全部产品

权限定义

更新时间:2017-06-07 13:26:11   分享:   

函数计算已经接入RAM,用户可以通过授权子账号或者使用STS来访问函数计算。相关操作的RAM权限定义如下:

注意:在RAM中,Resource的格式为acs:fc:${region}:${account-id}:${resource},下面的表格只列出了其中${resource}的内容。例如,用户可以指定CreateService的授权策略内容如下:

  1. {
  2. "Version": "1",
  3. "Statement": [
  4. {
  5. "Action": [
  6. "fc:CreateService"
  7. ],
  8. "Resource": "acs:fc:*:*:services/*",
  9. "Effect": "Allow"
  10. }
  11. ]
  12. }
API Action Resource
CreateService fc:CreateService services/*
ListServices fc:ListServices services/*
GetService fc:GetService services/${serviceName}
UpdateService fc:UpdateService services/${serviceName}
DeleteService fc:DeleteService services/${serviceName}
CreateFunction fc:CreateFunction services/${serviceName}/functions/*
ListFunctions fc:ListFunctions services/${serviceName}/functions/*
GetFunction fc:GetFunction services/${serviceName}/functions/${functionName}
UpdateFunction fc:UpdateFunction services/${serviceName}/functions/${functionName}
DeleteFunction fc:DeleteFunction services/${serviceName}/functions/${functionName}
InvokeFunction fc:InvokeFunction services/${serviceName}/functions/${functionName}
CreateTrigger fc:CreateTrigger services/${serviceName}/functions/${functionName}/triggers/*
ListTriggers fc:ListTriggers services/${serviceName}/functions/${functionName}/triggers/*
GetTrigger fc:GetTrigger services/${serviceName}/functions/${functionName}/triggers/${triggerName}
UpdateTrigger fc:UpdateTrigger services/${serviceName}/functions/${functionName}/triggers/${triggerName}
DeleteTrigger fc:DeleteTrigger services/${serviceName}/functions/${functionName}/triggers/${triggerName}
本文导读目录
本文导读目录
以上内容是否对您有帮助?