Resource Access Management (RAM) lets you grant permissions for actions on Hotfix resources.
When a RAM user accesses application resources in an Alibaba Cloud account from the console, the Hotfix backend verifies permissions using RAM. This check ensures that the resource owner has granted the necessary permissions to the caller. Each Hotfix API determines which resource permissions to check based on the resources involved and the API's semantics. The following table describes the authentication rules and semantics for each API.
API | Resource | Description |
|---|---|---|
hotfix:ListApps | acs:mhub:*:$accountid:app/* | View the list of applications |
hotfix:QueryAppInfo | acs:mhub:*:$accountid:app/$AppKey | View the details of an application |
hotfix:ListAppVersions | acs:mhub:*:$accountid:app/$AppKey | View the list of application version numbers |
hotfix:CreateAppVersion | acs:mhub:*:$accountid:app/$AppKey | Create an application version number |
hotfix:ListAppPatches | acs:mhub:*:$accountid:app/$AppKey | View the list of patches |
hotfix:QueryPatchInfo | acs:mhub:*:$accountid:app/$AppKey | View the details of a patch |
hotfix:ModifyPatch | acs:mhub:*:$accountid:app/$AppKey | Modify a patch |
hotfix:UploadPatch | acs:mhub:*:$accountid:app/$AppKey | Upload a patch |
hotfix:ConfirmPatch | acs:mhub:*:$accountid:app/$AppKey | Confirm a patch upload |
hotfix:BetaPatch | acs:mhub:*:$accountid:app/$AppKey | Perform a canary release for a patch |
hotfix:PublishPatch | acs:mhub:*:$accountid:app/$AppKey | Publish the patch |
hotfix:RollbackPatch | acs:mhub:*:$accountid:app/$AppKey | Roll back a patch |
hotfix:StopPatch | acs:mhub:*:$accountid:app/$AppKey | Stop publishing a patch |
hotfix:DeleteAllPatches | acs:mhub:*:$accountid:app/$AppKey | Delete patches |
hotfix:QueryPublishInfo | acs:mhub:*:$accountid:app/$AppKey | View patch statistics |