AliyunNASReadOnlyAccess 是阿里云管理的產品系統策略，您可以將 AliyunNASReadOnlyAccess 授權給 RAM 身份（RAM 用戶、RAM 用戶組和 RAM 角色），本策略定義了只讀訪問文件存儲服務（NAS）的權限。

策略詳情

• 類型：系統策略

• 創建時間：2016-03-29 03:34:14

• 更新時間：2017-04-27 16:48:07

• 當前版本：v1

策略內容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "nas:Describe*",
        "nas:Get*",
        "nas:List*"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "bssapi:QueryResourcePackageInstances",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "cms:QueryMetricList",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "vpc:DescribeVpcs",
        "vpc:DescribeVSwitches"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "kms:ListAliasesByKeyId",
        "kms:ListKeys"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:GetRole",
      "Resource": [
        "acs:ram:*:*:role/aliyunservicerolefornasstandard",
        "acs:ram:*:*:role/aliyunservicerolefornasextreme",
        "acs:ram:*:*:role/aliyunservicerolefornasencryption",
        "acs:ram:*:*:role/aliyunservicerolefornaslogdelivery",
        "acs:ram:*:*:role/aliyunservicerolefornasecshandler",
        "acs:ram:*:*:role/aliyunservicerolefornascpfsnetwork",
        "acs:ram:*:*:role/aliyunservicerolefornascpfsclient",
        "acs:ram:*:*:role/aliyunservicerolefornasossdataflow",
        "acs:ram:*:*:role/aliyunservicerolefornaseventnotification",
        "acs:ram:*:*:role/aliyunnastieringrole",
        "acs:ram:*:*:role/aliyunnasencryptdefaultrole",
        "acs:ram:*:*:role/aliyunnasdefaultrole",
        "acs:ram:*:*:role/aliyunnaslogarchiverole",
        "acs:ram:*:*:role/aliyunnasmanageenirole"
      ],
      "Effect": "Allow"
    }
  ]
}

相關文檔

• 權限策略基本元素

• 為RAM用戶授權

• 為RAM用戶組授權

• 為RAM角色授權