检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
- oms:synctask:list 授予查询同步任务列表权限 list synctask - oms:synctask:create 授予创建同步任务权限 write synctask - oms:synctask:get 授予查询指定同步任务权限 read synctask -
ory}/sync_repo swr:repo:deleteAutoSyncRepoJob - GET /v2/manage/namespaces/{namespace}/repos/{repository}/sync_repo swr:repo:listAutoSyncRepoJobs
入数据。 图3 混淆代理 由于委托/信任委托X的名字并非保密内容,如果攻击者(Account D)获取到了委托名并以同样的方式触发Service A,则其活动记录会被错误地记录在用户的OBS桶里。请注意,攻击者利用Service A的委托,间接地修改了用户的OBS桶,Service
cnad:attackReport:list 授予查询攻击事件的权限。 list - - cnad:attackReport:update 授予更新攻击事件配置的权限。 write - - cnad:attackTop:list 授予查询Top10被攻击IP的权限。 list - - cnad
sDetails evs:volumes:list POST /v3/{project_id}/checkpoints/sync cbr:vaults:sync - POST /v3/{project_id}/vaults cbr:vaults:create ecs:cloudS
/v5/{project_id}/batch-async-jobs drs:migrationJob:listAsyncJobs - GET /v5/{project_id}/batch-async-jobs/{async_job_id} drs:migrationJob:listAsyncJobDetail
waf:punishmentRule:list 授予查询攻击惩罚规则列表的权限。 list policy * - - g:EnterpriseProjectId waf:punishmentRule:create 授予创建攻击惩罚规则的权限。 write policy * - -
sfsturbo:shares:createFsAsyncTask 授予创建弹性文件系统异步任务的权限。 write shares * g:ResourceTag/<tag-key> g:EnterpriseProjectId sfsturbo:shares:showFsAsyncTask 授予查询弹性文件系统异步任务详情的权限。
g:ResourceTag/<tag-key> g:EnterpriseProjectId cfw:instance:listAttackLog 授予查询云防火墙攻击日志列表的权限。 list instance * g:ResourceTag/<tag-key> g:EnterpriseProjectId
hss:asset:deleteToolConditionHistory 授予权限以清除工具的搜索记录(运营工具)。 write - g:EnterpriseProjectId hss:asset:executeTool 授予权限以工具执行搜索(运营工具)。 write - g:EnterpriseProjectId
apig:plugin:get GET /{project_id}/apigw/instances/{instance_id}/async-tasks/{task_id} apig:asyncTask:get apig:instance:get GET /{project_id}/apigw/certificates
instance g:EnterpriseProjectId g:ResourceTag/<tag-key> rds:instance:modifySynchronizeModel 授予设置主备实例数据同步方式的权限。 permission_management instance g:EnterpriseProjectId
/api/v2/projects/{project_id}/clusters/{cluster_id}/nodes/{node_id}/sync cce:node:sync - POST /api/v3/addons cce:addonInstance:create - DELETE /api/v3/addons/{id}
dcs:instance:modifyConfiguration - PUT /v2/{project_id}/instances/{instance_id}/async-configs dcs:instance:modifyConfiguration - DELETE /v2/{project_id}/
ce_id}/async-commands iotda:asynccommands:send - GET /v5/iot/{project_id}/devices/{device_id}/async-commands/{command_id} iotda:asynccommands:query
dws:cluster:syncCrossRegionBackupClusterInfo - dws:cluster:syncCrossRegionBackupConfig - dws:cluster:syncCrossRegionBackupInfo - dws:cluster:syncLogicalCluster
rms:policyAssignmentsRemediation:runRemediation functiongraph:function:invokeAsync functiongraph:function:getFunctionConfig rf:stack:create rf:stack:delete