AliyunCSManagedEdgeRolePolicy 是專用于服務角色的授權策略，通常會在創建對應的服務角色時同步完成授權，以允許服務角色代您訪問其他云服務。本策略由對應的阿里云服務按需更新，請勿將本策略授權給服務角色之外的 RAM 身份使用。

策略詳情

• 類型：系統策略

• 創建時間：2024-10-23 15:51:45

• 更新時間：2024-10-23 15:51:45

• 當前版本：v1

策略內容

{
	"Version": "1",
	"Statement": [{
			"Action": [
				"vpc:DescribeVpcs",
				"vpc:DescribeRouteEntryList"
			],
			"Resource": [
				"*"
			],
			"Effect": "Allow"
		},
		{
			"Effect": "Allow",
			"Action": [
				"vpc:DescribeEipAddresses",
				"vpc:AllocateEipAddress",
				"vpc:ReleaseEipAddress"
			],
			"Resource": "acs:vpc:*:*:eip/*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"vpc:DescribeRouteTableList",
				"vpc:CreateRouteEntry",
				"vpc:DeleteRouteEntry"
			],
			"Resource": [
				"acs:vpc:*:*:routetable/*"
			]
		},
		{
			"Effect": "Allow",
			"Action": [
				"slb:DescribeLoadBalancers",
				"slb:DescribeLoadBalancerAttribute",
				"slb:DescribeAccessControlLists",
				"slb:DescribeAccessControlListAttribute",
				"slb:AddAccessControlListEntry",
				"slb:RemoveAccessControlListEntry",
				"slb:CreateLoadBalancer",
				"slb:DeleteLoadBalancer",
				"slb:CreateAccessControlList",
				"slb:DeleteAccessControlList",
				"slb:TagResources"
			],
			"Resource": [
				"acs:slb:*:*:acl/*",
				"acs:slb:*:*:loadbalancer/*"
			]
		},
		{
			"Effect": "Allow",
			"Action": [
				"vpc:AssociateEipAddress",
				"vpc:UnassociateEipAddress"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"ens:DescribeNetworks",
				"ens:DescribeInstances",
				"ens:DescribeLoadBalancers",
				"ens:DescribeLoadBalancerAttribute",
				"ens:DescribeLoadBalancerUDPListenerAttribute",
				"ens:DescribeLoadBalancerTCPListenerAttribute",
				"ens:DescribeLoadBalancerHTTPListenerAttribute",
				"ens:DescribeLoadBalancerHTTPSListenerAttribute",
				"ens:DescribeEnsEipAddresses",
				"ens:CreateLoadBalancer",
				"ens:ReleaseInstance",
				"ens:SetLoadBalancerStatus",
				"ens:ModifyLoadBalancerAttribute",
				"ens:SetBackendServers",
				"ens:AddBackendServers",
				"ens:RemoveBackendServers",
				"ens:CreateLoadBalancerUDPListener",
				"ens:SetLoadBalancerUDPListenerAttribute",
				"ens:CreateLoadBalancerTCPListener",
				"ens:SetLoadBalancerTCPListenerAttribute",
				"ens:StartLoadBalancerListener",
				"ens:StopLoadBalancerListener",
				"ens:DeleteLoadBalancerListener",
				"ens:CreateLoadBalancerHTTPListener",
				"ens:SetLoadBalancerHTTPListenerAttribute",
				"ens:CreateLoadBalancerHTTPSListener",
				"ens:SetLoadBalancerHTTPSListenerAttribute",
				"ens:CreateEipInstance",
				"ens:ModifyEnsEipAddressAttribute",
				"ens:AssociateEnsEipAddress",
				"ens:DescribeNetworkInterfaces",
				"ens:DescribeVSwitches",
				"ens:AssignPrivateIpAddresses",
				"ens:UnassignPrivateIpAddresses",
				"ens:UnAssociateEnsEipAddress"
			],
			"Resource": "*"
		},
		{
			"Action": "ram:CreateServiceLinkedRole",
			"Resource": "*",
			"Effect": "Allow",
			"Condition": {
				"StringEquals": {
					"ram:ServiceName": "eipaccess.slb.aliyuncs.com"
				}
			}
		}
	]
}

相關文檔

• 權限策略基本元素

• 普通服務角色