权限定义_权限管理_产品功能

函数计算已经接入 RAM，用户可以通过授权子账号或者使用 STS 来访问函数计算。相关操作的 RAM 权限定义如下：

注意：在RAM中，Resource的格式为acs:fc:${region}:${account-id}:${resource}，下面的表格只列出了其中${resource}的内容。例如，用户可以指定CreateService的授权策略内容如下：

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "fc:CreateService"
      ],
      "Resource": "acs:fc:*:*:services/*",
      "Effect": "Allow"
    }
  ]
}

API	Action	Resource
CreateService	fc:CreateService	services/*
ListServices	fc:ListServices	services/*
GetService	fc:GetService	services/${serviceName} services/${serviceName}.* services/${serviceName}.${qualifier}
UpdateService	fc:UpdateService	services/${serviceName}
DeleteService	fc:DeleteService	services/${serviceName}

CreateFunction	fc:CreateFunction	services/${serviceName}/functions/*
ListFunctions	fc:ListFunctions	services/${serviceName}/functions/* services/${serviceName}./functions/ services/${serviceName}.${qualifier}/functions/*
GetFunction	fc:GetFunction	services/${serviceName}/functions/${functionName} services/${serviceName}.*/functions/${functionName} services/${serviceName}.${qualifier}/functions/${functionName}
UpdateFunction	fc:UpdateFunction	services/${serviceName}/functions/${functionName}
DeleteFunction	fc:DeleteFunction	services/${serviceName}/functions/${functionName}
InvokeFunction	fc:InvokeFunction	services/${serviceName}/functions/${functionName} services/${serviceName}.*/functions/${functionName} services/${serviceName}.${qualifier}/functions/${functionName}

CreateTrigger	fc:CreateTrigger	services/${serviceName}/functions/${functionName}/triggers/*
ListTriggers	fc:ListTriggers	services/${serviceName}/functions/${functionName}/triggers/*
GetTrigger	fc:GetTrigger	services/${serviceName}/functions/${functionName}/triggers/${triggerName}
UpdateTrigger	fc:UpdateTrigger	services/${serviceName}/functions/${functionName}/triggers/${triggerName}
DeleteTrigger	fc:DeleteTrigger	services/${serviceName}/functions/${functionName}/triggers/${triggerName}