diff --git a/docs/er/api-ref/ALL_META.TXT.json b/docs/er/api-ref/ALL_META.TXT.json index b8b015cca..52c259637 100644 --- a/docs/er/api-ref/ALL_META.TXT.json +++ b/docs/er/api-ref/ALL_META.TXT.json @@ -1163,7 +1163,7 @@ "node_id":"er_02_0016.xml", "product_code":"er", "code":"59", - "des":"This section describes fine-grained permissions management for your Enterprise Router resources. If your account does not need individual IAM users, you may skip this sec", + "des":"This topic describes fine-grained permissions management for your Enterprise Router resources. If your account does not need individual IAM users, you may skip this topic", "doc_type":"api", "kw":"Introduction,Permissions Policies and Supported Actions,API Reference", "search_title":"", diff --git a/docs/er/api-ref/APIChangeHistory.html b/docs/er/api-ref/APIChangeHistory.html index 9f9f605d7..c4bd8c864 100644 --- a/docs/er/api-ref/APIChangeHistory.html +++ b/docs/er/api-ref/APIChangeHistory.html @@ -8,7 +8,19 @@ -

2023-12-06

+

2024-03-05

+ +

This release incorporates the following changes:

+

Modified the description of the asn parameter in "Creating an Enterprise Router".

+ + +

2024-02-05

+ +

This release incorporates the following changes:

+

Modified the description of the auto_create_vpc_routes parameter in "Creating a VPC Attachment."

+ + +

2023-12-06

This release incorporates the following changes:

diff --git a/docs/er/api-ref/CLASS.TXT.json b/docs/er/api-ref/CLASS.TXT.json index 99d22c57b..6d6bdcc11 100644 --- a/docs/er/api-ref/CLASS.TXT.json +++ b/docs/er/api-ref/CLASS.TXT.json @@ -522,7 +522,7 @@ "code":"58" }, { - "desc":"This section describes fine-grained permissions management for your Enterprise Router resources. If your account does not need individual IAM users, you may skip this sec", + "desc":"This topic describes fine-grained permissions management for your Enterprise Router resources. If your account does not need individual IAM users, you may skip this topic", "product_code":"er", "title":"Introduction", "uri":"er_02_0016.html", diff --git a/docs/er/api-ref/CreateEnterpriseRouter.html b/docs/er/api-ref/CreateEnterpriseRouter.html index 286f1ee35..e055d9320 100644 --- a/docs/er/api-ref/CreateEnterpriseRouter.html +++ b/docs/er/api-ref/CreateEnterpriseRouter.html @@ -115,7 +115,7 @@

Long

-

Enterprise router BGP ASN

+

Enterprise router BGP ASN. Specify a dedicated ASN in the range of 64512-65534 or 4200000000-4294967294. ASN can only be set during enterprise router creation.

enterprise_project_id

diff --git a/docs/er/api-ref/CreateVpcAttachment.html b/docs/er/api-ref/CreateVpcAttachment.html index a490b3878..b3fa0425a 100644 --- a/docs/er/api-ref/CreateVpcAttachment.html +++ b/docs/er/api-ref/CreateVpcAttachment.html @@ -142,7 +142,7 @@

Boolean

-

The default value is false. If the value is set to true, a route with the enterprise router as the next hop will be automatically added to the route tables of the VPC.

+

The default value is false. If the value is set to true, a route with the enterprise router as the next hop will be automatically added to the route tables of the VPC. This parameter can only be enabled when a VPC attachment is created.

Default: false

diff --git a/docs/er/api-ref/er_02_0016.html b/docs/er/api-ref/er_02_0016.html index fd2b022a1..2e9a9117b 100644 --- a/docs/er/api-ref/er_02_0016.html +++ b/docs/er/api-ref/er_02_0016.html @@ -1,9 +1,9 @@

Introduction

-

This section describes fine-grained permissions management for your Enterprise Router resources. If your account does not need individual IAM users, you may skip this section.

+

This topic describes fine-grained permissions management for your Enterprise Router resources. If your account does not need individual IAM users, you may skip this topic.

By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and assign policies or roles to these groups. The user then inherits permissions from the groups. After authorization, the user can perform specified operations on cloud services based on the permissions.

-

An account has all of the permissions required to call all APIs, but IAM users must be assigned the required permissions. The permissions required for calling an API are determined by the actions supported by the API. Only users who have been granted permissions can call the API successfully. For example, if an IAM user wants to query enterprise routers using an API, the user must have been granted permissions that allow the er:instances:list action.

+

An account has all of the permissions required to call all APIs, but IAM users must be assigned the required permissions. The permissions required for calling an API are determined by the actions supported by the API. Only users who have been granted permissions can call the API successfully. For example, if an IAM user wants to query the enterprise router list using an API, the user must have been granted permissions that allow the er:instances:list action.

Supported Actions

IAM provides system-defined policies that can be directly used. You can also create custom policies to work with system-defined policies for more refined access control. Actions supported by policies are specific to APIs. Common concepts related to policies include:

  • Permissions: allow or deny operations on specified resources under specific conditions.
  • APIs: REST APIs that can be called by a user who has been granted specific permissions
  • Actions: specific operations that are allowed or denied
  • Related actions: actions on which a specific action depends. When assigning permissions for the action to a user, you also need to assign permissions for the dependent actions.
  • IAM projects or enterprise projects: type of projects for which an action will take effect. For example, if you set the authorization scope of a custom policy to both IAM projects and enterprise projects, the policy takes effect for user groups in either IAM or enterprise projects. If the authorization scope is set to IAM projects only, the custom policy will take effect only for user groups in IAM projects. Administrators can check whether an action supports IAM projects or enterprise projects in the action list. "√" indicates that the action supports the project and "×" indicates that the action does not support the project.
Enterprise Router supports the following actions that can be defined in custom policies: