AliyunServiceRolePolicyForElasticsearchOps

AliyunServiceRolePolicyForElasticsearchOps 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForElasticsearchOps 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。

策略详情

• 类型：系统策略

• 创建时间：2026-03-11 17:32:42

• 更新时间：2026-03-11 17:32:42

• 当前版本：v1

策略内容

{"Version": "1", "Statement": [{"Action": ["elasticsearch:ListInstance", "elasticsearch:DescribeInstance", "elasticsearch:UpdateInstance", "elasticsearch:UpdateInstanceSettings", "elasticsearch:RestartInstance", "elasticsearch:RollbackInstance", "elasticsearch:DowngradeInstance", "elasticsearch:CancelTask", "elasticsearch:DeactivateZones", "elasticsearch:ActivateZones", "elasticsearch:MigrateToOtherZone", "elasticsearch:ResumeElasticsearchTask", "elasticsearch:InterruptElasticsearchTask", "elasticsearch:UpdateAdvancedSetting", "elasticsearch:UpgradeInstanceEngineVersion", "elasticsearch:UpdateWhiteIps", "elasticsearch:UpdatePublicIps", "elasticsearch:ModifyWhiteIps", "elasticsearch:TriggerNetwork", "elasticsearch:UpdateTemplate", "elasticsearch:DescribeLogstash", "elasticsearch:UpdateLogstash", "elasticsearch:RestartLogstash", "elasticsearch:UpdateLogstashSettings", "elasticsearch:InterruptLogstashTask", "elasticsearch:ResumeLogstashTask", "elasticsearch:DowngradeLogstash", "privatelink:CreateVpcEndpoint", "privatelink:ListVpcEndpoints", "privatelink:UpdateVpcEndpointAttribute", "privatelink:GetVpcEndpointAttribute", "privatelink:ListVpcEndpointSecurityGroups", "privatelink:AttachSecurityGroupToVpcEndpoint", "privatelink:DetachSecurityGroupFromVpcEndpoint", "privatelink:AddZoneToVpcEndpoint", "privatelink:RemoveZoneFromVpcEndpoint", "privatelink:ListVpcEndpointZones", "privatelink:DeleteVpcEndpoint"], "Resource": "*", "Effect": "Allow"}, {"Action": "ram:DeleteServiceLinkedRole", "Resource": "*", "Effect": "Allow", "Condition": {"StringEquals": {"ram:ServiceName": "ops.elasticsearch.aliyuncs.com"}}}, {"Action": "ram:CreateServiceLinkedRole", "Resource": "*", "Effect": "Allow", "Condition": {"StringEquals": {"ram:ServiceName": "privatelink.aliyuncs.com"}}}, {"Action": "ram:CreateServiceLinkedRole", "Resource": "*", "Effect": "Allow", "Condition": {"StringEquals": {"ram:ServiceName": "elasticsearch.aliyuncs.com"}}}]}

相关文档

• 权限策略基本元素

• 服务关联角色