AliyunServiceRolePolicyForDAS_访问控制(RAM)-阿里云帮助中心

AliyunServiceRolePolicyForDAS 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForDAS 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。
策略详情

类型：系统策略
创建时间：2020-07-28 11:30:49
更新时间：2020-07-28 11:30:49
当前版本：v1
策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "rds:DescribeRegions",
        "rds:DescribeDBInstances",
        "rds:DescribeDatabases",
        "rds:DescribeDBInstanceNetInfo",
        "rds:DescribeDBInstanceAttribute",
        "rds:DescribeAccounts",
        "rds:DescribeDBInstanceIPArrayList",
        "rds:DescribeDBInstancePerformance",
        "rds:ModifySecurityIps",
        "rds:CreateAccount",
        "rds:GrantAccountPrivilege",
        "rds:RevokeAccountPrivilege",
        "rds:CreateDatabase",
        "rds:ModifyDBInstanceDescription",
        "rds:DescribeSlowLogRecords",
        "rds:DescribeSlowLogs",
        "rds:DescribeResourceUsage",
        "rds:DescribeSQLCollectorPolicy",
        "rds:ModifyDBInstanceSpec",
        "rds:DescribeTasks",
        "rds:DescribeTaskIdByRequestID",
        "rds:ModifyDBNodeClass",
        "rds:DescribeParameters",
        "rds:ModifyParameter",
        "rds:DescribeBackups",
        "rds:CloneDBInstance",
        "rds:DescribeLocalAvailableRecoveryTime",
        "rds:DescribeSupportOnlineResizeDisk"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "vpc:DescribeVpcs",
        "vpc:DescribePhysicalConnections",
        "vpc:DescribeVpnGateways",
        "vpc:DescribeRouterInterfaces",
        "vpc:DescribeVirtualBorderRouters",
        "vpc:DescribeVSwitches",
        "vpc:DescribeVSwitchAttributes",
        "vpc:ModifyVSwitchAttribute"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "ecs:DescribeInstances",
        "ecs:DescribeInstanceAttribute",
        "ecs:DescribeInstanceStatus",
        "ecs:DescribeInstanceMonitorData",
        "ecs:DescribeSecurityGroups",
        "ecs:JoinSecurityGroup",
        "ecs:DescribeSecurityGroupAttribute",
        "ecs:AuthorizeSecurityGroup",
        "ecs:RevokeSecurityGroup",
        "ecs:DescribeDisks",
        "ecs:RunInstances",
        "ecs:CreateSecurityGroup",
        "ecs:DescribeAvailableResource",
        "ecs:DescribeImages"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "kvstore:DescribeCacheAnalysisReport",
        "kvstore:DescribeCacheAnalysisReportList",
        "kvstore:CreateCacheAnalysisTask",
        "kvstore:DescribeAccounts",
        "kvstore:CreateAccount",
        "kvstore:DescribeRegions",
        "kvstore:DescribeInstances",
        "kvstore:DescribeInstanceAttribute",
        "kvstore:DescribeHistoryMonitorValues",
        "kvstore:DescribeMonitorItems",
        "kvstore:VerifyPassword",
        "kvstore:DescribeSecurityIps",
        "kvstore:ModifySecurityIps",
        "kvstore:ModifyInstanceAttribute",
        "kvstore:ModifyInstanceSpec",
        "kvstore:AddShardingNode",
        "kvstore:DeleteShardingNode",
        "kvstore:DescribeRoleZoneInfo",
        "kvstore:EnableAdditionalBandwidth",
        "kvstore:RenewAdditionalBandwidth",
        "kvstore:DescribeIntranetAttribute",
        "kvstore:DescribeClusterMemberInfo",
        "kvstore:DescribeAuditLogConfig",
        "kvstore:DescribeAuditRecords",
        "kvstore:DescribeRunningLogRecords",
        "kvstore:DescribeSlowLogRecords"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "dts:DescribeMigrationJobs",
        "dts:DescribeMigrationJobDetail",
        "dts:DescribeMigrationJobStatus",
        "dts:CreateMigrationJob",
        "dts:ConfigureMigrationJob",
        "dts:SuspendMigrationJob",
        "dts:StartMigrationJob",
        "dts:StopMigrationJob",
        "dts:DeleteMigrationJob",
        "dts:DescribeSynchronizationJobs",
        "dts:DescribeSynchronizationJobStatus",
        "dts:CreateSynchronizationJob",
        "dts:ConfigureSynchronizationJob",
        "dts:SuspendSynchronizationJob",
        "dts:StartSynchronizationJob",
        "dts:DeleteSynchronizationJob",
        "dts:DescribeObjectModifyStatus",
        "dts:ModifySynchronizationObject",
        "dts:ResetSynchronizationJob"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "pvtz:DescribeUserServiceStatus",
        "pvtz:DescribeZones",
        "pvtz:DescribeZoneRecords",
        "pvtz:UpdateZoneRecord"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "dds:DescribeDBInstances",
        "dds:DescribeReplicaSetRole",
        "dds:DescribeDBInstanceAttribute",
        "dds:DescribeRegions",
        "dds:DescribeDBInstancePerformance",
        "dds:DescribeSecurityIps",
        "dds:ModifyDBInstanceDescription",
        "dds:ModifySecurityIps",
        "dds:DescribeShardingNetworkAddress",
        "dds:DescribeSlowLogRecords",
        "dds:DescribeRunningLogRecords",
        "dds:DescribeErrorLogList"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "cms:QueryContactGroup",
        "cms:QueryContact"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "polardb:DescribeDBClusters",
        "polardb:DescribeRegions",
        "polardb:DescribeDBClusterAttribute",
        "polardb:ModifyDBNodeClass",
        "polardb:DescribeDBClusterAvailableResources",
        "polardb:CreateDBNodes",
        "polardb:DeleteDBNodes",
        "polardb:DescribeBackups",
        "polardb:CreateDBCluster",
        "polardb:ModifyDBClusterStorageSpace",
        "polardb:ModifyDBClusterParameters",
        "polardb:DescribeDBClusterParameters"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "hdm.aliyuncs.com"
        }
      }
    }
  ]
}
策略详情

策略内容

相关文档
