Updated on 2022-08-08 GMT+08:00

Policy

IAM supports both system-defined and custom policies.

System-defined Policies

System-defined policies cover various common actions of a cloud service. System-defined policies can be used to assign permissions to user groups, but they cannot be modified.

The system-defined policies for GES include GES FullAccess, GES Development, and GES ReadOnlyAccess. These policies are recommended as they can cover most of the role assignments your will need in most scenarios. For details, see GES System-defined Policy.

Custom Policies

If the supplied system policies are unable to meet your needs, you can create custom policies for more refined control. You can create custom policies in the visual editor or using a JSON editor. For details, see GES Custom Policy.