AliyunServiceRolePolicyForFunAgent

AliyunServiceRolePolicyForFunAgent 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForFunAgent 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。

策略详情

• 类型：系统策略

• 创建时间：2025-08-15 14:05:36

• 更新时间：2025-09-10 11:09:31

• 当前版本：v5

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "apig:*Gateway*",
        "apig:*HttpApi*",
        "apig:*Domain*",
        "apig:*Service*",
        "apig:*Environment*",
        "apig:*HttpApiRoute*",
        "apig:*Policies*",
        "apig:*Policy*",
        "apig:*Source*",
        "apig:*McpServer*",
        "apig:*Plugin*"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "fc:ListFunctions",
        "fc:ListConcurrencyConfigs",
        "fc:DeleteConcurrencyConfig",
        "fc:PutConcurrencyConfig",
        "fc:DeleteFunction",
        "fc:UpdateFunction",
        "fc:CreateFunction",
        "fc:GetConcurrencyConfig",
        "fc:GetFunction",
        "fc:ListAliases",
        "fc:CreateAlias",
        "fc:UpdateAlias",
        "fc:GetAlias",
        "fc:DeleteAlias",
        "fc:ListTriggers",
        "fc:CreateTrigger",
        "fc:UpdateTrigger",
        "fc:GetTrigger",
        "fc:DeleteTrigger",
        "fc:PublishFunctionVersion",
        "fc:ListFunctionVersions",
        "fc:DeleteFunctionVersion",
        "fc:InvokeFunction"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Effect": "Allow",
      "Action": "ram:PassRole",
      "Resource": "acs:ram::*:role/*",
      "Condition": {
        "StringEquals": {
          "acs:Service": [
            "log.aliyuncs.com",
            "ots.aliyuncs.com",
            "fc.aliyuncs.com",
            "oss.aliyuncs.com"
          ]
        }
      }
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "funagent.devs.aliyuncs.com"
        }
      }
    }
  ]
}

相关文档

• 权限策略基本元素

• 服务关联角色