资源聚合器
| 权限 | 对应API接口 | 授权项 | 依赖的授权项 | IAM项目 | 企业项目 |
|---|---|---|---|---|---|
| 创建资源聚合器授权 | PUT /v1/resource-manager/domains/{domain_id}/aggregators/aggregation-authorization | rms:aggregationAuthorizations:create | - | √ | x |
| 删除资源聚合器授权 | DELETE /v1/resource-manager/domains/{domain_id}/aggregators/aggregation-authorization/{authorized_account_id} | rms:aggregationAuthorizations:delete | - | √ | x |
| 查询资源聚合器授权列表 | GET /v1/resource-manager/domains/{domain_id}/aggregators/aggregation-authorization | rms:aggregationAuthorizations:list | - | √ | x |
| 创建资源聚合器 | PUT /v1/resource-manager/domains/{domain_id}/aggregators | rms:aggregators:create |
说明: 仅组织类型的资源聚合器依赖这些授权项。 | √ | x |
| 查询资源聚合器列表 | GET /v1/resource-manager/domains/{domain_id}/aggregators | rms:aggregators:list | - | √ | x |
| 查询指定资源聚合器详情 | GET /v1/resource-manager/domains/{domain_id}/aggregators/{aggregator_id} | rms:aggregators:get | - | √ | x |
| 查询指定资源聚合器聚合账号的状态信息 | GET /v1/resource-manager/domains/{domain_id}/aggregators/{aggregator_id}/aggregator-sources-status | rms:aggregators:get | - | √ | x |
| 删除资源聚合器 | DELETE /v1/resource-manager/domains/{domain_id}/aggregators/{aggregator_id} | rms:aggregators:delete | - | √ | x |
| 更新资源聚合器 | PUT /v1/resource-manager/domains/{domain_id}/aggregators/{aggregator_id} | rms:aggregators:update |
说明: 仅组织类型的资源聚合器依赖这些授权项。 | √ | x |
| 删除聚合器账号中挂起的授权请求 | DELETE /v1/resource-manager/domains/{domain_id}/aggregators/pending-aggregation-request/{requester_account_id} | rms:aggregationRequests:delete | - | √ | x |
| 查询所有挂起的聚合请求列表 | GET /v1/resource-manager/domains/{domain_id}/aggregators/pending-aggregation-request | rms:aggregationRequests:list | - | √ | x |
| 查询聚合器中资源的列表 | POST /v1/resource-manager/domains/{domain_id}/aggregators/aggregate-data/aggregate-discovered-resources | rms:aggregatorResources:list |
说明: 仅组织类型的资源聚合器依赖这些授权项。 | √ | x |
| 对指定聚合器执行高级查询 | POST /v1/resource-manager/domains/{domain_id}/aggregators/{aggregator_id}/run-query | rms:aggregatorResources:runQuery | - | √ | x |
| 查询源账号中资源的详情 | POST /v1/resource-manager/domains/{domain_id}/aggregators/aggregate-resource-config | rms:aggregatorResources:get | - | √ | x |
| 查询聚合器中账号资源的计数 | POST /v1/resource-manager/domains/{domain_id}/aggregators/aggregate-data/aggregate-discovered-resource-counts | rms:aggregatorResources:list |
说明: 仅组织类型的资源聚合器依赖这些授权项。 | √ | x |
| 查询聚合器中一个或多个账号的合规概况 | POST /v1/resource-manager/domains/{domain_id}/aggregators/aggregate-data/policy-states/compliance-summary | rms:aggregatorResources:list |
说明: 仅组织类型的资源聚合器依赖这些授权项。 | √ | x |
| 查询聚合合规规则列表 | POST /v1/resource-manager/domains/{domain_id}/aggregators/aggregate-data/policy-assignments/compliance | rms:aggregatorResources:list |
说明: 仅组织类型的资源聚合器依赖这些授权项。 | √ | x |
| 查询指定聚合合规规则的资源评估结果详情 | POST /v1/resource-manager/domains/{domain_id}/aggregators/aggregate-data/policy-states/compliance-details | rms:aggregatorResources:list |
说明: 仅组织类型的资源聚合器依赖这些授权项。 | √ | x |
| 查询指定聚合合规规则详情 | POST /v1/resource-manager/domains/{domain_id}/aggregators/aggregate-data/policy-assignment/detail | rms:aggregatorResources:list |
说明: 仅组织类型的资源聚合器依赖这些授权项。 | √ | x |