访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用RAM可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM中使用权限策略描述授权的具体内容。
本文为您介绍云企业网(Cbn)为RAM权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。云企业网(Cbn)的RAM代码(RamCode)为 cen,支持的授权粒度为资源级。
权限策略通用结构
权限策略支持JSON格式,其通用结构如下:
{
"Version": "1",
"Statement": [
{
"Effect": "<Effect>",
"Action": "<Action>",
"Resource": "<Resource>",
"Condition": {
"<Condition_operator>": {
"<Condition_key>": [
"<Condition_value>"
]
}
}
}
]
}
- Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。
- Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)。
- Resource:受操作影响的具体对象,您可以使用资源ARN来描述指定资源。具体信息,请参见资源(Resource)。
- Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)。
- Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素。
- Condition_key:条件关键字。
- Condition_value:条件关键字对应的值。
操作(Action)
下表是云企业网(Cbn)定义的操作,这些操作可以在RAM权限策略语句的Action
元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:- 操作:是指具体的权限点。
- API:是指操作对应的API接口。
- 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。
- 资源类型:是指操作中支持授权的资源类型。具体说明如下:
- 对于必选的资源类型,用前面加 * 表示。
- 对于不支持资源级授权的操作,用
全部资源
表示。
- 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。
- 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。
操作 | API | 访问级别 | 资源类型 | 条件关键字 | 关联操作 |
---|
操作 | API | 访问级别 | 资源类型 | 条件关键字 | 关联操作 |
---|---|---|---|---|---|
cen:ActiveFlowLog | ActiveFlowLog | update | *Flowlog acs:cbn:{#regionId}:{#accountId}:flowlog/{#flowlogId} | 无 | 无 |
cen:AddTrafficMatchRuleToTrafficMarkingPolicy | AddTrafficMatchRuleToTrafficMarkingPolicy | create | *全部资源 * | 无 | 无 |
cen:AddTraficMatchRuleToTrafficMarkingPolicy | AddTraficMatchRuleToTrafficMarkingPolicy | create | *全部资源 * | 无 | 无 |
cen:AssociateCenBandwidthPackage | AssociateCenBandwidthPackage | create | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/{#cenbandwidthpackageId} *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:AssociateTransitRouterAttachmentWithRouteTable | AssociateTransitRouterAttachmentWithRouteTable | create | *TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:AssociateTransitRouterMulticastDomain | AssociateTransitRouterMulticastDomain | update | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:AttachCenChildInstance | AttachCenChildInstance | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *virtualborderrouter acs:vpc:*:{#accountId}:virtualborderrouter/{#virtualborderrouterId} *VPC acs:vpc:*:{#accountId}:vpc/{#vpcId} | 无 | 无 |
cen:CheckTransitRouterService | CheckTransitRouterService | none | *全部资源 * | 无 | 无 |
cen:CreateCen | CreateCen | create | *CenInstance acs:cen:*:{#accountId}:ceninstance/* | 无 | 无 |
cen:CreateCenBandwidthPackage | CreateCenBandwidthPackage | create | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/* | 无 | 无 |
cen:CreateCenChildInstanceRouteEntryToAttachment | CreateCenChildInstanceRouteEntryToAttachment | create | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:CreateCenChildInstanceRouteEntryToCen | CreateCenChildInstanceRouteEntryToCen | create | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:CreateCenInterRegionTrafficQosPolicy | CreateCenInterRegionTrafficQosPolicy | create | *全部资源 * | 无 | 无 |
cen:CreateCenInterRegionTrafficQosQueue | CreateCenInterRegionTrafficQosQueue | create | *全部资源 * | 无 | 无 |
cen:CreateCenRouteMap | CreateCenRouteMap | create | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:CreateFlowlog | CreateFlowlog | create | *全部资源 * | 无 | 无 |
cen:CreateTrafficMarkingPolicy | CreateTrafficMarkingPolicy | create | *全部资源 * | 无 | 无 |
cen:CreateTransitRouteTableAggregation | CreateTransitRouteTableAggregation | create | *全部资源 * | 无 | 无 |
cen:CreateTransitRouter | CreateTransitRouter | create | CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouter acs:cen:*:{#accountId}:centransitrouter/* | 无 | 无 |
cen:CreateTransitRouterCidr | CreateTransitRouterCidr | create | *TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:CreateTransitRouterEcrAttachment | CreateTransitRouterEcrAttachment | create | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#TransitRouterId} | 无 | 无 |
cen:CreateTransitRouterMulticastDomain | CreateTransitRouterMulticastDomain | create | TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/* | 无 | 无 |
cen:CreateTransitRouterPeerAttachment | CreateTransitRouterPeerAttachment | create | CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#TransitRouterId} | 无 | 无 |
cen:CreateTransitRouterPrefixListAssociation | CreateTransitRouterPrefixListAssociation | create | *全部资源 * | 无 | 无 |
cen:CreateTransitRouterRouteEntry | CreateTransitRouterRouteEntry | create | *TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#centransitrouterroutetableId} | 无 | 无 |
cen:CreateTransitRouterRouteTable | CreateTransitRouterRouteTable | create | TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/* | 无 | 无 |
cen:CreateTransitRouterVbrAttachment | CreateTransitRouterVbrAttachment | create | CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#TransitRouterId} | 无 | 无 |
cen:CreateTransitRouterVpcAttachment | CreateTransitRouterVpcAttachment | create | CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#TransitRouterId} | 无 | 无 |
cen:CreateTransitRouterVpnAttachment | CreateTransitRouterVpnAttachment | create | CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#TransitRouterId} | 无 | 无 |
cen:DeactiveFlowLog | DeactiveFlowLog | update | *Flowlog acs:cbn:{#regionId}:{#accountId}:flowlog/{#flowlogId} | 无 | 无 |
cen:DeleteCen | DeleteCen | delete | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DeleteCenBandwidthPackage | DeleteCenBandwidthPackage | delete | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/{#cenbandwidthpackageId} | 无 | 无 |
cen:DeleteCenChildInstanceRouteEntryToAttachment | DeleteCenChildInstanceRouteEntryToAttachment | delete | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DeleteCenChildInstanceRouteEntryToCen | DeleteCenChildInstanceRouteEntryToCen | delete | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DeleteCenInterRegionTrafficQosPolicy | DeleteCenInterRegionTrafficQosPolicy | Write | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#CenId} | 无 | 无 |
cen:DeleteCenInterRegionTrafficQosQueue | DeleteCenInterRegionTrafficQosQueue | delete | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#CenId} | 无 | 无 |
cen:DeleteCenRouteMap | DeleteCenRouteMap | delete | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DeleteFlowlog | DeleteFlowlog | delete | *Flowlog acs:cbn:{#regionId}:{#accountId}:flowlog/{#flowlogId} | 无 | 无 |
cen:DeleteRouteServiceInCen | DeleteRouteServiceInCen | delete | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DeleteTrafficMarkingPolicy | DeleteTrafficMarkingPolicy | delete | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#CenId} | 无 | 无 |
cen:DeleteTransitRouteTableAggregation | DeleteTransitRouteTableAggregation | delete | *全部资源 * | 无 | 无 |
cen:DeleteTransitRouter | DeleteTransitRouter | delete | *TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:DeleteTransitRouterCidr | DeleteTransitRouterCidr | delete | *TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:DeleteTransitRouterEcrAttachment | DeleteTransitRouterEcrAttachment | delete | *TransitRouterEcrAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#TransitRouterAttachmentId} | 无 | 无 |
cen:DeleteTransitRouterMulticastDomain | DeleteTransitRouterMulticastDomain | delete | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:DeleteTransitRouterPeerAttachment | DeleteTransitRouterPeerAttachment | delete | *TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:DeleteTransitRouterPrefixListAssociation | DeleteTransitRouterPrefixListAssociation | delete | *全部资源 * | 无 | 无 |
cen:DeleteTransitRouterRouteEntry | DeleteTransitRouterRouteEntry | delete | TransitRouterRouteEntry acs:cen:*:{#accountId}:centransitrouterroutentry/{#centransitrouterroutentryId} TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutentry/{#transitrouterroutetableId} | 无 | 无 |
cen:DeleteTransitRouterRouteTable | DeleteTransitRouterRouteTable | delete | *TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#centransitrouterroutetableId} | 无 | 无 |
cen:DeleteTransitRouterVbrAttachment | DeleteTransitRouterVbrAttachment | Write | *TransitRouterVbrAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:DeleteTransitRouterVpcAttachment | DeleteTransitRouterVpcAttachment | delete | *TransitRouterVpcAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:DeleteTransitRouterVpnAttachment | DeleteTransitRouterVpnAttachment | delete | *TransitRouterVpnAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:DeregisterTransitRouterMulticastGroupMembers | DeregisterTransitRouterMulticastGroupMembers | delete | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:DeregisterTransitRouterMulticastGroupSources | DeregisterTransitRouterMulticastGroupSources | delete | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:DescribeCenAttachedChildInstanceAttribute | DescribeCenAttachedChildInstanceAttribute | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeCenAttachedChildInstances | DescribeCenAttachedChildInstances | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeCenBandwidthPackages | DescribeCenBandwidthPackages | get | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/* | 无 | 无 |
cen:DescribeCenChildInstanceRouteEntries | DescribeCenChildInstanceRouteEntries | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeCenGeographicSpanRemainingBandwidth | DescribeCenGeographicSpanRemainingBandwidth | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeCenInterRegionBandwidthLimits | DescribeCenInterRegionBandwidthLimits | get | CenInstance acs:cen:*:{#accountId}:ceninstance/* CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeCenPrivateZoneRoutes | DescribeCenPrivateZoneRoutes | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeCenRegionDomainRouteEntries | DescribeCenRegionDomainRouteEntries | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeCenRouteMaps | DescribeCenRouteMaps | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeCenVbrHealthCheck | DescribeCenVbrHealthCheck | get | *全部资源 * | 无 | 无 |
cen:DescribeCens | DescribeCens | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/* | 无 | 无 |
cen:DescribeFlowlogs | DescribeFlowlogs | get | *Flowlog acs:cbn:{#regionId}:{#accountId}:flowlog/* *Flowlog acs:cbn:{#regionId}:{#accountId}:flowlog/{#FlowLogId} | 无 | 无 |
cen:DescribeGrantRulesToCen | DescribeGrantRulesToCen | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeGrantRulesToResource | DescribeGrantRulesToResource | get | *VPC acs:vpc:*:{#accountId}:vpc/{#VpcId} | 无 | 无 |
cen:DescribePublishedRouteEntries | DescribePublishedRouteEntries | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *virtualborderrouter acs:vpc:*:{#accountId}:virtualborderrouter/{#virtualborderrouterId} *VPC acs:vpc:*:{#accountId}:vpc/{#vpcId} | 无 | 无 |
cen:DescribeRouteConflict | DescribeRouteConflict | get | *VPC acs:vpc:*:{#accountId}:vpc/{#vpcId} | 无 | 无 |
cen:DescribeRouteServicesInCen | DescribeRouteServicesInCen | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:DescribeTransitRouteTableAggregation | DescribeTransitRouteTableAggregation | get | *全部资源 * | 无 | 无 |
cen:DescribeTransitRouteTableAggregationDetail | DescribeTransitRouteTableAggregationDetail | get | *全部资源 * | 无 | 无 |
cen:DetachCenChildInstance | DetachCenChildInstance | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *virtualborderrouter acs:vpc:*:{#accountId}:virtualborderrouter/{#virtualborderrouterId} *VPC acs:vpc:*:{#accountId}:vpc/{#vpcId} | 无 | 无 |
cen:DisableCenVbrHealthCheck | DisableCenVbrHealthCheck | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *virtualborderrouter acs:vpc:*:{#accountId}:virtualborderrouter/{#virtualborderrouterId} | 无 | 无 |
cen:DisableTransitRouterRouteTablePropagation | DisableTransitRouterRouteTablePropagation | update | *TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:DisassociateTransitRouterMulticastDomain | DisassociateTransitRouterMulticastDomain | delete | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:DissociateTransitRouterAttachmentFromRouteTable | DissociateTransitRouterAttachmentFromRouteTable | delete | *TransitRouterVpcAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:EnableCenVbrHealthCheck | EnableCenVbrHealthCheck | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *virtualborderrouter acs:vpc:*:{#accountId}:virtualborderrouter/{#virtualborderrouterId} | 无 | 无 |
cen:EnableTransitRouterRouteTablePropagation | EnableTransitRouterRouteTablePropagation | update | *TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:GrantInstanceToTransitRouter | GrantInstanceToTransitRouter | create | *全部资源 * | 无 | 无 |
cen:ListCenChildInstanceRouteEntriesToAttachment | ListCenChildInstanceRouteEntriesToAttachment | get | *TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:ListCenInterRegionTrafficQosPolicies | ListCenInterRegionTrafficQosPolicies | list | *全部资源 * | 无 | 无 |
cen:ListCenInterRegionTrafficQosQueues | ListCenInterRegionTrafficQosQueues | get | *全部资源 * | 无 | 无 |
cen:ListGrantVSwitchEnis | ListGrantVSwitchEnis | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:ListGrantVSwitchesToCen | ListGrantVSwitchesToCen | get | *全部资源 * | 无 | 无 |
cen:ListTagResources | ListTagResources | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:ListTrafficMarkingPolicies | ListTrafficMarkingPolicies | list | *全部资源 * | 无 | 无 |
cen:ListTransitRouterCidr | ListTransitRouterCidr | get | *TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:ListTransitRouterCidrAllocation | ListTransitRouterCidrAllocation | get | *TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:ListTransitRouterEcrAttachments | ListTransitRouterEcrAttachments | list | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *TransitRouterEcrAttachment acs:cen:*:{#accountId}:centransitrouterattachment/* TransitRouterEcrAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#TransitRouterAttachmentId} | 无 | 无 |
cen:ListTransitRouterMulticastDomainAssociations | ListTransitRouterMulticastDomainAssociations | get | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:ListTransitRouterMulticastDomainVSwitches | ListTransitRouterMulticastDomainVSwitches | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:ListTransitRouterMulticastDomains | ListTransitRouterMulticastDomains | list | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/* *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:ListTransitRouterMulticastGroups | ListTransitRouterMulticastGroups | get | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:ListTransitRouterPeerAttachments | ListTransitRouterPeerAttachments | get | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/* TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:ListTransitRouterPrefixListAssociation | ListTransitRouterPrefixListAssociation | get | *TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#centransitrouterroutetableId} | 无 | 无 |
cen:ListTransitRouterRouteEntries | ListTransitRouterRouteEntries | get | TransitRouterRouteEntry acs:cen:*:{#accountId}:centransitrouterroutentry/{#centransitrouterroutentryId} TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#centransitrouterroutetableId} TransitRouterRouteEntry acs:cen:*:{#accountId}:centransitrouterroutentry/* | 无 | 无 |
cen:ListTransitRouterRouteTableAssociations | ListTransitRouterRouteTableAssociations | get | TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#TransitRouterRouteTableId} | 无 | 无 |
cen:ListTransitRouterRouteTablePropagations | ListTransitRouterRouteTablePropagations | get | TransitRouterPeerAttachment acs:cen:*:{#accountid}:centransitrouterattachment/{#TransitRouterAttachmentId} TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#TransitRouterRouteTableId} | 无 | 无 |
cen:ListTransitRouterRouteTables | ListTransitRouterRouteTables | get | TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#centransitrouterroutetableId} TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/* TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:ListTransitRouterVbrAttachments | ListTransitRouterVbrAttachments | list | CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouterVbrAttachment acs:cen:*:{#accountId}:centransitrouterattachment/* TransitRouterVbrAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:ListTransitRouterVpcAttachments | ListTransitRouterVpcAttachments | list | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouterVpcAttachment acs:cen:*:{#accountId}:centransitrouterattachment/* TransitRouterVpcAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:ListTransitRouterVpnAttachments | ListTransitRouterVpnAttachments | list | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} TransitRouterVpnAttachment acs:cen:*:{#accountId}:centransitrouterattachment/* TransitRouterVpnAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:ListTransitRouters | ListTransitRouters | get | CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *TransitRouter acs:cen:*:{#accountId}:centransitrouter/* TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:ModifyCenAttribute | ModifyCenAttribute | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:ModifyCenBandwidthPackageAttribute | ModifyCenBandwidthPackageAttribute | update | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/{#cenbandwidthpackageId} | 无 | 无 |
cen:ModifyCenBandwidthPackageSpec | ModifyCenBandwidthPackageSpec | update | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/{#cenbandwidthpackageId} | 无 | 无 |
cen:ModifyCenRouteMap | ModifyCenRouteMap | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:ModifyFlowLogAttribute | ModifyFlowLogAttribute | update | *Flowlog acs:cbn:{#regionId}:{#accountId}:flowlog/{#flowlogId} | 无 | 无 |
cen:ModifyTrafficMatchRuleToTrafficMarkingPolicy | ModifyTrafficMatchRuleToTrafficMarkingPolicy | update | *全部资源 * | 无 | 无 |
cen:ModifyTransitRouterCidr | ModifyTransitRouterCidr | update | *TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:ModifyTransitRouterMulticastDomain | ModifyTransitRouterMulticastDomain | update | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#TransitRouterMulticastDomainId} | 无 | 无 |
cen:MoveResourceGroup | MoveResourceGroup | update | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/{#cenbandwidthpackageId} *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:OpenTransitRouterService | OpenTransitRouterService | none | *全部资源 * | 无 | 无 |
cen:PublishRouteEntries | PublishRouteEntries | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *virtualborderrouter acs:vpc:*:{#accountId}:virtualborderrouter/{#virtualborderrouterId} *VPC acs:vpc:*:{#accountId}:vpc/{#vpcId} | 无 | 无 |
cen:RefreshTransitRouteTableAggregation | RefreshTransitRouteTableAggregation | update | *全部资源 * | 无 | 无 |
cen:RegisterTransitRouterMulticastGroupMembers | RegisterTransitRouterMulticastGroupMembers | create | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:RegisterTransitRouterMulticastGroupSources | RegisterTransitRouterMulticastGroupSources | create | *TransitRouterMulticastDomain acs:cen:*:{#accountId}:centransitroutermulticast/{#centransitroutermulticastId} | 无 | 无 |
cen:RemoveTrafficMatchRuleFromTrafficMarkingPolicy | RemoveTrafficMatchRuleFromTrafficMarkingPolicy | update | *全部资源 * | 无 | 无 |
cen:RemoveTraficMatchRuleFromTrafficMarkingPolicy | RemoveTraficMatchRuleFromTrafficMarkingPolicy | delete | *全部资源 * | 无 | 无 |
cen:ReplaceTransitRouterRouteTableAssociation | ReplaceTransitRouterRouteTableAssociation | update | *TransitRouterVpcAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:ResolveAndRouteServiceInCen | ResolveAndRouteServiceInCen | create | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:RevokeInstanceFromTransitRouter | RevokeInstanceFromTransitRouter | delete | *全部资源 * | 无 | 无 |
cen:RoutePrivateZoneInCenToVpc | RoutePrivateZoneInCenToVpc | create | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:SetCenInterRegionBandwidthLimit | SetCenInterRegionBandwidthLimit | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:TagResources | TagResources | update | *全部资源 * | 无 | 无 |
cen:TempUpgradeCenBandwidthPackageSpec | TempUpgradeCenBandwidthPackageSpec | update | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/{#cenbandwidthpackageId} | 无 | 无 |
cen:UnassociateCenBandwidthPackage | UnassociateCenBandwidthPackage | delete | *CenBandwidthPackage acs:cen:*:{#accountId}:cenbandwidthpackage/{#cenbandwidthpackageId} *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:UnroutePrivateZoneInCenToVpc | UnroutePrivateZoneInCenToVpc | delete | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:UntagResources | UntagResources | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} | 无 | 无 |
cen:UpdateCenInterRegionTrafficQosPolicyAttribute | UpdateCenInterRegionTrafficQosPolicyAttribute | Write | *全部资源 * | 无 | 无 |
cen:UpdateCenInterRegionTrafficQosQueueAttribute | UpdateCenInterRegionTrafficQosQueueAttribute | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#CenId} | 无 | 无 |
cen:UpdateTrafficMarkingPolicyAttribute | UpdateTrafficMarkingPolicyAttribute | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#CenId} | 无 | 无 |
cen:UpdateTransitRouter | UpdateTransitRouter | update | *TransitRouter acs:cen:*:{#accountId}:centransitrouter/{#centransitrouterId} | 无 | 无 |
cen:UpdateTransitRouterEcrAttachmentAttribute | UpdateTransitRouterEcrAttachmentAttribute | update | *TransitRouterEcrAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#TransitRouterAttachmentId} | 无 | 无 |
cen:UpdateTransitRouterPeerAttachmentAttribute | UpdateTransitRouterPeerAttachmentAttribute | update | *TransitRouterPeerAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:UpdateTransitRouterRouteEntry | UpdateTransitRouterRouteEntry | update | *TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#TransitRouterRouteTableId} | 无 | 无 |
cen:UpdateTransitRouterRouteTable | UpdateTransitRouterRouteTable | update | *TransitRouterRouteTable acs:cen:*:{#accountId}:centransitrouterroutetable/{#centransitrouterroutetableId} | 无 | 无 |
cen:UpdateTransitRouterVbrAttachmentAttribute | UpdateTransitRouterVbrAttachmentAttribute | Write | *TransitRouterVbrAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:UpdateTransitRouterVpcAttachmentAttribute | UpdateTransitRouterVpcAttachmentAttribute | update | *TransitRouterVpcAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:UpdateTransitRouterVpcAttachmentZones | UpdateTransitRouterVpcAttachmentZones | update | *TransitRouterVpcAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:UpdateTransitRouterVpnAttachmentAttribute | UpdateTransitRouterVpnAttachmentAttribute | update | *TransitRouterVpnAttachment acs:cen:*:{#accountId}:centransitrouterattachment/{#centransitrouterattachmentId} | 无 | 无 |
cen:WithdrawPublishedRouteEntries | WithdrawPublishedRouteEntries | update | *CenInstance acs:cen:*:{#accountId}:ceninstance/{#ceninstanceId} *VPC acs:vpc:*:{#accountId}:vpc/{#vpcId} | 无 | 无 |
资源(Resource)
下表是云企业网(Cbn)定义的资源,这些资源可以在RAM权限策略语句的Resource
元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源ARN是资源在阿里云上的唯一标识。具体说明如下:{#}
为变量标识,需要您替换为实际值。例如:{#ramcode}
需要您替换为实际的云服务RAM代码。-
*
表示全部。例如:{#resourceType}
为*
时:表示全部资源。{#regionId}
为*
时:表示全部地域。{#accountId}
为*
时:表示全部阿里云账号。
资源类型 | 资源ARN |
---|
资源类型 | 资源ARN |
---|---|
CenBandwidthPackage |
|
CenInstance |
|
Flowlog |
|
TransitRouter |
|
TransitRouterEcrAttachment |
|
TransitRouterMulticastDomain |
|
TransitRouterPeerAttachment |
|
TransitRouterRouteEntry |
|
TransitRouterRouteTable |
|
TransitRouterVbrAttachment |
|
TransitRouterVpcAttachment |
|
TransitRouterVpnAttachment |
|
VPC |
|
virtualborderrouter |
|
条件(Condition)
云企业网(Cbn)未定义产品级别的条件关键字。如需查看适用于所有云产品的通用条件关键字,请参见通用条件关键字。