检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Write instance * g:ResourceTag/<tag-key> apig:authorizers:update apig:instance:listVpcEndpoint Grants permission to query connections of a dedicated gateway VPC endpoint service.
Tagging gateway * g:EnterpriseProjectId g:ResourceTag/<tag-key> nat:natGatewayTags:create - g:RequestTag/<tag-key> g:TagKeys nat:natGateways:deleteTags Grants permission to delete tags of a specified public NAT gateway.
custom-rule cfw:instance:createCustomRule - GET /v1/{project_id}/cfw/alarm/config cfw:instance:getAlarmConfig - PUT /v1/{project_id}/cfw/alarm/config cfw:instance:updateAlarmConfig - GET /v1/{project_id}/firewall/east-west cfw:instance:getEw er:instances:listVpcAttachments vpc:vpcs:list nat
Write centralNetwork * g:EnterpriseProjectId g:ResourceTag/<tag-key> - - cc:GlobalConnectionBandwidthId cc:centralNetworkAttachment:createGdgw Grants permission to add a global DC gateway to a central network as an attachment.
NAT Gateway (Project-level service) Region-specific projects NAT FullAccess Policy Full permissions for NAT Gateway. NAT ReadOnlyAccess Read-only permissions for NAT Gateway. NAT Administrator Role Full permissions for NAT Gateway.
Middleware Cloud Service Engine CSE Distributed Message Service for Kafka (Kafka) Distributed Message Service for RabbitMQ (RabbitMQ) Distributed Message Service for RocketMQ (RocketMQ) API Gateway (APIG) Distributed Cache Service (DCS) Parent topic: Identity Policy–based Authorization
NAT Gateway NATFullAccessPolicy Full permissions for NAT Gateway. NATReadOnlyPolicy Read-only permissions for NAT Gateway. Direct Connect DCAASFullAccessPolicy Full permissions for Direct Connect. DCAASReadOnlyPolicy Read-only permissions for Direct Connect.
List lgw * - - dcaas:lgwTable:create Grants permission to create a local gateway route table. Write lgwTable * - - lgw * - dcaas:lgwTable:update Grants permission to update a local gateway route table.
Networking Enterprise Router Virtual Private Cloud Elastic IP Direct Connect VPC Endpoint Global accelerator NAT Gateway Cloud Connect Elastic Load Balance Parent topic: Identity Policy–based Authorization
NAT Gateway (Project-level service) Region-specific projects NAT FullAccess Policy Full permissions for NAT Gateway. NAT ReadOnlyAccess Read-only permissions for NAT Gateway. NAT Administrator Role Full permissions for NAT Gateway.
Write endpoints * g:ResourceTag/<tag-key> vpcep:endpoints:update vpcep:endpoints:deletePolicy Grants permission to delete the policy of a gateway VPC endpoint.
