訪(fǎng)問(wèn)控制(RAM)是阿里云提供的管理用戶(hù)身份與資源訪(fǎng)問(wèn)權(quán)限的服務(wù)。使用RAM可以讓您避免與其他用戶(hù)共享阿里云賬號(hào)密鑰,并可按需為用戶(hù)授予最小權(quán)限。RAM中使用權(quán)限策略描述授權(quán)的具體內(nèi)容。
本文為您介紹專(zhuān)有網(wǎng)絡(luò)VPC為RAM權(quán)限策略定義的操作(Action)、資源(Resource)和條件(Condition)。專(zhuān)有網(wǎng)絡(luò)VPC的RAM代碼(RamCode)為[{"popCode":"Vpc","ramCodes":["vpc"]},{"popCode":"Netana","ramCodes":["vpc"]},{"popCode":"VpcPeer","ramCodes":["vpc"]}],支持的授權(quán)粒度為RESOURCE。
權(quán)限策略通用結(jié)構(gòu)
權(quán)限策略支持JSON格式,其通用結(jié)構(gòu)如下:
{
"Version": "1",
"Statement": [
{
"Effect": "<Effect>",
"Action": "<Action>",
"Resource": "<Resource>",
"Condition": {
"<Condition_operator>": {
"<Condition_key>": [
"<Condition_value>"
]
}
}
}
]
}
- Effect:權(quán)限策略效果。取值:Allow(允許)、Deny(拒絕)。
- Action:授予允許或拒絕權(quán)限的具體操作。具體信息,請(qǐng)參見(jiàn)操作(Action)。
- Resource:受操作影響的具體對(duì)象,您可以使用資源ARN來(lái)描述指定資源。具體信息,請(qǐng)參見(jiàn)資源(Resource)。
- Condition:指授權(quán)生效的條件。可選字段。具體信息,請(qǐng)參見(jiàn)條件(Condition)。
- Condition_operator:條件運(yùn)算符,不同類(lèi)型的條件對(duì)應(yīng)不同的條件運(yùn)算符。具體信息,請(qǐng)參見(jiàn)權(quán)限策略基本元素。
- Condition_key:條件關(guān)鍵字。
- Condition_value:條件關(guān)鍵字對(duì)應(yīng)的值。
操作(Action)
下表是專(zhuān)有網(wǎng)絡(luò)VPC定義的操作,這些操作可以在RAM權(quán)限策略語(yǔ)句的Action
元素中使用,用來(lái)授予執(zhí)行該操作的權(quán)限。下面對(duì)表中的具體項(xiàng)提供說(shuō)明:- 操作:是指具體的權(quán)限點(diǎn)。
- API:是指操作對(duì)應(yīng)的API接口。
- 訪(fǎng)問(wèn)級(jí)別:是指每個(gè)操作的訪(fǎng)問(wèn)級(jí)別,取值為寫(xiě)入(Write)、讀取(Read)或列出(List)。
- 資源類(lèi)型:是指操作中支持授權(quán)的資源類(lèi)型。具體說(shuō)明如下:
- 對(duì)于必選的資源類(lèi)型,用背景高亮的方式表示。
- 對(duì)于不支持資源級(jí)授權(quán)的操作,用
全部資源
表示。
- 條件關(guān)鍵字:是指云產(chǎn)品自身定義的條件關(guān)鍵字。該列不體現(xiàn)適用于任何操作的通用條件關(guān)鍵字。
- 關(guān)聯(lián)操作:是指成功執(zhí)行操作所需要的其他權(quán)限。操作者必須同時(shí)具備關(guān)聯(lián)操作的權(quán)限,操作才能成功。
操作 | API | 訪(fǎng)問(wèn)級(jí)別 | 資源類(lèi)型 | 條件關(guān)鍵字 | 關(guān)聯(lián)操作 |
---|---|---|---|---|---|
vpc:ModifyEipAddressAttribute | ModifyEipAddressAttribute | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 無(wú) | 無(wú) |
vpc:AssociateEipAddress | AssociateEipAddress | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}Association acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} | 無(wú) | 無(wú) |
vpc:SetHighDefinitionMonitorLogStatus | SetHighDefinitionMonitorLogStatus | Write | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 無(wú) | 無(wú) |
vpc:MoveResourceGroup | MoveResourceGroup | update | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}Eip acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId} | 無(wú) | 無(wú) |
vpc:DescribeHighDefinitionMonitorLogAttribute | DescribeHighDefinitionMonitorLogAttribute | get | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 無(wú) | 無(wú) |
vpc:DescribeEipGatewayInfo | DescribeEipGatewayInfo | list | GatewayInfo acs:vpc:{#regionId}:{#accountId}:eip/* | 無(wú) | 無(wú) |
vpc:GetPublicIpAddressPoolServiceStatus | GetPublicIpAddressPoolServiceStatus | get | 全部資源 * | 無(wú) | 無(wú) |
vpc:DescribeEipAddresses | DescribeEipAddresses | list | Address acs:vpc:{#regionId}:{#accountId}:eip/* | vpc:tag | 無(wú) |
vpc:DeletePublicIpAddressPoolCidrBlock | DeletePublicIpAddressPoolCidrBlock | Write | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 無(wú) | 無(wú) |
vpc:AddPublicIpAddressPoolCidrBlock | AddPublicIpAddressPoolCidrBlock | create | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 無(wú) | 無(wú) |
vpc:DescribeEipMonitorData | DescribeEipMonitorData | get | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 無(wú) | 無(wú) |
vpc:ReleaseEipAddress | ReleaseEipAddress | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | vpc:tag | 無(wú) |
vpc:AllocateEipAddressPro | AllocateEipAddressPro | update | Address acs:vpc:{#regionId}:{#accountId}:eip/* | 無(wú) | 無(wú) |
vpc:ListPublicIpAddressPoolCidrBlocks | ListPublicIpAddressPoolCidrBlocks | get | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 無(wú) | 無(wú) |
vpc:DeletePublicIpAddressPool | DeletePublicIpAddressPool | delete | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 無(wú) | 無(wú) |
vpc:CreatePublicIpAddressPool | CreatePublicIpAddressPool | create | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/* | 無(wú) | 無(wú) |
vpc:ListPublicIpAddressPools | ListPublicIpAddressPools | get | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/* | 無(wú) | 無(wú) |
vpc:AssociateEipAddressBatch | AssociateEipAddressBatch | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 無(wú) | 無(wú) |
vpc:ReleaseEipSegmentAddress | ReleaseEipSegmentAddress | delete | SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 無(wú) | 無(wú) |
vpc:DescribeEipSegment | DescribeEipSegment | get | SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/* | 無(wú) | 無(wú) |
vpc:OpenPublicIpAddressPoolService | OpenPublicIpAddressPoolService | create | 全部資源 * | 無(wú) | 無(wú) |
vpc:UnassociateEipAddress | UnassociateEipAddress | delete | Instance acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} | 無(wú) | 無(wú) |
vpc:AllocateEipAddress | AllocateEipAddress | create | Address acs:vpc:{#regionId}:{#accountId}:eip/* | 無(wú) | 無(wú) |
vpc:AllocateEipSegmentAddress | AllocateEipSegmentAddress | create | SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/* | 無(wú) | 無(wú) |
vpc:UpdatePublicIpAddressPoolAttribute | UpdatePublicIpAddressPoolAttribute | Write | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 無(wú) | 無(wú) |
資源(Resource)
下表是專(zhuān)有網(wǎng)絡(luò)VPC定義的資源,這些資源可以在RAM權(quán)限策略語(yǔ)句的Resource
元素中使用,用來(lái)授予對(duì)該資源執(zhí)行具體操作的權(quán)限。 其中,資源ARN是資源在阿里云上的唯一標(biāo)識(shí)。具體說(shuō)明如下:{#}
為變量標(biāo)識(shí),需要您替換為實(shí)際值。例如:{#ramcode}
需要您替換為實(shí)際的云服務(wù)RAM代碼。-
*
表示全部。例如:{#resourceType}
為*
時(shí):表示全部資源。{#regionId}
為*
時(shí):表示全部地域。{#accountId}
為*
時(shí):表示全部阿里云賬號(hào)。
資源類(lèi)型 | 資源ARN |
---|---|
Address | acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} |
NatGateway | acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} |
Instance | acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId} |
Association | acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} |
GlobalAccelerationInstance | acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId} |
CustomerGateway | acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId} |
VpnGateway | acs:vpc:{#regionId}:{#accountId}:vpngateway/* |
VpnAttachment | acs:vpc:{#Region}:{#AccountId}:vpnattachment/{#VpnConnectionId} |
GlobalAccelerationInstance | acs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/* |
Instance | acs:ecs:{#regionId}:{#accountId}:instance/* |
VpnGateway | acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} |
PhysicalConnection | acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} |
HaVip | acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} |
GatewayEndpoint | acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} |
GatewayEndpoint | acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/* |
BandwidthPackage | acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId} |
Ipv6Translator | acs:vpc:{#regionId}:{#accountId}:ipv6trans/* |
Ipv6InternetBandwidth | acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId} |
RouteTable | acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} |
SnatTable | acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId} |
VpnConnection | acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} |
ForwardTable | acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId} |
IpsecServer | acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId} |
RouterInterface | acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} |
Eip | acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} |
VPC | acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} |
PrefixList | acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} |
DhcpOptionsSet | acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} |
FlowLog | acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId} |
Ipv4Gateway | acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId} |
Ipv6Gateway | acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} |
PublicIpAddressPool | acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} |
TrafficMirrorFilter | acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} |
TrafficMirrorSession | acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId} |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} |
VSwitch | acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId} |
FlowLog | acs:vpc:{#regionId}:{#accountId}:flowlog/* |
PrefixList | acs:vpc:{#regionId}:{#accountId}:prefixlist/* |
NetworkAcl | acs:vpc:{#regionId}:{#accountId}:networkacl/* |
VPC | acs:vpc:{#regionId}:{#accountId}:vpc/* |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/* |
Ipv6Translator | acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId} |
VirtualBorderRouter | acs:expressconnect:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} |
NetworkAcl | acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} |
SslVpnServer | acs:vpc:{#regionId}:{#accountId}:sslvpnserver/* |
BandwidthPackage | acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} |
Ipv4Gateway | acs:vpc:{#regionId}:{#accountId}:ipv4gateway/* |
VpnConnections | acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} |
TrafficQos | acs:vpc:{#regionId}:{#accountId}:TrafficQos/* |
FullNat | acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId} |
SslVpnClientCert | acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/* |
SslVpnClientCert | acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId} |
BandwidthPackage | acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/* |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} |
Address | acs:vpc:{#regionId}:{#accountId}:eip/* |
Ipv6InternetBandwidth | acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/* |
VSwitchCidrReservation | acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId} |
VirtualBorderRouter | acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} |
CustomerGateway | acs:vpc:{#regionId}:{#accountId}:customergateway/* |
PhysicalConnection | acs:vpc:{#regionId}:{#accountId}:physicalconnection/* |
CommonBandwidthPackage | acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId} |
GatewayInfo | acs:vpc:{#regionId}:{#accountId}:eip/* |
VSwitch | acs:vpc:{#regionId}:{#accountId}:vswitch/* |
PhysicalConnection | acs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId} |
VirtualBorderRouter | acs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId} |
RouterInterface | acs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId} |
RouteTable | acs:vpc:{#regionId}:{#accountId}:routetable/* |
DhcpOptionsSet | acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/* |
VpnConnection | acs:vpc:{#regionId}:{#accountId}:* |
RouterInterface | acs:expressconnect:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} |
PublicIpAddressPoolService | acs:vpc:{#regionId}:{#accountId}:publicipaddresspoolservice/* |
SslVpnServer | acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId} |
IPv6Translator | acs:vpc:{#regionId}:{#accountId}:ipv6trans/* |
IPv6Translator | acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId} |
RouteTable | acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable} |
TrafficMirrorFilter | acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/* |
VpnGateway | acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId} |
VRouter | acs:vpc:{#regionId}:{#accountId}:vrouter/* |
VpnConnection | acs:vpc:{#regionId}:{#accountId}:vpnconnection/* |
NatIpCidr | acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} |
NatGateway | acs:vpc:{#regionId}:{#accountId}:natgateway/* |
GlobalAccelerationInstance | acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/* |
VPC | acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId} |
IpsecServer | acs:vpc:{#Region}:{#AccountId}: vpnipsecserver/{#IpsecServerId} |
VpnGateway | acs:vpc:{#regionId}:{#accountId}: |
VpnGateway | acs:vpc:{#Region}:{#AccountId}:vpngateway/{#VpnInstanceId} |
physicalconnection | acs:vpc:{#regionId}:{#accountId}:physicalconnection/* |
IpsecServer | acs:vpc:{#regionId}:{#accountId}:ipsecserver/* |
Ipv6EgressRule | acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} |
TrafficMirrorSession | acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/* |
HaVip | acs:vpc:{#regionId}:{#accountId}:havip/* |
FlowLogService | acs:vpc:{#regionId}:{#accountId}:flowlog/* |
CustomerGateway | acs:vpc:{#Region}:{#AccountId}:customergateway/{#CustomerGatewayId} |
VpnConnection | acs:vpc:{#Region}:{#AccountId}:vpnconnection/{#VpnConnectionId} |
SslVpnServer | acs:vpc:{#Region}:{#AccountId}:sslvpnserver/{#SslVpnServerId} |
Instance | acs:ecs:{#regionId}:{#accountId}:instance/{#Instanceid} |
VSwitchCidrReservation | acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/* |
SnatEntry | acs:vpc:{#regionId}:{#accountId}:snattable/* |
Ipv6Gateway | acs:vpc:{#regionId}:{#accountId}:ipv6gateway/* |
VRouter | acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId} |
CommonBandwidthPackage | acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/* |
Instance | acs:ecs:{#regionId}:{#accountId}:instance/{#BackendServerId} |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId} |
GrantRuleToCen | acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId} |
Ipv6Address | acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId} |
BandwidthPackage | acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/* |
RouteEntry | acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} |
TrafficMirrorService | acs:vpc:{#regionId}:{#accountId}:trafficmirror/* |
Ipv6Address | acs:vpc:{#regionId}:{#accountId}:ipv6address/* |
PublicIpAddressPool | acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/* |
RouterInterface | acs:vpc:{#regionId}:{#accountId}:routerinterface/* |
NatIp | acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} |
SegmentAddress | acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} |
SegmentAddress | acs:vpc:{#regionId}:{#accountId}:eip/* |
Eip | acs:vpc:{#regionId}:{#accountId}:eip/{#EipId} |
Ipv6InternetBandwidth | acs:vpc:{#regionId}:{#accountId}:vpc/* |
條件(Condition)
下表是專(zhuān)有網(wǎng)絡(luò)VPC定義的產(chǎn)品級(jí)條件關(guān)鍵字,這些條件關(guān)鍵字可以在RAM權(quán)限策略語(yǔ)句的
Condition
元素中使用,用來(lái)描述授予權(quán)限的條件。以下僅列舉產(chǎn)品級(jí)的條件關(guān)鍵字,阿里云定義的通用條件關(guān)鍵字也同樣適用專(zhuān)有網(wǎng)絡(luò)VPC。其中,數(shù)據(jù)類(lèi)型決定了您可以使用哪些條件運(yùn)算符將請(qǐng)求中的值與權(quán)限策略語(yǔ)句中的值進(jìn)行比較。您必須使用與數(shù)據(jù)類(lèi)型匹配的條件運(yùn)算符,否則無(wú)法匹配策略語(yǔ)句,授權(quán)行為無(wú)效。數(shù)據(jù)類(lèi)型與條件運(yùn)算符的對(duì)應(yīng)關(guān)系,請(qǐng)參見(jiàn)條件操作類(lèi)型。
條件關(guān)鍵字 | 描述 | 類(lèi)型 |
---|---|---|
vpc:PhysicalConnection | 物理專(zhuān)線(xiàn)信息 | String |
vpc:VBR | 邊界路由器信息 | String |
vpc:VPC | VPC信息 | String |
vpc:VRouter | 路由器信息 | String |
vpc:tag | VPC的標(biāo)簽 | String |
vpc:TargetAccountRDId | 對(duì)端用戶(hù)資源目錄ID信息 | String |