AliyunServiceRolePolicyForSFMFineTuning

更新时间:
复制为 MD 格式

AliyunServiceRolePolicyForSFMFineTuning 是专用于服务关联角色的授权策略,会在创建服务关联角色 AliyunServiceRoleForSFMFineTuning 时自动授权,以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新,请勿将本策略授权给服务关联角色之外的 RAM 身份使用。

策略详情

  • 类型:系统策略

  • 创建时间:2026-02-28 11:17:44

  • 更新时间:2026-04-14 08:56:54

  • 当前版本:v4

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "fc:ListFunctions",
        "fc:InvokeFunction",
        "fc:GetConcurrencyConfig",
        "fc:GetFunction",
        "fc:GetProvisionConfig",
        "fc:GetTrigger",
        "fc:CreateFunction",
        "fc:CreateTrigger",
        "fc:CreateVpcBinding",
        "fc:DeleteConcurrencyConfig",
        "fc:DeleteFunction",
        "fc:DeleteProvisionConfig",
        "fc:DeleteTrigger",
        "fc:DeleteVpcBinding",
        "fc:InvokeFunction",
        "fc:PutConcurrencyConfig",
        "fc:PutProvisionConfig",
        "fc:UpdateFunction",
        "fc:UpdateTrigger",
        "fc:ListConcurrencyConfigs",
        "fc:ListProvisionConfigs",
        "fc:ListTriggers",
        "fc:ListVpcBindings",
        "fc:ListInstances",
        "fc:EnableFunctionInvocation",
        "fc:DisableFunctionInvocation",
        "fc:DeleteConcurrencyConfig",
        "fc:GetConcurrencyConfig",
        "fc:ListConcurrencyConfigs",
        "fc:PutConcurrencyConfig",
        "fc:CreateLayerVersion",
        "fc:DeleteLayerVersion",
        "fc:GetLayerVersion",
        "fc:GetLayerVersionByArn",
        "fc:ListLayerVersions",
        "fc:ListLayers",
        "fc:PutLayerACL",
        "fc:CreateSession",
        "fc:GetSession",
        "fc:UpdateSession",
        "fc:ListSessions",
        "fc:PutScalingConfig",
        "fc:DeleteScalingConfig",
        "fc:GetScalingConfig",
        "fc:ListScalingConfigs",
        "fc:PublishFunctionVersion",
        "fc:ListFunctionVersions",
        "fc:DeleteFunctionVersion"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "log:GetLogStoreLogs",
        "log:GetLogStoreHistogram",
        "log:GetLogStore",
        "log:CreateLogStore",
        "log:DeleteLogStore",
        "log:CreateProject",
        "log:DeleteProject",
        "log:GetProject",
        "log:CreateIndex",
        "log:GetIndex"
      ],
      "Resource": "acs:log:*:*:project/*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "nas:ClientMount",
        "nas:DescribeCpfsAccessPoints",
        "nas:DescribeFileSystems"
      ],
      "Resource": "*"
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "fine-tuning.sfm.aliyuncs.com"
        }
      }
    },
    {
      "Effect": "Allow",
      "Action": [
        "oss:ListBuckets",
        "oss:GetBucketLocation",
        "oss:GetBucketTagging"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "oss:DoMetaQuery",
        "oss:GetBucketInfo",
        "oss:GetBucketStat",
        "oss:GetBucketTransferAcceleration",
        "oss:GetCnameToken",
        "oss:GetMetaQueryStatus",
        "oss:GetObject",
        "oss:GetObjectTagging",
        "oss:DescribeRegions",
        "oss:ListObjects",
        "oss:ListObjectVersions",
        "oss:DoMetaQuery",
        "oss:GetMetaQueryStatus"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "oss:BucketTag/bailian-finetune-access": [
            "read"
          ]
        }
      }
    }
  ]
}

相关文档