AliyunServiceRolePolicyForNis 是專用于服務關聯角色的授權策略,會在創建服務關聯角色 AliyunServiceRoleForNis 時自動授權,以允許服務關聯角色代您訪問其他云服務。本策略由對應的阿里云服務按需更新,請勿將本策略授權給服務關聯角色之外的 RAM 身份使用。
策略詳情
類型:系統策略
創建時間:2021-10-08 11:11:45
更新時間:2023-04-27 03:54:59
當前版本:v7
策略內容
{
"Version": "1",
"Statement": [
{
"Action": [
"ecs:InvokeCommand",
"ecs:StopInvocation",
"ecs:DescribeCloudAssistantStatus",
"ecs:DescribeCommands",
"ecs:DescribeInvocations",
"ecs:DescribeInvocationResults"
],
"Resource": [
"acs:ecs:*:*:instance/*",
"acs:ecs:*:*:command/cmd-ACS-SLB-Diagnosis*"
],
"Effect": "Allow"
},
{
"Action": [
"dts:DescribeDtsJobs",
"vpc:UpgradeVpnGatewayFirmware",
"quotas:ListProductQuotas",
"cms:DescribeMetricLast",
"bssapi:QueryAvailableInstances",
"ecs:DescribeInstances",
"ecs:DescribeSecurityGroups",
"ecs:DescribeSecurityGroupAttribute",
"ecs:DescribeSecurityGroupReferences",
"ecs:DescribeNetworkInterfaces",
"alb:ListLoadBalancers",
"alb:GetLoadBalancerAttribute",
"slb:Describe*",
"nlb:ListLoadBalancers",
"nlb:GetListenerAttribute",
"nlb:ListServerGroups",
"nlb:ListServerGroupServers",
"nlb:ListListeners",
"vpc:Describe*",
"vpc:List*",
"vpc:Get*",
"vpc:CreateFlowlog",
"vpc:DeleteFlowLog",
"vpc:UpgradeVpnGatewayFirmware",
"vpc:DiagnoseVpnConnectionsHistory",
"cen:Describe*",
"cen:List*",
"cen:CreateFlowlog",
"cen:DeleteFlowlog",
"privatelink:List*",
"privatelink:Get*",
"ga:Describe*",
"ga:List*",
"ga:Get*",
"ga:Check*",
"ga:Query*",
"expressconnectrouter:Describe*",
"expressconnectrouter:List*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "nis.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "flowlog.cen.aliyuncs.com"
}
}
}
]
}
相關文檔
文檔內容是否對您有幫助?