AliyunASMFullAccess

AliyunASMFullAccess 是阿里云管理的产品系统策略,您可以将 AliyunASMFullAccess 授权给 RAM 身份(RAM 用户、RAM 用户组和 RAM 角色),本策略定义了管理阿里云服务网格(ASM)的权限。

策略详情

  • 类型:系统策略

  • 创建时间:2021-11-22 08:04:33

  • 更新时间:2023-07-20 03:26:14

  • 当前版本:v3

策略内容

{
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "servicemesh:*",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "ims:ListUserBasicInfos",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "log:ListLogStores",
        "log:ListDashboard",
        "log:GetDashboard",
        "log:ListSavedSearch"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "log:GetLogStoreLogs",
      "Resource": "acs:log:*:*:project/*/logstore/audit-*"
    },
    {
      "Effect": "Allow",
      "Action": "bssapi:GetPayAsYouGoPrice",
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "bssapi:ProductCode": [
            "servicemesh",
            "eip",
            "slb"
          ]
        }
      }
    },
    {
        "Effect": "Allow",
        "Action": "ram:CreateServiceLinkedRole",
        "Resource": "*",
        "Condition": {
            "StringEquals": {
                "ram:ServiceName": "servicemesh.aliyuncs.com"
            }
        }
    }
  ],
  "Version": "1"
}

相关文档