AliyunCSManagedEdgeRolePolicy_访问控制(RAM)-阿里云帮助中心

AliyunCSManagedEdgeRolePolicy 是专用于服务角色的授权策略，通常会在创建对应的服务角色时同步完成授权，以允许服务角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务角色之外的 RAM 身份使用。

策略详情

类型：系统策略
创建时间：2024-10-23 15:51:45
更新时间：2024-10-23 15:51:45
当前版本：v1

策略内容

{
	"Version": "1",
	"Statement": [{
			"Action": [
				"vpc:DescribeVpcs",
				"vpc:DescribeRouteEntryList"
			],
			"Resource": [
				"*"
			],
			"Effect": "Allow"
		},
		{
			"Effect": "Allow",
			"Action": [
				"vpc:DescribeEipAddresses",
				"vpc:AllocateEipAddress",
				"vpc:ReleaseEipAddress"
			],
			"Resource": "acs:vpc:*:*:eip/*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"vpc:DescribeRouteTableList",
				"vpc:CreateRouteEntry",
				"vpc:DeleteRouteEntry"
			],
			"Resource": [
				"acs:vpc:*:*:routetable/*"
			]
		},
		{
			"Effect": "Allow",
			"Action": [
				"slb:DescribeLoadBalancers",
				"slb:DescribeLoadBalancerAttribute",
				"slb:DescribeAccessControlLists",
				"slb:DescribeAccessControlListAttribute",
				"slb:AddAccessControlListEntry",
				"slb:RemoveAccessControlListEntry",
				"slb:CreateLoadBalancer",
				"slb:DeleteLoadBalancer",
				"slb:CreateAccessControlList",
				"slb:DeleteAccessControlList",
				"slb:TagResources"
			],
			"Resource": [
				"acs:slb:*:*:acl/*",
				"acs:slb:*:*:loadbalancer/*"
			]
		},
		{
			"Effect": "Allow",
			"Action": [
				"vpc:AssociateEipAddress",
				"vpc:UnassociateEipAddress"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"ens:DescribeNetworks",
				"ens:DescribeInstances",
				"ens:DescribeLoadBalancers",
				"ens:DescribeLoadBalancerAttribute",
				"ens:DescribeLoadBalancerUDPListenerAttribute",
				"ens:DescribeLoadBalancerTCPListenerAttribute",
				"ens:DescribeLoadBalancerHTTPListenerAttribute",
				"ens:DescribeLoadBalancerHTTPSListenerAttribute",
				"ens:DescribeEnsEipAddresses",
				"ens:CreateLoadBalancer",
				"ens:ReleaseInstance",
				"ens:SetLoadBalancerStatus",
				"ens:ModifyLoadBalancerAttribute",
				"ens:SetBackendServers",
				"ens:AddBackendServers",
				"ens:RemoveBackendServers",
				"ens:CreateLoadBalancerUDPListener",
				"ens:SetLoadBalancerUDPListenerAttribute",
				"ens:CreateLoadBalancerTCPListener",
				"ens:SetLoadBalancerTCPListenerAttribute",
				"ens:StartLoadBalancerListener",
				"ens:StopLoadBalancerListener",
				"ens:DeleteLoadBalancerListener",
				"ens:CreateLoadBalancerHTTPListener",
				"ens:SetLoadBalancerHTTPListenerAttribute",
				"ens:CreateLoadBalancerHTTPSListener",
				"ens:SetLoadBalancerHTTPSListenerAttribute",
				"ens:CreateEipInstance",
				"ens:ModifyEnsEipAddressAttribute",
				"ens:AssociateEnsEipAddress",
				"ens:DescribeNetworkInterfaces",
				"ens:DescribeVSwitches",
				"ens:AssignPrivateIpAddresses",
				"ens:UnassignPrivateIpAddresses",
				"ens:UnAssociateEnsEipAddress"
			],
			"Resource": "*"
		},
		{
			"Action": "ram:CreateServiceLinkedRole",
			"Resource": "*",
			"Effect": "Allow",
			"Condition": {
				"StringEquals": {
					"ram:ServiceName": "eipaccess.slb.aliyuncs.com"
				}
			}
		}
	]
}

策略详情

策略内容

相关文档