AliyunServiceRoleForCloudNDR 是專用于服務(wù)關(guān)聯(lián)角色的授權(quán)策略，會在創(chuàng)建服務(wù)關(guān)聯(lián)角色 AliyunServiceRoleForCloudNDR 時自動授權(quán)，以允許服務(wù)關(guān)聯(lián)角色代您訪問其他云服務(wù)。本策略由對應(yīng)的阿里云服務(wù)按需更新，請勿將本策略授權(quán)給服務(wù)關(guān)聯(lián)角色之外的 RAM 身份使用。

策略詳情

• 類型：系統(tǒng)策略

• 創(chuàng)建時間：2024-05-27 16:58:02

• 更新時間：2024-05-27 16:58:02

• 當前版本：v6

策略內(nèi)容

{"Version":"1","Statement":[{"Action":["ecs:DescribeInstances","ecs:DescribeNetworkInterfaces"],"Resource":"*","Effect":"Allow"},{"Action":["slb:DescribeLoadBalancers"],"Resource":"*","Effect":"Allow"},{"Action":["nlb:ListLoadBalancers"],"Resource":"*","Effect":"Allow"},{"Action":["alb:GetLoadBalancerAttribute","alb:ListLoadBalancers"],"Resource":"*","Effect":"Allow"},{"Action":["vpc:DescribeEipAddresses","vpc:DescribeNatGateways","vpc:DescribeIpv6Addresses"],"Resource":"*","Effect":"Allow"},{"Action":["log:DescribeService","log:EnableService"],"Resource":"*","Effect":"Allow"},{"Action":["log:ListProject","log:ListLogStores"],"Resource":"acs:log:*:*:project/*","Effect":"Allow"},{"Action":["log:PostLogStoreLogs","log:GetProject","log:GetLogStore","log:CreateLogStore","log:CreateProject","log:GetIndex","log:CreateIndex","log:UpdateIndex","log:CreateDashboard","log:ClearLogStoreStorage","log:UpdateLogStore","log:UpdateDashboard","log:DeleteProject","log:CreateSavedSearch","log:UpdateSavedSearch","log:DeleteLogStore"],"Resource":"acs:log:*:*:project/ndr*","Effect":"Allow"},{"Action":"yundun-aegis:DescribeAccesskeyLeakList","Resource":"*","Effect":"Allow"},{"Action":"ram:DeleteServiceLinkedRole","Resource":"*","Effect":"Allow","Condition":{"StringEquals":{"ram:ServiceName":"ndr.aliyuncs.com"}}}]}

相關(guān)文檔

• 權(quán)限策略基本元素

• 服務(wù)關(guān)聯(lián)角色