AliyunServiceRolePolicyForECK

AliyunServiceRolePolicyForECK 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForECK 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。

策略详情

• 类型：系统策略

• 创建时间：2025-10-28 16:34:11

• 更新时间：2025-10-28 16:34:11

• 当前版本：v1

策略内容

{
  "Statement": [
    {
      "Action": [
        "ens:CreateVSwitch",
        "ens:DeleteVSwitch",
        "ens:AssignPrivateIpAddresses",
        "ens:UnassignPrivateIpAddresses",
        "ens:CreateNatGateway",
        "ens:CreateSnatEntry",
        "ens:DeleteNatGateway",
        "ens:CreateEipInstance",
        "ens:AssociateEnsEipAddress",
        "ens:UnAssociateEnsEipAddress",
        "ens:DescribeEnsEipAddresses",
        "ens:DeleteEip",
        "ens:CreateLoadBalancer",
        "ens:DeleteLoadBalancer",
        "ens:CreateLoadBalancerTCPListener",
        "ens:CreateLoadBalancerUDPListener",
        "ens:StartLoadBalancerListener",
        "ens:StopLoadBalancerListener",
        "ens:DeleteLoadBalancerListener",
        "ens:DescribeLoadBalancers",
        "ens:DescribeLoadBalancerAttribute",
        "ens:CreateLoadBalancerHTTPSListener",
        "ens:CreateLoadBalancerHTTPListener",
        "ens:CreateLoadBalancerForwardEntry",
        "ens:DescribeLoadBalancerForwardEntries",
        "ens:DeleteLoadBalancerForwardEntry",
        "ens:DescribeLoadBalancerHTTPSListenerAttribute",
        "ens:SetLoadBalancerHTTPSListenerAttribute",
        "ens:DescribeLoadBalancerTCPListenerAttribute",
        "ens:AddBackendServers",
        "ens:RemoveBackendServers",
        "ens:DescribeDisks",
        "ens:CreateDisk",
        "ens:AttachDisk",
        "ens:DetachDisk",
        "ens:ResetDisk",
        "ens:ResizeDisk",
        "ens:CreateMountTarget",
        "ens:DeleteMountTarget",
        "ens:DescribeMountTargets",
        "ens:CreateFileSystem",
        "ens:DeleteFileSystem",
        "ens:ModifyFileSystem",
        "ens:DescribeFileSystems",
        "ens:CreateSnapshot",
        "ens:CopySnapshot",
        "ens:DeleteSnapshot",
        "ens:DescribeSnapshots",
        "ens:DescribeNASAvailableResourceInfo",
        "ens:DescribeUserOpenInfo",
        "ens:DescribeInstances"
      ],
      "Effect": "Allow",
      "Resource": "*"
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "eck.ens.aliyuncs.com"
        }
      }
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "diskencrypt.ens.aliyuncs.com"
        }
      }
    }
  ],
  "Version": "1"
}

相关文档

• 权限策略基本元素

• 服务关联角色