AliyunDLAFullAccess 是阿里云管理的產品系統策略,您可以將 AliyunDLAFullAccess 授權給 RAM 身份(RAM 用戶、RAM 用戶組和 RAM 角色),本策略定義了管理Data Lake Analytics的權限。
策略詳情
類型:系統策略
創建時間:2018-10-12 05:05:13
更新時間:2021-08-18 08:29:52
當前版本:v6
策略內容
{
"Version": "1",
"Statement": [
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "openanalytics.aliyuncs.com"
}
}
},
{
"Action": "openanalytics:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:ListRoles",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "dms:LoginDatabase",
"Resource": "acs:openanalytics:*:*:*",
"Effect": "Allow"
},
{
"Action": "ram:PassRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"acs:Service": "openanalytics.aliyuncs.com"
}
}
},
{
"Action": [
"dts:DescribeSubscriptionInstances",
"dts:DescribeConsumerGroup",
"dts:DescribeDtsJobDetail"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ecs:DescribeSecurityGroups"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"alikafka:ListInstance",
"alikafka:ListTopic",
"alikafka:QueryMessage"
],
"Resource": "acs:alikafka:*:*:*",
"Effect": "Allow"
},
{
"Action": [
"lindorm:GetSpecifiedLindormInstanceList",
"lindorm:GetLdfsDirectories",
"lindorm:CreateLdfsDirectory",
"lindorm:CheckLdfsUserPermission",
"lindorm:GetLtsStreams",
"lindorm:GetLtsStreamDetails"
],
"Resource": "*",
"Effect": "Allow"
}
]
}
相關文檔
文檔內容是否對您有幫助?