Details for the Web Application Acceleration Service
Details for the Web Application Acceleration Service
This topic covers details for writing policies to control access to the Web Application Acceleration service.
Aggregate Resource-Type
waa-family
Individual Resource-Types
waa-policy
web-app-acceleration
Comments
A policy that uses <verb> waa-family is equivalent to writing
one with a separate <verb> <individual resource-type>
statement for each of the individual resource-types.
See the table in Details for Verb + Resource-Type Combinations for details of the API operations covered by each verb, for each individual
resource-type included in waa-family.
Supported Variables
The Web Application Acceleration Service supports all the general variables (see General Variables for All Requests).
Details for Verb + Resource-Type Combinations
The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. For example, a group that can use a resource can also inspect and read that resource. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.
For example, the use and manage verbs for the
waa-policy resource-type cover no extra permissions or API
operations compared to the read verb.
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
WAA_POLICY_INSPECT |
|
|
| read |
INSPECT + WAA_POLICY_READ |
INSPECT +
|
|
| use |
READ + WAA_POLICY_ATTACH WAA_POLICY_DETACH WAA_POLICY_UPDATE |
READ +
|
|
| manage |
USE + WAA_POLICY_CREATE WAA_POLICY_DELETE WAA_POLICY_MOVE |
USE +
|
none |
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
WEB_APP_ACCELERATION_INSPECT |
|
|
| read |
INSPECT + WEB_APP_ACCELERATION_READ |
INSPECT +
|
|
| use |
READ + WEB_APP_ACCELERATION_UPDATE |
READ +
|
none |
| manage |
USE + WEB_APP_ACCELERATION_CREATE WEB_APP_ACCELERATION_DELETE WEB_APP_ACCELERATION_MOVE |
USE +
|
|
Permissions Required for Each API Operation
The following table lists the API operations in a logical order, grouped by resource type.
For information about permissions, see Permissions.
| API Operation | Permissions Required to Use the Operation |
|---|---|
ListWebAppAccelerationPolicies |
WAA_POLICY_INSPECT |
CreateWebAppAccelerationPolicy |
WAA_POLICY_CREATE |
GetWebAppAccelerationPolicy |
WAA_POLICY_READ |
UpdateWebAppAccelerationPolicy |
WAA_POLICY_UPDATE |
DeleteWebAppAccelerationPolicy |
WAA_POLICY_DELETE |
ChangeWebAppAccelerationPolicyCompartment |
WAA_POLICY_MOVE |
ListWebAppAccelerations |
WEB_APP_ACCELERATION_INSPECT |
CreateWebAppAcceleration |
WEB_APP_ACCELERATION_CREATE + WAA_POLICY_ATTACH + LOAD_BALANCER_UPDATE |
GetWebAppAcceleration |
WEB_APP_ACCELERATION_READ |
UpdateWebAppAcceleration |
WEB_APP_ACCELERATION_UPDATE + WAA_POLICY_ATTACH + WAA_POLICY_DETACH + LOAD_BALANCER_UPDATE |
DeleteWebAppAcceleration |
WEB_APP_ACCELERATION_DELETE + WAA_POLICY_DETACH + LOAD_BALANCER_UPDATE |
ChangeWebAppAccelerationCompartment |
WEB_APP_ACCELERATION_MOVE |
PurgeWebAppAccelerationCache |
WEB_APP_ACCELERATION_UPDATE |
ListWorkRequests |
WEB_APP_ACCELERATION_INSPECT + WAA_POLICY_INSPECT |
GetWorkRequest |
WAA_POLICY_READ + WEB_APP_ACCELERATION_READ |
ListWorkRequestErrors |
WEB_APP_ACCELERATION_INSPECT + WAA_POLICY_INSPECT |
ListWorkRequestLogs |
WEB_APP_ACCELERATION_INSPECT + WAA_POLICY_INSPECT |
StartLogging |
WEB_APP_ACCELERATION_UPDATE |
UpdateLogging |
WEB_APP_ACCELERATION_UPDATE |
GetLogging |
WEB_APP_ACCELERATION_READ |
StopLogging |
WEB_APP_ACCELERATION_UPDATE |