AliyunServiceRolePolicyForFluss 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForFluss 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2025-03-25 10:50:28
更新时间：2025-08-14 06:45:19
当前版本：v6
策略内容
{
"Version": "1",
"Statement": [
{
"Action": [
"ecs:AssociateEipAddress",
"ecs:AttachNetworkInterface",
"ecs:AuthorizeSecurityGroup",
"ecs:AuthorizeSecurityGroupEgress",
"ecs:CreateNetworkInterface",
"ecs:CreateNetworkInterfacePermission",
"ecs:CreateSecurityGroup",
"ecs:DeleteNetworkInterface",
"ecs:DeleteNetworkInterfacePermission",
"ecs:DeleteSecurityGroup",
"ecs:DescribeNetworkInterfacePermissions",
"ecs:DescribeNetworkInterfaces",
"ecs:DescribeSecurityGroupAttribute",
"ecs:DescribeSecurityGroupReferences",
"ecs:DescribeSecurityGroups",
"ecs:DetachNetworkInterface",
"ecs:JoinSecurityGroup",
"ecs:LeaveSecurityGroup",
"ecs:ModifyNetworkInterfaceAttribute",
"ecs:ModifySecurityGroupAttribute",
"ecs:ModifySecurityGroupPolicy",
"ecs:ModifySecurityGroupRule",
"ecs:RevokeSecurityGroup",
"ecs:RevokeSecurityGroupEgress",
"ecs:UnassociateEipAddress"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"arms:ListDashboards",
"arms:CreateContact",
"arms:DeleteContact",
"arms:SearchContact",
"arms:UpdateContact",
"arms:CreateContactGroup",
"arms:DeleteContactGroup",
"arms:SearchContactGroup",
"arms:UpdateContactGroup",
"arms:SearchAlertRules",
"arms:CreateAlertRules",
"arms:UpdateAlertRules",
"arms:DeleteAlertRules",
"arms:StartAlertRule",
"arms:StopAlertRule",
"arms:SearchAlarmHistories",
"arms:OpenArmsService",
"arms:CreateWebhook",
"arms:UpdateWebhook",
"arms:CreateDispatchRule",
"arms:ListDispatchRule",
"arms:DeleteDispatchRule",
"arms:UpdateDispatchRule",
"arms:DescribeDispatchRule",
"arms:GetAlarmHistories",
"arms:SendCustomIncidents",
"arms:SaveAlert",
"arms:DeleteAlert",
"arms:GetAlert",
"arms:CheckServiceStatus",
"arms:InstallManagedPrometheus",
"arms:UninstallManagedPrometheus",
"arms:GetManagedPrometheusStatus"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"vpc:DescribeVpcAttribute",
"vpc:DescribeVpcs",
"vpc:DescribeVSwitchAttributes",
"vpc:DescribeVSwitches",
"vpc:DescribeRouteTableList",
"vpc:DescribeRouteTables",
"vpc:DescribeRouteEntryList",
"vpc:DescribeRouterInterfaceAttribute",
"vpc:DescribeRouterInterfaces",
"vpc:DescribeVRouters",
"vpc:ModifyBypassToaAttribute",
"vpc:CreateVpc",
"vpc:CreateVSwitch"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"tag:ListTagResources",
"tag:ListTagKeys",
"tag:ListTagValues"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"dlf:BatchCreatePartitions",
"dlf:BatchCreateTables",
"dlf:BatchDeletePartitions",
"dlf:BatchDeleteTables",
"dlf:BatchDeleteTableVersions",
"dlf:BatchGetPartitions",
"dlf:BatchGetTables",
"dlf:BatchUpdatePartitions",
"dlf:BatchUpdateTables",
"dlf:CreateCatalog",
"dlf:CreateDatabase",
"dlf:CreateFunction",
"dlf:CreatePartition",
"dlf:CreateTable",
"dlf:DeleteCatalog",
"dlf:DeleteDatabase",
"dlf:DeleteFunction",
"dlf:DeletePartition",
"dlf:DeleteTable",
"dlf:GetConfig",
"dlf:GetAsyncTaskStatus",
"dlf:DeleteTableVersion",
"dlf:GetCatalog",
"dlf:GetCatalogAccessInfo",
"dlf:GetCatalogByInstanceId",
"dlf:GetCatalogSettings",
"dlf:GetDatabase",
"dlf:GetFunction",
"dlf:GetPartition",
"dlf:GetTable",
"dlf:GetTableVersion",
"dlf:ListCatalogs",
"dlf:ListDatabases",
"dlf:ListFunctionNames",
"dlf:ListFunctions",
"dlf:ListPartitionNames",
"dlf:ListPartitions",
"dlf:ListPartitionsByExpr",
"dlf:ListPartitionsByFilter",
"dlf:ListTableNames",
"dlf:ListTables",
"dlf:ListTableVersions",
"dlf:RenamePartition",
"dlf:RenameTable",
"dlf:Search",
"dlf:SearchAcrossCatalog",
"dlf:UpdateCatalog",
"dlf:UpdateDatabase",
"dlf:UpdateFunction",
"dlf:UpdateTable",
"dlf:BatchGetPartitionColumnStatistics",
"dlf:DeletePartitionColumnStatistics",
"dlf:DeleteTableColumnStatistics",
"dlf:GetPartitionColumnStatistics",
"dlf:GetTableColumnStatistics",
"dlf:UpdateTableColumnStatistics",
"dlf:UpdatePartitionColumnStatistics",
"dlf:CreateLock",
"dlf:UnLock",
"dlf:AbortLock",
"dlf:RefreshLock",
"dlf:GetLock",
"dlf:GetDataToken",
"dlf:GetDataTokenByName",
"dlf:GrantPermissions",
"dlf:RevokePermissions",
"dlf:BatchGrantPermissions",
"dlf:BatchRevokePermissions",
"dlf:UpdatePermissions",
"dlf:ListPermissions",
"dlf:CreateRole",
"dlf:UpdateRole",
"dlf:DeleteRole",
"dlf:GetRole",
"dlf:ListRoles",
"dlf:GrantRolesToUser",
"dlf:RevokeRolesFromUser",
"dlf:GrantRoleToUsers",
"dlf:RevokeRoleFromUsers",
"dlf:UpdateRoleUsers",
"dlf:ListRoleUsers",
"dlf:ListUserRoles",
"dlf:GrantRolesToPrincipal",
"dlf:RevokeRolesFromPrincipal",
"dlf:GrantRoleToPrincipals",
"dlf:RevokeRoleFromPrincipals",
"dlf:UpdateRolePrincipals",
"dlf:BatchDeleteRoles",
"dlf:CheckPermissions",
"dlf:GetCatalogStorageStatistics",
"dlf:GetCatalogStorageIndicatorDetails",
"dlf:GetCatalogStorageRank",
"dlf:GetCatalogStorageAnalysis",
"dlf:GetDatabaseProfile",
"dlf:GetDatabaseStorageAnalysis",
"dlf:GetTableProfile",
"dlf:GetTableStorageAnalysis",
"dlf:ListPartitionProfiles",
"dlf:getLatestStorageStatisticsDate",
"dlf:SubscribeOptimize",
"dlf:GetOptimizeRegionStatus",
"dlf:GetOptimizeWorkspaceAuthorization",
"dlf:AddOptimizeWorkspace",
"dlf:ListOptimizeWorkspaces",
"dlf:CheckOptimizeWorkspaceConnection",
"dlf:DeleteOptimizeWorkspace",
"dlf:SetOptimizeEnable",
"dlf:SetOptimizePolicy",
"dlf:GetOptimizePolicy",
"dlf:AddOptimizeScheduleRule",
"dlf:ListOptimizeScheduleRules",
"dlf:DeleteOptimizeScheduleRule",
"dlf:RunOptimizeImmediately",
"dlf:GetOptimizeInfo",
"dlf:UpdateOptimizeTaskResult",
"dlf:UpdateVpcConfig",
"dlf:DescribeRegions"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"dlf-auth:ActOnBehalfOfAnotherUser"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": "dlf:GetServiceStatus",
"Resource": "*"
},
{
"Action": [
"ims:ListUserBasicInfos"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": "dlf:GetRegionStatus",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"stream:DescribeVvpInstances",
"stream:DescribeVvpNamespaces",
"stream:ListDeployments",
"stream:CreateDeployment",
"stream:UpdateDeployment",
"stream:GetDeployment",
"stream:DeleteDeployment",
"stream:GetEvents",
"stream:ListJobs",
"stream:StartJobWithParams",
"stream:StopJob",
"stream:GetJob",
"stream:ListDeploymentTargets",
"stream:ListEngineVersionMetadata",
"stream:ActOnBehalfOfAnotherUser"
],
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "fluss.aliyuncs.com"
}
}
}
]
}相关文档
该文章对您有帮助吗？