AliyunCSManagedNimitzRolePolicy

AliyunCSManagedNimitzRolePolicy 是专用于服务角色的授权策略,通常会在创建对应的服务角色时同步完成授权,以允许服务角色代您访问其他云服务。本策略由对应的阿里云服务按需更新,请勿将本策略授权给服务角色之外的 RAM 身份使用。

策略详情

  • 类型:系统策略

  • 创建时间:2024-10-18 11:13:40

  • 更新时间:2025-08-29 08:57:20

  • 当前版本:v7

策略内容

{
	"Version": "1",
	"Statement": [{
			"Effect": "Allow",
			"Action": [
				"eflo:ListNetworkInterfaces",
				"eflo:GetNetworkInterface",
				"eflo:AssignPrivateIpAddress",
				"eflo:UnAssignPrivateIpAddress",
				"eflo:UpdateElasticNetworkInterface",
				"eflo:GetElasticNetworkInterface",
				"eflo:ListElasticNetworkInterfaces",
				"eflo:DeleteElasticNetworkInterface",
				"eflo:CreateElasticNetworkInterface",
				"eflo:ListLniPrivateIpAddress",
				"eflo:GetLniPrivateIpAddress",
				"eflo:UpdatePrivateIpAddress",
				"eflo:GetNodeInfoForPod",
				"eflo:ListNodeInfosForPod",
				"eflo:ListLeniPrivateIpAddresses",
				"eflo:AssignLeniPrivateIpAddress",
				"eflo:UnassignLeniPrivateIpAddress",
				"eflo:CreateHighDensityElasticNetworkInterface",
				"eflo:DeleteHighDensityElasticNetworkInterface",
				"eflo:ListHighDensityElasticNetworkInterfaces",
				"eflo:GetHighDensityElasticNetworkInterface",
				"eflo:UpdateHighDensityElasticNetworkInterface",
				"eflo:DescribeNode",
				"eflo:DescribeNodeType",
				"eflo:DescribeCluster",
				"vpc:DescribeVSwitches",
				"eflo:UpdateNetworkInterfacePrivateMac"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"ecs:CreateNetworkInterface",
				"ecs:DescribeNetworkInterfaces",
				"ecs:DescribeNetworkInterfaceAttribute",
				"ecs:AttachNetworkInterface",
				"ecs:DetachNetworkInterface",
				"ecs:DeleteNetworkInterface",
				"ecs:AssignPrivateIpAddresses",
				"ecs:UnassignPrivateIpAddresses",
				"ecs:AssignIpv6Addresses",
				"ecs:UnassignIpv6Addresses",
				"ecs:DescribeInstanceTypes",
				"ecs:ModifyNetworkInterfaceAttribute",
				"ecs:DescribeInstanceAttribute",
				"ecs:DescribeInstances",
				"ecs:ListTagResources"
			],
			"Resource": "*"
		}
	]
}

相关文档