阿里云高速通道-API手冊-D

1、高速通道API使用手冊高速通道/API使用手冊高速通道/API使用手冊 PAGE 6 PAGE 6API使用手冊簡介高速通道的API接口內(nèi)容在ECS的API文檔中，可以點擊下面的鏈接進入相關API的詳細說明。高速通道的API路由器接口相關：創(chuàng)建路由器接口修改路由器接口屬性查詢路由器接口列表發(fā)起路由器接口連接將路由器接口置為激活將路由器接口置為非激活修改路由器接口規(guī)格刪除路由器接口借助RAM實現(xiàn)子賬號對主賬號資源訪問RAM用戶創(chuàng)建的高速通道資源，都是該用戶自己擁有的資源。默認情況下，用戶對自己的資源擁有完整的操作權限，可以使用本文檔中列舉的所有 API 對資源進行操作。但在主子賬號的場景下，子賬

2、號剛創(chuàng)建時是沒有資格去操作主賬號的資源的。需要通過 RAM 授權的方式，給予子賬號操作主賬號資源的權限。RAMRAMAPI。如果您不需要跨賬戶進行專有網(wǎng)絡資源的授權和訪問，您可以跳過此章節(jié)。跳過這些部分并不影響您對文檔中 其余部分的理解和使用.RAM中可授權的高速通道資源類型資源類型授權策略中的資源描述方式RouterInterfaceacs:vpc:$regionid:$accountid:routerinterface/$ routerinterfaceid acs:vpc:$regionid:$accountid:routerinterface/* acs:vpc:*:$accounti

3、d:routerinterface/*PhysicalConnectionacs:vpc:$regionid:$accountid:physicalconnecti on/$physicalconnectionid acs:vpc:$regionid:$accountid:physicalconnecti on/* acs:vpc:*:$accountid:physicalconnection/*VirtualBorderRouteracs:vpc:$regionid:$accountid:virtualborderrou ter/$virtualborderrouterid acs:vpc:

4、$regionid:$accountid:virtualborderrou ter/* acs:vpc:*:$accountid:virtualborderrouter/*RouteTableacs:vpc:$regionid:$accountid:routertable/$rou tertableid acs:vpc:$regionid:$accountid:routertable/* acs:vpc:*:$accountid:routertable/*特殊的泛指表達式acs:vpc:$regionid:$accountid:* acs:vpc:$accountid:$regionidreg

5、ionid，或者*；$routerinterfaceEIPid，或者*；以此類推。RAM中可對高速通道資源進行授權的Action在RAM中，可以對一個高速通道資源進行以下Action的授權。 具體的Action和API接口的對應關系如下：APIActionDescribeAccessPointsvpc:DescribeAccessPointsCreatePhysicalConnectionvpc:CreatePhysicalConnectionDescribePhysicalConnectionsvpc:DescribePhysicalConnectionsModifyPhysicalConn

6、ectionAttributevpc:ModifyPhysicalConnectionAttributeEnablePhysicalConnectionvpc:EnablePhysicalConnectionCancelPhysicalConnectionvpc:CancelPhysicalConnectionTerminatePhysicalConnectionvpc:TerminatePhysicalConnectionDeletePhysicalConnectionvpc:DeletePhysicalConnectionCreateVirtualBorderRoutervpc:Creat

7、eVirtualBorderRouterDescribeVirtualBorderRoutersvpc:DescribeVirtualBorderRoutersModifyVirtualBorderRouterAttributevpc:ModifyVirtualBorderRouterAttributeDeleteVirtualBorderRoutervpc:DeleteVirtualBorderRouterDescribeVirtualBorderRoutersForPhysicalConn ectionvpc:DescribeVirtualBorderRoutersForPhysicalC

8、 onnectionTerminateVirtualBorderRoutervpc:TerminateVirtualBorderRouterRecoverVirtualBorderRoutervpc:RecoverVirtualBorderRouterCreateRouteEntryvpc:CreateRouteEntryDescribeRouteTablesvpc:DescribeRouteTablesDeleteRouteEntryvpc:DeleteRouteEntryCreateRouterInterfacevpc:CreateRouterInterfaceConnectRouterI

9、nterfacevpc:ConnectRouterInterfaceDescribeRouterInterfacesvpc:DescribeRouterInterfacesDeactivateRouterInterfacevpc:DeactivateRouterInterfaceActivateRouterInterfacevpc:ActivateRouterInterfaceModifyRouterInterfaceAttributevpc:ModifyRouterInterfaceAttributeModifyRouterInterfaceSpecvpc:ModifyRouterInter

10、faceSpecDeleteRouterInterfacevpc:DeleteRouterInterface專有網(wǎng)絡API的鑒權規(guī)則當子賬號通過Open API 對主賬號的高速通道資源進行訪問時，高速通道后臺向 RAM 進行權限檢查，以確保資源擁有者的確將相關資源的相關權限授予了調(diào)用者。每個不同的Open API 會根據(jù)涉及到的資源以及 API 的語義來確定需要檢查哪些資源的權限。具體地，每個API 的鑒權規(guī)則見下表:ActionResourceConditionvpc:DescribeAccessP ointsacs:vpc:*:$accountid:*vpc:CreatePhysicalC

11、 onnectionacs:vpc:$regionid:$a ccountid:physicalcon密鑰管理服務/快速入門密鑰管理服務/快速入門nection/*vpc:DescribePhysical Connectionsacs:vpc:$regionid:$a ccountid:physicalcon nection/*vpc:ModifyPhysicalCacs:vpc:$regionid:$accountid:physicalcononnectionAttributenection/$physicalco nnectionidvpc:EnablePhysicalCacs:vpc:$

12、regionid:$accountid:physicalcononnectionnection/$physicalco nnectionidvpc:CancelPhysicalCacs:vpc:$regionid:$accountid:physicalcononnectionnection/$physicalco nnectionidvpc:TerminatePhysicacs:vpc:$regionid:$accountid:physicalconalConnectionnection/$physicalco nnectionidvpc:DeletePhysicalCacs:vpc:$reg

13、ionid:$accountid:physicalcononnectionnection/$physicalco nnectionidacs:vpc:$regionid:$accountid:virtualbordvpc:CreateVirtualBor derRoutererrouter/* acs:vpc:$regionid:$accountid:physicalconnection/$physicalconnectionidvpc:DescribeVirtualB orderRoutersacs:vpc:$regionid:$a ccountid:virtualbord errouter

14、/*vpc:ModifyVirtualBoacs:vpc:$regionid:$accountid:virtualbordrderRouterAttributeerrouter/$virtualbor derrouteridvpc:DeleteVirtualBoracs:vpc:$regionid:$accountid:virtualbordderRoutererrouter/$virtualbor derrouteridvpc:DescribeVirtualBacs:vpc:$regionid:$avpd:PhysicalConnection:acs:vpc:$regioorderRoute

15、rsForPhyccountid:virtualbordnid:$accountid:physisicalConnectionerrouter/*calconnection/$phys icalconnectionidvpc:TerminateVirtualacs:vpc:$regionid:$aBorderRouterccountid:virtualborderrouter/$virtualbor derrouteridvpc:RecoverVirtualB orderRouteracs:vpc:$regionid:$a ccountid:virtualbord errouter/$virt

16、ualbor derrouteridvpc:CreateRouteEntr yacs:vpc:$regionid:$a ccountid:routertable/$routertableidvpc:DescribeRouteTa blesacs:vpc:$regionid:$a ccountid:routertable/*VRouter中的路由表： vpc:VRouter:acs:v pc$regionid:$accoun tid:vrouter/$vrouteri d VirtualBorderRouter 中 的 路 由 表 ： vpc:VirtualBorderRo uter:acs:v

17、pc:$regio nid:$accountid:virtua lborderrouter/$virtu alborderrouteridvpc:DeleteRouteEntr yacs:vpc:$regionid:$a ccountid:routertable/$routertableidvpc:CreateRouterInt erface所屬路由器RouterType為VRouter: acs:vpc:$regionid:$a ccountid:routerinterf ace/* acs:vpc:$regionid:$a ccountid:vrouter/$vr outerid所屬路由器

18、RouterType為VirtualBorderRouter: acs:vpc:$regionid:$a ccountid:routerinterf ace/* acs:vpc:$regionid:$a ccountid:virtualbord errouter/$virtualbor derrouteridvpc:ConnectRouterIn terfaceacs:vpc:$regionid:$a ccountid:routerinterf ace/$routerinterfacei dvpc:DescribeRouterI nterfacesacs:vpc:$regionid:$a ccountid:routerinterf ace/*vpc:DeactivateRoute rInterfaceacs:vpc:$regionid:$a ccountid:routerinterface/$routerinterfaceidvpc:ActivateRouterInacs:vpc:$regionid:$accountid:routerinterfterfaceace/$rout