huawei-cloud-cc-instance-query

Overview

Huawei Cloud Cloud Connect (CC) is a service that enables cross-region and cross-cloud network connectivity. This skill provides read-only query capabilities for seven core CC resource types:

All operations are query-only (GET). No create, update, or delete operations are performed.

Out of Scope

This skill does not cover the following CC resource types and operations. If the user asks about these, inform them clearly and suggest the corresponding hcloud CLI command.

Prerequisites

1. hcloud CLI installed and authenticated. See references/cli-installation-guide.md for details.
2. Huawei Cloud AK/SK configured via hcloud configure (interactive, recommended) or environment variables:

   # Recommended: interactive configuration
   hcloud configure
   # Or set env vars: HUAWEI_ACCESS_KEY, HUAWEI_SECRET_KEY, HUAWEI_REGION
   

3. IAM permissions — The caller needs CC ReadOnlyAccess or equivalent. See references/iam-policies.md for least-privilege policy.
4. Domain ID — All CC APIs require --domain_id (account ID). Obtain it from the console: IAM → My Credentials → Account ID.

Workflow

1. Identify the resource type to query (cloud connection / bandwidth package / inter-region bandwidth / network instance / route / authorisation / permission)
2. Determine whether a single instance or a list is needed
3. For single queries: provide --domain_id and --id
4. For list queries: provide --domain_id, optionally add filters (--limit, --marker, --status, --name, etc.)
5. Execute the hcloud command and review the output
6. **domain_id validation**: If `--domain_id` is not explicitly provided, the CLI will silently use the default domain_id from the auth config (not an error). Always recommend the user specify `--domain_id` explicitly to avoid querying the wrong account.

Core Commands

All commands use the format:

hcloud CC  --cli-region= --domain_id= [additional params]

1. Cloud Connection Instances

Query a single cloud connection:

hcloud CC ShowCloudConnection --cli-region=cn-north-4 --domain_id= --id=

List cloud connections:

hcloud CC ListCloudConnections --cli-region=cn-north-4 --domain_id= [--limit=10] [--marker=] [--status.1=ACTIVE] [--name.1=]

2. Bandwidth Package Instances

Query a single bandwidth package:

hcloud CC ShowBandwidthPackage --cli-region=cn-north-4 --domain_id= --id=

List bandwidth packages:

hcloud CC ListBandwidthPackages --cli-region=cn-north-4 --domain_id= [--limit=10] [--status.1=ACTIVE] [--cloud_connection_id.1=]

3. Inter-Region Bandwidth Instances

Query a single inter-region bandwidth:

hcloud CC ShowInterRegionBandwidth --cli-region=cn-north-4 --domain_id= --id=

List inter-region bandwidths:

hcloud CC ListInterRegionBandwidths --cli-region=cn-north-4 --domain_id= [--limit=10] [--cloud_connection_id.1=] [--bandwidth_package_id.1=]

4. Network Instances

Query a single network instance:

hcloud CC ShowNetworkInstance --cli-region=cn-north-4 --domain_id= --id=

List network instances:

hcloud CC ListNetworkInstances --cli-region=cn-north-4 --domain_id= [--limit=10] [--cloud_connection_id.1=] [--region_id.1=] [--status.1=ACTIVE]

5. Cloud Connection Routes

Query a single route:

hcloud CC ShowCloudConnectionRoutes --cli-region=cn-north-4 --domain_id= --id=

List routes:

hcloud CC ListCloudConnectionRoutes --cli-region=cn-north-4 --domain_id= [--limit=10] [--cloud_connection_id.1=] [--instance_id.1=] [--region_id=]

6. Cross-Account Authorisations (Granted)

Use this to answer: "Which of my network instances have I authorised other accounts to load into their cloud connections?"

This is the grantor's view — the calling account owns the network instances and has authorised other accounts (identified by cloud_connection_domain_id) to load them.

List authorisations:

hcloud CC ListAuthorisations --cli-region=cn-north-4 --domain_id= [--limit=10] [--cloud_connection_id.1=] [--instance_id.1=] [--id.1=] [--name.1=] [--description.1=]

Key response fields:

7. Cross-Account Permissions (Received)

Use this to answer: "Which foreign network instances have other accounts authorised me to load into my cloud connections?"

This is the grantee's view — the calling account owns the cloud connections and can load network instances owned by other accounts (identified by instance_domain_id).

List permissions:

hcloud CC ListPermissions --cli-region=cn-north-4 --domain_id= [--limit=10] [--cloud_connection_id.1=] [--instance_id.1=] [--id.1=] [--name.1=] [--description.1=]

Key response fields:

Parameter Confirmation

Reference Documents

• CLI Installation Guide — hcloud CLI setup and authentication
• IAM Policies — Least-privilege policy for CC query operations
• Verification Method — How to verify query results
• Data Flow Diagram — Mermaid diagram of skill data flow
• Acceptance Criteria — Success criteria for each query type
• API Reference — Verified REST API endpoints from SDK source

KooCLI Command Format Standard

hcloud   --cli-region= [--key=value ...]