g:EnterpriseProjectId

-

functiongraph:function:listAlias

授予权限以获取指定函数所有版本别名列表。

List

function *

g:EnterpriseProjectId

-

functiongraph:function:getAlias

授予权限以获取函数版本指定别名信息。

Read

function *

g:EnterpriseProjectId

-

functiongraph:function:updateAlias

授予权限以修改函数版本别名信息。

Write

function *

g:EnterpriseProjectId

-

functiongraph::listQuota

授予权限以查询租户配额。

List

-

-

functiongraph:function:list

functiongraph:dependency:createDependency

授予权限以创建依赖包。

Write

-

-

functiongraph:function:create

functiongraph:dependency:deleteDependency

授予权限以删除依赖包。

Write

-

-

functiongraph:function:delete

functiongraph:dependency:listDependencies

授予权限以获取依赖包列表。

List

-

-

functiongraph:function:list

functiongraph:dependency:getDependency

授予权限以获取指定依赖包信息。

Read

-

-

functiongraph:function:getcode

functiongraph:dependency:updateDependency

授予权限以更新指定依赖包信息。

Write

-

-

functiongraph:function:updatecode

functiongraph:dependency:createDependencyVersion

授予权限以创建依赖包版本。

Write

-

-

functiongraph:function:create

functiongraph:dependency:deleteDependencyVersion

授予权限以删除依赖包版本。

Write

-

-

functiongraph:function:delete

functiongraph:dependency:listDependencyVersion

授予权限以获取依赖包版本列表。

List

-

-

functiongraph:function:list

functiongraph:dependency:getDependencyVersion

授予权限以获取依赖包版本详细信息。

Read

-

-

functiongraph:function:getcode

functiongraph:function:createEvent

授予权限以创建测试事件。

Write

function *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:function:deleteEvent

授予权限以删除指定测试事件。

Write

function *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:function:updateEvent

授予权限以更新函数测试事件。

Write

function *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:function:listEvent

授予权限以获取函数测试事件列表。

List

function *

g:EnterpriseProjectId

functiongraph:function:list

functiongraph:function:getEvent

授予权限以获取函数测试事件详细信息。

Read

function *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:function:getTracing

授予权限以获取函数调用链配置。

Read

function *

g:EnterpriseProjectId

functiongraph:function:create

functiongraph:function:updateTracing

授予权限以更新函数调用链配置。

Write

function *

g:EnterpriseProjectId

functiongraph:function:create

functiongraph::listFunctionByMetric

授予权限以按指定指标获取函数列表。

List

-

-

functiongraph:function:list

functiongraph:function:listFunctionStatistics

授予权限以获取指定时间段的函数运行指标。

List

function *

g:EnterpriseProjectId

functiongraph:function:getconfig

functiongraph::listStatistics

授予权限以获取租户函数统计信息。

List

-

-

functiongraph:function:getconfig

functiongraph:function:getReservedInstanceMetrics

授予权限以查询函数预留实例使用情况指标。

Read

function *

g:EnterpriseProjectId

functiongraph:function:getconfig

functiongraph::enableLtsLogs

授予权限以开通lts日志上报功能。

Write

-

-

functiongraph:function:create

functiongraph:function:getLtsLogConfiguration

授予权限以获取指定函数的lts日志组日志流配置。

Read

function *

g:EnterpriseProjectId

functiongraph:function:getconfig

functiongraph:function:updateReservedInstanceCount

授予权限以修改函数预留实例数量。

Write

function *

g:EnterpriseProjectId

functiongraph:function:updateconfig

functiongraph::listReservedInstanceCount

授予权限以获取函数预留实例数量。

List

-

-

functiongraph:function:getconfig

functiongraph::listReservedInstanceConfig

授予权限以获取函数预留实例配置列表。

List

function

g:EnterpriseProjectId

functiongraph:function:getconfig

functiongraph::getReservedInstanceState

授予权限以获取函数预留实例状态。

Read

-

-

functiongraph:function:getconfig

functiongraph:function:invokeAsync

授予权限以异步执行函数。

Write

function *

g:EnterpriseProjectId

-

functiongraph:function:invokeSync

授予权限以同步执行函数。

Write

function *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:function:invokeReservedFunctionAsync

授予权限以函数异步执行并返回预留实例ID。

Write

function *

g:EnterpriseProjectId

functiongraph:function:invokeasync

functiongraph:function:stopAsyncInvoke

授予权限以停止函数异步调用请求。

Write

function *

g:EnterpriseProjectId

functiongraph:function:invokeasync

functiongraph:function:listAsyncInvocation

授予权限以获取函数异步调用请求列表。

List

function *

g:EnterpriseProjectId

functiongraph:function:list

functiongraph:function:deleteAsyncInvokeConfig

授予权限以删除函数异步配置信息。

Write

function *

g:EnterpriseProjectId

functiongraph:function:delete

functiongraph:function:updateAsyncInvokeConfig

授予权限以设置函数异步配置信息。

Write

function *

g:EnterpriseProjectId

functiongraph:function:updateconfig

functiongraph:function:listAsyncInvokeConfig

授予权限以获取指定函数所有版本的异步配置列表。

List

function *

g:EnterpriseProjectId

functiongraph:function:list

functiongraph:function:getAsyncInvokeConfig

授予权限以获取指定函数某一版本的异步配置信息。

Read

function *

g:EnterpriseProjectId

functiongraph:function:getconfig

functiongraph::updateAsyncStatusLog

授予权限以允许异步状态通知。

Write

-

-

functiongraph:function:create

functiongraph::getAsyncStatusLogInfo

授予权限以查询异步日志详情。

Read

-

-

functiongraph:function:getConfig

functiongraph:function:listActiveAsyncInvocations

授予权限以获取函数异步调用活跃请求列表。

List

function *

g:EnterpriseProjectId

functiongraph:function:list

functiongraph:trigger:createTrigger

授予权限以创建触发器。

Write

function *

g:EnterpriseProjectId

functiongraph:trigger:create

functiongraph:trigger:delete

授予权限以删除触发器。

Write

trigger *

g:EnterpriseProjectId

-

functiongraph:trigger:update

授予权限以更新触发器。

Write

function *

g:EnterpriseProjectId

functiongraph:trigger:create

functiongraph:trigger:list

授予权限以获取指定函数的所有触发器。

List

function *

g:EnterpriseProjectId

functiongraph:trigger:listSpecifiedFunctionTriggers

functiongraph:trigger:get

授予权限以获取指定触发器的信息。

Read

trigger *

g:EnterpriseProjectId

-

functiongraph:trigger:batchDelete

授予权限以删除指定函数的所有触发器。

Write

function *

g:EnterpriseProjectId

functiongraph:trigger:deleteSpecifiedFunctionTriggers

functiongraph::listObsNotifications

授予权限以获取指定OBS桶的所有通知配置。

Read

-

-

functiongraph:trigger:create

functiongraph::listObsBucket

授予权限以获取OBS桶列表。

List

-

-

functiongraph:trigger:listSpecifiedFunctionTriggers

functiongraph:workflow:create

授予权限以创建函数流。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:create

functiongraph:workflow:delete

授予权限以删除函数流。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:delete

functiongraph:workflow:update

授予权限以修改指定函数流实例的元数据。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:create

functiongraph:workflow:list

授予权限以查询函数流。

List

workflow *

g:EnterpriseProjectId

functiongraph:function:list

functiongraph:workflow:getConfig

授予权限以获取指定函数流实例的元数据。

Read

workflow *

g:EnterpriseProjectId

functiongraph:function:getConfig

functiongraph:workflow:invoke

授予权限以异步执行方式启动函数流。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:workflow:invokeSync

授予权限以同步执行方式启动函数流。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:workflow:terminate

授予权限以停止函数流。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:workflow:retry

授予权限以重试函数流。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:workflow:listExecutions

授予权限以获取指定函数流执行实例列表。

List

workflow *

g:EnterpriseProjectId

functiongraph:function:list

functiongraph:workflow:getExecutionDetail

授予权限以获取指定函数流执行实例。

Read

workflow *

g:EnterpriseProjectId

functiongraph:function:getConfig

functiongraph:workflow:getMetric

授予权限以获取指定函数流指标。

Read

workflow *

g:EnterpriseProjectId

functiongraph:function:getConfig

functiongraph:workflow:listMetrics

授予权限以获取函数流指标。

List

-

-

functiongraph:function:getConfig

functiongraph:workflow:downloadOutput

授予权限以下载函数流节点的执行结果。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:getConfig

functiongraph:workflow:cancel

授予权限以停止执行函数流。

Write

workflow *

g:EnterpriseProjectId

functiongraph:function:invoke

functiongraph:workflow:metadata

授予权限以获取函数流元数据。

List

-

-

functiongraph:function:list

FunctionGraph的API通常对应着一个或多个授权项。表2展示了API与授权项的关系,以及该API需要依赖的授权项。

表2 API与授权项的关系

API

对应的授权项

依赖的授权项

POST /v2/{project_id}/fgs/functions

functiongraph:function:createFunction

  • lts:groups:list
  • lts:groups:create
  • lts:logstreams:list
  • lts:structConfig:create
  • obs:object:GetObject

DELETE /v2/{project_id}/fgs/functions/{function_urn}

functiongraph:function:deleteFunction

  • functiongraph:trigger:batchDelete
  • lts:groups:list
  • lts:logstreams:list
  • lts:logstreams:delete

PUT /v2/{project_id}/fgs/functions/{function_urn}/config

functiongraph:function:updateFunctionConfig

  • lts:groups:list
  • lts:groups:create
  • lts:logstreams:list
  • lts:structConfig:create

PUT /v2/{project_id}/fgs/functions/{function_urn}/code

functiongraph:function:updateFunctionCode

obs:object:GetObject

GET /v2/{project_id}/fgs/functions

functiongraph:function:listFunctions

-

GET /v2/{project_id}/fgs/functions/{function_urn}/config

functiongraph:function:getFunctionConfig

-

GET /v2/{project_id}/fgs/functions/{function_urn}/code

functiongraph:function:getFunctionCode

-

GET /v2/{project_id}/fgs/public-network-bandwidth

functiongraph::getPublicNetworkBandwidth

-

-

functiongraph::updatePublicNetworkBandwidth

-

GET /v2/{project_id}/fgs/resource-usage

functiongraph::getTenantResourceUsage

-

PUT /v2/{project_id}/fgs/functions/{function_urn}/config-max-instance

functiongraph:function:updateMaxInstanceConfig

-

POST /v2/{project_id}/fgs/functions/{function_urn}/snapshots/{action}

functiongraph:function:updateSnapshot

-

-

functiongraph:function:getSnapshotState

-

POST /v2/{project_id}/fgs/functions/{function_urn}/function-url

functiongraph:function:createUrl

-

DELETE /v2/{project_id}/fgs/functions/{function_urn}/function-url

functiongraph:function:deleteUrl

-

PUT /v2/{project_id}/fgs/functions/{function_urn}/function-url

functiongraph:function:updateUrl

-

GET /v2/{project_id}/fgs/functions/{function_urn}/function-url

functiongraph:function:getUrl

-

POST /v2/{project_id}/{resource_type}/resource-instances/{action}

functiongraph::getResourceInstance

-

POST /v2/{project_id}/{resource_type}/{resource_id}/tags/create

functiongraph::createTag

-

DELETE /v2/{project_id}/{resource_type}/{resource_id}/tags/delete

functiongraph::deleteTag

-

GET /v2/{project_id}/{resource_type}/tags

functiongraph::listTags

-

POST /v2/{project_id}/fgs/applications

functiongraph::createFunctionApp

-

DELETE /v2/{project_id}/fgs/applications/{id}

functiongraph::deleteFunctionApp

-

GET /v2/{project_id}/fgs/applications/{id}

functiongraph::getFunctionApp

-

GET /v2/{project_id}/fgs/applications

functiongraph::listFunctionApps

-

GET /v2/{project_id}/fgs/application/templates/{id}

functiongraph::getFunctionAppTemplate

-

GET /v2/{project_id}/fgs/application/templates

functiongraph::listFunctionAppTemplates

-

POST /v2/{project_id}/fgs/vpc-endpoint

functiongraph::createVpcEndpoint

-

DELETE /v2/{project_id}/fgs/vpc-endpoint/{vpc_id}/{subnet_id}

functiongraph::deleteVpcEndpoint

-

GET /v2/{project_id}/fgs/functions/{func_urn}/download

functiongraph:function:getFunctionCode

-

GET /v2/{project_id}/fgs/admins/sysconfig

functiongraph:function:getFunctionConfig

-

GET /v2/{project_id}/fgs/domainname/vpc/{vpc_id}

functiongraph:function:getFunctionConfig

dns:zone:list

GET /v2/{project_id}/fgs/functions/{function_urn}/servicebridge/relation

functiongraph:function:listFunctions

-

POST /v2/{project_id}/fgs/packages

functiongraph:function:createFunction

-

DELETE /v2/{project_id}/fgs/packages/{package_name}

functiongraph:function:deleteFunction

-

PUT /v2/{project_id}/fgs/packages/{package_name}

functiongraph:function:createFunction

-

GET /v2/{project_id}/fgs/packages

functiongraph:function:listFunctions

-

PUT /v2/{project_id}/fgs/functions/{func_urn}/collect/{state}

functiongraph:function:updateFunctionConfig

-

GET /v2/{project_id}/fgs/template-labels

functiongraph:function:listFunctions

-

GET /v2/fgs/template-labels

functiongraph:function:listFunctions

-

GET /v2/{project_id}/fgs/templates

functiongraph:function:listFunctions

-

GET /v2/{project_id}/fgs/templates/{template_id}

functiongraph:function:listFunctions

-

GET /v2/fgs/runtimetypes

functiongraph:function:listFunctions

-

GET /v2/fgs/service-trusted-agencies

functiongraph:function:getFunctionConfig

-

GET /v2/{project_id}/fgs/feature

functiongraph:function:getFunctionConfig

-

POST /v2/{project_id}/fgs/agc/agency/{agency_name}

functiongraph:function:createFunction

-

POST /v2/{project_id}/fgs/functions/enable-async-status-logs

functiongraph::updateAsyncStatusLog

  • lts:groups:list
  • lts:groups:create
  • lts:logstreams:list
  • lts:structConfig:create

GET /v2/{project_id}/fgs/functions/async-status-log-detail

functiongraph::getAsyncStatusLogInfo

-

GET /v2/{project_id}/fgs/functions/{function_urn}/active-async-invocations

functiongraph:function:listActiveAsyncInvocations

-

GET /v2/{project_id}/fgs/functions/{function_urn}/export

functiongraph:function:export

-

POST /v2/{project_id}/fgs/functions/import

functiongraph:function:import

-

GET /v2/{project_id}/fgs/packages/{package_name}/export

functiongraph::exportPackage

-

POST /v2/{project_id}/fgs/packages/import

functiongraph::importPackage

-

POST /v2/{project_id}/fgs/functions/{function_urn}/versions

functiongraph:function:createVersion

-

GET /v2/{project_id}/fgs/functions/{function_urn}/versions

functiongraph:function:listVersion

-

POST /v2/{project_id}/fgs/functions/{function_urn}/aliases

functiongraph:function:createAlias

-

DELETE /v2/{project_id}/fgs/functions/{function_urn}/aliases/{alias_name}

functiongraph:function:deleteAlias

functiongraph:trigger:list

PUT /v2/{project_id}/fgs/functions/{function_urn}/aliases/{alias_name}

functiongraph:function:updateAlias

-

GET /v2/{project_id}/fgs/functions/{function_urn}/aliases

functiongraph:function:listAlias

-

GET /v2/{project_id}/fgs/functions/{function_urn}/aliases/{alias_name}

functiongraph:function:getAlias

-

-

functiongraph::listQuota

-

POST /v2/{project_id}/fgs/dependencies

functiongraph:dependency:createDependency

obs:object:GetObject

DELETE /v2/{project_id}/fgs/dependencies/{depend_id}

functiongraph:dependency:deleteDependency

-

PUT /v2/{project_id}/fgs/dependencies/{depend_id}

functiongraph:dependency:updateDependency

obs:object:GetObject

GET /v2/{project_id}/fgs/dependencies

functiongraph:dependency:listDependencies

-

GET /v2/{project_id}/fgs/dependencies/{depend_id}

functiongraph:dependency:getDependency

-

POST /v2/{project_id}/fgs/dependencies/version

functiongraph:dependency:createDependencyVersion

obs:object:GetObject

DELETE /v2/{project_id}/fgs/dependencies/{depend_id}/version/{version}

functiongraph:dependency:deleteDependencyVersion

-

GET /v2/{project_id}/fgs/dependencies/{depend_id}/version

functiongraph:dependency:listDependencyVersion

-

GET /v2/{project_id}/fgs/dependencies/{depend_id}/version/{version}

functiongraph:dependency:getDependencyVersion

-

POST /v2/{project_id}/fgs/functions/{function_urn}/events

functiongraph:function:createEvent

-

DELETE /v2/{project_id}/fgs/functions/{function_urn}/events/{event_id}

functiongraph:function:deleteEvent

-

PUT /v2/{project_id}/fgs/functions/{function_urn}/events/{event_id}

functiongraph:function:updateEvent

-

GET /v2/{project_id}/fgs/functions/{function_urn}/events

functiongraph:function:listEvent

-

GET /v2/{project_id}/fgs/functions/{function_urn}/events/{event_id}

functiongraph:function:getEvent

-

PUT /v2/{project_id}/fgs/functions/{function_urn}/tracing

functiongraph:function:updateTracing

-

GET /v2/{project_id}/fgs/functions/{function_urn}/tracing

functiongraph:function:getTracing

-

GET /v2/{project_id}/fgs/function/report

functiongraph::listFunctionByMetric

  • aom:metric:get
  • aom:metric:list

-

functiongraph:function:listFunctionStatistics

-

GET /v2/{project_id}/fgs/functions/statistics

functiongraph::listStatistics

aom:metric:get

-

functiongraph:function:getReservedInstanceMetrics

  • aom:metric:get
  • aom:metric:list

POST /v2/{project_id}/fgs/functions/enable-lts-logs

functiongraph::enableLtsLogs

  • lts:groups:list
  • lts:groups:create
  • lts:logstreams:list
  • lts:structConfig:create

GET /v2/{project_id}/fgs/functions/{function_urn}/lts-log-detail

functiongraph:function:getLtsLogConfiguration

-

PUT /v2/{project_id}/fgs/functions/{function_urn}/reservedinstances

functiongraph:function:updateReservedInstanceCount

-

GET /v2/{project_id}/fgs/functions/reservedinstances

functiongraph::listReservedInstanceCount

-

GET /v2/{project_id}/fgs/functions/reservedinstanceconfigs

functiongraph::listReservedInstanceConfig

-

GET /v2/{project_id}/fgs/functions/reservedinstances/state

functiongraph::getReservedInstanceState

-

-

functiongraph:function:invokeAsync

-

-

functiongraph:function:invokeSync

-

-

functiongraph:function:invokeReservedFunctionAsync

-

POST /v2/{project_id}/fgs/functions/{function_urn}/cancel

functiongraph:function:stopAsyncInvoke

lts:structConfig:get

GET /v2/{project_id}/fgs/functions/{function_urn}/async-invocations

functiongraph:function:listAsyncInvocation

  • lts:structConfig:get
  • lts:logStream:searchStructLog

DELETE /v2/{project_id}/fgs/functions/{function_urn}/async-invoke-config

functiongraph:function:deleteAsyncInvokeConfig

-

PUT /v2/{project_id}/fgs/functions/{function_urn}/async-invoke-config

functiongraph:function:updateAsyncInvokeConfig

-

GET /v2/{project_id}/fgs/functions/{function_urn}/async-invoke-configs

functiongraph:function:listAsyncInvokeConfig

-

GET /v2/{project_id}/fgs/functions/{function_urn}/async-invoke-config

functiongraph:function:getAsyncInvokeConfig

-

-

functiongraph:trigger:createTrigger

  • apig:groups:get
  • apig:apis:get
  • apig:apis:create
  • apig:apis:update
  • apig:apis:publish
  • apig:instances:get
  • apig:instances:create
  • apig:instances:update
  • cts:notification:create
  • dds:instance:get
  • dds:instance:list
  • dis:streams:list
  • dms:instance:get
  • dms:instance:list
  • eg:agency:create
  • eg:sources:create
  • eg:subscriptions:create
  • iotda:routingrules:create
  • iotda:routingactions:create
  • iotda:rules:modifyStatus
  • lts:topics:get
  • lts:subscriptions:create
  • obs:bucket:GetBucketLocation
  • obs:bucket:GetBucketNotification
  • obs:bucket:PutBucketNotification
  • smn:topic:list
  • smn:topic:update

-

functiongraph:trigger:delete

  • apig:apis:get
  • apig:apis:offline
  • apig:instances:get
  • cts:notification:delete
  • eg:subscriptions:get
  • eg:subscriptions:delete
  • iotda:routingactions:query
  • iotda:routingactions:delete
  • iotda:routingrules:delete
  • lts:subscriptions:delete
  • obs:bucket:GetBucketNotification
  • obs:bucket:PutBucketNotification
  • smn:topic:update

-

functiongraph:trigger:update

  • cts:notification:update
  • dds:instance:get
  • dds:instance:list
  • dis:streams:list
  • dms:instance:get
  • dms:instance:list
  • eg:subscriptions:update
  • iotda:rules:modifyStatus
  • lts:subscriptions:put

-

functiongraph:trigger:list

  • apig:apis:list
  • apig:instances:list
  • eg:subscriptions:list
  • iotda:subscriptions:queryList
  • iotda:routingactions:queryList
  • iotda:routingrules:queryList
  • obs:bucket:GetBucketNotification
  • smn:topic:list

-

functiongraph:trigger:get

  • apig:apis:get
  • apig:instances:get
  • eg:subscriptions:get
  • iotda:routingrules:query
  • smn:topic:list

-

functiongraph:trigger:batchDelete

  • apig:apis:get
  • apig:apis:offline
  • apig:instances:get
  • cts:notification:delete
  • eg:subscriptions:list
  • eg:subscriptions:delete
  • lts:subscriptions:delete
  • iotda:routingactions:query
  • iotda:routingactions:queryList
  • iotda:routingactions:delete
  • iotda:routingrules:delete
  • obs:bucket:GetBucketNotification
  • obs:bucket:PutBucketNotification
  • smn:topic:update

-

functiongraph::listObsNotifications

obs:bucket:GetBucketNotification

-

functiongraph::listObsBucket

obs:bucket:ListBucket

-

functiongraph:trigger:list

-

-

functiongraph:trigger:createTrigger

-

-

functiongraph:trigger:createTrigger

-

-

functiongraph:workflow:create

  • eg:subscriptions:create
  • eg:sources:list
  • eg:channels:list
  • eg:channels:putEvents
  • lts:logGroup:createLogGroup
  • lts:logStream:createLogStream
  • lts:logGroup:listLogGroup
  • smn:topic:listTopic
  • smn:topic:subscribe
  • smn:topic:listSubscriptionsByTopic
  • apig:apis:create
  • apig:apis:publish
  • apig:envs:list
  • apig:apps:list
  • apig:instances:list
  • apig:groups:list
  • apig:sharedInstance:operate
  • functiongraph:function:getFunctionConfig
  • functiongraph:function:listFunctions
  • functiongraph::listFunctionApps
  • functiongraph:function:listVersion

-

functiongraph:workflow:delete

  • eg:subscriptions:delete
  • lts:groups:put
  • lts:logStream:deleteLogStream
  • smn:topic:deleteSubscription
  • apig:apis:offline
  • apig:apis:delete
  • apig:sharedInstance:operate

-

functiongraph:workflow:update

  • eg:subscriptions:create
  • eg:sources:list
  • eg:channels:list
  • eg:channels:putEvents
  • lts:logGroup:createLogGroup
  • lts:logStream:createLogStream
  • lts:logGroup:listLogGroup
  • smn:topic:listTopic
  • smn:topic:subscribe
  • smn:topic:listSubscriptionsByTopic
  • apig:apis:create
  • apig:apis:publish
  • apig:envs:list
  • apig:apps:list
  • apig:instances:list
  • apig:groups:list
  • apig:sharedInstance:operate
  • functiongraph:function:getFunctionConfig
  • functiongraph:function:listFunctions
  • functiongraph::listFunctionApps
  • functiongraph:function:listVersion

-

functiongraph:workflow:list

-

-

functiongraph:workflow:listExecutions

-

-

functiongraph:workflow:getExecutionDetail

-

-

functiongraph:workflow:getConfig

-

-

functiongraph:workflow:listMetrics

aom:metric:list

-

functiongraph:workflow:getMetric

  • aom:metric:list
  • aom:metric:get

-

functiongraph:workflow:retry

eg:channels:putEvents

-

functiongraph:workflow:terminate

-

-

functiongraph:workflow:listExecutions

-

-

functiongraph:workflow:invokeSync

eg:channels:putEvents

-

functiongraph:workflow:invoke

eg:channels:putEvents

-

functiongraph:workflow:invoke

eg:channels:putEvents

-

functiongraph:workflow:invoke

eg:channels:putEvents

-

functiongraph:workflow:invoke

eg:channels:putEvents

-

functiongraph:workflow:listExecutions

-

-

functiongraph:workflow:getExecutionDetail

-

-

functiongraph:workflow:downloadOutput

-

-

functiongraph:workflow:cancel

-

-

functiongraph:workflow:list

-

-

functiongraph:workflow:create

  • eg:subscriptions:create
  • eg:sources:list
  • eg:channels:list
  • eg:channels:putEvents
  • lts:logGroup:createLogGroup
  • lts:logStream:createLogStream
  • lts:logGroup:listLogGroup
  • smn:topic:listTopic
  • smn:topic:subscribe
  • smn:topic:listSubscriptionsByTopic
  • apig:apis:create
  • apig:apis:publish
  • apig:envs:list
  • apig:apps:list
  • apig:instances:list
  • apig:groups:list
  • apig:sharedInstance:operate
  • functiongraph:function:getFunctionConfig
  • functiongraph:function:listFunctions
  • functiongraph::listFunctionApps
  • functiongraph:function:listVersion

-

functiongraph:workflow:delete

  • eg:subscriptions:delete
  • lts:groups:put
  • lts:logStream:deleteLogStream
  • smn:topic:deleteSubscription
  • apig:apis:offline
  • apig:apis:delete
  • apig:sharedInstance:operate

-

functiongraph:workflow:getConfig

-

-

functiongraph:workflow:update

  • eg:subscriptions:create
  • eg:sources:list
  • eg:channels:list
  • eg:channels:putEvents
  • lts:logGroup:createLogGroup
  • lts:logStream:createLogStream
  • lts:logGroup:listLogGroup
  • smn:topic:listTopic
  • smn:topic:subscribe
  • smn:topic:listSubscriptionsByTopic
  • apig:apis:create
  • apig:apis:publish
  • apig:envs:list
  • apig:apps:list
  • apig:instances:list
  • apig:groups:list
  • apig:sharedInstance:operate
  • functiongraph:function:getFunctionConfig
  • functiongraph:function:listFunctions
  • functiongraph::listFunctionApps
  • functiongraph:function:listVersion

-

functiongraph:workflow:metadata

-

-

functiongraph:workflow:metadata

-

-

functiongraph:workflow:metadata

-

-

functiongraph:workflow:metadata

-

-

functiongraph:workflow:list

-

-

functiongraph:workflow:getConfig

-

POST /v2/{project_id}/fgs/servicebridge

functiongraph:bridge:createServiceBridge

-

DELETE /v2/{project_id}/fgs/servicebridge/{bridge_name}

functiongraph:bridge:deleteServiceBridge

-

PUT /v2/{project_id}/fgs/servicebridge/{bridge_name}/config

functiongraph:bridge:updateServiceBridgeConfig

-

GET /v2/{project_id}/fgs/servicebridge

functiongraph:bridge:listServiceBridges

-

GET /v2/{project_id}/fgs/servicebridge/{bridge_name}/config

functiongraph:bridge:getServiceBridgeConfig

-

资源类型(Resource)

资源类型(Resource)表示SCP所作用的资源。如表3中的某些操作指定了可以在该操作指定的资源类型,则必须在具有该操作的SCP语句中指定该资源的URN,SCP仅作用于此资源;如未指定,Resource默认为“*”,则SCP将应用到所有资源。您也可以在SCP中设置条件,从而指定资源类型。

FunctionGraph定义了以下可以在SCP的Resource元素中使用的资源类型。

表3 支持的资源类型

资源类型

URN

workflow

functiongraph:<region>:<account-id>:workflow:<workflow-id>

function

functiongraph:<region>:<account-id>:function:<package-name>/<function-name>

trigger

functiongraph:<region>:<account-id>:trigger:<trigger-id>

条件(Condition)

FunctionGraph服务不支持在SCP中的条件键中配置服务级的条件键。

FunctionGraph可以使用适用于所有服务的全局条件键,请参考全局条件键

相关文档