AliyunBastionhostPamFullAccess 是阿里云管理的產品系統策略,您可以將 AliyunBastionhostPamFullAccess 授權給 RAM 身份(RAM 用戶、RAM 用戶組和 RAM 角色),本策略定義了管理特權訪問管理(PAM)的權限。
策略詳情
類型:系統策略
創建時間:2020-09-21 02:03:52
更新時間:2020-09-21 02:03:52
當前版本:v1
策略內容
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"pam:*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ecs:DescribeInstances",
"vpc:DescribeVpcs",
"vpc:DescribeVpcAttribute",
"vpc:DescribeVSwitches",
"vpc:DescribeVSwitchAttributes",
"yundun-idaas:DescribeRegions",
"yundun-idaas:DescribeInstances"
],
"Resource": "*"
},
{
"Action": [
"ram:CreateServiceLinkedRole",
"ram:CheckServiceLinkedRoleExistence"
],
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "pam.aliyuncs.com"
}
}
}
],
"Version": "1"
}
相關文檔
文檔內容是否對您有幫助?