All Documents
Current Document
Content is empty
If you don't find the content you expect, please try another search term
Content is empty
If you don't find the content you expect, please try another search term
Last updated：2020-06-17 20:29:30
IAM can control the access to EPC instances, assign different administrative privileges to users, and provide fine-grained management.
A global system policy can help you grant the privilege quickly without the need to write policies, but the authorization granularity will be coarser. The following table lists two global system policies for EPC.
| Policy name | Policy description |
|---|---|
| EPCFullAccess | Provides complete privilege for managing EPC features (using the console and API). |
| EPCReadOnlyAccess | Provides the EPC query management privilege (using the console and API). |
The following table lists actions for configuring policies for EPC.
Action: An example is Action:iam:CreateUser. The value of Action consists of two parts: service-name and action-name, where service-name is the service namespace (such as iam, ks3, and kec) and action-name is the EPC operation name. When you create a policy, you can copy the content in the table and paste it in the Action field.
| Action | Function description |
|---|---|
| epc:CreateEpc | Creates an EPC instance. |
| epc:RebootEpc | Restarts an EPC instance. |
| epc:StartEpc | Starts an EPC instance. |
| epc:DeleteEpc | Deletes an EPC instance. |
| epc:ReinstallEpc | Reinstalls the operating system. |
| epc:ModifySecurityGroup | Modifies the security group. |
| epc:ImportKey | Imports a key. |
| epc:DeleteKey | Deletes a key. |
| epc:CreateKey | Creates a key. |
| epc:DescribeKeys | Queries the list of keys. |
| epc:DescribeEpcs | Queries the list of EPC instances |
| epc:GetDynamicCode | Obtains a dynamic code. |
| epc:DescribeVpns | Queries the list of VPNs. |
| epc:CreateImage | Creates a custom image. |
| epc:ModifyImage | Modifies an image. |
| epc:DeleteImage | Deletes an image. |
| epc:DescribeImages | Queries the list of images. |
| epc:ModifyDns | Modifies DNS. |
| epc:ModifyNetworkInterfaceAttribute | Modifies the NIC information. |
| epc:DescribePhysicalMonitor | Queries the hardware monitoring information. |
| epc:DescribeCertificates | Queries the list of certificates. |
| epc:DescribeEpcManagements | Queries the management information of an EPC instance. |
| epc:DescribeRemoteManagements | Queries out-of-band management information. |
| epc:StopEpc | Stops an EPC instance. |
| epc:ModifyEpc | Modifies the configuration of an EPC instance. |
| epc:ModifyRemoteManagement | Modifies out-of-band management. |
| epc:CreateRemoteManagement | Creates out-of-band management. |
| epc:ReinstallCustomerEpc | Reinstalls the operating system for a hosted instance type. |
Pure Mode
