阿里云高速通道-API手册-D

1、高速通道API使用手册高速通道/API使用手册高速通道/API使用手册 PAGE 6 PAGE 6API使用手册简介高速通道的API接口内容在ECS的API文档中，可以点击下面的链接进入相关API的详细说明。高速通道的API路由器接口相关：创建路由器接口修改路由器接口属性查询路由器接口列表发起路由器接口连接将路由器接口置为激活将路由器接口置为非激活修改路由器接口规格删除路由器接口借助RAM实现子账号对主账号资源访问RAM用户创建的高速通道资源，都是该用户自己拥有的资源。默认情况下，用户对自己的资源拥有完整的操作权限，可以使用本文档中列举的所有 API 对资源进行操作。但在主子账号的场景下，子账

2、号刚创建时是没有资格去操作主账号的资源的。需要通过 RAM 授权的方式，给予子账号操作主账号资源的权限。RAMRAMAPI。如果您不需要跨账户进行专有网络资源的授权和访问，您可以跳过此章节。跳过这些部分并不影响您对文档中 其余部分的理解和使用.RAM中可授权的高速通道资源类型资源类型授权策略中的资源描述方式RouterInterfaceacs:vpc:$regionid:$accountid:routerinterface/$ routerinterfaceid acs:vpc:$regionid:$accountid:routerinterface/* acs:vpc:*:$accounti

3、d:routerinterface/*PhysicalConnectionacs:vpc:$regionid:$accountid:physicalconnecti on/$physicalconnectionid acs:vpc:$regionid:$accountid:physicalconnecti on/* acs:vpc:*:$accountid:physicalconnection/*VirtualBorderRouteracs:vpc:$regionid:$accountid:virtualborderrou ter/$virtualborderrouterid acs:vpc:

4、$regionid:$accountid:virtualborderrou ter/* acs:vpc:*:$accountid:virtualborderrouter/*RouteTableacs:vpc:$regionid:$accountid:routertable/$rou tertableid acs:vpc:$regionid:$accountid:routertable/* acs:vpc:*:$accountid:routertable/*特殊的泛指表达式acs:vpc:$regionid:$accountid:* acs:vpc:$accountid:$regionidreg

5、ionid，或者*；$routerinterfaceEIPid，或者*；以此类推。RAM中可对高速通道资源进行授权的Action在RAM中，可以对一个高速通道资源进行以下Action的授权。 具体的Action和API接口的对应关系如下：APIActionDescribeAccessPointsvpc:DescribeAccessPointsCreatePhysicalConnectionvpc:CreatePhysicalConnectionDescribePhysicalConnectionsvpc:DescribePhysicalConnectionsModifyPhysicalConn

6、ectionAttributevpc:ModifyPhysicalConnectionAttributeEnablePhysicalConnectionvpc:EnablePhysicalConnectionCancelPhysicalConnectionvpc:CancelPhysicalConnectionTerminatePhysicalConnectionvpc:TerminatePhysicalConnectionDeletePhysicalConnectionvpc:DeletePhysicalConnectionCreateVirtualBorderRoutervpc:Creat

7、eVirtualBorderRouterDescribeVirtualBorderRoutersvpc:DescribeVirtualBorderRoutersModifyVirtualBorderRouterAttributevpc:ModifyVirtualBorderRouterAttributeDeleteVirtualBorderRoutervpc:DeleteVirtualBorderRouterDescribeVirtualBorderRoutersForPhysicalConn ectionvpc:DescribeVirtualBorderRoutersForPhysicalC

8、 onnectionTerminateVirtualBorderRoutervpc:TerminateVirtualBorderRouterRecoverVirtualBorderRoutervpc:RecoverVirtualBorderRouterCreateRouteEntryvpc:CreateRouteEntryDescribeRouteTablesvpc:DescribeRouteTablesDeleteRouteEntryvpc:DeleteRouteEntryCreateRouterInterfacevpc:CreateRouterInterfaceConnectRouterI

9、nterfacevpc:ConnectRouterInterfaceDescribeRouterInterfacesvpc:DescribeRouterInterfacesDeactivateRouterInterfacevpc:DeactivateRouterInterfaceActivateRouterInterfacevpc:ActivateRouterInterfaceModifyRouterInterfaceAttributevpc:ModifyRouterInterfaceAttributeModifyRouterInterfaceSpecvpc:ModifyRouterInter

10、faceSpecDeleteRouterInterfacevpc:DeleteRouterInterface专有网络API的鉴权规则当子账号通过Open API 对主账号的高速通道资源进行访问时，高速通道后台向 RAM 进行权限检查，以确保资源拥有者的确将相关资源的相关权限授予了调用者。每个不同的Open API 会根据涉及到的资源以及 API 的语义来确定需要检查哪些资源的权限。具体地，每个API 的鉴权规则见下表:ActionResourceConditionvpc:DescribeAccessP ointsacs:vpc:*:$accountid:*vpc:CreatePhysicalC

11、 onnectionacs:vpc:$regionid:$a ccountid:physicalcon密钥管理服务/快速入门密钥管理服务/快速入门nection/*vpc:DescribePhysical Connectionsacs:vpc:$regionid:$a ccountid:physicalcon nection/*vpc:ModifyPhysicalCacs:vpc:$regionid:$accountid:physicalcononnectionAttributenection/$physicalco nnectionidvpc:EnablePhysicalCacs:vpc:$

12、regionid:$accountid:physicalcononnectionnection/$physicalco nnectionidvpc:CancelPhysicalCacs:vpc:$regionid:$accountid:physicalcononnectionnection/$physicalco nnectionidvpc:TerminatePhysicacs:vpc:$regionid:$accountid:physicalconalConnectionnection/$physicalco nnectionidvpc:DeletePhysicalCacs:vpc:$reg

13、ionid:$accountid:physicalcononnectionnection/$physicalco nnectionidacs:vpc:$regionid:$accountid:virtualbordvpc:CreateVirtualBor derRoutererrouter/* acs:vpc:$regionid:$accountid:physicalconnection/$physicalconnectionidvpc:DescribeVirtualB orderRoutersacs:vpc:$regionid:$a ccountid:virtualbord errouter

14、/*vpc:ModifyVirtualBoacs:vpc:$regionid:$accountid:virtualbordrderRouterAttributeerrouter/$virtualbor derrouteridvpc:DeleteVirtualBoracs:vpc:$regionid:$accountid:virtualbordderRoutererrouter/$virtualbor derrouteridvpc:DescribeVirtualBacs:vpc:$regionid:$avpd:PhysicalConnection:acs:vpc:$regioorderRoute

15、rsForPhyccountid:virtualbordnid:$accountid:physisicalConnectionerrouter/*calconnection/$phys icalconnectionidvpc:TerminateVirtualacs:vpc:$regionid:$aBorderRouterccountid:virtualborderrouter/$virtualbor derrouteridvpc:RecoverVirtualB orderRouteracs:vpc:$regionid:$a ccountid:virtualbord errouter/$virt

16、ualbor derrouteridvpc:CreateRouteEntr yacs:vpc:$regionid:$a ccountid:routertable/$routertableidvpc:DescribeRouteTa blesacs:vpc:$regionid:$a ccountid:routertable/*VRouter中的路由表： vpc:VRouter:acs:v pc$regionid:$accoun tid:vrouter/$vrouteri d VirtualBorderRouter 中 的 路 由 表 ： vpc:VirtualBorderRo uter:acs:v

17、pc:$regio nid:$accountid:virtua lborderrouter/$virtu alborderrouteridvpc:DeleteRouteEntr yacs:vpc:$regionid:$a ccountid:routertable/$routertableidvpc:CreateRouterInt erface所属路由器RouterType为VRouter: acs:vpc:$regionid:$a ccountid:routerinterf ace/* acs:vpc:$regionid:$a ccountid:vrouter/$vr outerid所属路由器

18、RouterType为VirtualBorderRouter: acs:vpc:$regionid:$a ccountid:routerinterf ace/* acs:vpc:$regionid:$a ccountid:virtualbord errouter/$virtualbor derrouteridvpc:ConnectRouterIn terfaceacs:vpc:$regionid:$a ccountid:routerinterf ace/$routerinterfacei dvpc:DescribeRouterI nterfacesacs:vpc:$regionid:$a ccountid:routerinterf ace/*vpc:DeactivateRoute rInterfaceacs:vpc:$regionid:$a ccountid:routerinterface/$routerinterfaceidvpc:ActivateRouterInacs:vpc:$regionid:$accountid:routerinterfterfaceace/$rout