AliyunCSManagedApiGWRolePolicy_访问控制(RAM)-阿里云帮助中心

AliyunCSManagedApiGWRolePolicy 是专用于服务角色的授权策略，通常会在创建对应的服务角色时同步完成授权，以允许服务角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务角色之外的 RAM 身份使用。

策略详情

类型：系统策略
创建时间：2024-09-10 15:43:18
更新时间：2024-09-10 15:43:18
当前版本：v1

策略内容

{
	"Statement": [{
			"Action": [
				"apig:CreateGateway",
				"apig:GetGateway",
				"apig:DeleteGateway",
				"apig:CreateServiceSource",
				"apig:DeleteServiceSource",
				"apig:UpdateServiceSource",
				"apig:ListServiceSources",
				"apig:ListGlobalPolicies",
				"apig:CreateAndAttachPolicy",
				"apig:UpdateAndAttachPolicy",
				"apig:ListGatewayFeatures",
				"apig:UpdateGatewayFeature",
				"apig:ListTagResources",
				"apig:TagResources",
				"apig:UntagResources"
			],
			"Resource": "*",
			"Effect": "Allow"
		},
		{
			"Action": [
				"vpc:DescribeVSwitches"
			],
			"Resource": "acs:vpc:*:*:*/*",
			"Effect": "Allow"
		},
		{
			"Action": [
				"log:CloseProductDataCollection",
				"log:OpenProductDataCollection",
				"log:GetProductDataCollection"
			],
			"Resource": [
				"acs:apig:*:*:gateway/*",
				"acs:log:*:*:project/*/logstore/apig_*"
			],
			"Effect": "Allow"
		},
		{
			"Action": "ram:CreateServiceLinkedRole",
			"Resource": "*",
			"Condition": {
				"StringEquals": {
					"ram:ServiceName": [
						"audit.log.aliyuncs.com"
					]
				}
			},
			"Effect": "Allow"
		},
		{
			"Action": "ram:CreateServiceLinkedRole",
			"Resource": "*",
			"Effect": "Allow",
			"Condition": {
				"StringEquals": {
					"ram:ServiceName": "middlewarelens.log.aliyuncs.com"
				}
			}
		},
		{
			"Action": "ram:CreateServiceLinkedRole",
			"Resource": "*",
			"Effect": "Allow",
			"Condition": {
				"StringEquals": {
					"ram:ServiceName": [
						"securitylens.log.aliyuncs.com",
						"ai-lens.log.aliyuncs.com",
						"storagelens.log.aliyuncs.com"
					]
				}
			}
		}
	],
	"Version": "1"
}

策略详情

策略内容

相关文档