文档

授权信息

更新时间:
访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用RAM可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM中使用权限策略描述授权的具体内容。
本文为您介绍专有网络VPC(VPC)为RAM权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。专有网络VPC(VPC)的RAM代码(RamCode)为vpc,支持的授权粒度为RESOURCE

权限策略通用结构

权限策略支持JSON格式,其通用结构如下:
{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}
各字段含义如下:
  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。
  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)
  • Resource:受操作影响的具体对象,您可以使用资源ARN来描述指定资源。具体信息,请参见资源(Resource)
  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)
    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素
    • Condition_key:条件关键字。
    • Condition_value:条件关键字对应的值。

操作(Action)

下表是专有网络VPC(VPC)定义的操作,这些操作可以在RAM权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:
  • 操作:是指具体的权限点。
  • API:是指操作对应的API接口。
  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。
  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:
    • 对于必选的资源类型,用背景高亮的方式表示。
    • 对于不支持资源级授权的操作,用全部资源表示。
  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字
  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。
操作API访问级别资源类型条件关键字关联操作
vpc:ActivateRouterInterfaceActivateRouterInterfaceWrite
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:ActiveFlowLogActiveFlowLogWrite
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
vpc:AddBgpNetworkAddBgpNetworkWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:AddCommonBandwidthPackageIpAddCommonBandwidthPackageIpWrite
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:AddCommonBandwidthPackageIpsAddCommonBandwidthPackageIpsWrite
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:AddPublicIpAddressPoolCidrBlockAddPublicIpAddressPoolCidrBlockWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:AddSourcesToTrafficMirrorSessionAddSourcesToTrafficMirrorSessionWrite
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
vpc:AllocateEipAddressAllocateEipAddressWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:AllocateEipAddressProAllocateEipAddressProWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:AllocateEipSegmentAddressAllocateEipSegmentAddressWrite
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:AllocateIpv6AddressAllocateIpv6AddressWrite
Ipv6Address
acs:vpc:{#regionId}:{#accountId}:ipv6address/*
vpc:AllocateIpv6InternetBandwidthAllocateIpv6InternetBandwidthWrite
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*
vpc:AllocateVpcIpv6CidrAllocateVpcIpv6CidrWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
vpc:ApplyPhysicalConnectionLOAApplyPhysicalConnectionLOAWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:AssociateEipAddressAssociateEipAddressWrite
全部资源
*
vpc:AssociateEipAddressBatchAssociateEipAddressBatchWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:AssociateHaVipAssociateHaVipWrite
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:AssociateNetworkAclAssociateNetworkAclWrite
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:AssociatePhysicalConnectionToVirtualBorderRouterAssociatePhysicalConnectionToVirtualBorderRouterWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:AssociateRouteTableAssociateRouteTableWrite
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}
vpc:AssociateRouteTableWithGatewayAssociateRouteTableWithGatewayWrite
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
vpc:AssociateRouteTablesWithVpcGatewayEndpointAssociateRouteTablesWithVpcGatewayEndpointWrite
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:AssociateVpcCidrBlockAssociateVpcCidrBlockWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:AttachDhcpOptionsSetToVpcAttachDhcpOptionsSetToVpcWrite
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:AttachVbrToVpconnAttachVbrToVpconnWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}
vpc:CancelCommonBandwidthPackageIpBandwidthCancelCommonBandwidthPackageIpBandwidthWrite
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:CancelPhysicalConnectionCancelPhysicalConnectionWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:ChangeResourceGroupChangeResourceGroupWrite
PhysicalConnection
acs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId}
vpc:CheckVpnBgpEnabledCheckVpnBgpEnabledWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/*
vpc:CompletePhysicalConnectionLOACompletePhysicalConnectionLOAWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:ConfirmPhysicalConnectionConfirmPhysicalConnectionWrite
全部资源
*
vpc:ConnectRouterInterfaceConnectRouterInterfaceWrite
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:CopyNetworkAclEntriesCopyNetworkAclEntriesWrite
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:CreateBgpGroupCreateBgpGroupWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:CreateBgpPeerCreateBgpPeerWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:CreateCommonBandwidthPackageCreateCommonBandwidthPackageWrite
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
vpc:CreateCustomerGatewayCreateCustomerGatewayWrite
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/*
vpc:CreateDefaultVSwitchCreateDefaultVSwitchWrite
VSwitch
acs:vpc:{#regionid}:{#accountId}:vswitch/*
vpc:CreateDefaultVpcCreateDefaultVpcWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
vpc:CreateDhcpOptionsSetCreateDhcpOptionsSetWrite
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
vpc:CreateFailoverTestJobCreateFailoverTestJobWrite
全部资源
*
vpc:CreateFlowLogCreateFlowLogWrite
VSwitch
acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId}
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:CreateForwardEntryCreateForwardEntryWrite
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
vpc:CreateHaVipCreateHaVipWrite
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/*
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:CreateHighReliablePhysicalConnectionCreateHighReliablePhysicalConnectionWrite
physicalconnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
vpc:CreateIpsecServerCreateIpsecServerWrite
全部资源
*
vpc:CreateIpv4GatewayCreateIpv4GatewayWrite
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
vpc:CreateIpv6EgressOnlyRuleCreateIpv6EgressOnlyRuleWrite
Ipv6EgressRule
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:CreateIpv6GatewayCreateIpv6GatewayWrite
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
vpc:CreateNatGatewayCreateNatGatewayWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/*
vpc:CreateNetworkAclCreateNetworkAclWrite
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:CreatePhysicalConnectionCreatePhysicalConnectionWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
vpc:CreatePhysicalConnectionOccupancyOrderCreatePhysicalConnectionOccupancyOrderWrite
全部资源
*
vpc:CreatePhysicalConnectionSetupOrderCreatePhysicalConnectionSetupOrderWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
vpc:CreatePublicIpAddressPoolCreatePublicIpAddressPoolWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
vpc:CreateRouteEntriesCreateRouteEntriesWrite
RouteEntry
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:CreateRouteEntryCreateRouteEntryWrite
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:CreateRouteTableCreateRouteTableWrite
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/*
vpc:CreateRouterInterfaceCreateRouterInterfaceWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/*
vpc:TargetAccountRDId
vpc:CreateSnatEntryCreateSnatEntryWrite
SnatEntry
acs:vpc:{#regionId}:{#accountId}:snattable/*
vpc:CreateSslVpnClientCertCreateSslVpnClientCertWrite
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:CreateSslVpnServerCreateSslVpnServerWrite
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:CreateTrafficMirrorFilterCreateTrafficMirrorFilterWrite
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
vpc:CreateTrafficMirrorFilterRulesCreateTrafficMirrorFilterRulesWrite
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:CreateTrafficMirrorSessionCreateTrafficMirrorSessionWrite
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:CreateVSwitchCreateVSwitchWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/*
vpc:tag
vpc:CreateVSwitchCidrReservationCreateVSwitchCidrReservationWrite
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
vpc:CreateVbrHaCreateVbrHaWrite
全部资源
*
vpc:CreateVcoRouteEntryCreateVcoRouteEntryWrite
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:CreateVirtualBorderRouterCreateVirtualBorderRouterWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*
vpc:CreateVirtualPhysicalConnectionCreateVirtualPhysicalConnectionWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
vpc:CreateVpcCreateVpcWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
vpc:CreateVpcGatewayEndpointCreateVpcGatewayEndpointWrite
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
vpc:CreateVpcPrefixListCreateVpcPrefixListWrite
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/*
vpc:CreateVpconnFromVbrCreateVpconnFromVbrWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}
vpc:CreateVpnAttachmentCreateVpnAttachmentWrite
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/*
VpnAttachment
acs:vpc:{#Region}:{#AccountId}:vpnattachment/{#VpnConnectionId}
vpc:CreateVpnConnectionCreateVpnConnectionWrite
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:CreateVpnGatewayCreateVpnGatewayWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/*
vpc:CreateVpnPbrRouteEntryCreateVpnPbrRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:CreateVpnRouteEntryCreateVpnRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DeactivateRouterInterfaceDeactivateRouterInterfaceWrite
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DeactiveFlowLogDeactiveFlowLogWrite
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
vpc:DeleteBgpGroupDeleteBgpGroupWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DeleteBgpNetworkDeleteBgpNetworkWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DeleteBgpPeerDeleteBgpPeerWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DeleteCommonBandwidthPackageDeleteCommonBandwidthPackageWrite
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}
vpc:tag
vpc:DeleteCustomerGatewayDeleteCustomerGatewayWrite
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
vpc:DeleteDhcpOptionsSetDeleteDhcpOptionsSetWrite
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
vpc:DeleteFailoverTestJobDeleteFailoverTestJobWrite
全部资源
*
vpc:DeleteFlowLogDeleteFlowLogWrite
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
vpc:DeleteForwardEntryDeleteForwardEntryWrite
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
vpc:DeleteHaVipDeleteHaVipWrite
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:DeleteIpsecServerDeleteIpsecServerWrite
全部资源
*
vpc:DeleteIpv4GatewayDeleteIpv4GatewayWrite
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
vpc:DeleteIpv6EgressOnlyRuleDeleteIpv6EgressOnlyRuleWrite
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:DeleteIpv6GatewayDeleteIpv6GatewayWrite
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:DeleteIpv6InternetBandwidthDeleteIpv6InternetBandwidthWrite
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
vpc:DeleteNatGatewayDeleteNatGatewayWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid}
vpc:DeleteNetworkAclDeleteNetworkAclWrite
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:DeletePhysicalConnectionDeletePhysicalConnectionWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:DeletePublicIpAddressPoolDeletePublicIpAddressPoolWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:DeletePublicIpAddressPoolCidrBlockDeletePublicIpAddressPoolCidrBlockWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:DeleteRouteEntriesDeleteRouteEntriesWrite
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
vpc:DeleteRouteEntryDeleteRouteEntryWrite
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:DeleteRouteTableDeleteRouteTableWrite
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:DeleteRouterInterfaceDeleteRouterInterfaceWrite
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DeleteSnatEntryDeleteSnatEntryWrite
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
vpc:DeleteSslVpnClientCertDeleteSslVpnClientCertWrite
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
vpc:DeleteSslVpnServerDeleteSslVpnServerWrite
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:DeleteTrafficMirrorFilterDeleteTrafficMirrorFilterWrite
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:DeleteTrafficMirrorFilterRulesDeleteTrafficMirrorFilterRulesWrite
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:DeleteTrafficMirrorSessionDeleteTrafficMirrorSessionWrite
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
vpc:DeleteVSwitchDeleteVSwitchWrite
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:DeleteVSwitchCidrReservationDeleteVSwitchCidrReservationWrite
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
vpc:DeleteVbrHaDeleteVbrHaWrite
全部资源
*
vpc:DeleteVcoRouteEntryDeleteVcoRouteEntryWrite
全部资源
*
vpc:DeleteVirtualBorderRouterDeleteVirtualBorderRouterWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DeleteVpcDeleteVpcWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
vpc:DeleteVpcGatewayEndpointDeleteVpcGatewayEndpointWrite
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:DeleteVpcPrefixListDeleteVpcPrefixListWrite
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:DeleteVpnAttachmentDeleteVpnAttachmentWrite
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DeleteVpnConnectionDeleteVpnConnectionWrite
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DeleteVpnPbrRouteEntryDeleteVpnPbrRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DeleteVpnRouteEntryDeleteVpnRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DeletionProtectionDeletionProtectionWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:Describe95TrafficDescribe95TrafficRead
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:DescribeBgpGroupsDescribeBgpGroupsRead
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:DescribeBgpNetworksDescribeBgpNetworksRead
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:DescribeBgpPeersDescribeBgpPeersRead
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:DescribeCommonBandwidthPackagesDescribeCommonBandwidthPackagesRead
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
vpc:DescribeCustomerGatewayDescribeCustomerGatewayRead
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
vpc:DescribeCustomerGatewaysDescribeCustomerGatewaysList
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/*
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
vpc:DescribeEcGrantRelationDescribeEcGrantRelationList
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:DescribeEipAddressesDescribeEipAddressesList
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:tag
vpc:DescribeEipSegmentDescribeEipSegmentRead
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:DescribeFailoverTestJobsDescribeFailoverTestJobsList
全部资源
*
vpc:DescribeFlowLogsDescribeFlowLogsRead
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/*
vpc:DescribeForwardTableEntriesDescribeForwardTableEntriesRead
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
vpc:DescribeGrantRulesToCenDescribeGrantRulesToCenList
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}
GrantRuleToCen
acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
vpc:DescribeHaVipsDescribeHaVipsList
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/*
vpc:DescribeHighDefinitionMonitorLogAttributeDescribeHighDefinitionMonitorLogAttributeRead
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:DescribeIpv6AddressesDescribeIpv6AddressesList
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:vpc/*
vpc:DescribeIpv6EgressOnlyRulesDescribeIpv6EgressOnlyRulesRead
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:DescribeIpv6GatewayAttributeDescribeIpv6GatewayAttributeRead
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:DescribeIpv6GatewaysDescribeIpv6GatewaysRead
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:DescribeNatGatewaysDescribeNatGatewaysRead
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/*
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:DescribeNetworkAclAttributesDescribeNetworkAclAttributesRead
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:DescribeNetworkAclsDescribeNetworkAclsList
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/*
vpc:DescribePhysicalConnectionLOADescribePhysicalConnectionLOARead
全部资源
*
vpc:DescribePhysicalConnectionsDescribePhysicalConnectionsList
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
vpc:DescribeRouteEntryListDescribeRouteEntryListRead
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:DescribeRouteTableListDescribeRouteTableListList
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/*
vpc:VRouter
vpc:VBR
vpc:DescribeRouteTablesDescribeRouteTablesList
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:VBR
vpc:VRouter
vpc:DescribeRouterInterfaceAttributeDescribeRouterInterfaceAttributeRead
全部资源
*
vpc:DescribeRouterInterfacesDescribeRouterInterfacesList
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DescribeSnatTableEntriesDescribeSnatTableEntriesRead
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
vpc:DescribeSslVpnClientCertDescribeSslVpnClientCertRead
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
vpc:DescribeSslVpnClientCertsDescribeSslVpnClientCertsList
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
vpc:DescribeSslVpnClientsDescribeSslVpnClientsList
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DescribeSslVpnServersDescribeSslVpnServersList
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:DescribeTagKeysDescribeTagKeysRead
全部资源
*
vpc:DescribeTagKeysForExpressConnectDescribeTagKeysForExpressConnectList
全部资源
*
vpc:DescribeTagsDescribeTagsRead
全部资源
*
vpc:tag
vpc:DescribeVRoutersDescribeVRoutersList
VRouter
acs:vpc:{#regionId}:{#accountId}:vrouter/*
vpc:VPC
vpc:DescribeVSwitchAttributesDescribeVSwitchAttributesRead
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:DescribeVSwitchesDescribeVSwitchesList
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/*
vpc:VPC
vpc:DescribeVbrHaDescribeVbrHaRead
全部资源
*
vpc:DescribeVcoRouteEntriesDescribeVcoRouteEntriesRead
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeVirtualBorderRoutersDescribeVirtualBorderRoutersList
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
vpc:DescribeVirtualBorderRoutersForPhysicalConnectionDescribeVirtualBorderRoutersForPhysicalConnectionList
全部资源
*
vpc:PhysicalConnection
vpc:DescribeVpcAttributeDescribeVpcAttributeRead
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
vpc:DescribeVpcsDescribeVpcsList
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId}
vpc:tag
vpc:DescribeVpnAttachmentsDescribeVpnAttachmentsRead
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeVpnConnectionDescribeVpnConnectionRead
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeVpnConnectionLogsDescribeVpnConnectionLogsList
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeVpnConnectionsDescribeVpnConnectionsList
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/*
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeVpnCrossAccountAuthorizationsDescribeVpnCrossAccountAuthorizationsRead
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeVpnGatewayDescribeVpnGatewayRead
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DescribeVpnGatewayAvailableZonesDescribeVpnGatewayAvailableZonesList
全部资源
*
vpc:DescribeVpnGatewaysDescribeVpnGatewaysList
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}
vpc:DescribeVpnPbrRouteEntriesDescribeVpnPbrRouteEntriesRead
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DescribeVpnRouteEntriesDescribeVpnRouteEntriesRead
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DescribeVpnSslServerLogsDescribeVpnSslServerLogsRead
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:DetachDhcpOptionsSetFromVpcDetachDhcpOptionsSetFromVpcWrite
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:DiagnoseVpnConnectionsDiagnoseVpnConnectionsRead
VpnConnection
acs:vpc:{#regionId}:{#accountId}:*
vpc:DisableNatGatewayEcsMetricDisableNatGatewayEcsMetricWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:DisableVpcClassicLinkDisableVpcClassicLinkWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:DissociateRouteTableFromGatewayDissociateRouteTableFromGatewayRead
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
vpc:DissociateRouteTablesFromVpcGatewayEndpointDissociateRouteTablesFromVpcGatewayEndpointWrite
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:DownloadVpnConnectionConfigDownloadVpnConnectionConfigRead
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:EnableNatGatewayEcsMetricEnableNatGatewayEcsMetricWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:EnablePhysicalConnectionEnablePhysicalConnectionWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:EnableVpcClassicLinkEnableVpcClassicLinkWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:EnableVpcIpv4GatewayEnableVpcIpv4GatewayWrite
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
vpc:GetDhcpOptionsSetGetDhcpOptionsSetRead
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
vpc:GetFlowLogServiceStatusGetFlowLogServiceStatusRead
FlowLogService
acs:vpc:{#regionId}:{#accountId}:flowlog/*
vpc:GetIpv4GatewayAttributeGetIpv4GatewayAttributeRead
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}
vpc:GetNatGatewayAttributeGetNatGatewayAttributeRead
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:GetPhysicalConnectionServiceStatusGetPhysicalConnectionServiceStatusRead
全部资源
*
vpc:GetTrafficMirrorServiceStatusGetTrafficMirrorServiceStatusRead
全部资源
*
vpc:GetVSwitchCidrReservationUsageGetVSwitchCidrReservationUsageRead
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
vpc:GetVpcGatewayEndpointAttributeGetVpcGatewayEndpointAttributeRead
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:GetVpcPrefixListAssociationsGetVpcPrefixListAssociationsRead
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:GetVpcPrefixListEntriesGetVpcPrefixListEntriesRead
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:GetVpcRouteEntrySummaryGetVpcRouteEntrySummaryRead
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}
vpc:GrantInstanceToCenGrantInstanceToCenWrite
全部资源
*
vpc:GrantInstanceToVbrGrantInstanceToVbrWrite
VPC
acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}
vpc:ListDhcpOptionsSetsListDhcpOptionsSetsRead
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
vpc:ListEnhanhcedNatGatewayAvailableZonesListEnhanhcedNatGatewayAvailableZonesList
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/*
vpc:ListFullNatEntriesListFullNatEntriesRead
FullNat
acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}
vpc:ListGatewayRouteTableEntriesListGatewayRouteTableEntriesList
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
vpc:ListGeographicSubRegionsListGeographicSubRegionsList
全部资源
*
vpc:ListIpsecServersListIpsecServersList
全部资源
*
vpc:ListIpv4GatewaysListIpv4GatewaysList
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
vpc:ListPrefixListsListPrefixListsList
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/*
vpc:ListPublicIpAddressPoolCidrBlocksListPublicIpAddressPoolCidrBlocksRead
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:ListPublicIpAddressPoolsListPublicIpAddressPoolsRead
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
vpc:ListTagResourcesListTagResourcesRead
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:tag
vpc:ListTagResourcesForExpressConnectListTagResourcesForExpressConnectList
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}
vpc:ListTrafficMirrorFiltersListTrafficMirrorFiltersList
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
vpc:ListTrafficMirrorSessionsListTrafficMirrorSessionsList
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
vpc:ListVSwitchCidrReservationsListVSwitchCidrReservationsList
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
vpc:ListVirtualPhysicalConnectionsListVirtualPhysicalConnectionsList
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:ListVpcEndpointServicesByEndUserListVpcEndpointServicesByEndUserList
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
vpc:ListVpcGatewayEndpointsListVpcGatewayEndpointsList
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:ModifyBgpGroupAttributeModifyBgpGroupAttributeWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:ModifyBgpPeerAttributeModifyBgpPeerAttributeWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:ModifyCommonBandwidthPackageAttributeModifyCommonBandwidthPackageAttributeWrite
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:ModifyCommonBandwidthPackageIpBandwidthModifyCommonBandwidthPackageIpBandwidthWrite
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:ModifyCommonBandwidthPackageSpecModifyCommonBandwidthPackageSpecWrite
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:ModifyCustomerGatewayAttributeModifyCustomerGatewayAttributeWrite
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
vpc:ModifyEipAddressAttributeModifyEipAddressAttributeWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:ModifyFlowLogAttributeModifyFlowLogAttributeWrite
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
vpc:ModifyForwardEntryModifyForwardEntryWrite
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
vpc:ModifyHaVipAttributeModifyHaVipAttributeWrite
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:ModifyIpv6AddressAttributeModifyIpv6AddressAttributeWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:ModifyIpv6GatewayAttributeModifyIpv6GatewayAttributeWrite
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:ModifyIpv6InternetBandwidthModifyIpv6InternetBandwidthWrite
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
vpc:ModifyNatGatewayAttributeModifyNatGatewayAttributeWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:ModifyNatGatewaySpecModifyNatGatewaySpecWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:ModifyNatIpAttributeModifyNatIpAttributeWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:ModifyNetworkAclAttributesModifyNetworkAclAttributesWrite
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:ModifyPhysicalConnectionAttributeModifyPhysicalConnectionAttributeWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:ModifyRouteEntryModifyRouteEntryWrite
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:ModifyRouteTableAttributesModifyRouteTableAttributesWrite
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:VRouter
vpc:ModifyRouterInterfaceAttributeModifyRouterInterfaceAttributeWrite
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:TargetAccountRDId
vpc:ModifyRouterInterfaceSpecModifyRouterInterfaceSpecWrite
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:ModifySnatEntryModifySnatEntryWrite
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
vpc:ModifySslVpnClientCertModifySslVpnClientCertWrite
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
vpc:ModifySslVpnServerModifySslVpnServerWrite
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:ModifyTunnelAttributeModifyTunnelAttributeWrite
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:ModifyVRouterAttributeModifyVRouterAttributeWrite
VRouter
acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}
vpc:ModifyVSwitchAttributeModifyVSwitchAttributeWrite
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:ModifyVSwitchCidrReservationAttributeModifyVSwitchCidrReservationAttributeWrite
全部资源
*
vpc:ModifyVcoRouteEntryWeightModifyVcoRouteEntryWeightWrite
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:ModifyVirtualBorderRouterAttributeModifyVirtualBorderRouterAttributeWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:ModifyVpcAttributeModifyVpcAttributeWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
vpc:ModifyVpcPrefixListModifyVpcPrefixListWrite
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:ModifyVpnAttachmentAttributeModifyVpnAttachmentAttributeWrite
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:ModifyVpnConnectionAttributeModifyVpnConnectionAttributeWrite
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:ModifyVpnGatewayAttributeModifyVpnGatewayAttributeWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ModifyVpnPbrRouteEntryAttributeModifyVpnPbrRouteEntryAttributeWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ModifyVpnPbrRouteEntryPriorityModifyVpnPbrRouteEntryPriorityWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ModifyVpnPbrRouteEntryWeightModifyVpnPbrRouteEntryWeightWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ModifyVpnRouteEntryWeightModifyVpnRouteEntryWeightWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:MoveResourceGroupMoveResourceGroupWrite
全部资源
*
vpc:MoveVpnResourceGroupMoveVpnResourceGroupWrite
全部资源
*
vpc:OpenFlowLogServiceOpenFlowLogServiceWrite
FlowLogService
acs:vpc:{#regionId}:{#accountId}:flowlog/*
vpc:OpenPhysicalConnectionServiceOpenPhysicalConnectionServiceRead
全部资源
*
vpc:OpenTrafficMirrorServiceOpenTrafficMirrorServiceWrite
全部资源
*
vpc:PublishVpnRouteEntryPublishVpnRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:RecoverPhysicalConnectionRecoverPhysicalConnectionWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
vpc:RecoverVirtualBorderRouterRecoverVirtualBorderRouterWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:ReleaseEipAddressReleaseEipAddressWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:tag
vpc:ReleaseEipSegmentAddressReleaseEipSegmentAddressWrite
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:ReleaseIpv6AddressReleaseIpv6AddressWrite
Ipv6Address
acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
vpc:RemoveCommonBandwidthPackageIpRemoveCommonBandwidthPackageIpWrite
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:RemoveSourcesFromTrafficMirrorSessionRemoveSourcesFromTrafficMirrorSessionWrite
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
vpc:ReplaceVpcDhcpOptionsSetReplaceVpcDhcpOptionsSetWrite
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:RetryVpcPrefixListAssociationRetryVpcPrefixListAssociationWrite
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:RevokeInstanceFromCenRevokeInstanceFromCenWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:RevokeInstanceFromVbrRevokeInstanceFromVbrWrite
VPC
acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}
vpc:SecondApplyPhysicalConnectionLOASecondApplyPhysicalConnectionLOAWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:SetHighDefinitionMonitorLogStatusSetHighDefinitionMonitorLogStatusWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:StartFailoverTestJobStartFailoverTestJobWrite
全部资源
*
vpc:StopFailoverTestJobStopFailoverTestJobWrite
全部资源
*
vpc:TagResourcesTagResourcesWrite
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:tag
vpc:TagResourcesForExpressConnectTagResourcesForExpressConnectWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:TerminatePhysicalConnectionTerminatePhysicalConnectionWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:TerminateVirtualBorderRouterTerminateVirtualBorderRouterWrite
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:UnTagResourcesUnTagResourcesWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:tag
vpc:UnassociateEipAddressUnassociateEipAddressWrite
全部资源
*
vpc:UnassociateHaVipUnassociateHaVipWrite
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:UnassociateNetworkAclUnassociateNetworkAclWrite
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:UnassociatePhysicalConnectionFromVirtualBorderRouterUnassociatePhysicalConnectionFromVirtualBorderRouterWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:UnassociateRouteTableUnassociateRouteTableWrite
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:UnassociateVpcCidrBlockUnassociateVpcCidrBlockWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:UntagResourcesForExpressConnectUntagResourcesForExpressConnectWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:UpdateDhcpOptionsSetAttributeUpdateDhcpOptionsSetAttributeWrite
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
vpc:UpdateFailoverTestJobUpdateFailoverTestJobWrite
全部资源
*
vpc:UpdateGatewayRouteTableEntryAttributeUpdateGatewayRouteTableEntryAttributeWrite
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:UpdateIpsecServerUpdateIpsecServerWrite
全部资源
*
vpc:UpdateIpv4GatewayAttributeUpdateIpv4GatewayAttributeWrite
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
vpc:UpdateNatGatewayNatTypeUpdateNatGatewayNatTypeWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:UpdateNetworkAclEntriesUpdateNetworkAclEntriesWrite
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:UpdatePublicIpAddressPoolAttributeUpdatePublicIpAddressPoolAttributeWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:UpdateTrafficMirrorFilterAttributeUpdateTrafficMirrorFilterAttributeWrite
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:UpdateTrafficMirrorFilterRuleAttributeUpdateTrafficMirrorFilterRuleAttributeWrite
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:UpdateTrafficMirrorSessionAttributeUpdateTrafficMirrorSessionAttributeWrite
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:UpdateVirtualBorderBandwidthUpdateVirtualBorderBandwidthWrite
VirtualBorderRouter
acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:UpdateVirtualPhysicalConnectionUpdateVirtualPhysicalConnectionWrite
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
vpc:UpdateVpcGatewayEndpointAttributeUpdateVpcGatewayEndpointAttributeWrite
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:VpcDescribeVpcNatGatewayNetworkInterfaceQuotaVpcDescribeVpcNatGatewayNetworkInterfaceQuotaRead
全部资源
*

资源(Resource)

下表是专有网络VPC(VPC)定义的资源,这些资源可以在RAM权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源ARN是资源在阿里云上的唯一标识。具体说明如下:
  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。
  • *表示全部。例如:
    • {#resourceType}*时:表示全部资源。
    • {#regionId}*时:表示全部地域。
    • {#accountId}*时:表示全部阿里云账号。
资源类型资源ARN
VPCacs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
FlowLogServiceacs:vpc:{#regionId}:{#accountId}:flowlogservice
TrafficMirrorSessionacs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
TrafficMirrorFilteracs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
Ipv6Gatewayacs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
DhcpOptionsSetacs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VSwitchacs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}/vswitch/{#VSwitchId}
NetworkAclacs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
RouteTableacs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
GatewayEndpointacs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
GlobalAccelerationInstanceacs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}
Ipv4Gatewayacs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}
VSwitchCidrReservationacs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
Ipv6Addressacs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
FlowLogacs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
PrefixListacs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
Ipv6InternetBandwidthacs:vpc:{#regionId}:{#accountId}:ipv6internetbandwidth/{#Ipv6InternetBandwidthId}
RouteEntryacs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}/routeentry/{#RouteEntryId}
HaVipacs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
PublicIpAddressPoolacs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
TrafficMirrorServiceacs:vpc:{#regionId}:{#accountId}:trafficmirrorsessionservice
VRouteracs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}/vrouter/{#VRouterId}
Ipv6EgressRuleacs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}/ipv6gateway/{#Ipv6GatewayId}/ipv6egressrule/{#Ipv6EgressRuleId}
GrantRuleToCenacs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}/grantruletocen/{#CenId}

条件(Condition)

下表是专有网络VPC(VPC)定义的产品级条件关键字,这些条件关键字可以在RAM权限策略语句的Condition元素中使用,用来描述授予权限的条件。以下仅列举产品级的条件关键字,阿里云定义的通用条件关键字也同样适用专有网络VPC(VPC)
其中,数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符,否则无法匹配策略语句,授权行为无效。数据类型与条件运算符的对应关系,请参见条件操作类型
条件关键字描述类型
vpc:PhysicalConnection物理专线信息String
vpc:VBR边界路由器信息String
vpc:VPCVPC信息String
vpc:VRouter路由器信息String
vpc:tagVPC的标签String
vpc:TargetAccountRDId对端用户资源目录ID信息String

相关操作

您可以创建自定义权限策略,并将权限策略授予RAM用户、RAM用户组或RAM角色。具体操作如下:
  • 本页导读 (1)
文档反馈