AliyunServiceRolePolicyForRdsMyBaseProprietary 是专用于服务关联角色的授权策略,会在创建服务关联角色 AliyunServiceRoleForRdsMyBaseProprietary 时自动授权,以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新,请勿将本策略授权给服务关联角色之外的 RAM 身份使用。
策略详情
类型:系统策略
创建时间:2022-02-24 11:34:32
更新时间:2022-02-24 11:34:32
当前版本:v1
策略内容
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:CreateInstance",
"ecs:CreateOrder",
"ecs:RunInstances",
"ecs:RenewInstance",
"ecs:DescribeRegions",
"ecs:DescribeZones",
"ecs:DescribeImages",
"ecs:StartInstance",
"ecs:DescribeInstances",
"ecs:DescribeDisks",
"ecs:DescribeInstanceHistoryEvents",
"ecs:DescribeInstancesFullStatus",
"ecs:DescribeDisksFullStatus",
"ecs:ModifyInstanceChargeType",
"ecs:ModifyPrepayInstanceSpec",
"ecs:DescribeResourcesModification",
"ecs:DescribeAvailableResource",
"ecs:DescribeBandwidthLimitation",
"ecs:DescribeKeyPairs",
"ecs:DescribePrice",
"ecs:DescribeInstanceHistoryEvents",
"ecs:AcceptInquiredSystemEvent",
"ecs:DescribeTasks",
"ecs:JoinResourceGroup",
"ecs:ReportInstancesStatus",
"ecs:ModifyInstanceAttribute",
"ecs:StartInstances",
"ecs:DescribeLocalDiskRepairActivities"
],
"Resource": "*"
},
{
"Effect":"Allow",
"Action":[
"ecs:DeleteInstances",
"ecs:RebootInstances",
"ecs:StopInstances",
"ecs:RedeployInstance",
"ecs:RebootInstance",
"ecs:DeleteInstance",
"ecs:StopInstance",
"ecs:InstallCloudAssistant",
"ecs:DescribeCloudAssistantStatus",
"ecs:RunCommand",
"ecs:DescribeInvocationResults"
],
"Resource": [
"acs:ecs:*:*:*"
],
"Condition": {
"StringLike": {
"ecs:tag/acs:rds:mybaseHost": "mybase-*"
}
}
},
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVSwitches",
"vpc:DescribeVpcs"
],
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "mybase-proprietary.rds.aliyuncs.com"
}
}
}
]
}
相关文档
文档内容是否对您有帮助?