授权信息

访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 Web应用防火墙 为 RAM 权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。 Web应用防火墙 的 RAM 代码(RamCode)为 yundun-waf ,支持的授权粒度为 资源级

权限策略通用结构

权限策略支持 JSON 格式,其通用结构如下:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

各字段含义如下:

  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。

  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)

  • Resource:受操作影响的具体对象,您可以使用资源 ARN 来描述指定资源。具体信息,请参见资源(Resource)

  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)

    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素

    • Condition_key:条件关键字。

    • Condition_value:条件关键字对应的值。

操作(Action)

下表是Web应用防火墙定义的操作,这些操作可以在 RAM 权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:

  • 操作:是指具体的权限点。

  • API:是指操作对应的 API 接口。

  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。

  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:

    • 对于必选的资源类型,用前面加 * 表示。

    • 对于不支持资源级授权的操作,用全部资源表示。

  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字

  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。

操作

API

访问级别

资源类型

条件关键字

关联操作

yundun-waf:DescribeDomainValidateConfig DescribeDomainValidateConfig get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAlarmBanner DescribeAlarmBanner get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseTemplates DescribeDefenseTemplates list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeNetworkFlowTopNMetric DescribeNetworkFlowTopNMetric get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudClusterServers DescribeHybridCloudClusterServers get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribePeakTrend DescribePeakTrend get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyCustomBaseRule ModifyCustomBaseRule update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudCluster DescribeHybridCloudCluster get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudClusters DescribeHybridCloudClusters get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAlarmList DescribeAlarmList get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseResourceXff ModifyDefenseResourceXff update

*DefenseResource

acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

yundun-waf:RollbackMigrateTask RollbackMigrateTask update

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyWebFingerScanStatus ModifyWebFingerScanStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteLogDeliveryConfig DeleteLogDeliveryConfig delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefaultHttps ModifyDefaultHttps update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeNotices DescribeNotices list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteDefenseAsset DeleteDefenseAsset delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudPullClusterSdkRule DescribeHybridCloudPullClusterSdkRule get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeWebSourceIpPv DescribeWebSourceIpPv list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudPullXagentRule DescribeHybridCloudPullXagentRule get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribePocFunctions DescribePocFunctions get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMajorProtectionIntelligenceDetail DescribeMajorProtectionIntelligenceDetail get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteDefenseResourceGroup DeleteDefenseResourceGroup delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeVisitUas DescribeVisitUas get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserEventTrend DescribeUserEventTrend get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudClusterRules DescribeHybridCloudClusterRules get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAccountDelegatedStatus DescribeAccountDelegatedStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeChargeModule DescribeChargeModule get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSlbAttackUrl DescribeSlbAttackUrl list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecSensitiveDomainStatistic DescribeApisecSensitiveDomainStatistic get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudUnassignedMachines DescribeHybridCloudUnassignedMachines get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyHybridCloudGroupExpansionServer ModifyHybridCloudGroupExpansionServer update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAssetDomainAttacks DescribeAssetDomainAttacks get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserDomainVerifyWhitelist DescribeUserDomainVerifyWhitelist get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyRuleGroup ModifyRuleGroup update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeVisitTopIp DescribeVisitTopIp get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudSdkServers DescribeHybridCloudSdkServers get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ReCreateCloudResource ReCreateCloudResource none

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseAssets DescribeDefenseAssets list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRuleHitsTopUa DescribeRuleHitsTopUa get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMigrateDomains DescribeMigrateDomains get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudUser DescribeHybridCloudUser get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateApiExport CreateApiExport create

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyTemplateResources ModifyTemplateResources update

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseRuleCache ModifyDefenseRuleCache update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeNetworkFlowTimeSeriesMetric DescribeNetworkFlowTimeSeriesMetric get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteBotProtectionTest DeleteBotProtectionTest delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRuleGroups DescribeRuleGroups get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ReleaseInstance ReleaseInstance delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSensitiveApiStatistic DescribeSensitiveApiStatistic get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseResourceGroup DescribeDefenseResourceGroup get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSensitiveStatistic DescribeSensitiveStatistic get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyHybridCloudServer ModifyHybridCloudServer update

*全部资源

*

acs:ResourceGroupId

yundun-waf:ChangeResourceGroup ChangeResourceGroup update

*DefenseResource

acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

yundun-waf:DescribeThreatEventAttackTimeDistribute DescribeThreatEventAttackTimeDistribute list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAssetDomainExports DescribeAssetDomainExports get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotRuleTypeGraph DescribeBotRuleTypeGraph get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecLogDeliveries DescribeApisecLogDeliveries get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeThreatEventTargetDistribute DescribeThreatEventTargetDistribute list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeVagentCommon DescribeVagentCommon get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyHybridCloudClusterBypassStatus ModifyHybridCloudClusterBypassStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserEventType DescribeUserEventType get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseGroupValidResources DescribeDefenseGroupValidResources list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserSlsLogRegions DescribeUserSlsLogRegions get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseAsset DescribeDefenseAsset get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSlsAuthStatus DescribeSlsAuthStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseTemplateValidGroups DescribeDefenseTemplateValidGroups list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAttackTypeSummary DescribeAttackTypeSummary get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateDefenseTemplate CreateDefenseTemplate create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotRuleStatisticsInfos DescribeBotRuleStatisticsInfos get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyHybridCloudSdkPullinStatus ModifyHybridCloudSdkPullinStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecSuggestions DescribeApisecSuggestions get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateMigrateTask CreateMigrateTask create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeNotice DescribeNotice get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ListTagResources ListTagResources get

*全部资源

*

yundun-waf:DeleteHybridCloudClusterRule DeleteHybridCloudClusterRule delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserAsset DescribeUserAsset get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSensitiveOutboundStatistic DescribeSensitiveOutboundStatistic get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeExclusiveIpCount DescribeExclusiveIpCount get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserAbnormalType DescribeUserAbnormalType get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeFlowChart DescribeFlowChart get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ClearMajorProtectionBlackIp ClearMajorProtectionBlackIp delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeChargeResult DescribeChargeResult get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecStatistics DescribeApisecStatistics get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyPauseProtectionStatus ModifyPauseProtectionStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecAssetTrend DescribeApisecAssetTrend get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeGrayFeature DescribeGrayFeature get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMigrateTask DescribeMigrateTask get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeFreeUserEventCount DescribeFreeUserEventCount get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeVerifyContent DescribeVerifyContent get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseRule ModifyDefenseRule update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseTemplateValidAssets DescribeDefenseTemplateValidAssets list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudSupportRegions DescribeHybridCloudSupportRegions get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecDefenseRules DescribeApisecDefenseRules get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecAbnormals DescribeApisecAbnormals get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDomains DescribeDomains get

*全部资源

*

yundun-waf:DescribeDefenseResourceGroups DescribeDefenseResourceGroups list

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateHybridCloudGroup CreateHybridCloudGroup create

*全部资源

*

acs:ResourceGroupId

yundun-waf:CopyRuleGroup CopyRuleGroup create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeResourceLogFieldConfig DescribeResourceLogFieldConfig get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseSceneConfig DescribeDefenseSceneConfig get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeResourceRegionId DescribeResourceRegionId list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeWebAttackTypePv DescribeWebAttackTypePv list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeThreatEventAttackTypeDistribute DescribeThreatEventAttackTypeDistribute list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSlbAttackCount DescribeSlbAttackCount get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserLogFieldConfig DescribeUserLogFieldConfig get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyElasticityWafLogStatus ModifyElasticityWafLogStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecEvents DescribeApisecEvents get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSceneHitsTopResource DescribeSceneHitsTopResource get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeFlowTopUrl DescribeFlowTopUrl get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMajorProtectionIntelligenceCount DescribeMajorProtectionIntelligenceCount get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeInstance DescribeInstance get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseAsset ModifyDefenseAsset update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMultiCloudPullLogDockingConfig DescribeMultiCloudPullLogDockingConfig get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecUserOperations DescribeApisecUserOperations get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyHybridCloudGroupShrinkServer ModifyHybridCloudGroupShrinkServer update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteDefenseRule DeleteDefenseRule delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCertDetail DescribeCertDetail get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteMajorProtectionBlackIp DeleteMajorProtectionBlackIp delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateDefenseResource CreateDefenseResource create

*全部资源

*

yundun-waf:DescribeElasticBills DescribeElasticBills get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeInstanceCompatible DescribeInstanceCompatible get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ConfirmMigrateTask ConfirmMigrateTask update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCloudNativeOpenInstanceNumber DescribeCloudNativeOpenInstanceNumber get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAssetRootDomains DescribeAssetRootDomains get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSceneAttackLogs DescribeSceneAttackLogs get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreatePostpaidInstance CreatePostpaidInstance create

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateTgwBySyncResource CreateTgwBySyncResource create

*全部资源

*

yundun-waf:DescribeResourceLogStatus DescribeResourceLogStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteDomain DeleteDomain delete

*全部资源

*

yundun-waf:DescribeMigrateBeforeAfter DescribeMigrateBeforeAfter get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribePrepayDailyBills DescribePrepayDailyBills get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudServerRegions DescribeHybridCloudServerRegions get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSceneAttackTypePv DescribeSceneAttackTypePv get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateMajorProtectionBlackIpV2 CreateMajorProtectionBlackIpV2 create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteTgw DeleteTgw delete

*全部资源

*

yundun-waf:DescribeDefenseTemplate DescribeDefenseTemplate get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyMajorProtectionBlackIp ModifyMajorProtectionBlackIp update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteExpiredMajorProtectionBlackIp DeleteExpiredMajorProtectionBlackIp delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeThreatEventSourceIpDistribute DescribeThreatEventSourceIpDistribute list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRobotStatisticsInfos DescribeRobotStatisticsInfos list

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecModuleStatus ModifyApisecModuleStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUploadBlackIpFormInfo DescribeUploadBlackIpFormInfo get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateMigrateDomains CreateMigrateDomains create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRobotHitsTopUrl DescribeRobotHitsTopUrl get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCustomBaseRuleCompileResult DescribeCustomBaseRuleCompileResult get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecConfig ModifyApisecConfig update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudBasicMonitor DescribeHybridCloudBasicMonitor get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserWafLogStatus DescribeUserWafLogStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudPullLuaSdk DescribeHybridCloudPullLuaSdk get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserAbnormalTrend DescribeUserAbnormalTrend get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecAbnormals ModifyApisecAbnormals update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeThreatEvent DescribeThreatEvent list

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateHybridCloudCluster CreateHybridCloudCluster create

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyCloudResource ModifyCloudResource update

*DefenseResource

acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

yundun-waf:DescribeWebRegionPv DescribeWebRegionPv list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecSlsProjects DescribeApisecSlsProjects get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBaseSystemRules DescribeBaseSystemRules get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserApiRequest DescribeUserApiRequest get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyAssetCenterStatus ModifyAssetCenterStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeLogDeliveryConfig DescribeLogDeliveryConfig get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeWebAttackLogs DescribeWebAttackLogs list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribePunishedDomains DescribePunishedDomains get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyLogDeliveryConfig ModifyLogDeliveryConfig create

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateDomain CreateDomain create

*全部资源

*

yundun-waf:ModifyHybridCloudGroup ModifyHybridCloudGroup update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBaseCustomRules DescribeBaseCustomRules get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMajorProtectionBlackIps DescribeMajorProtectionBlackIps get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudProtectableCount DescribeHybridCloudProtectableCount get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserHourlyBill DescribeUserHourlyBill list

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseResourceGroup ModifyDefenseResourceGroup update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteCloudResource DeleteCloudResource delete

*DefenseResource

acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

yundun-waf:DescribeSecurityEventLogs DescribeSecurityEventLogs get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBaseRuleChangeLog DescribeBaseRuleChangeLog get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRule DescribeRule get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecStatus ModifyApisecStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCommonLogFields DescribeCommonLogFields list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecEventDomainStatistic DescribeApisecEventDomainStatistic get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAntiscanStatisticsInfo DescribeAntiscanStatisticsInfo list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteDefenseResource DeleteDefenseResource delete

*DefenseResource

acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

yundun-waf:DescribeRobotHitsTopClientId DescribeRobotHitsTopClientId get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateRuleGroup CreateRuleGroup create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSceneDefenseRules DescribeSceneDefenseRules get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudUnsupportPorts DescribeHybridCloudUnsupportPorts list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMajorProtectionBlackIp DescribeMajorProtectionBlackIp get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyUserWafLogStatus ModifyUserWafLogStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyUserLogFieldConfig ModifyUserLogFieldConfig update

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateInstance CreateInstance create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeResourceInstanceCerts DescribeResourceInstanceCerts get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseResources DescribeDefenseResources list

*全部资源

*

yundun-waf:CreateLogDeliveryConfig CreateLogDeliveryConfig create

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateSM2Cert CreateSM2Cert create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAssetSubDomains DescribeAssetSubDomains get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDomainUsedPorts DescribeDomainUsedPorts get

*全部资源

*

acs:ResourceGroupId

yundun-waf:UploadMajorProtectionBlackIp UploadMajorProtectionBlackIp create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeFlowTopResource DescribeFlowTopResource get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotRuleActionGraph DescribeBotRuleActionGraph get

*全部资源

*

acs:ResourceGroupId

yundun-waf:AddIpToBlackWhiteList AddIpToBlackWhiteList create

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDomainPunishStatus ModifyDomainPunishStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecProtectionResources DescribeApisecProtectionResources list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseTemplateValidResources DescribeDefenseTemplateValidResources list

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateSlsLogStore CreateSlsLogStore create

*全部资源

*

acs:ResourceGroupId

yundun-waf:VerifyDomainOwner VerifyDomainOwner update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseRuleStatistics DescribeDefenseRuleStatistics get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeFreeUserEventTypes DescribeFreeUserEventTypes get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateCustomBaseRule CreateCustomBaseRule create

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseTemplate ModifyDefenseTemplate update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeFreeUserEvents DescribeFreeUserEvents get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecAbnormalDomainStatistic DescribeApisecAbnormalDomainStatistic get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRuleHitsTopClientIp DescribeRuleHitsTopClientIp get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseResource DescribeDefenseResource get

*DefenseResource

acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

yundun-waf:DescribeRegularRules DescribeRegularRules get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRuleHitsTopUrl DescribeRuleHitsTopUrl get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CopyDefenseTemplate CopyDefenseTemplate create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSceneHitsTopClientIp DescribeSceneHitsTopClientIp get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseScenes DescribeDefenseScenes list

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyResourceLogDeliveryStatus ModifyResourceLogDeliveryStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecProtectionGroups DescribeApisecProtectionGroups list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRuleHitsTopResource DescribeRuleHitsTopResource get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeResourceLogDeliveryStatus DescribeResourceLogDeliveryStatus list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteApisecEvents DeleteApisecEvents delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeWebFingerScanStatus DescribeWebFingerScanStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseResourceNames DescribeDefenseResourceNames list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudProcessMonitor DescribeHybridCloudProcessMonitor get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseTemplateStatus ModifyDefenseTemplateStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyResourceLogStatus ModifyResourceLogStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecApiResource ModifyApisecApiResource update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSensitiveDetectionResult DescribeSensitiveDetectionResult get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefaultHttps DescribeDefaultHttps get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyRulesInGroup ModifyRulesInGroup update

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseRuleStatus ModifyDefenseRuleStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeIpAbroadCountryInfos DescribeIpAbroadCountryInfos list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCloudResourceAccessedPorts DescribeCloudResourceAccessedPorts get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSecurityEventTimeSeriesMetric DescribeSecurityEventTimeSeriesMetric get

*全部资源

*

acs:ResourceGroupId

yundun-waf:SyncProductInstance SyncProductInstance create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeResponseCodeTrendGraph DescribeResponseCodeTrendGraph get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRoleAuthStatus DescribeRoleAuthStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyPrepayWafLogStatus ModifyPrepayWafLogStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSensitiveRequestLog DescribeSensitiveRequestLog get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteRuleGroup DeleteRuleGroup delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSensitiveOutboundTrend DescribeSensitiveOutboundTrend get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateDefenseResourceGroup CreateDefenseResourceGroup create

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateCustomAssetDomain CreateCustomAssetDomain create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribePauseProtectionStatus DescribePauseProtectionStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudResources DescribeHybridCloudResources get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateDefenseAsset CreateDefenseAsset create

*全部资源

*

acs:ResourceGroupId

yundun-waf:ListTagValues ListTagValues get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseRule DescribeDefenseRule get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRobotOverview DescribeRobotOverview none

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeResourcePort DescribeResourcePort get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAssetDomainStatisticsInfo DescribeAssetDomainStatisticsInfo get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ListTagKeys ListTagKeys list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSceneHitsTopUrl DescribeSceneHitsTopUrl get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeTgwAccessedPorts DescribeTgwAccessedPorts get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeTgwDomainBindings DescribeTgwDomainBindings get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteDefenseTemplate DeleteDefenseTemplate delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRuleHitsTopTuleType DescribeRuleHitsTopTuleType get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUserTraffic DescribeUserTraffic get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecLogDelivery ModifyApisecLogDelivery update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotProtectionTestResult DescribeBotProtectionTestResult get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateBotProtectionTest CreateBotProtectionTest create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseRules DescribeDefenseRules list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotRuleInfos DescribeBotRuleInfos get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeUnprotectAssetSubDomainStatisticsInfo DescribeUnprotectAssetSubDomainStatisticsInfo get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMajorProtectionIntelligenceInfos DescribeMajorProtectionIntelligenceInfos get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecRules DescribeApisecRules get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAclStatisticsInfo DescribeAclStatisticsInfo list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudClusterRule DescribeHybridCloudClusterRule get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateApisecRule CreateApisecRule create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeLogDeliveryConfigs DescribeLogDeliveryConfigs list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeAbnormalCloudResources DescribeAbnormalCloudResources none

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMigrateCloudNativeResources DescribeMigrateCloudNativeResources get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudPullPostXagentRule DescribeHybridCloudPullPostXagentRule get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateMigratePreCheck CreateMigratePreCheck create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribePortsBindToTgw DescribePortsBindToTgw get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeComplianceRules DescribeComplianceRules get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeThreatEventAttackToolDistribute DescribeThreatEventAttackToolDistribute list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseResourceTemplates DescribeDefenseResourceTemplates list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDomainDNSRecord DescribeDomainDNSRecord get

*全部资源

*

acs:ResourceGroupId

yundun-waf:RefreshMigrateCloudNativeResources RefreshMigrateCloudNativeResources create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMigratePreCheckResult DescribeMigratePreCheckResult get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeProductInstances DescribeProductInstances get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMigrateCheckResult DescribeMigrateCheckResult get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyMemberAccount ModifyMemberAccount update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotAppKey DescribeBotAppKey get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyHybridCloudClusterRule ModifyHybridCloudClusterRule update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotAttackInfos DescribeBotAttackInfos get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecRule ModifyApisecRule update

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateMemberAccounts CreateMemberAccounts create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeTemplateResources DescribeTemplateResources list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApiExports DescribeApiExports get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecSlsLogStores DescribeApisecSlsLogStores get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSecurityEventTopNMetric DescribeSecurityEventTopNMetric get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecApiResources DescribeApisecApiResources get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRobotHitsTopClientIp DescribeRobotHitsTopClientIp get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCloudResourceAccessPortDetails DescribeCloudResourceAccessPortDetails get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSensitiveRequests DescribeSensitiveRequests list

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateMigrateCloudNativeResource CreateMigrateCloudNativeResource create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeTemplateResourceCount DescribeTemplateResourceCount list

*全部资源

*

acs:ResourceGroupId

yundun-waf:TagResources TagResources create

*DefenseResource

acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

yundun-waf:CreateCerts CreateCerts create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBaseRuleVersion DescribeBaseRuleVersion get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteApisecAbnormals DeleteApisecAbnormals delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:UntagResources UntagResources delete

*DefenseResource

acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

yundun-waf:DescribeResourceSupportRegions DescribeResourceSupportRegions get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotRuleActionHitsTopClientIp DescribeBotRuleActionHitsTopClientIp get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyResourceLogFieldConfig ModifyResourceLogFieldConfig update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSensitiveOutboundDistribution DescribeSensitiveOutboundDistribution get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseResourceOwnerUid DescribeDefenseResourceOwnerUid list

*全部资源

*

acs:ResourceGroupId

yundun-waf:RollbackMigrateDomains RollbackMigrateDomains update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudGroups DescribeHybridCloudGroups list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteMemberAccount DeleteMemberAccount delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMajorProtectionOverview DescribeMajorProtectionOverview get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecMatchedHosts DescribeApisecMatchedHosts get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBotIntelligenceInfos DescribeBotIntelligenceInfos get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeMemberAccounts DescribeMemberAccounts list

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyDefenseSceneConfig ModifyDefenseSceneConfig update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBlockRequestInfo DescribeBlockRequestInfo get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateDefenseRule CreateDefenseRule create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteCustomBaseRule DeleteCustomBaseRule delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDomainDetail DescribeDomainDetail get

*全部资源

*

yundun-waf:DescribeSlsLogStoreStatus DescribeSlsLogStoreStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:RollbackMigrateCloudNativeResource RollbackMigrateCloudNativeResource create

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyTgwDomainBindingProduct ModifyTgwDomainBindingProduct update

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyMigrateDomainsGrayscale ModifyMigrateDomainsGrayscale create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeThreatEventDetail DescribeThreatEventDetail get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateHybridCloudClusterRule CreateHybridCloudClusterRule create

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecLogDeliveryStatus ModifyApisecLogDeliveryStatus update

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateCloudResource CreateCloudResource create

*全部资源

*

yundun-waf:ModifyDomain ModifyDomain update

*全部资源

*

yundun-waf:DeleteApisecRule DeleteApisecRule delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteDefenseRuleBlockIp DeleteDefenseRuleBlockIp delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyHybridCloudPushSdkInfo ModifyHybridCloudPushSdkInfo update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeBaseRuleStaticsInfo DescribeBaseRuleStaticsInfo get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCnameCount DescribeCnameCount get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDDoSStatus DescribeDDoSStatus get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateDefenseAutoRule CreateDefenseAutoRule create

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateAssetDomainExport CreateAssetDomainExport create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeDefenseResourceGroupNames DescribeDefenseResourceGroupNames list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudLogDockingConfig DescribeHybridCloudLogDockingConfig get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyApisecEvents ModifyApisecEvents update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCerts DescribeCerts get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyMigrateSuggestion ModifyMigrateSuggestion update

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRuleHitsTopRuleId DescribeRuleHitsTopRuleId get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeWafSourceIpSegment DescribeWafSourceIpSegment get

*全部资源

*

acs:ResourceGroupId

yundun-waf:InitializeWafOperationRole InitializeWafOperationRole create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DeleteHybridCloudGroup DeleteHybridCloudGroup delete

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeInstanceForCms DescribeInstanceForCms get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeFreeUserAssetCount DescribeFreeUserAssetCount get

*全部资源

*

acs:ResourceGroupId

yundun-waf:ModifyHybridCloudCluster ModifyHybridCloudCluster update

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreateMajorProtectionBlackIp CreateMajorProtectionBlackIp create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeCloudResources DescribeCloudResources list

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeInstanceExtend DescribeInstanceExtend get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeRuleGroupAssociatedTemplates DescribeRuleGroupAssociatedTemplates get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeHybridCloudResourceDetail DescribeHybridCloudResourceDetail get

*全部资源

*

acs:ResourceGroupId

yundun-waf:CreatePocFunction CreatePocFunction create

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeApisecConfig DescribeApisecConfig get

*全部资源

*

acs:ResourceGroupId

yundun-waf:DescribeSlsLogStore DescribeSlsLogStore get

*全部资源

*

acs:ResourceGroupId

资源(Resource)

下表是Web应用防火墙定义的资源,这些资源可以在 RAM 权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源 ARN 是资源在阿里云上的唯一标识。具体说明如下:

  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。

  • *表示全部。例如:

    • {#resourceType}*时:表示全部资源。

    • {#regionId}*时:表示全部地域。

    • {#accountId}*时:表示全部阿里云账号。

资源类型

资源 ARN

DefenseResource
  • acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

条件(Condition)

下表是Web应用防火墙 定义的产品级条件关键字,这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用,用来描述授予权限的条件。以下仅列举产品级的条件关键字,阿里云定义的通用条件关键字也同样适用Web应用防火墙

其中,数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符,否则无法匹配策略语句,授权行为无效。数据类型与条件运算符的对应关系,请参见条件操作类型

条件关键字

描述

类型

acs:ResourceGroupId 资源组ID String

相关操作

您可以创建自定义权限策略,并将权限策略授予 RAM 用户、RAM 用户组或 RAM 角色。具体操作如下: