AliyunNASFullAccess

AliyunNASFullAccess 是阿里云管理的产品系统策略，您可以将 AliyunNASFullAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理文件存储服务（NAS）的权限。

策略详情

• 类型：系统策略

• 创建时间：2016-03-29 03:34:09

• 更新时间：2023-02-14 12:17:35

• 当前版本：v2

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": "nas:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "bssapi:QueryResourcePackageInstances",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "cms:QueryMetricList",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "vpc:DescribeVpcs",
        "vpc:DescribeVSwitches"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:GetRole",
      "Resource": [
        "acs:ram:*:*:role/aliyunservicerolefornasstandard",
        "acs:ram:*:*:role/aliyunservicerolefornasextreme",
        "acs:ram:*:*:role/aliyunservicerolefornasencryption",
        "acs:ram:*:*:role/aliyunservicerolefornaslogdelivery",
        "acs:ram:*:*:role/aliyunservicerolefornasecshandler",
        "acs:ram:*:*:role/aliyunservicerolefornascpfsnetwork",
        "acs:ram:*:*:role/aliyunservicerolefornascpfsclient",
        "acs:ram:*:*:role/aliyunservicerolefornasossdataflow",
        "acs:ram:*:*:role/aliyunservicerolefornaseventnotification",
        "acs:ram:*:*:role/aliyunnastieringrole",
        "acs:ram:*:*:role/aliyunnasencryptdefaultrole",
        "acs:ram:*:*:role/aliyunnasdefaultrole",
        "acs:ram:*:*:role/aliyunnaslogarchiverole",
        "acs:ram:*:*:role/aliyunnasmanageenirole"
      ],
      "Effect": "Allow"
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": [
            "extreme.nas.aliyuncs.com",
            "encryption.nas.aliyuncs.com",
            "logdelivery.nas.aliyuncs.com",
            "ecs-handler.nas.aliyuncs.com",
            "cpfs-network.nas.aliyuncs.com",
            "cpfs-client.nas.aliyuncs.com",
            "oss-dataflow.nas.aliyuncs.com",
            "event-notification.nas.aliyuncs.com"
          ]
        }
      }
    },
    {
      "Action": [
        "kms:ListAliasesByKeyId",
        "kms:ListKeys"
      ],
      "Resource": "*",
      "Effect": "Allow"
    }
  ]
}

相关文档

• 权限策略基本元素

• 为RAM用户授权

• 为RAM用户组授权

• 为RAM角色授权