AliyunEMRSparkJobRunDefaultRolePolicy 是专用于服务角色的授权策略，通常会在创建对应的服务角色时同步完成授权，以允许服务角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2024-09-14 10:34:50
更新时间：2025-09-19 07:05:25
当前版本：v14
策略内容
{
"Version": "1",
"Statement": [
{
"Action": [
"oss:ListBuckets",
"oss:PutObject",
"oss:ListObjectsV2",
"oss:ListObjects",
"oss:GetObject",
"oss:CopyObject",
"oss:DeleteObject",
"oss:DeleteObjects",
"oss:RestoreObject",
"oss:CompleteMultipartUpload",
"oss:ListMultipartUploads",
"oss:AbortMultipartUpload",
"oss:UploadPartCopy",
"oss:UploadPart",
"oss:GetBucketInfo",
"oss:PostDataLakeStorageFileOperation",
"oss:PostDataLakeStorageAdminOperation",
"oss:GetBucketVersions",
"oss:ListObjectVersions",
"oss:DeleteObjectVersion"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"dlf:AlterDatabase",
"dlf:AlterTable",
"dlf:ListCatalogs",
"dlf:ListDatabases",
"dlf:ListFunctions",
"dlf:ListFunctionNames",
"dlf:ListTables",
"dlf:ListTableNames",
"dlf:ListIcebergNamespaceDetails",
"dlf:ListIcebergTableDetails",
"dlf:ListIcebergSnapshots",
"dlf:CreateDatabase",
"dlf:Get*",
"dlf:DeleteDatabase",
"dlf:DropDatabase",
"dlf:DropTable",
"dlf:CreateTable",
"dlf:CommitTable",
"dlf:UpdateTable",
"dlf:DeleteTable",
"dlf:ListPartitions",
"dlf:ListPartitionNames",
"dlf:CreatePartition",
"dlf:BatchCreatePartitions",
"dlf:UpdateTableColumnStatistics",
"dlf:DeleteTableColumnStatistics",
"dlf:UpdatePartitionColumnStatistics",
"dlf:DeletePartitionColumnStatistics",
"dlf:UpdateDatabase",
"dlf:BatchCreateTables",
"dlf:BatchDeleteTables",
"dlf:BatchUpdateTables",
"dlf:BatchGetTables",
"dlf:BatchUpdatePartitions",
"dlf:BatchDeletePartitions",
"dlf:BatchGetPartitions",
"dlf:DeletePartition",
"dlf:CreateFunction",
"dlf:DeleteFunction",
"dlf:UpdateFunction",
"dlf:ListPartitionsByFilter",
"dlf:DeltaGetPermissions",
"dlf:UpdateCatalogSettings",
"dlf:CreateLock",
"dlf:UnLock",
"dlf:AbortLock",
"dlf:RefreshLock",
"dlf:ListTableVersions",
"dlf:CheckPermissions",
"dlf:RenameTable",
"dlf:RollbackTable",
"dlf:AlterView",
"dlf:ListViews",
"dlf:CreateView",
"dlf:GetView",
"dlf:DropView",
"dlf:RenameView",
"dlf:ListFunctions",
"dlf:CreateFunction",
"dlf:GetFunction",
"dlf:AlterFunction",
"dlf:DropFunction",
"dlf:GetIcebergNamespace",
"dlf:GetIcebergTable",
"dlf:ListBranches",
"dlf:CreateBranch",
"dlf:DropBranch",
"dlf:ForwardBranch"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"dlf-dss:CreateDatabase",
"dlf-dss:CreateFunction",
"dlf-dss:CreateTable",
"dlf-dss:DropDatabase",
"dlf-dss:DropFunction",
"dlf-dss:DropTable",
"dlf-dss:DescribeCatalog",
"dlf-dss:DescribeDatabase",
"dlf-dss:DescribeFunction",
"dlf-dss:DescribeTable",
"dlf-dss:AlterDatabase",
"dlf-dss:AlterFunction",
"dlf-dss:AlterTable",
"dlf-dss:ListCatalogs",
"dlf-dss:ListDatabases",
"dlf-dss:ListTables",
"dlf-dss:ListFunctions",
"dlf-dss:CheckPermissions"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": "odps:ActOnBehalfOfAnotherUser",
"Resource": [
"acs:odps:*:*:users/default/aliyun/*",
"acs:odps:*:*:users/default/ramuser/*",
"acs:odps:*:*:users/default/ramrole/*"
]
},
{
"Effect": "Allow",
"Action": [
"kms:List*",
"kms:DescribeKey",
"kms:GenerateDataKey",
"kms:Decrypt"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "dlf-auth:ActOnBehalfOfAnotherUser",
"Resource": "*"
}
]
}相关文档
该文章对您有帮助吗？