AliyunAIPaaSDefaultRolePolicy 是專用于服務(wù)角色的授權(quán)策略，通常會在創(chuàng)建對應(yīng)的服務(wù)角色時同步完成授權(quán)，以允許服務(wù)角色代您訪問其他云服務(wù)。本策略由對應(yīng)的阿里云服務(wù)按需更新，請勿將本策略授權(quán)給服務(wù)角色之外的 RAM 身份使用。

策略詳情

• 類型：系統(tǒng)策略

• 創(chuàng)建時間：2024-06-27 15:32:14

• 更新時間：2025-01-02 03:43:00

• 當(dāng)前版本：v11

策略內(nèi)容

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "cr:Get*",
        "cr:List*",
        "cr:Update*",
        "cr:PullRepository",
        "cr:SearchRepo",
        "cr:StartImageScan",
        "cr:CreateArtifactBuildTask",
        "cr:PushRepository"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "cr-ee:Get*",
        "cr-ee:List*",
        "cr-ee:Update*",
        "cr-ee:PullRepository",
        "cr-ee:SearchRepo",
        "cr-ee:StartImageScan",
        "cr-ee:CreateArtifactBuildTask",
        "cr-ee:PushRepository"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "oss:Get*",
        "oss:List*",
        "oss:Put*",
        "oss:Describe*",
        "oss:Create*",
        "oss:Delete*"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "nas:Describe*",
        "nas:CPFSDescribe*"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "CPFS:Describe*",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "sls:List*",
        "sls:Get*",
        "sls:Create*"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "log:List*",
        "log:Get*",
        "log:Create*",
        "log:Update*",
        "log:DeleteLogStore*"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "cs:Describe*",
        "cs:Get*",
        "cs:Check*",
        "cs:Query*",
        "cs:ScanClusterVuls",
        "cs:InstallClusterAddons",
        "cs:UnInstallClusterAddons",
        "cs:ModifyCluster"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "cms:QueryMetricLast",
        "cms:QueryMetricList",
        "cms:GetMyGroups",
        "cms:ListMyGroups",
        "cms:DescribeMetricData",
        "cms:DescribeMetricLast",
        "cms:DescribeMetricMetaList",
        "cms:DescribeMetricTop",
        "cms:QueryMetricMeta",
        "cms:QueryMetricTop",
        "cms:ListMetricMeta",
        "cms:ListMetricMetaProject",
        "cms:QueryMetricData",
        "cms:DescribeMetricList",
        "cms:MetricMeta"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "ascm:List*",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "Ucs:DescribeCpfsClientCluster",
        "Ucs:DescribeNodesState"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "EasyAI:ListAckCluster",
        "EasyAI:ListAckClusterInstances",
        "EasyAI:DescribeAckCluster",
        "EasyAI:InstallAIAddOn",
        "EasyAI:DeleteAIAddOn",
        "EasyAI:ListAckInstanceType",
        "EasyAI:DescribeAckClusterLogs",
        "EasyAI:DescribeAckClusterAddon",
        "EasyAI:ListHistoryEvent",
        "EasyAI:ListBmcpMachineType",
        "EasyAI:GetClusterInfo",
        "EasyAI:GetClusterInstanceInfo",
        "EasyAI:TagResources"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "cs-inner:*"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "ram:GetRole",
        "ram:GetPolicy"
      ],
      "Resource": [
        "acs:ram:*:*:role/AIStudioClusterRole-*",
        "acs:ram:*:*:policy/AIStudioClusterPolicy-*"
      ]
    },
    {
      "Effect": "Allow",
      "Action": [
        "slb:DescribeHealthStatus"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "aipaas:*"
      ],
      "Resource": "*"
    }
  ]
}

相關(guān)文檔

• 權(quán)限策略基本元素

• 普通服務(wù)角色