AliyunServiceRolePolicyForSddpCsf 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForSddpCsf 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2026-07-20 20:04:59
更新时间：2026-07-20 20:04:59
当前版本：v1
策略内容
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:Accept*",
"ecs:Add*",
"ecs:Allocate*",
"ecs:Apply*",
"ecs:Assign*",
"ecs:Associate*",
"ecs:Attach*",
"ecs:Authorize*",
"ecs:Batch*",
"ecs:Cancel*",
"ecs:Check*",
"ecs:Clone*",
"ecs:Configure*",
"ecs:Confirm*",
"ecs:Convert*",
"ecs:Copy*",
"ecs:Create*",
"ecs:Delete*",
"ecs:Deregister*",
"ecs:Describe*",
"ecs:Detach*",
"ecs:Disable*",
"ecs:DiskDefaultEncryption*",
"ecs:Enable*",
"ecs:End*",
"ecs:Enter*",
"ecs:Exit*",
"ecs:Export*",
"ecs:Get*",
"ecs:Hibernate*",
"ecs:Import*",
"ecs:Install*",
"ecs:Invoke*",
"ecs:Join*",
"ecs:Keep*",
"ecs:Leave*",
"ecs:List*",
"ecs:Lock*",
"ecs:Migrate*",
"ecs:Modify*",
"ecs:Open*",
"ecs:Pause*",
"ecs:Purchase*",
"ecs:Query*",
"ecs:ReActivate*",
"ecs:Reboot*",
"ecs:Redeploy*",
"ecs:ReInit*",
"ecs:Release*",
"ecs:Remove*",
"ecs:Renew*",
"ecs:Repair*",
"ecs:Replace*",
"ecs:Report*",
"ecs:Reset*",
"ecs:Resize*",
"ecs:Resume*",
"ecs:Revoke*",
"ecs:Rollback*",
"ecs:Run*",
"ecs:Send*",
"ecs:Start*",
"ecs:Stop*",
"ecs:Suspend*",
"ecs:Tag*",
"ecs:Unassign*",
"ecs:Unassociate*",
"ecs:Unlock*",
"ecs:unmount*",
"ecs:Unpause*",
"ecs:Untag*",
"ecs:Update*",
"ecs:Validate*",
"ecs:Wakeup*",
"ecs:Withdraw*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"slb:Add*",
"slb:Associate*",
"slb:Cancel*",
"slb:Check*",
"slb:Create*",
"slb:Delete*",
"slb:Describe*",
"slb:Detect*",
"slb:Diagnose*",
"slb:Disable*",
"slb:Enable*",
"slb:List*",
"slb:Migrate*",
"slb:Modify*",
"slb:Move*",
"slb:Remove*",
"slb:Service*",
"slb:Set*",
"slb:Start*",
"slb:Stop*",
"slb:Switch*",
"slb:Tag*",
"slb:UnAssociate*",
"slb:Untag*",
"slb:Update*",
"slb:Upload*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"kms:Asymmetric*",
"kms:Cancel*",
"kms:Connect*",
"kms:Create*",
"kms:Decrypt",
"kms:Delete*",
"kms:Describe*",
"kms:Disable*",
"kms:Enable*",
"kms:Encrypt",
"kms:Export*",
"kms:Generate*",
"kms:Get*",
"kms:Import*",
"kms:List*",
"kms:Open*",
"kms:Put*",
"kms:ReEncrypt*",
"kms:Release*",
"kms:Restore*",
"kms:Rotate*",
"kms:Schedule*",
"kms:Set*",
"kms:Tag*",
"kms:Untag*",
"kms:Update*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"oss:Abort*",
"oss:BatchDelete*",
"oss:Cancel*",
"oss:Check*",
"oss:Clean*",
"oss:Close*",
"oss:Complete*",
"oss:Create*",
"oss:Delete*",
"oss:Describe*",
"oss:Do*",
"oss:Export*",
"oss:Extend*",
"oss:Generate*",
"oss:Get*",
"oss:Handle*",
"oss:Head*",
"oss:Init*",
"oss:List*",
"oss:Modify*",
"oss:Open*",
"oss:Operate*",
"oss:OssCheckResult*",
"oss:Post*",
"oss:Put*",
"oss:Restore*",
"oss:Start*",
"oss:Stop*",
"oss:Update*",
"oss:Upgrade*",
"oss:Write*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"nas:Add*",
"nas:Apply*",
"nas:Attach*",
"nas:Bind*",
"nas:Cancel*",
"nas:Change*",
"nas:Create*",
"nas:Delete*",
"nas:Describe*",
"nas:Detach*",
"nas:Disable*",
"nas:Enable*",
"nas:Get*",
"nas:List*",
"nas:Modify*",
"nas:Open*",
"nas:Re*",
"nas:Set*",
"nas:Start*",
"nas:Stop*",
"nas:Tag*",
"nas:Un*",
"nas:Up*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "vpc:*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"yundun-aegis:Co*",
"yundun-aegis:De*",
"yundun-aegis:Generate*",
"yundun-aegis:Get*",
"yundun-aegis:Modify*",
"yundun-aegis:Op*",
"yundun-aegis:Un*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"yundun-sas:Abort*",
"yundun-sas:Add*",
"yundun-sas:Advance*",
"yundun-sas:Archive*",
"yundun-sas:Async*",
"yundun-sas:Batch*",
"yundun-sas:Bind*",
"yundun-sas:Can*",
"yundun-sas:Change*",
"yundun-sas:Check*",
"yundun-sas:Close*",
"yundun-sas:Co*",
"yundun-sas:De*",
"yundun-sas:Di*",
"yundun-sas:Download*",
"yundun-sas:Enable*",
"yundun-sas:Ex*",
"yundun-sas:Fi*",
"yundun-sas:Generate*",
"yundun-sas:Get*",
"yundun-sas:Grant*",
"yundun-sas:Handle*",
"yundun-sas:Ignore*",
"yundun-sas:Image*",
"yundun-sas:In*",
"yundun-sas:Join*",
"yundun-sas:List*",
"yundun-sas:Mark*",
"yundun-sas:Migrate*",
"yundun-sas:Modify*",
"yundun-sas:Op*",
"yundun-sas:Post*",
"yundun-sas:Process*",
"yundun-sas:Pu*",
"yundun-sas:Query*",
"yundun-sas:Re*",
"yundun-sas:Rollback*",
"yundun-sas:Run*",
"yundun-sas:Sa*",
"yundun-sas:Se*",
"yundun-sas:Soar*",
"yundun-sas:St*",
"yundun-sas:Submit*",
"yundun-sas:Trigger*",
"yundun-sas:Un*",
"yundun-sas:Up*",
"yundun-sas:V*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"rds:Accept*",
"rds:Activate*",
"rds:Add*",
"rds:Allocate*",
"rds:Associate*",
"rds:Attach*",
"rds:Authorize*",
"rds:Calculate*",
"rds:Cancel*",
"rds:Check*",
"rds:Clone*",
"rds:Compensate*",
"rds:Confirm*",
"rds:Copy*",
"rds:Create*",
"rds:Delete*",
"rds:Descibe*",
"rds:Describe*",
"rds:Destroy*",
"rds:Detach*",
"rds:Disable*",
"rds:Discount*",
"rds:Enable*",
"rds:Evaluate*",
"rds:Feedback*",
"rds:Get*",
"rds:Grant*",
"rds:Ha*",
"rds:Import*",
"rds:Install*",
"rds:Invoke*",
"rds:List*",
"rds:Lock*",
"rds:Migrate*",
"rds:Modify*",
"rds:PreCheck*",
"rds:Precheck*",
"rds:Purge*",
"rds:Query*",
"rds:Receive*",
"rds:Reboot*",
"rds:Rebuild*",
"rds:Recovery*",
"rds:Redeploy*",
"rds:Release*",
"rds:Remove*",
"rds:Renew*",
"rds:Replace*",
"rds:Resize*",
"rds:Restart*",
"rds:Restore*",
"rds:Retrieve*",
"rds:Revoke*",
"rds:Rds*",
"rds:Run*",
"rds:Start*",
"rds:Stop*",
"rds:Switch*",
"rds:Sync*",
"rds:Tag*",
"rds:Terminate*",
"rds:Transfer*",
"rds:Transform*",
"rds:Unassociate*",
"rds:Unlock*",
"rds:Untag*",
"rds:Update*",
"rds:Validate*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"log:Apply*",
"log:Change*",
"log:Close*",
"log:ConsumerGroup*",
"log:Create*",
"log:Delete*",
"log:Describe*",
"log:Disable*",
"log:Enable*",
"log:Get*",
"log:List*",
"log:Merge*",
"log:Open*",
"log:Post*",
"log:Put*",
"log:Split*",
"log:Tag*",
"log:Untag*",
"log:Update*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"yundun-sddp:Activate*",
"yundun-sddp:Add*",
"yundun-sddp:AssetOneClick*",
"yundun-sddp:Batch*",
"yundun-sddp:Check*",
"yundun-sddp:Clear*",
"yundun-sddp:Close*",
"yundun-sddp:Configure*",
"yundun-sddp:Copy*",
"yundun-sddp:Create*",
"yundun-sddp:Delete*",
"yundun-sddp:Deny*",
"yundun-sddp:Describe*",
"yundun-sddp:Disable*",
"yundun-sddp:Download*",
"yundun-sddp:Edit*",
"yundun-sddp:Enable*",
"yundun-sddp:Ex*",
"yundun-sddp:Get*",
"yundun-sddp:Grant*",
"yundun-sddp:Import*",
"yundun-sddp:List*",
"yundun-sddp:Load*",
"yundun-sddp:Ma*",
"yundun-sddp:Mo*",
"yundun-sddp:Open*",
"yundun-sddp:Put*",
"yundun-sddp:Query*",
"yundun-sddp:Re*",
"yundun-sddp:Save*",
"yundun-sddp:Scan*",
"yundun-sddp:Send*",
"yundun-sddp:St*",
"yundun-sddp:Sync*",
"yundun-sddp:Te*",
"yundun-sddp:Unreference*",
"yundun-sddp:Up*",
"yundun-sddp:Verify*"
],
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "csf.sddp.aliyuncs.com"
}
}
}
]
}相关文档
该文章对您有帮助吗？