AliyunServiceRolePolicyForAnalyticDBForMySQL 是專用于服務關聯角色的授權策略，會在創建服務關聯角色 AliyunServiceRoleForAnalyticDBForMySQL 時自動授權，以允許服務關聯角色代您訪問其他云服務。本策略由對應的阿里云服務按需更新，請勿將本策略授權給服務關聯角色之外的 RAM 身份使用。
策略詳情
類型：系統策略
創建時間：2020-07-15 16:29:21
更新時間：2020-07-15 16:29:21
當前版本：v1
策略內容
{
"Version": "1",
"Statement": [
{
"Action": [
"oss:GetBucket",
"oss:GetBucketAcl",
"oss:GetBucketLocation",
"oss:GetBucketInfo",
"oss:GetBucketLogging",
"oss:GetBucketWebsite",
"oss:GetBucketReferer",
"oss:GetBucketLifecycle",
"oss:GetBucketEncryption",
"oss:GetBucketStat",
"oss:GetBucketMetadata",
"oss:GetBucketTagging",
"oss:GetBucketVersioning",
"oss:GetSimplifiedObjectMeta",
"oss:GetObjectMetadata",
"oss:GetBucketStorageCapacity",
"oss:GetBucketEncryption",
"oss:GetObject",
"oss:GetObjectMeta",
"oss:GetObjectAcl",
"oss:GetSymlink",
"oss:GetObjectTagging",
"oss:GetService",
"oss:ListObjects",
"oss:ListMultipartUploads",
"oss:ListParts",
"oss:ListBuckets",
"oss:ListVpcip",
"oss:ListVersions",
"oss:GetBucketCname",
"oss:GetBucketRequestPayment",
"oss:GetBucketVpcip",
"oss:DoesBucketExist",
"oss:DoesObjectExist",
"oss:ListObjectsV2",
"oss:SelectObject",
"oss:HeadObject",
"oss:PutBucket",
"oss:PutObject",
"oss:PutObjectTagging",
"oss:CopyObject",
"oss:InitiateMultipartUpload",
"oss:UploadPart",
"oss:UploadPartCopy",
"oss:CompleteMultipartUpload",
"oss:AbortMultipartUpload",
"oss:RestoreObject",
"oss:PostObject",
"oss:UploadFile",
"oss:DownloadFile",
"oss:AppendObject",
"oss:DeleteObject",
"oss:DeleteObjects",
"oss:DeleteObjectVersion",
"oss:ListObjectVersions",
"oss:HeadBucket",
"oss:PostDataLakeStorageFileOperation",
"oss:PostDataLakeStorageAdminOperation"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ots:ListInstance",
"ots:GetInstance",
"ots:ListDeliveryTask",
"ots:DescribeDeliveryTask",
"ots:GetRow",
"ots:BatchGetRow",
"ots:GetRange",
"ots:GetShardIterator",
"ots:GetStreamRecord",
"ots:ListStream",
"ots:ListTable",
"ots:ListSearchIndex",
"ots:DescribeStream",
"ots:DescribeTable",
"ots:DescribeSearchIndex",
"ots:ComputeSplitPointsBySize",
"ots:CreateTable",
"ots:UpdateTable",
"ots:DeleteTable",
"ots:PutRow",
"ots:UpdateRow",
"ots:DeleteRow",
"ots:BatchWriteRow",
"ots:CreateIndex",
"ots:DropIndex",
"ots:CreateSearchIndex",
"ots:DeleteSearchIndex",
"ots:Search",
"ots:ComputeSplits",
"ots:ParallelScan",
"ots:BulkImport",
"ots:BulkExport"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"log:GetProject",
"log:ListProject",
"log:GetCursorTime",
"log:BatchGetLog",
"log:GetLogs",
"log:GetHistograms",
"log:GetContextLogs",
"log:GetLogStoreLogs",
"log:GetLogStoreHistogram",
"log:GetLogStore",
"log:CreateLogStore",
"log:DeleteLogStore",
"log:ListLogStores",
"log:GetConfig",
"log:ListConfig",
"log:GetShipper",
"log:ListShipper",
"log:GetShipperConfig",
"log:GetShipperTasks",
"log:GetShipperStatus",
"log:GetIndex",
"log:CreateIndex",
"log:GetCheckPoint",
"log:HeartBeat",
"log:UpdateCheckPoint",
"log:PostLogStoreLogs",
"log:CreateConsumerGroup",
"log:UpdateConsumerGroup",
"log:DeleteConsumerGroup",
"log:ListConsumerGroup",
"log:ConsumerGroupUpdateCheckPoint",
"log:ConsumerGroupHeartBeat",
"log:GetConsumerGroupCheckPoint",
"log:CreateExport",
"log:GetExport",
"log:ListExport",
"log:UpdateExport",
"log:DeleteExport",
"log:CreateJob",
"log:GetJob",
"log:ListJobs",
"log:UpdateJob",
"log:DeleteJob",
"log:GetCursor",
"log:PullLogs",
"log:GetCursorOrData",
"log:ListShards",
"dts:CreateSynchronizationJob",
"dts:ConfigureSynchronizationJob",
"dts:DescribeSynchronizationJobStatus",
"dts:StartSynchronizationJob",
"dts:DeleteSynchronizationJob",
"dts:DescribeSynchronizationJobs",
"vpc:DescribeVpcAttribute",
"vpc:DescribeVSwitches",
"vpc:DescribeVSwitchAttributes",
"privatelink:CreateVpcEndpoint",
"privatelink:DeleteVpcEndpoint",
"privatelink:ListVpcEndpointZones",
"privatelink:RemoveZoneFromVpcEndpoint",
"privatelink:GetVpcEndpointAttribute",
"rds:CreateAccount",
"rds:DeleteAccount",
"ecs:CreateSecurityGroup",
"ecs:DescribeNetworkInterfaces",
"ecs:AuthorizeSecurityGroup",
"ecs:AuthorizeSecurityGroupEgress",
"ecs:DeleteSecurityGroup",
"ecs:CreateNetworkInterface",
"ecs:DescribeNetworkInterfacePermissions",
"ecs:CreateNetworkInterfacePermission",
"ecs:DeleteNetworkInterfacePermission",
"ecs:DeleteNetworkInterface",
"ecs:DescribeSecurityGroups",
"ecs:AuthorizeSecurityGroup",
"ecs:AuthorizeSecurityGroupEgress",
"ecs:CreateSecurityGroup",
"ecs:DeleteSecurityGroup",
"ecs:DescribeSecurityGroupAttribute",
"ecs:ModifySecurityGroupAttribute",
"ecs:ModifySecurityGroupEgressRule",
"ecs:ModifySecurityGroupRule",
"ecs:RevokeSecurityGroup",
"ecs:RevokeSecurityGroupEgress",
"ecs:AttachNetworkInterface",
"ecs:DetachNetworkInterface",
"ecs:ModifyNetworkInterfaceAttribute",
"ecs:TagResources",
"ecs:ListTagResources",
"ecs:UntagResources",
"ecs:DescribeInstanceAttribute",
"ecs:DescribeInstanceStatus",
"ecs:DescribeInstanceTypeFamilies",
"ecs:DescribeInstanceTypes",
"ecs:DescribeInstances",
"ecs:DescribeInstancesFullStatus",
"ecs:DescribeNetworkInterfaceAttribute",
"ecs:DescribeRegions",
"ecs:DescribeZones",
"privatelink:CheckProductOpen",
"privatelink:OpenPrivateLinkService",
"privatelink:UpdateVpcEndpointAttribute",
"privatelink:ListVpcEndpoints",
"privatelink:ListVpcEndpointServicesByEndUser",
"privatelink:EnableVpcEndpointConnection",
"privatelink:AddZoneToVpcEndpoint",
"privatelink:EnableVpcEndpointZoneConnection",
"privatelink:UpdateVpcEndpointZoneConnectionResourceAttribute",
"privatelink:DisableVpcEndpointZoneConnection",
"privatelink:AcceptVpcEndpointConnections",
"privatelink:AttachSecurityGroupToVpcEndpoint",
"privatelink:ListVpcEndpointSecurityGroups",
"privatelink:DetachSecurityGroupFromVpcEndpoint",
"privatelink:DeleteVpcEndpoint",
"privatelink:UpdateVpcEndpointConnectionAttribute",
"vpc:DescribeVSwitches",
"vpc:DescribeVpcs",
"vpc:*Eip*",
"vpc:*HighDefinitionMonitor*",
"vpc:*PublicIpAddressPool*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "ads.aliyuncs.com"
}
}
},
{
"Action": "ram:GetUser",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "acs:ram:*:*:role/*",
"Condition": {
"StringEquals": {
"ram:ServiceName": "privatelink.aliyuncs.com"
}
},
"Effect": "Allow"
},
{
"Action": [
"rds:DescribeDBInstances",
"rds:DescribeDBInstanceAttribute",
"rds:DescribeDBInstanceNetInfo",
"rds:DescribeDBInstanceHAConfig",
"rds:DescribeDBInstanceIPArrayList",
"rds:DescribeSecurityGroupConfiguration",
"rds:ModifySecurityGroupConfiguration",
"rds:DescribeCharacterSetName",
"rds:ModifySecurityIps",
"dds:DescribeDBInstances",
"dds:DescribeDBInstanceAttribute",
"dds:DescribeSecurityIps",
"dds:ModifySecurityIps",
"polardb:DescribeDBClusters",
"polardb:DescribeDBClusterAttribute",
"polardb:DescribeDBClusterEndpoints",
"polardb:DescribeDBClusterAccessWhitelist",
"polardb:DescribeCharacterSetName",
"polardb:ModifyDBClusterAccessWhitelist",
"polardb:DescribeDBClusterIPArrayList",
"polardb:DescribeDBClusterNetInfo",
"polardb:DescribeRegions",
"polardb:ModifySecurityIps",
"polardb:DescribeDBClusterVersion",
"polardb:DescribeGlobalDatabaseNetworks",
"polardb:CreateDBCluster"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"alikafka:PUB",
"alikafka:CreateGroup",
"alikafka:DeleteGroup"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": [
"emr:ListClusters",
"emr:GetCluster",
"emr:ListNodes"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"adb:CreateAccount",
"adb:ModifyAccountPrivileges",
"adb:DescribeDBClusterAttribute",
"adb:DescribeDBClusters",
"adb:DescribeRegions",
"adb:DescribeDBClusterNetInfo",
"adb:DescribeDBClusterAccessWhiteList",
"adb:ModifyDBClusterAccessWhiteList",
"adb:ModifyClusterAccessWhiteList",
"adb:DescribeDBClusterPerformance",
"adb:DescribeAccountAllPrivileges"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"lindorm:UpdateInstanceIpWhiteList",
"lindorm:GetLindormInstanceEngineList",
"lindorm:GetLindormInstanceList",
"lindorm:GetLindormInstance",
"lindorm:CreateLindormInstance",
"lindorm:UpdateClusterInfo",
"lindorm:ReleaseLindormInstance"
],
"Resource": "*"
},
{
"Action": [
"cr:GetAuthorizationToken",
"cr:PullRepository"
],
"Effect": "Allow",
"Resource": "*"
},
{
"Action": [
"fc:InvokeFunction"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "privatelink.aliyuncs.com"
}
}
},
{
"Effect": "Allow",
"Action": [
"cs:DescribeClusterUserKubeconfig"
],
"Resource": "*"
}
]
}相關文檔
文檔內容是否對您有幫助？