AliyunCCManagedMseRolePolicy 是專用于服務角色的授權策略,通常會在創建對應的服務角色時同步完成授權,以允許服務角色代您訪問其他云服務。本策略由對應的阿里云服務按需更新,請勿將本策略授權給服務角色之外的 RAM 身份使用。
策略詳情
類型:系統策略
創建時間:2024-02-22 14:08:22
更新時間:2024-02-22 14:08:22
當前版本:v1
策略內容
{
"Statement": [
{
"Action": [
"mse:AddBlackWhiteList",
"mse:AddGateway",
"mse:AddServiceSource",
"mse:CreateApplication",
"mse:DeleteGateway",
"mse:GetBlackWhiteList",
"mse:GetGateway",
"mse:GetGatewayDetail",
"mse:GetGatewayOption",
"mse:ListServiceSource",
"mse:ListTagResources",
"mse:ModifyLosslessRule",
"mse:TagResources",
"mse:UntagResources",
"mse:UpdateBlackWhiteList",
"mse:UpdateGatewayOption",
"mse:UpdateServiceSource",
"mse:GetLicenseKey"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"vpc:DescribeVSwitches"
],
"Resource": "acs:vpc:*:*:*/*",
"Effect": "Allow"
},
{
"Action": [
"log:CloseProductDataCollection",
"log:OpenProductDataCollection",
"log:GetProductDataCollection"
],
"Resource": [
"acs:mse:*:*:instance/*",
"acs:log:*:*:project/*/logstore/mse_*"
],
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"audit.log.aliyuncs.com"
]
}
},
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "middlewarelens.log.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"securitylens.log.aliyuncs.com",
"ai-lens.log.aliyuncs.com",
"storagelens.log.aliyuncs.com"
]
}
}
}
],
"Version": "1"
}
相關文檔
文檔內容是否對您有幫助?