Details for the Health Checks Service

This topic covers details for writing policies to control access to the Health Checks service.

Resource-Types

health-check-monitor

health-check-results

on-demand-probe

vantage-points

health-check-family

Supported Variables

The Health Checks Service supports all the general variables (see General Variables for All Requests), plus the ones listed here. Values in the list can be any valid test type. For example, HTTP, HTTPS, ICMP, etc.

Variable Variable Type Comments
target.health-check-monitor.test-type String  
target.on-demand-probe.test-type String  
target.health-check-results.test-type String  

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

For example, the use verb for the health-check-monitor resource-type covers no extra permissions or API operations compared to the read verb.

health-check-monitor
Verbs Permissions APIs Fully Covered APIs Partially Covered
inspect

HEALTH_CHECK_MONITOR_INSPECT

ListOHCMonitors

none

read

INSPECT +

HEALTH_CHECK_MONITOR_READ

GetOHCMonitor None
use No extra None None
manage

USE +

HEALTH_CHECK_MONITOR_MANAGE

CreateOHCMonitor

UpdateOHCMonitor

DeleteOHCMonitor

MoveOHCMonitor

None

health-check-results
Verbs Permissions APIs Fully Covered APIs Partially Covered
inspect No extra None None
read

HEALTH_CHECK_RESULTS_READ

ListOHCProbeResults

ListOHCProbeResultsForTarget

None
use

No extra

None None
manage

No extra

None None
vantage-points
Verbs Permissions APIs Fully Covered APIs Partially Covered
inspect

VANTAGE_POINTS_INSPECT

ListVantagePoints

none

read

No extra

None None
use

No extra

None None
manage

No extra

None None
on-demand-probe
Verbs Permissions APIs Fully Covered APIs Partially Covered
inspect

No extra

None None
read

No extra

None None
use

No extra

None None
manage

USE +

ON_DEMAND_PROBE_MANAGE

CreateOnDemandOHCProbe None

Permissions Required for Each API Operation

The following table lists the API operations in a logical order, grouped by resource type.

For information about permissions, see Permissions.

API Operation Permissions Required to Use the Operation
ListOHCMonitors HEALTH_CHECK_MONITOR_INSPECT
CreateOHCMonitor HEALTH_CHECK_MONITOR_MANAGE
GetOHCMonitor HEALTH_CHECK_MONITOR_READ
UpdateOHCMonitor HEALTH_CHECK_MONITOR_MANAGE
DeleteOHCMonitor HEALTH_CHECK_MONITOR_MANAGE
ListOHCProbeResults HEALTH_CHECK_RESULTS_READ
ListOHCProbeResultsForTarget HEALTH_CHECK_RESULTS_READ
ListVantagePoints VANTAGE_POINTS_INSPECT
CreateOnDemandOHCProbe ON_DEMAND_PROBE_MANAGE
MoveOHCMonitor HEALTH_CHECK_MONITOR_MOVE