阿里云高速通道-API手冊(cè)-D

1、高速通道API使用手冊(cè)高速通道/API使用手冊(cè)高速通道/API使用手冊(cè) PAGE 6 PAGE 6API使用手冊(cè)簡(jiǎn)介高速通道的API接口內(nèi)容在ECS的API文檔中，可以點(diǎn)擊下面的鏈接進(jìn)入相關(guān)API的詳細(xì)說(shuō)明。高速通道的API路由器接口相關(guān)：創(chuàng)建路由器接口修改路由器接口屬性查詢(xún)路由器接口列表發(fā)起路由器接口連接將路由器接口置為激活將路由器接口置為非激活修改路由器接口規(guī)格刪除路由器接口借助RAM實(shí)現(xiàn)子賬號(hào)對(duì)主賬號(hào)資源訪(fǎng)問(wèn)RAM用戶(hù)創(chuàng)建的高速通道資源，都是該用戶(hù)自己擁有的資源。默認(rèn)情況下，用戶(hù)對(duì)自己的資源擁有完整的操作權(quán)限，可以使用本文檔中列舉的所有 API 對(duì)資源進(jìn)行操作。但在主子賬號(hào)的場(chǎng)景下，子賬

2、號(hào)剛創(chuàng)建時(shí)是沒(méi)有資格去操作主賬號(hào)的資源的。需要通過(guò) RAM 授權(quán)的方式，給予子賬號(hào)操作主賬號(hào)資源的權(quán)限。RAMRAMAPI。如果您不需要跨賬戶(hù)進(jìn)行專(zhuān)有網(wǎng)絡(luò)資源的授權(quán)和訪(fǎng)問(wèn)，您可以跳過(guò)此章節(jié)。跳過(guò)這些部分并不影響您對(duì)文檔中 其余部分的理解和使用.RAM中可授權(quán)的高速通道資源類(lèi)型資源類(lèi)型授權(quán)策略中的資源描述方式RouterInterfaceacs:vpc:$regionid:$accountid:routerinterface/$ routerinterfaceid acs:vpc:$regionid:$accountid:routerinterface/* acs:vpc:*:$accounti

3、d:routerinterface/*PhysicalConnectionacs:vpc:$regionid:$accountid:physicalconnecti on/$physicalconnectionid acs:vpc:$regionid:$accountid:physicalconnecti on/* acs:vpc:*:$accountid:physicalconnection/*VirtualBorderRouteracs:vpc:$regionid:$accountid:virtualborderrou ter/$virtualborderrouterid acs:vpc:

4、$regionid:$accountid:virtualborderrou ter/* acs:vpc:*:$accountid:virtualborderrouter/*RouteTableacs:vpc:$regionid:$accountid:routertable/$rou tertableid acs:vpc:$regionid:$accountid:routertable/* acs:vpc:*:$accountid:routertable/*特殊的泛指表達(dá)式acs:vpc:$regionid:$accountid:* acs:vpc:$accountid:$regionidreg

5、ionid，或者*；$routerinterfaceEIPid，或者*；以此類(lèi)推。RAM中可對(duì)高速通道資源進(jìn)行授權(quán)的Action在RAM中，可以對(duì)一個(gè)高速通道資源進(jìn)行以下Action的授權(quán)。 具體的Action和API接口的對(duì)應(yīng)關(guān)系如下：APIActionDescribeAccessPointsvpc:DescribeAccessPointsCreatePhysicalConnectionvpc:CreatePhysicalConnectionDescribePhysicalConnectionsvpc:DescribePhysicalConnectionsModifyPhysicalConn

6、ectionAttributevpc:ModifyPhysicalConnectionAttributeEnablePhysicalConnectionvpc:EnablePhysicalConnectionCancelPhysicalConnectionvpc:CancelPhysicalConnectionTerminatePhysicalConnectionvpc:TerminatePhysicalConnectionDeletePhysicalConnectionvpc:DeletePhysicalConnectionCreateVirtualBorderRoutervpc:Creat

7、eVirtualBorderRouterDescribeVirtualBorderRoutersvpc:DescribeVirtualBorderRoutersModifyVirtualBorderRouterAttributevpc:ModifyVirtualBorderRouterAttributeDeleteVirtualBorderRoutervpc:DeleteVirtualBorderRouterDescribeVirtualBorderRoutersForPhysicalConn ectionvpc:DescribeVirtualBorderRoutersForPhysicalC

8、 onnectionTerminateVirtualBorderRoutervpc:TerminateVirtualBorderRouterRecoverVirtualBorderRoutervpc:RecoverVirtualBorderRouterCreateRouteEntryvpc:CreateRouteEntryDescribeRouteTablesvpc:DescribeRouteTablesDeleteRouteEntryvpc:DeleteRouteEntryCreateRouterInterfacevpc:CreateRouterInterfaceConnectRouterI

9、nterfacevpc:ConnectRouterInterfaceDescribeRouterInterfacesvpc:DescribeRouterInterfacesDeactivateRouterInterfacevpc:DeactivateRouterInterfaceActivateRouterInterfacevpc:ActivateRouterInterfaceModifyRouterInterfaceAttributevpc:ModifyRouterInterfaceAttributeModifyRouterInterfaceSpecvpc:ModifyRouterInter

10、faceSpecDeleteRouterInterfacevpc:DeleteRouterInterface專(zhuān)有網(wǎng)絡(luò)API的鑒權(quán)規(guī)則當(dāng)子賬號(hào)通過(guò)Open API 對(duì)主賬號(hào)的高速通道資源進(jìn)行訪(fǎng)問(wèn)時(shí)，高速通道后臺(tái)向 RAM 進(jìn)行權(quán)限檢查，以確保資源擁有者的確將相關(guān)資源的相關(guān)權(quán)限授予了調(diào)用者。每個(gè)不同的Open API 會(huì)根據(jù)涉及到的資源以及 API 的語(yǔ)義來(lái)確定需要檢查哪些資源的權(quán)限。具體地，每個(gè)API 的鑒權(quán)規(guī)則見(jiàn)下表:ActionResourceConditionvpc:DescribeAccessP ointsacs:vpc:*:$accountid:*vpc:CreatePhysicalC

11、 onnectionacs:vpc:$regionid:$a ccountid:physicalcon密鑰管理服務(wù)/快速入門(mén)密鑰管理服務(wù)/快速入門(mén)nection/*vpc:DescribePhysical Connectionsacs:vpc:$regionid:$a ccountid:physicalcon nection/*vpc:ModifyPhysicalCacs:vpc:$regionid:$accountid:physicalcononnectionAttributenection/$physicalco nnectionidvpc:EnablePhysicalCacs:vpc:$

12、regionid:$accountid:physicalcononnectionnection/$physicalco nnectionidvpc:CancelPhysicalCacs:vpc:$regionid:$accountid:physicalcononnectionnection/$physicalco nnectionidvpc:TerminatePhysicacs:vpc:$regionid:$accountid:physicalconalConnectionnection/$physicalco nnectionidvpc:DeletePhysicalCacs:vpc:$reg

13、ionid:$accountid:physicalcononnectionnection/$physicalco nnectionidacs:vpc:$regionid:$accountid:virtualbordvpc:CreateVirtualBor derRoutererrouter/* acs:vpc:$regionid:$accountid:physicalconnection/$physicalconnectionidvpc:DescribeVirtualB orderRoutersacs:vpc:$regionid:$a ccountid:virtualbord errouter

14、/*vpc:ModifyVirtualBoacs:vpc:$regionid:$accountid:virtualbordrderRouterAttributeerrouter/$virtualbor derrouteridvpc:DeleteVirtualBoracs:vpc:$regionid:$accountid:virtualbordderRoutererrouter/$virtualbor derrouteridvpc:DescribeVirtualBacs:vpc:$regionid:$avpd:PhysicalConnection:acs:vpc:$regioorderRoute

15、rsForPhyccountid:virtualbordnid:$accountid:physisicalConnectionerrouter/*calconnection/$phys icalconnectionidvpc:TerminateVirtualacs:vpc:$regionid:$aBorderRouterccountid:virtualborderrouter/$virtualbor derrouteridvpc:RecoverVirtualB orderRouteracs:vpc:$regionid:$a ccountid:virtualbord errouter/$virt

16、ualbor derrouteridvpc:CreateRouteEntr yacs:vpc:$regionid:$a ccountid:routertable/$routertableidvpc:DescribeRouteTa blesacs:vpc:$regionid:$a ccountid:routertable/*VRouter中的路由表： vpc:VRouter:acs:v pc$regionid:$accoun tid:vrouter/$vrouteri d VirtualBorderRouter 中 的 路 由 表 ： vpc:VirtualBorderRo uter:acs:v

17、pc:$regio nid:$accountid:virtua lborderrouter/$virtu alborderrouteridvpc:DeleteRouteEntr yacs:vpc:$regionid:$a ccountid:routertable/$routertableidvpc:CreateRouterInt erface所屬路由器RouterType為VRouter: acs:vpc:$regionid:$a ccountid:routerinterf ace/* acs:vpc:$regionid:$a ccountid:vrouter/$vr outerid所屬路由器

18、RouterType為VirtualBorderRouter: acs:vpc:$regionid:$a ccountid:routerinterf ace/* acs:vpc:$regionid:$a ccountid:virtualbord errouter/$virtualbor derrouteridvpc:ConnectRouterIn terfaceacs:vpc:$regionid:$a ccountid:routerinterf ace/$routerinterfacei dvpc:DescribeRouterI nterfacesacs:vpc:$regionid:$a ccountid:routerinterf ace/*vpc:DeactivateRoute rInterfaceacs:vpc:$regionid:$a ccountid:routerinterface/$routerinterfaceidvpc:ActivateRouterInacs:vpc:$regionid:$accountid:routerinterfterfaceace/$rout