Skip to content

Commit 18fe518

Browse files
ldecarvalho-docldecarvalho-doc
committed
fix(tem): blocklist
1 parent b5ab077 commit 18fe518

File tree

6 files changed

+408
-6
lines changed

6 files changed

+408
-6
lines changed

‎faq/transactional-email.mdx‎

Lines changed: 12 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -25,30 +25,36 @@ Scaleway's Transactional Email platform is dedicated to sending transactional em
2525

2626
## How can I configure DNS records to send emails?
2727

28-
You need to [add SPF and DKIM records](/transactional-email/how-to/add-spf-dkim-records-to-your-domain/) to be able to send emails. Find out [how to set up your DNS records for other DNS providers](/tutorials/set-up-spf-dkim-for-dns-providers/).
28+
You need to [add SPF and DKIM records](/managed-services/transactional-email/how-to/add-spf-dkim-records-to-your-domain/) to be able to send emails. Find out [how to set up your DNS records for other DNS providers](/tutorials/set-up-spf-dkim-for-dns-providers/).
2929

3030
## How do I know if my domain is valid for sending emails?
3131

3232
After configuring your SPF and DKIM records, you must launch a verification of the domain either via [the console](https://console.scaleway.com/transactional-email/domains) in the **DNS verification** tab, or the [API](https://www.scaleway.com/en/developers/api/transactional-email/#path-domains-display-spf-and-dkim-records-status-and-potential-errors). You will then receive an email informing you whether your domain was validated or if there are errors to fix so it can be validated.
3333

3434
## Do I have to set up an MX record for better email deliverability?
3535

36-
Setting up an [MX record](/transactional-email/concepts#mx-record) is highly recommended to ensure your email deliverability. Find out [how to add an MX record to your domain](/transactional-email/how-to/add-mx-record-to-your-domain/#how-to-add-your-own-mx-record). You can also [use Scaleway's blackhole MX](/transactional-email/how-to/add-mx-record-to-your-domain/#how-to-add-scaleways-mx-record) if you do not have your own MX.
36+
Setting up an [MX record](/managed-services/transactional-email/concepts#mx-record) is highly recommended to ensure your email deliverability. Find out [how to add an MX record to your domain](/managed-services/transactional-email/how-to/add-mx-record-to-your-domain/#how-to-add-your-own-mx-record). You can also [use Scaleway's blackhole MX](/managed-services/transactional-email/how-to/add-mx-record-to-your-domain/#how-to-add-scaleways-mx-record) if you do not have your own MX.
3737

3838
## What happens to automatically configured DNS records when I delete a domain in the Transactional Email service?
3939

40-
When a domain is removed from Scalway's Transactional Email platform, [autoconfigured DNS records](/transactional-email/how-to/autoconfigure-domain/) are not automatically deleted in the Domains & DNS section. If you no longer use the domain for sending emails, you must manually delete or modify these records. It is recommended to verify the associated DNS records to ensure they are correctly configured or removed.
40+
When a domain is removed from Scalway's Transactional Email platform, [autoconfigured DNS records](/managed-services/transactional-email/how-to/autoconfigure-domain/) are not automatically deleted in the Domains & DNS section. If you no longer use the domain for sending emails, you must manually delete or modify these records. It is recommended to verify the associated DNS records to ensure they are correctly configured or removed.
4141

4242
## What is the impact on the Transactional Email service if a DNS zone is deleted in Scaleway Domains & DNS?
4343

44-
If a DNS zone is deleted while [autoconfig is enabled](/transactional-email/how-to/autoconfigure-domain/), the DNS records will be added to the parent zone. This ensures that the domain remains validated on the Transactional Email platform, allowing continued use of the service without interruption.
44+
If a DNS zone is deleted while [autoconfig is enabled](/managed-services/transactional-email/how-to/autoconfigure-domain/), the DNS records will be added to the parent zone. This ensures that the domain remains validated on the Transactional Email platform, allowing continued use of the service without interruption.
4545

4646
## What are the limitations and restrictions when using Transactional Email?
4747

48-
Find out about [limits and quotas](/transactional-email/reference-content/tem-capabilities-and-limits/) available for Transactional Email. If you want to increase your quota beyond the values shown on this page, [contact our support team](https://console.scaleway.com/support/create).
48+
Find out about [limits and quotas](/managed-services/transactional-email/reference-content/tem-capabilities-and-limits/) available for Transactional Email. If you want to increase your quota beyond the values shown on this page, [contact our support team](https://console.scaleway.com/support/create).
4949

5050
## How is Scaleway's Transactional Email service billed?
5151

5252
At the end of the month, you are billed for the number of emails you sent.
5353
If the number of emails you have sent exceeds the number of emails included in your offer, you will be billed for the excess emails. For example, if you use the free tier of 300 emails per month, and you end up sending 305 emails, you will only be billed for five emails out of the 305 you have sent.
54-
Check out our [dedicated page](https://www.scaleway.com/en/pricing/?tags=managedservices-transactionalemail-transactionalemail) for more information about Transactional Email's pricing.
54+
Check out our [dedicated page](https://www.scaleway.com/en/pricing/?tags=managedservices-transactionalemail-transactionalemail) for more information about Transactional Email's pricing.
55+
56+
## Can I unblock an address that was automatically added to a TEM blocklist before the 48-hour period ends?
57+
Yes, you can manually unblock any address, even if it is still under the temporary block period.
58+
59+
## What happens if an address on a TEM blocklist becomes valid again?
60+
You can manually unblock the address. Make sure you confirm that the initial cause of the bounce was resolved before doing so to avoid further issues.

‎identity-and-access-management/iam/reference-content/permission-sets.mdx‎

Lines changed: 132 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,132 @@
1+
---
2+
meta:
3+
title: Permission sets
4+
description: Explore how to define and manage permission sets for user access control.
5+
content:
6+
h1: Permission sets
7+
paragraph: Explore how to define and manage permission sets for user access control.
8+
dates:
9+
validation: 2024-10-23
10+
---
11+
12+
Permissions sets and their scope make up [IAM rules](/identity-and-access-management/iam/concepts/#rule), which define the access rights that a principal (user, group or application) should have. They consist of sets of one or multiple [permissions](/identity-and-access-management/iam/concepts/#permission).
13+
14+
Permission set names contain descriptions that clearly explain their purpose. For example, a permission set that grants access to all actions you can perform on Instances is called: `InstancesFullAccess`.
15+
16+
Below is a list of the permission sets available at Scaleway.
17+
18+
## Scoped by Organization
19+
20+
| Permission set | Description |
21+
:----------------------------------------------------------------------------------------------------------------------------------------------------------: | :--------------------------------------------------------------------------------------------------------------------------------------------------: |
22+
| ProjectManager | Full access to Project management. This means access to create, rename, list and delete projects. It does not include access to Project resources |
23+
| ProjectReadOnly | Read access to Project management. Does not include access to Project resources |
24+
| IAMReadOnly | Read access to IAM. This means list and read access to users, groups, applications, policies, and API keys |
25+
| IAMManager | Full access to IAM. This means access to all possible actions for users, groups, applications, policies and API keys) and all ProjectManager permissions |
26+
| BillingReadOnly | List and read access to billing information |
27+
| BillingManager | Full access to billing management. This means access to list, read and edit billing contact information, payment information, billing alerts and invoices |
28+
| OrganizationManager | Full access to Organization management. This means access to all possible actions for Projects, IAM, billing and support/abuse tickets. Does not include access to list and create resources |
29+
| OrganizationReadOnly | Read access to the Organization's general information (e.g. Organization ID and quotas) |
30+
| SupportTicketManager | Full access to support tickets. This means access to create, read and update support tickets in the Organization |
31+
| SupportTicketReadOnly | List and read access to support tickets |
32+
| AbuseTicketManager | Full access to abuse tickets. This means access to create, read and update abuse tickets in the Organization |
33+
| AuditTrailReadOnly | List and read access to Audit Trail events |
34+
35+
36+
<Message type="important">
37+
Any user or application benefitting from the `IAMManager` and/or `OrganizationManager` permission sets is able to create policies giving themselves access to any other actions and resources within the Organization.
38+
</Message>
39+
40+
## Scoped by Project
41+
42+
| Permission set | Description |
43+
| :--------------------------: | :-----------------------------------------------------------------------------------: |
44+
| AllProductsFullAccess | Full access to create, read, list, edit and delete all resources (products) |
45+
| AllProductsReadOnly | Read access to list and read info for all resources (products) |
46+
| SSHKeysReadOnly | Read access to SSH keys |
47+
| SSHKeysFullAccess | Full access to SSH keys |
48+
| AppleSiliconReadOnly | List and read access to Apple Silicon |
49+
| AppleSiliconFullAccess | Full access to create, read, list, edit and delete Apple Silicon. |
50+
| ElasticMetalReadOnly | List and read access to Elastic Metal |
51+
| ElasticMetalFullAccess | Full access to create, read, list, edit and delete Elastic Metal |
52+
| InstancesFullAccess | Full access to create, read, list, edit and delete Instances |
53+
| InstancesReadOnly | List and read access to Instances |
54+
| KubernetesReadOnly | List and read access to Kubernetes |
55+
| KubernetesFullAccess | Full access to create, read, list, edit and delete Kubernetes |
56+
| KubernetesExternalNodeRegister | Attach external nodes to a Kosmos cluster |
57+
| KubernetesSystemMastersGroupAccess | Gives the Kubernetes system:masters role to perform any action on the cluster |
58+
| DediboxReadOnly | List and read access to Dedibox |
59+
| DediboxFullAccess | Full access to create, read, list, edit and delete Dedibox |
60+
| ContainersReadOnly | List and read access to Containers |
61+
| ContainersFullAccess | Full access to create, read, list, edit and delete to Containers |
62+
| FunctionsReadOnly | List and read access to Functions |
63+
| FunctionsFullAccess | Full access to create, read, list, edit and delete Functions |
64+
| MessagingAndQueuingReadOnly | List and read access to Messaging |
65+
| MessagingAndQueuingFullAccess | Full access to create, read, list, edit and delete Messaging |
66+
| ServerlessJobsFullAccess | Full access to create, read, list, edit and delete job definition/run |
67+
| ServerlessJobsReadOnly | List and read access to job definition/run |
68+
| ServerlessSQLDatabaseReadOnly| List and read access to Serverless SQL Database |
69+
| ServerlessSQLDatabaseReadWrite| List, read and write access to Serverless SQL Database. Includes data and table structure edition. Does not include permissions to create databases or edit settings |
70+
| ServerlessSQLDatabaseFullAccess| Full access to create, read, list, edit and delete Serverless SQL Database |
71+
| RelationalDatabasesReadOnly | List and read access to Managed Database for PostgreSQL and MySQL |
72+
| RelationalDatabasesFullAccess| Full access to create, read, list, edit and delete Managed Database for PostgreSQL and MySQL |
73+
| ObjectStorageReadOnly | List and read access to Object Storage |
74+
| ObjectStorageFullAccess | Full access to create, read, list, edit and delete Object Storage |
75+
| ObjectStorageObjectsRead | Read access to objects, tags, metadata, and storage class |
76+
| ObjectStorageBucketsRead | Read access to buckets and bucket configuration including lifecycle rules |
77+
| ObjectStorageObjectsWrite | Access to create and edit objects, tags, metadata, and storage class |
78+
| ObjectStorageObjectsDelete | Access to delete objects |
79+
| ObjectStorageBucketsWrite | Access to create and edit buckets, bucket configuration including lifecycle rules |
80+
| ObjectStorageBucketsDelete | Access to delete buckets |
81+
| RedisReadOnly | List and read access to Managed Database for Redis™ |
82+
| RedisFullAccess | Full access to create, read, list, edit and delete Managed Database for Redis™ |
83+
| PrivateNetworksFullAccess | Full access to create, read, list, edit and delete Private Networks |
84+
| VPCGatewayReadOnly | List and read access to Public Gateways |
85+
| VPCGatewayFullAccess | Full access to create, read, list, edit and delete Public Gateways |
86+
| VPCFullAccess | Full access to VPC |
87+
| VPCReadOnly | Read access to VPC |
88+
| AutoscalingFullAccess | Full access to autoscaling |
89+
| AutoscalingReadOnly | Read access to autoscaling |
90+
| EdgeServicesFullAccess | Full access to Edge Services |
91+
| EdgeServicesReadOnly | Read access to Edge Services |
92+
| IPAMFullAccess | Full access to IPAM |
93+
| IPAMReadOnly | Read access to IPAM |
94+
| LoadBalancersReadOnly | List and read access to Load Balancer |
95+
| LoadBalancersFullAccess | Full access to create, read, list, edit and delete Load Balancer |
96+
| DomainsDNSReadOnly | List and read access to Domains and DNS |
97+
| DomainsDNSFullAccess | Full access to create, read, list, edit and delete Domains and DNS |
98+
| ContainerRegistryReadOnly | List and read access to Container Registry |
99+
| ContainerRegistryFullAccess | Full access to create, read, list, edit and delete Container Registry |
100+
| IoTReadOnly | List and read access to IoT Hub |
101+
| IoTFullAccess | Full access to create, read, list, edit and delete IoT Hub |
102+
| ObservabilityReadOnly | List and read access to Observability |
103+
| ObservabilityFullAccess | Full access to create, read, list, edit and delete Observability |
104+
| TransactionalEmailReadOnly | List and read access to Transactional Email |
105+
| TransactionalEmailFullAccess | Full access to create, read, list, edit and delete Transactional Email |
106+
| TransactionalEmailBlocklistFullAccess | Full access to blocklists in transactional email. |
107+
| TransactionalEmailBlocklistReadOnly | Read access to blocklists in transactional email. |
108+
| TransactionalEmailBlocklistFullAccess | Full access to blocklists in transactional email. |
109+
| TransactionalEmailBlocklistReadOnly | Read access to blocklists in transactional email. |
110+
| TransactionalEmailDomainReadOnly | Read access to domains in Transactional Email. Does not include permissions for e-mails |
111+
| TransactionalEmailDomainFullAccess | Full access to domains in Transactional Email. Does not include permissions for e-mails |
112+
| TransactionalEmailEmailReadOnly | Read access to e-mails in Transactional Email. Does not include permissions for domain configuration |
113+
| TransactionalEmailEmailFullAccess | Full access to e-mails in Transactional Email. Does not include permissions for domain configuration |
114+
| TransactionalEmailWebhookFullAccess | Full access to Webhooks in Transactional Email |
115+
| TransactionalEmailWebhookReadOnly | Read access to Webhooks in Transactional Email |
116+
| TransactionalEmailProjectSettingsFullAccess | Full access to Project settings in Transactional Email |
117+
| TransactionalEmailProjectSettingsReadOnly | Read access to Project settings in Transactional Email |
118+
| WebHostingReadOnly | List and read access to Web Hosting |
119+
| WebHostingFullAccess | Full access to create, read, list, edit and delete Web Hosting |
120+
| SecretManagerReadOnly | List and read secrets' metadata (name, tags, creation date, etc.). Does not include permissions for data (versions) accessing or editing |
121+
| SecretManagerFullAccess | Full access to create, read, list, edit, access, and delete secrets and their versions in Secret Manager |
122+
| SecretManagerSecretAccess | Read access to versions' data in Secret Manager. Does not include permissions for data editing |
123+
| SecretManagerSecretCreate | Permission to create secrets and their versions in Secret Manager. Does not include permission to update secrets and versions |
124+
| SecretManagerSecretDelete | Permission to delete secrets and their versions in Secret Manager |
125+
| SecretManagerSecretWrite | Permission to edit the metadata (name, tags, description, etc.) of secrets and their versions in Secret Manager. Does not include permission to create secrets and versions |
126+
| BlockStorageReadOnly | List and read access to Block Storage |
127+
| BlockStorageFullAccess | Full access to create, read, list, edit and delete in Block Storage |
128+
129+
130+
<Message type="important">
131+
Some additional permission sets may appear on your Scaleway console if you are enrolled in beta testing for products or features.
132+
</Message>

0 commit comments

Comments
 (0)