AliyunYundunBastionHostAuditOnlyAccess_访问控制(RAM)-阿里云帮助中心

AliyunYundunBastionHostAuditOnlyAccess 是阿里云管理的产品系统策略，您可以将 AliyunYundunBastionHostAuditOnlyAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理云盾堡垒机（BastionHost）的审计员权限。

策略详情

类型：系统策略
创建时间：2018-09-27 09:31:34
更新时间：2024-12-16 11:13:55
当前版本：v5

策略内容

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "yundun-bastionhost:GetInstance*",
                "yundun-bastionhost:DescribeInstance*",
                "yundun-bastionhost:QueryInstance*",
                "yundun-bastionhost:ListInstance*",
                "yundun-bastionhost:*Audit*"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": "pam:GetInstanceDetail",
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": "ram:CheckServiceLinkedRoleExistence",
            "Resource": "*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": "bastionhost.aliyuncs.com"
                }
            }
        }
    ]
}

策略详情

策略内容

相关文档