未使用访问分析支持的云服务和授权项
下面列出了未使用访问分析已支持的云服务和授权项。
DDoS高防(AAD)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| DDoS高防(AAD) | aad:policy:put | - |
| aad:domain:put | - | |
| aad:certificate:delete | - | |
| aad:forwardingRule:put | - | |
| aad:domain:create | - | |
| aad:whiteBlackIpRule:delete | - | |
| aad:instance:put | - | |
| aad:policy:delete | - | |
| aad:forwardingRule:create | - | |
| aad:forwardingRule:delete | - | |
| aad:instance:create | - | |
| aad:certificate:set | - | |
| aad:whiteBlackIpRule:create | - | |
| aad:dashboard:set | - | |
| aad:alarmConfig:create | - | |
| aad:domain:delete | - | |
| aad:policy:create | - | |
| aad:alarmConfig:put | - |
访问分析(Access Analyzer)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 访问分析(Access Analyzer) | AccessAnalyzer:archiveRule:apply | - |
| AccessAnalyzer:analyzer:updateFindings | - | |
| AccessAnalyzer::untagResource | - | |
| AccessAnalyzer:analyzer:delete | - | |
| AccessAnalyzer:analyzer:createPreview | - | |
| AccessAnalyzer:archiveRule:create | - | |
| AccessAnalyzer:analyzer:create | - | |
| AccessAnalyzer:notificationSetting:update | - | |
| AccessAnalyzer::tagResource | - | |
| AccessAnalyzer:notificationSetting:delete | - | |
| AccessAnalyzer:archiveRule:update | - | |
| AccessAnalyzer:analyzer:update | - | |
| AccessAnalyzer:notificationSetting:create | - | |
| AccessAnalyzer:analyzer:scan | - | |
| AccessAnalyzer:archiveRule:delete | - |
DDoS原生基础防护(Anti-DDoS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| DDoS原生基础防护(Anti-DDoS) | anti-ddos:alertConfig:update | - |
| anti-ddos:ip:updateDefensePolicy | - | |
| anti-ddos:defaultDefensePolicy:create | - | |
| anti-ddos:ip:enableDefensePolicy | - | |
| anti-ddos:logConfig:update | - | |
| anti-ddos:ip:disableDefensePolicy | - | |
| anti-ddos:defaultDefensePolicy:delete | - |
应用运维管理(AOM)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 应用运维管理(AOM) | aom:actionRule:create | - |
| aom:muteRule:delete | - | |
| aom:alarmRule:delete | - | |
| aom:agency:delete | - | |
| aom:alarmRuleTemplate:set | - | |
| aom:alarm:put | - | |
| aom:alarmRuleTemplate:delete | - | |
| aom:actionRule:delete | - | |
| aom:subscriberules:create | - | |
| aom:event2AlarmRule:create | - | |
| aom:alarmRuleTemplate:create | - | |
| aom:discoveryRule:set | - | |
| aom:alarmRule:create | - | |
| aom:muteRule:create | - | |
| aom:event2AlarmRule:update | aom:event2AlarmRule:set | |
| aom:notificationTemplate:update | - | |
| aom:discoveryRule:delete | - | |
| aom:event2AlarmRule:delete | - | |
| aom:muteRule:update | - | |
| aom:subscriberules:update | - | |
| aom:notificationTemplate:delete | - | |
| aom:notificationTemplate:create | - | |
| aom:agency:create | - | |
| aom:alarmRule:update | aom:alarmRule:set | |
| aom:actionRule:update | - | |
| aom:subscriberules:delete | - |
API网关(APIG)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| API网关(APIG) | apig:apiGroup:createGatewayResponse | apig:gatewayResponses:create |
| apig:api:debug | apig:apis:debug | |
| apig:certificate:update | - | |
| apig:instance:deleteOutboundEip | apig:instances:update | |
| apig:api:switchVersion | apig:apis:publish | |
| apig:orchestration:update | - | |
| apig:instance:addCustomIngressPort | - | |
| apig:orchestration:delete | - | |
| apig:instance:bindOrChangeEip | apig:instances:update | |
| apig:apiGroup:batchUnbindCertificateFromDomain | apig:domains:unbindCertificate | |
| apig:certificate:delete | - | |
| apig:certificate:create | - | |
| apig:signatureKey:update | apig:signs:update | |
| apig:api:import | apig:apis:import | |
| apig:apiGroup:batchBindCertificateToDomain | apig:domains:bindCertificate | |
| apig:customAuthorizer:create | apig:authorizers:create | |
| apig:apiGroup:create | apig:groups:create | |
| apig:clientQuota:bindApp | - | |
| apig:loadBalanceChannel:deleteBackendServerAddress | apig:vpcChannels:deleteInstance | |
| apig:loadBalanceChannel:createServerGroup | apig:vpcChannels:addOrUpdateMemberGroups | |
| apig:instance:changeIngressEipBindwidth | apig:instances:update | |
| apig:instance:changeOutboundEipBandwidth | apig:instances:update | |
| apig:apiGroup:deleteGatewayResponseType | apig:gatewayResponses:update | |
| apig:api:delete | apig:apis:delete | |
| apig:loadBalanceChannel:updateServerGroup | apig:vpcChannels:updateMemberGroup | |
| apig:loadBalanceChannel:createBackendServerAddress | apig:vpcChannels:addInstance | |
| apig:loadBalanceChannel:batchEnableBackendServerAddress | apig:vpcChannels:batchEnableInstance | |
| apig:acl:delete | apig:acls:delete | |
| apig:apiGroup:updateGatewayResponse | - | |
| apig:instance:createOutboundEip | apig:instances:update | |
| apig:app:updateAcl | apig:apps:get | |
| apig:loadBalanceChannel:updateBackendServerAddress | apig:vpcChannels:addInstance | |
| apig:instance:updateParameter | apig:features:create | |
| apig:apiGroup:updateDomainConfig | - | |
| apig:requestThrottling:deleteSpecial | apig:specialThrottles:delete | |
| apig:instance:batchDeleteVpcEndpointPermission | - | |
| apig:apiGroup:updateSLDomainSetting | apig:domains:updateSLDomainSetting | |
| apig:acl:create | apig:acls:create | |
| apig:environmentVariable:create | apig:variables:create | |
| apig:apiGroup:unbindDomain | apig:domains:delete | |
| apig:instance:batchAddVpcEndpointPermission | - | |
| apig:app:unbindApi | apig:apis:relieveAppAccess | |
| apig:app:deleteAppCode | apig:appCodes:delete | |
| apig:apiGroup:bindDomain | apig:domains:create | |
| apig:instance:resize | apig:instances:update | |
| apig:apiGroup:updateGatewayResponseType | apig:gatewayResponses:update | |
| apig:api:bindRequestThrottling | apig:apis:bindThrottles | |
| apig:requestThrottling:batchDelete | apig:throttles:delete | |
| apig:api:bindPlugin | apig:apis:bindPlugins | |
| apig:loadBalanceChannel:deleteServerGroup | apig:vpcChannels:deleteMemberGroup | |
| apig:app:createAppCode | apig:appCodes:create | |
| apig:api:bindSignatureKey | apig:apis:bindSigns | |
| apig:requestThrottling:create | apig:throttles:create | |
| apig:instance:update | apig:instances:update | |
| apig:instance:importMicroservice | apig:apis:import | |
| apig:api:unbindRequestThrottling | apig:apis:unbindThrottles | |
| apig:clientQuota:unbindApp | - | |
| apig:api:unbindSignatureKey | apig:apis:unbindSigns | |
| apig:apiGroup:createAndBindCertificateToDomain | apig:domains:bindCertificate | |
| apig:environmentVariable:delete | apig:variables:delete | |
| apig:orchestration:create | - | |
| apig:api:onlineOrOffline | apig:apis:publish apig:apis:offline | |
| apig:loadBalanceChannel:delete | apig:vpcChannels:delete | |
| apig:instance:unbindEip | apig:instances:update | |
| apig:clientQuota:update | - | |
| apig:instance:deleteCustomIngressPort | - | |
| apig:api:batchUnbindAcl | apig:apis:unbindAcls | |
| apig:api:unbindAcl | apig:apis:unbindAcls | |
| apig:apiGroup:deleteGatewayResponse | apig:gatewayResponses:delete | |
| apig:requestThrottling:updateSpecial | apig:specialThrottles:update | |
| apig:app:deleteAcl | apig:apps:get | |
| apig:instance:acceptOrRejectVpcEndpointConnection | - | |
| apig:clientQuota:delete | - | |
| apig:apiGroup:delete | apig:groups:delete | |
| apig:loadBalanceChannel:create | apig:vpcChannels:create | |
| apig:loadBalanceChannel:batchDisableBackendServerAddress | apig:vpcChannels:batchDisableInstance | |
| apig:loadBalanceChannel:updateHealthCheckConfig | apig:vpcChannels:update | |
| apig:api:batchOnlineOrOffline | apig:apis:offline apig:apis:publish | |
| apig:plugin:update | apig:plugins:update | |
| apig:api:unbindPlugin | apig:apis:unbindPlugins | |
| apig:requestThrottling:createSpecial | apig:specialThrottles:create | |
| apig:api:create | apig:apis:create | |
| apig:instance:batchCreateOrDeleteTag | apig:instanceTags:create apig:instanceTags:delete | |
| apig:plugin:unbindApi | apig:apis:unbindPlugins | |
| apig::createPrepayOrder | apig:instances:create | |
| apig:app:create | apig:apps:create | |
| apig:signatureKey:create | apig:signs:create | |
| apig:app:generateAppCode | apig:appCodes:update | |
| apig:loadBalanceChannel:update | apig:vpcChannels:update | |
| apig:apiGroup:unbindAndDeleteCertificateFromDomain | apig:domains:unbindCertificate | |
| apig:api:update | apig:apis:update | |
| apig:instance:delete | apig:instances:delete | |
| apig:api:batchUnbindRequestThrottling | apig:apis:unbindThrottles | |
| apig:plugin:create | apig:plugins:create | |
| apig:requestThrottling:update | apig:throttles:update | |
| apig:api:bindAcl | apig:apis:bindAcls | |
| apig:app:update | apig:apis:update | |
| apig:instance:deleteIngressEip | apig:instances:update | |
| apig:environment:create | apig:envs:create | |
| apig:environment:delete | apig:envs:delete | |
| apig:api:batchDelete | apig:apis:delete | |
| apig:plugin:delete | apig:plugins:delete | |
| apig:apiGroup:update | apig:groups:update | |
| apig:acl:update | apig:acls:update | |
| apig:acl:batchDelete | apig:acls:delete | |
| apig:environment:update | apig:envs:update | |
| apig:customAuthorizer:update | apig:authorizers:update | |
| apig:customAuthorizer:delete | apig:authorizers:delete | |
| apig:app:delete | apig:apps:delete | |
| apig:api:deleteHistoryVersion | apig:apis:offline | |
| apig:requestThrottling:delete | apig:throttles:delete | |
| apig:environmentVariable:update | - | |
| apig:plugin:bindApi | apig:apis:bindPlugins | |
| apig:signatureKey:delete | apig:signs:delete | |
| apig:clientQuota:create | - | |
| apig:app:bindApi | apig:apis:grantAppAccess | |
| apig:instance:createIngressEip | apig:instances:update | |
| apig:instance:create | apig:instances:create | |
| apig:app:resetSecret | apig:apps:update | |
| apig:instance:createPrepayResizeOrder | apig:instances:update |
弹性伸缩(AS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 弹性伸缩(AS) | as:scalingGroup:create | as:groups:create |
| as:scalingGroup:updateLifecycleHook | as:lifecycleHooks:update | |
| as:scalingPolicy:execute | as:policies:action | |
| as::untagResource | as:tags:set | |
| as:scalingConfig:delete | as:configs:delete | |
| as:scalingPolicy:resume | as:policies:action | |
| as:scalingGroup:callbackInstanceHook | as:instanceHooks:action | |
| as:scalingGroup:update | as:groups:update | |
| as:scalingPolicy:update | as:policies:update | |
| as:scalingGroup:deleteLifecycleHook | as:lifecycleHooks:delete | |
| as:scalingGroup:deleteNotification | as:notifications:delete | |
| as:scalingGroup:batchAddInstances | as:instances:batchAction | |
| as:scalingConfig:batchDelete | as:configs:batchDelete | |
| as:scalingPolicy:pause | as:policies:action | |
| as:scalingPolicy:batchDelete | as:policies:batchAction | |
| as:scalingGroup:delete | as:groups:delete | |
| as:scalingGroup:resume | as:groups:action | |
| as:scalingGroup:batchRemoveInstances | as:instances:batchAction | |
| as:scalingGroup:createLifecycleHook | as:lifecycleHooks:create | |
| as:scalingGroup:deleteInstance | as:instances:delete | |
| as:scalingPolicy:create | as:policies:create | |
| as:scalingGroup:batchSetInstancesExitStandby | as:instances:batchAction | |
| as:scalingGroup:createNotification | as:notifications:set | |
| as:scalingPolicy:delete | as:policies:delete | |
| as:scalingPolicy:batchPause | as:policies:batchAction | |
| as::tagResource | as:tags:set | |
| as:scalingGroup:pause | as:groups:action | |
| as:scalingGroup:batchSetInstancesStandby | as:instances:batchAction | |
| as:scalingConfig:create | as:configs:create |
费用中心(billing)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 费用中心(billing) | billing:subscription:renew | bss:renewal:update |
| billing:subscription:unsubscribe | bss:unsubscribe:update |
裸金属服务器(BMS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 裸金属服务器(BMS) | bms:server:deleteNics | - |
| bms:servers:changeOS | - | |
| bms:servers:addNics | - | |
| bms:servers:start | - | |
| bms:servers:updateMetadata | - | |
| bms:servers:reInstallOS | - | |
| bms:servers:resetServerPwd | - | |
| bms:servers:batchCreateBaremetalServerTags | bms:servers:put | |
| bms:servers:stop | - | |
| bms:servers:create | - | |
| bms:servers:updateBaremetalServer | bms:servers:put | |
| bms:servers:reboot | - | |
| bms:servers:attachVolume | - | |
| bms:servers:detachVolume | - |
云堡垒机(CBH)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云堡垒机(CBH) | cbh:instance:bindInstanceEip | cbh:instance:eipOperate |
| cbh:instance:rollbackInstance | - | |
| cbh:instance:changeInstanceType | - | |
| cbh:instance:startInstance | cbh:instance:start | |
| cbh:instance:deleteInstance | cbh:instance:modify | |
| cbh:instance:loginInstanceAdmin | - | |
| cbh:instance:upgradeInstance | cbh:instance:upgrade | |
| cbh:instance:stopInstance | cbh:instance:stop | |
| cbh:instance:loginInstance | cbh:instance:login | |
| cbh::operateAuthorization | cbh:agency:authorize | |
| cbh:instance:resetInstancePassword | cbh:instance:resetPassword | |
| cbh:instance:operateInstanceTags | cbh:instance:modify | |
| cbh:instance:switchInstanceVpc | - | |
| cbh:instance:resetInstanceLoginMethod | cbh:instance:resetPassword | |
| cbh:instance:updateInstanceSecurityGroup | cbh:instance:modify | |
| cbh:instance:rebootInstance | cbh:instance:reboot | |
| cbh:instance:unbindInstanceEip | cbh:instance:eipOperate | |
| cbh:instance:createInstance | cbh:instance:create | |
| cbh:instance:alterInstance | cbh:instance:alterSpec |
云备份(CBR)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云备份(CBR) | cbr:organizationPolicies:update | - |
| cbr::createThirdAuth | cbr:thirdAuth:create | |
| cbr:organizationPolicies:delete | - | |
| cbr:vaults:associatePolicy | - | |
| cbr:vaults:create | - | |
| cbr:vaults:backup | - | |
| cbr:vaults:dissociatePolicy | - | |
| cbr:backups:update | - | |
| cbr::updateSnapshotMetadata | cbr:snapshotMetadata:update | |
| cbr:member:create | - | |
| cbr:vaults:migrateResources | - | |
| cbr:vaults:setTags | - | |
| cbr:vaults:deleteTags | - | |
| cbr:vaults:changeChargeMode | - | |
| cbr::createSnapshotMetadata | cbr:snapshotMetadata:create | |
| cbr:policies:update | - | |
| cbr:vaults:addResources | - | |
| cbr:member:update | - | |
| cbr:backups:replicate | - | |
| cbr:policies:delete | - | |
| cbr:vaults:sync | - | |
| cbr:backups:migratesCreate | - | |
| cbr:agents:delete | - | |
| cbr:backups:import | - | |
| cbr:vaults:bulkCreateOrDeleteTags | - | |
| cbr:member:delete | - | |
| cbr::deleteExportSnapshotAgency | cbr:exportSnapshotAgency:delete | |
| cbr::deleteExportSnapshotJob | cbr:exportSnapshotJob:delete | |
| cbr:policies:create | - | |
| cbr:vaults:delete | - | |
| cbr:backups:restore | - | |
| cbr:agents:update | - | |
| cbr:vaults:replicate | - | |
| cbr:backups:delete | - | |
| cbr:vaults:removeResources | - | |
| cbr::createExportSnapshotAgency | cbr:exportSnapshotAgency:create | |
| cbr::createExportSnapshotJob | cbr:exportSnapshotJob:create | |
| cbr:organizationPolicies:create | - | |
| cbr:agents:register | - | |
| cbr:vaults:update | - | |
| cbr:agents:removePath | - | |
| cbr:agents:addPath | - | |
| cbr:vaults:setResources | - | |
| cbr:vaults:updateOrder | - |
云连接(CC)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云连接(CC) | cc:centralNetwork:createPolicy | - |
| cc:centralNetwork:delete | - | |
| cc:centralNetwork:create | - |
云容器引擎(CCE)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云容器引擎(CCE) | cce:node:add | cce:node:create |
| cce:cluster:updateLongAKSKConfig | - | |
| cce:node:reportStatus | cce:node:get | |
| cce:cluster:checkLock | - | |
| cce:accessPolicy:put | - | |
| cce:node:remove | - | |
| cce:nodepool:scale | - | |
| cce:chart:upload | - | |
| cce:node:migrate | - | |
| cce:partition:update | - | |
| cce:nodepool:upgradeNodepool | cce:nodepool:update | |
| cce:node:toperiod | - | |
| cce:cluster:toperiod | - | |
| cce:permissionApplyOrder:create | cce:cluster:upgrade | |
| cce:nodepool:sync | cce:nodepool:get | |
| cce:addonInstance:delete | - | |
| cce:partition:create | - | |
| cce:cluster:delete | - | |
| cce:cluster:createCluster | cce:cluster:create | |
| cce:cluster:rotateCredentials | - | |
| cce:nodepool:updateNodepool | cce:nodepool:update | |
| cce:cluster:updateConfiguration | cce:cluster:update | |
| cce:cluster:updateCluster | cce:cluster:update | |
| cce:cluster:revokeClientCredential | - | |
| cce:accessPolicy:delete | - | |
| cce:release:update | - | |
| cce:addonInstance:create | - | |
| cce:nodepool:migrate | cce:nodepool:update | |
| cce:node:delete | - | |
| cce:cluster:resize | - | |
| cce:accessPolicy:post | - | |
| cce:cluster:eipBinding | cce:cluster:update | |
| cce:cluster:start | - | |
| cce:node:update | - | |
| cce:cluster:upgrade | - | |
| cce:cluster:removeTags | cce:tag:operate | |
| cce:addonInstance:update | - | |
| cce:node:createNode | cce:node:create | |
| cce:node:reset | cce:node:create | |
| cce:nodepool:updateConfiguration | cce:nodepool:update | |
| cce:job:delete | - | |
| cce:chart:update | - | |
| cce:cluster:updateLogConfig | - | |
| cce:release:create | - | |
| cce:cluster:stop | - | |
| cce:release:delete | - | |
| cce:node:unlock | cce:node:update | |
| cce:cluster:addTags | cce:tag:operate | |
| cce:chart:delete | - | |
| cce:nodepool:delete | - | |
| cce:addonInstance:rollback | - | |
| cce:nodepool:create | - |
内容分发网络(CDN)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 内容分发网络(CDN) | cdn:configuration:modifyOriginConfInfo | - |
| cdn:configuration:checkIcp | - | |
| cdn:contentgateway:createAccessControlTask | cdn:contentgateway:queryBanHistoryTask | |
| cdn:configuration:createShareCacheGroup | cdn:configuration:modifyCacheRule | |
| cdn:log:updateLtsPushConfigs | - | |
| cdn:log:deleteLtsPushConfigs | - | |
| cdn:configuration:disableDomains | - | |
| cdn:configuration:tagResource | - | |
| cdn:configuration:pushCloudCert | - | |
| cdn:configuration:batchModifyHttpsConf | cdn:configuration:modifyHttpsConf | |
| cdn:configuration:createResHeader | - | |
| cdn:statistics:createExportTasks | cdn:statistics:queryStats | |
| cdn:configuration:modifyIpAcl | - | |
| cdn:configuration:deleteDomains | - | |
| cdn:configuration:deleteShareCacheGroup | cdn:configuration:modifyCacheRule | |
| cdn:statistics:deleteSubscriptionTasks | - | |
| cdn:statistics:updateSubscriptionTasks | - | |
| cdn:configuration:deleteCloudCert | cdn:configuration:modifyHttpsConf | |
| cdn:configuration:modifyReferConf | - | |
| cdn:configuration:enableDomains | - | |
| cdn:configuration:updateShareCacheGroup | cdn:configuration:modifyCacheRule | |
| cdn:log:createLtsPushConfigs | - | |
| cdn:configuration:modifyTags | - | |
| cdn:configuration:deleteTags | cdn:configuration:modifyTags | |
| cdn:configuration:modifyHttpsConf | - | |
| cdn:configuration:modifyOriginServerInfo | - | |
| cdn:configuration:modifyCacheRule | - | |
| cdn:configuration:preheatCache | - | |
| cdn:configuration:createDomains | - | |
| cdn:contentgateway:createBanTask | cdn:contentgateway:queryBanHistoryTask | |
| cdn:statistics:updateStatsConfigs | - | |
| cdn:configuration:modifyDomainConfigs | - | |
| cdn:configuration:refreshCache | - | |
| cdn:configuration:modifyAccountInfo | cdn:configuration:modifyChargeMode | |
| cdn:statistics:createSubscriptionTasks | - |
云监控(CES)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云监控(CES) | ces:alarms:deleteOneClickAlarms | ces:oneClickAlarms:delete |
| ces:resourceGroups:deleteResources | ces:resourceGroups:put | |
| ces:customAlarmTemplates:delete | - | |
| ces:resourceGroups:put | - | |
| ces:resourcesReportJob:delete | - | |
| ces:alarms:delete | - | |
| ces:smartReportTask:delete | - | |
| ces:dataShareJob:create | - | |
| ces:notificationObject:delete | - | |
| ces:alarms:put | ces:alarmsOnOff:put | |
| ces:siteMonitorRule:createHealthCheck | ces:siteMonitorHealthCheck:create | |
| ces:alarms:putAlarmNotifications | ces:alarms:put | |
| ces:processMonitorTasks:put | - | |
| ces:dataShareJob:delete | - | |
| ces:processMonitorTasks:delete | - | |
| ces:metric:deleteGroups | - | |
| ces:resourceGroups:delete | - | |
| ces:dashboards:put | - | |
| ces:dashboardGroups:update | ces:dashboardGroups:put | |
| ces:agency:post | - | |
| ces:availabilityMonitorTask:create | - | |
| ces:resourceGroups:putAssociationAlarmTemplate | ces:resourceGroups:put | |
| ces:metricReportJob:create | - | |
| ces:dashboard:createMonitorDashboards | - | |
| ces:metric:createConfig | - | |
| ces:notificationObject:update | - | |
| ces:notificationPolicy:update | - | |
| ces:qualityMonitor:create | - | |
| ces:qualityMonitor:createQuickDetectTask | - | |
| ces:customAlarmTemplates:associateResourceGroup | ces:customAlarmTemplates:put | |
| ces:siteMonitorRule:delete | - | |
| ces:tags:create | ces:tags:action | |
| ces:customAlarmTemplates:create | - | |
| ces:obsTransfers:create | - | |
| ces:notificationObject:create | - | |
| ces:metricData:export | - | |
| ces:agent:deleteSpecifiedProcess | ces:instanceSpecifiedProcesses:delete | |
| ces:resourceGroups:create | - | |
| ces:notificationGroup:create | - | |
| ces:paidContent:update | - | |
| ces:alarmHistoriesReportJob:delete | - | |
| ces:alarmHistory:update | - | |
| ces:dashboardGroups:delete | - | |
| ces:systemDashboard:put | ces:systemDashboard:update | |
| ces:alarms:putAction | ces:alarms:put | |
| ces:alarms:deleteResources | ces:alarms:put | |
| ces:dataShareJob:put | ces:dataShareJob:action | |
| ces:alarmHistoriesReportJob:create | - | |
| ces:alarms:batchDeleteNotificationTemplates | - | |
| ces:alarms:createOneClickAlarms | - | |
| ces:alarms:updateNotificationTemplate | - | |
| ces:notificationPolicy:delete | - | |
| ces:smartReportTask:update | - | |
| ces:customAlarmTemplates:put | - | |
| ces:agent:createAgentInvocations | - | |
| ces:alarms:putOneClickAlarmPolicies | ces:oneClickAlarms:put | |
| ces:alarms:deleteNotificationMaskRules | ces:notificationMasks:delete | |
| ces:qualityMonitor:update | - | |
| ces:widgets:put | - | |
| ces:alarms:publishNotification | - | |
| ces:qualityMonitor:updateMapThresholdConfig | - | |
| ces:alarms:createNotificationTemplate | - | |
| ces:smartReportTask:create | - | |
| ces:notificationPolicy:create | - | |
| ces:notificationPolicy:updateAlarmRelations | - | |
| ces:widgets:create | - | |
| ces:metricReportJobs:delete | - | |
| ces:dashboardGroups:create | - | |
| ces:eventsBlackWhiteList:update | - | |
| ces:dashboards:delete | - | |
| ces:availabilityMonitorTask:update | - | |
| ces:widgets:delete | - | |
| ces:qualityMonitor:delete | - | |
| ces:metric:createGroups | - | |
| ces:processMonitorTasks:create | - | |
| ces:availabilityMonitorTask:delete | - | |
| ces:alarms:putOneClickAlarmNotifications | ces:oneClickAlarms:updateNotifications | |
| ces:metric:updateGroups | - | |
| ces:siteMonitorRule:put | - | |
| ces:sortedMetrics:create | - | |
| ces:alarms:create | - | |
| ces:resourcesReportJob:create | - | |
| ces:notificationGroup:delete | - | |
| ces:alarms:putNotificationMaskRules | - | |
| ces:alarms:updatePolicies | ces:alarms:put | |
| ces:obsTransfers:put | - | |
| ces:dashboards:create | - | |
| ces:alarms:putOneClickAlarms | ces:oneClickAlarms:put | |
| ces:monitorOverview:updateKeyMetrics | - | |
| ces:alarms:addResources | ces:alarms:put | |
| ces:resourceGroups:addResources | ces:resourceGroups:put |
DDoS原生高级防护(CNAD)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| DDoS原生高级防护(CNAD) | cnad:package:put | - |
| cnad:ipTag:put | - | |
| cnad:attackReport:update | cnad:attackReport:list | |
| cnad:package:create | - | |
| cnad:blackWhiteIpList:create | - | |
| cnad:blackWhiteIpList:delete | - | |
| cnad:alarmConfig:delete | - | |
| cnad:bindPolicy:create | - | |
| cnad:policy:put | - | |
| cnad:policy:create | - | |
| cnad:protectedIp:create | - | |
| cnad:policy:unbind | cnad:unbindPolicy:create | |
| cnad:alarmConfig:create | - | |
| cnad:policy:delete | - |
云运维中心(COC)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云运维中心(COC) | coc:attackTask:deleteRelatedRecords | - |
| coc:assessReport:delete | - | |
| coc:document:updateDocument | - | |
| coc:slaTemplate:delete | - | |
| coc:appkey:update | - | |
| coc:parameter:update | - | |
| coc:assessReport:updateItemStatus | - | |
| coc:slaTemplate:create | - | |
| coc:assessTask:delete | - | |
| coc:instance:executeDocument | - | |
| coc:patchBaseline:delete | - | |
| coc:slaTemplate:disable | - | |
| coc:prrReview:create | - | |
| coc:instance:changeOS | - | |
| coc:vendorAccount:delete | - | |
| coc:instance:reboot | - | |
| coc:instance:syncAccount | coc:account:sync | |
| coc:slo:deleteSloTarget | - | |
| coc:systemConfig:update | - | |
| coc:application:addResources | - | |
| coc:task:create | - | |
| coc:task:complete | - | |
| coc:appkey:create | - | |
| coc:resourceView:delete | - | |
| coc:document:create | - | |
| coc:parameter:create | - | |
| coc:resourceView:syncResources | - | |
| coc:slo:createSloTarget | - | |
| coc:slo:configureSli | - | |
| coc:warroomMeetingRule:delete | - | |
| coc:slaTemplate:enable | - | |
| coc:task:accept | - | |
| coc:task:cancel | - | |
| coc:instance:updateResources | - | |
| coc:appkey:delete | - | |
| coc:slo:updateSloTarget | - | |
| coc:instance:installPatches | - | |
| coc:contingencyPlan:uploadFile | - | |
| coc:instance:addResourceToTags | coc:instance:createResourceTags | |
| coc:personnel:update | - | |
| coc:schedule:approve | - | |
| coc:drillTask:deleteRelatedRecords | - | |
| coc:application:create | - | |
| coc:prrTemplate:create | - | |
| coc:slo:updateInterruptRecords | - | |
| coc:alarm:createAlarmLinkedIncident | - | |
| coc:notificationRule:confirm | - | |
| coc:patchBaseline:registerDefault | - | |
| coc:assessTask:create | - | |
| coc:prrTemplate:update | - | |
| coc:sloBasicData:update | - | |
| coc:slo:createInterruptRecords | - | |
| coc:application:RemoveComponentInvokingRelationships | - | |
| coc::updateEpsCollection | coc:enterpriseProject:updateCollect | |
| coc:application:createGroup | - | |
| coc:warroomMeetingRule:update | - | |
| coc:transferRule:enable | - | |
| coc:ticket:updateEnumValues | - | |
| coc:resourceView:create | - | |
| coc:ticket:update | - | |
| coc:faultMode:create | - | |
| coc:slaTemplate:update | - | |
| coc:prrReview:delete | - | |
| coc:ticket:delete | - | |
| coc:application:delete | - | |
| coc:faultMode:update | - | |
| coc:document:createDocument | - | |
| coc:vm:upgradeOsVersion | - | |
| coc:attackTargetRecord:operate | - | |
| coc:instance:resetPassword | - | |
| coc:oncall:updateRole | - | |
| coc:session:start | - | |
| coc::disablePasswordChangePolicy | coc:accountPasswordChangePolicy:disable | |
| coc:schedule:delete | - | |
| coc:integration:create | - | |
| coc:patchBaseline:updateCustomBaseline | - | |
| coc:application:removeResources | - | |
| coc:patchBaseline:update | - | |
| coc:ticket:createEnumValues | - | |
| coc:schedule:enable | - | |
| coc:schedule:update | - | |
| coc:accountBaseline:create | - | |
| coc:job:action | - | |
| coc:instance:start | - | |
| coc:instance:stop | - | |
| coc:hostAccount:enable | - | |
| coc::updateBiBackboneNetworkTopo | coc:system:updateBiBackboneNetworkTopo | |
| coc:integration:access | - | |
| coc:warroom:sendNotification | - | |
| coc:drillPlan:create | - | |
| coc:warroom:removeAffectedApplications | - | |
| coc:notificationRule:update | - | |
| coc:integration:update | - | |
| coc::deleteAutoManagementRelations | coc:accountAutoManagement:deleteRelations | |
| coc:transferRule:update | - | |
| coc:integration:enable | - | |
| coc:instance:syncResources | - | |
| coc:instance:restartRDSInstance | - | |
| coc:drillReport:create | - | |
| coc:patchBaseline:create | - | |
| coc:drillTask:delete | - | |
| coc:sloBasicData:delete | - | |
| coc:oncall:createScene | - | |
| coc::refreshBiBackboneNetworkTopo | coc:system:refreshBiBackboneNetworkTopo | |
| coc:warroom:addRolePersonnels | - | |
| coc:drillReport:update | - | |
| coc::updateServiceConfigTask | coc:serviceConfigTask:update | |
| coc::createBiSubscription | coc:biSubscription:create | |
| coc:accountBaseline:deleteAccount | - | |
| coc:warroomMeetingRule:create | - | |
| coc:drillPlan:update | - | |
| coc:document:deleteDocument | - | |
| coc:faultMode:delete | - | |
| coc:oncall:updatePersonnels | - | |
| coc:application:CreateResourceTopo | - | |
| coc:application:updateGroup | - | |
| coc:drillRecord:create | - | |
| coc:oncall:addPersonnels | - | |
| coc:drillTask:create | - | |
| coc:accountBaseline:delete | - | |
| coc::enablePasswordChangePolicy | coc:accountPasswordChangePolicy:enable | |
| coc:drillTask:update | - | |
| coc:transferRule:delete | - | |
| coc:notificationRule:disable | - | |
| coc:oncall:deleteScene | - | |
| coc::changeOrders | coc:orders:change | |
| coc:attackTask:create | - | |
| coc:instance:addAccount | coc:account:add | |
| coc::updateBiSubscription | coc:biSubscription:update | |
| coc:document:update | - | |
| coc::updateBiScreenConfig | coc:system:updateBiScreenConfig | |
| coc:prrReview:auditResult | - | |
| coc:instance:createPasswordChangePlan | - | |
| coc:prrReview:recordSummary | - | |
| coc:application:update | - | |
| coc:sloDiagram:update | - | |
| coc::updateTopologyConfigurations | coc:system:updateTopologyConfigurations | |
| coc:oncall:createRole | - | |
| coc::updateAutoManagementStatus | coc:accountAutoManagement:updateStatus | |
| coc:notificationRule:enable | - | |
| coc::addAutoManagementRelations | coc:accountAutoManagement:addRelations | |
| coc:attackRecord:changeMetricType | - | |
| coc:warroom:updateAffectedApplications | - | |
| coc:document:delete | - | |
| coc:ticket:create | - | |
| coc:incident:create | - | |
| coc:ticket:action | - | |
| coc:contingencyPlan:update | - | |
| coc::deleteNotificationGroup | - | |
| coc:transferRule:disable | - | |
| coc:application:syncGroupResource | - | |
| coc:application:CreateDiagnosisTask | - | |
| coc:application:AddComponentInvokingRelationships | - | |
| coc:assessReport:create | - | |
| coc:notificationRule:delete | - | |
| coc:oncall:updateScene | - | |
| coc:alarm:put | - | |
| coc:document:execute | - | |
| coc:vendorAccount:update | - | |
| coc:prrTemplate:delete | - | |
| coc:parameter:delete | - | |
| coc:alarmRule:sync | - | |
| coc:application:updateResources | - | |
| coc:integration:remove | - | |
| coc:accountBaseline:update | - | |
| coc:resourceView:update | - | |
| coc:vendorAccount:create | - | |
| coc:warroom:sendNotificationBriefing | - | |
| coc::updateNotificationGroup | - | |
| coc:schedule:disable | - | |
| coc:incident:handle | - | |
| coc::createOrders | coc:orders:create | |
| coc:vm:rollbackOsVersion | - | |
| coc:alarm:clear | - | |
| coc:ticket:deleteEnumValues | - | |
| coc:sloDiagram:create | - | |
| coc:execution:operate | - | |
| coc:transferRule:create | - | |
| coc:warroom:create | - | |
| coc:warroom:modifyBasicInformation | - | |
| coc:personnel:remove | - | |
| coc:alarmRule:put | - | |
| coc:contingencyPlan:delete | - | |
| coc:schedule:create | - | |
| coc:warroom:addAffectedApplications | - | |
| coc:contingencyPlan:create | - | |
| coc::createNotificationGroup | - | |
| coc::deleteBiSubscription | coc:biSubscription:delete | |
| coc:instance:resetAccountPassword | - | |
| coc:alarmRule:delete | - | |
| coc:instance:updateAccountPassword | - | |
| coc:personnel:add | - | |
| coc:prrReview:update | - | |
| coc:oncall:removePersonnels | - | |
| coc:agency:create | - | |
| coc:instance:autoBatchInstances | - | |
| coc:warroom:addPersonnels | - | |
| coc:warroom:removePersonnels | - | |
| coc:notificationRule:create | - | |
| coc:ticket:uploadFile | - | |
| coc::addEncryptionKey | coc:accountEncryptionKey:add | |
| coc:integration:disable | - | |
| coc:application:deleteGroup | - | |
| coc:oncall:deleteRole | - | |
| coc:instance:deleteResourceTags | - | |
| coc:sloDiagram:delete | - |
部署(CodeArts Deploy)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 部署(CodeArts Deploy) | codeartsdeploy:environment:delete | - |
| codeartsdeploy:application:update | - | |
| codeartsdeploy:environment:create | - | |
| codeartsdeploy:environment:update | - | |
| codeartsdeploy:resource:managePermission | - | |
| codeartsdeploy:application:create | - | |
| codeartsdeploy:application:managePermission | - | |
| codeartsdeploy:resource:addHost | - | |
| codeartsdeploy:application:deploy | - | |
| codeartsdeploy:resource:copyHost | - | |
| codeartsdeploy:resource:create | - | |
| codeartsdeploy:applicationGroup:manage | - | |
| codeartsdeploy:resource:delete | - | |
| codeartsdeploy:resource:update | - | |
| codeartsdeploy:template:update | - | |
| codeartsdeploy:template:create | - | |
| codeartsdeploy:application:disable | - | |
| codeartsdeploy:application:delete | - | |
| codeartsdeploy:application:clone | - | |
| codeartsdeploy:environment:managePermission | - | |
| codeartsdeploy:template:delete | - |
漏洞管理服务(CodeArts Inspector)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 漏洞管理服务(CodeArts Inspector) | codeartsinspector:host:updateGroup | - |
| codeartsinspector::batchDeleteReportFiles | - | |
| codeartsinspector:host:createSshCredential | - | |
| codeartsinspector:host:batchGenerateReportFiles | - | |
| codeartsinspector:host:deleteGroup | - | |
| codeartsinspector:website:generateReportFile | - | |
| codeartsinspector:website:batchStopTasks | - | |
| codeartsinspector:host:BatchStartTasks | - | |
| codeartsinspector:host:batchUpdate | - | |
| codeartsinspector:host:updateSmbCredential | - | |
| codeartsinspector:host:deleteSshCredential | - | |
| codeartsinspector:host:deleteJumpServer | - | |
| codeartsinspector:host:batchDelete | - | |
| codeartsinspector:website:resumeOrPauseMonitorTask | - | |
| codeartsinspector:host:updateSshCredential | - | |
| codeartsinspector:host:createSmbCredential | - | |
| codeartsinspector:host:createGroup | - | |
| codeartsinspector:host:createJumpServer | - | |
| codeartsinspector:website:create | - | |
| codeartsinspector:website:delete | - | |
| codeartsinspector:website:batchStartTasks | - | |
| codeartsinspector:website:stopTask | - | |
| codeartsinspector:website:changeVulnerability | - | |
| codeartsinspector:host:deleteSmbCredential | - | |
| codeartsinspector:host:updateJumpServer | - | |
| codeartsinspector:host:changeVulnerability | - | |
| codeartsinspector:website:authorize | - | |
| codeartsinspector:website:updateSettings | - | |
| codeartsinspector:website:updateTaskSettings | - | |
| codeartsinspector:website:startTask | - | |
| codeartsinspector:website:batchDelete | - | |
| codeartsinspector:host:batchCreate | - | |
| codeartsinspector:website:update | - | |
| codeartsinspector::createOrder | - |
测试计划(CodeArts TestPlan)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 测试计划(CodeArts TestPlan) | codeartstestplan:testSuite:update | - |
| codeartstestplan:variable:update | - | |
| codeartstestplan:testQualityDashboard:update | - | |
| codeartstestplan:actionWord:create | - | |
| codeartstestplan:variable:create | - | |
| codeartstestplan:actionWord:delete | - | |
| codeartstestplan:testCase:execute | - | |
| codeartstestplan:testCase:import | - | |
| codeartstestplan:testSuite:delete | - | |
| codeartstestplan:testCase:create | - | |
| codeartstestplan:testCase:delete | - | |
| codeartstestplan:testCase:update | - | |
| codeartstestplan:testSuite:create | - | |
| codeartstestplan:actionWord:update | - | |
| codeartstestplan:configuration:update | - | |
| codeartstestplan:testVersion:create | - | |
| codeartstestplan:testSuite:execute | - |
微服务引擎(CSE)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 微服务引擎(CSE) | cse:engine:upgrade | - |
| cse:engine:create | - | |
| cse:namespace:create | cse:namespace:write | |
| cse:engine:resize | cse:engine:modify | |
| cse:namespace:update | cse:namespace:write cse:registry:modify | |
| cse:namespace:delete | cse:namespace:write | |
| cse:policy:update | cse:governance:modify | |
| cse:engine:delete | - |
密码安全中心(凭据管理服务 CSMS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 密码安全中心(凭据管理服务 CSMS) | csms::createEvent | csms:event:create |
| csms::deleteEvent | csms:event:delete | |
| csms:secret:create | - | |
| csms:secret:updateStage | csms:secretStage:update | |
| csms:secret:updateVersion | - | |
| csms:secret:rotate | - | |
| csms::updateEvent | csms:event:update | |
| csms:secret:delete | - | |
| csms:secret:createVersion | csms:secretVersion:create | |
| csms:secret:update | - | |
| csms:secret:deleteTag | csms:tag:delete | |
| csms:secret:batchCreateOrDeleteTags | csms:tag:batch | |
| csms:secret:restoreSecret | csms:secret:deleteCancelled | |
| csms:secret:scheduleDeletion | csms:secret:deleteScheduled | |
| csms:secret:createTag | csms:tag:create | |
| csms:secret:deleteStage | csms:secretStage:delete |
云搜索服务(CSS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云搜索服务(CSS) | css:logstash:deleteConfTemplate | - |
| css:cluster:closeLogSetting | css:log:enableOrDisableLogFunction | |
| css:logstash:configFavorites | - | |
| css:cluster:rollingReboot | css:cluster:rollingRestart | |
| css:publicKibana:close | - | |
| css:logstash:confUpdate | - | |
| css:cluster:createAiOps | - | |
| css:logstash:checkConnection | - | |
| css:cluster:toPeriod | - | |
| css:snapshot:setSnapshotContiguration | - | |
| css:cluster:azmigrate | - | |
| css:cluster:upgradeCluster | - | |
| css:snapshot:restore | - | |
| css:cluster:openLogSetting | css:log:enableOrDisableLogFunction | |
| css:snapshot:disableSnapshotFuction | - | |
| css:cluster:shrinkNodes | - | |
| css:VPCEndpoint:enableOrDisable | - | |
| css:snapshot:create | - | |
| css:cluster:changeSubnet | - | |
| css:VPCEndpoint:updateWhitelist | - | |
| css:cluster:modifyRoute | - | |
| css:VPCEndpoint:manageConnection | - | |
| css:publicIPAddress:associates | - | |
| css:IKThesaurus:load | - | |
| css:logstash:confStop | - | |
| css:snapshot:delete | - | |
| css:logstash:confStart | - | |
| css:cluster:updateElbListener | - | |
| css:cluster:elbSwitch | - | |
| css:cluster:createElbListener | - | |
| css:publicKibana:open | - | |
| css:cluster:scaleIn | - | |
| css:configurations:modify | - | |
| css:logstash:submitConf | - | |
| css:snapshot:enableAtomaticSnapsot | - | |
| css:cluster:modifyPassword | - | |
| css:log:setBasicConfigurations | - | |
| css:cluster:modifyName | - | |
| css:cluster:addIndependenceNodes | - | |
| css:tag:addOrDelete | - | |
| css:cluster:scaleOut | - | |
| css:cluster:modifySpecifications | - | |
| css:cluster:modifySecurityGroup | - | |
| css:logstash:confDelete | - | |
| css:tag:edit | - | |
| css:log:updateBackupPolicy | - | |
| css:IKThesaurus:delete | - | |
| css:cluster:expand | - | |
| css:cluster:changeMode | - | |
| css:publicIPAddress:modifyBandwidth | - | |
| css:log:backup | - | |
| css:cluster:deleteAiOps | - | |
| css:cluster:restart | - | |
| css:tag:delete | - | |
| css:cluster:deleteCerts | - | |
| css:snapshot:setSnapshotPolicy | - | |
| css:cluster:retryAction | - | |
| css:cluster:uploadCerts | - | |
| css:cluster:create | - | |
| css:publicIPAddress:setAccessControl | - | |
| css:publicIPAddress:disassociates | - | |
| css:cluster:delete | - |
云审计服务(CTS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云审计服务(CTS) | cts:notification:update | - |
| cts:tracker:create | - | |
| cts:notification:create | - | |
| cts:notification:delete | - | |
| cts:tracker:update | - | |
| cts:tracker:delete | - |
数据管理服务(DAS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 数据管理服务(DAS) | das:connection:cancelShareConnections | - |
| das:instance:executeTestConnection | das:connections:login | |
| das:clouddba:changeSqlSwitch | - | |
| das:clouddba:createSqlLimitRules | - | |
| das:clouddba:modifySqlLimitRules | - | |
| das:clouddba:executeSql | - | |
| das:clouddba:deleteProcess | - | |
| das:clouddba:dailyReportsSubscribe | - | |
| das:clouddba:modifyDbUser | - | |
| das:clouddba:sqlDiagnosis | - | |
| das:clouddba:stopKillTask | - | |
| das:clouddba:deleteDbUser | - | |
| das:clouddba:registerDbUser | - | |
| das::putGlobalPrivacy | das:connections:list | |
| das:clouddba:changeSqlLimitSwitchStatus | - | |
| das:connection:createShareConnections | - | |
| das:clouddba:createKillTask | - | |
| das:instance:createConnection | das:connections:create | |
| das:clouddba:changeKillTaskSwitch | - | |
| das:clouddba:deleteSqlLimitRules | - | |
| das:clouddba:createSpaceAnalysisTask | - |
数智融合计算服务(DataArts Fabric)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 数智融合计算服务(DataArts Fabric) | DataArtsFabric:workspace:createMessagePolicy | - |
| DataArtsFabric:model:drop | - | |
| DataArtsFabric:workspace:createSqlSession | - | |
| DataArtsFabric:workspace:dropCompute | - | |
| DataArtsFabric:workspace:alter | - | |
| DataArtsFabric:job:cancelJobInstance | - | |
| DataArtsFabric::tagResource | DataArtsFabric:workspace:tagResource | |
| DataArtsFabric:workspace:deleteMessagePolicy | - | |
| DataArtsFabric:workspace:alterCap | - | |
| DataArtsFabric:job:drop | - | |
| DataArtsFabric::unTagResource | DataArtsFabric:workspace:unTagResource | |
| DataArtsFabric:service:destroyInstance | - | |
| DataArtsFabric:workspace:cancelStatement | - | |
| DataArtsFabric:workspace:createCap | - | |
| DataArtsFabric:workspace:deleteSqlSession | - | |
| DataArtsFabric:workspace:createCompute | - | |
| DataArtsFabric:endpoint:subscribe | - | |
| DataArtsFabric:workspace:alterMetrics | - | |
| DataArtsFabric:model:create | - | |
| DataArtsFabric::dropVpcepClient | DataArtsFabric:system:dropVpcepClient | |
| DataArtsFabric::createAccessClient | DataArtsFabric:system:createAccessClient | |
| DataArtsFabric:endpoint:create | - | |
| DataArtsFabric:workspace:drop | - | |
| DataArtsFabric:workspace:dropCap | - | |
| DataArtsFabric::alterAccessClient | DataArtsFabric:system:alterAccessClient | |
| DataArtsFabric:endpoint:drop | - | |
| DataArtsFabric:endpoint:alter | - | |
| DataArtsFabric:workspace:executeStatement | - | |
| DataArtsFabric:service:create | - | |
| DataArtsFabric:workspace:create | - | |
| DataArtsFabric:service:drop | - | |
| DataArtsFabric:service:deploy | - | |
| DataArtsFabric:workspace:dropNetwork | - | |
| DataArtsFabric:workspace:createNetwork | - | |
| DataArtsFabric:workspace:alterCompute | - | |
| DataArtsFabric:job:dropJobInstance | - | |
| DataArtsFabric:job:alter | - | |
| DataArtsFabric:job:create | - | |
| DataArtsFabric:job:run | - |
数据治理中心(DataArts Studio)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 数据治理中心(DataArts Studio) | DataArtsStudio:instance:deleteDriver | - |
| DataArtsStudio:instance:unTagResource | - | |
| DataArtsStudio:instance:create | - | |
| DataArtsStudio:workspace:update | - | |
| DataArtsStudio:workspace:delete | - | |
| DataArtsStudio:instance:uploadDriver | - | |
| DataArtsStudio:instance:createAgency | - | |
| DataArtsStudio:workspace:frozen | - | |
| DataArtsStudio:instance:tagResource | - | |
| DataArtsStudio:instance:createRole | - | |
| DataArtsStudio:workspace:create | - | |
| DataArtsStudio:instance:createIncrementalPackage | - | |
| DataArtsStudio:instance:updateRole | - | |
| DataArtsStudio:workspace:operate | - | |
| DataArtsStudio:instance:operate | - |
数据库安全服务(DBSS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 数据库安全服务(DBSS) | dbss:auditInstance:createOnDemand | - |
| dbss:auditInstance:instanceStart | dbss:auditInstance:start | |
| dbss::unTagResource | dbss:auditInstance:delete | |
| dbss:auditInstance:upgrade | dbss:auditInstance:createOnOrder | |
| dbss:auditInstance:createOnPeriod | dbss:auditInstance:createOnOrder | |
| dbss::tagResource | dbss:auditInstance:createOnOrder | |
| dbss:auditInstance:reboot | - | |
| dbss:auditInstance:stop | - |
云专线(DC)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云专线(DC) | dcaas:vgw:update | - |
| dcaas:resources:batchTagUntag | - | |
| dcaas:connectGateway:create | - | |
| dcaas:directConnect:create | - | |
| dcaas:vif:create | - | |
| dcaas:vifPeer:update | - | |
| dcaas:directConnect:delete | - | |
| dcaas:vgw:create | - | |
| dcaas:vif:delete | - | |
| dcaas:gdgw:update | - | |
| dcaas:vgw:delete | - | |
| dcaas:gdgw:delete | - | |
| dcaas:connectGateway:update | - | |
| dcaas:connectGateway:delete | - | |
| dcaas:directConnect:update | - | |
| dcaas:gdgw:create | - | |
| dcaas:gdgw:deletePeerlink | - | |
| dcaas:directConnect:createOnestopDirectConnect | dcaas:directConnect:create | |
| dcaas:vif:update | - | |
| dcaas:directConnect:createOrder | dcaas:directConnect:create |
分布式缓存服务(DCS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 分布式缓存服务(DCS) | dcs:instance:bindPublicIp | dcs:instance:modify |
| dcs:migrationTask:modify | dcs:migrationTask:rollbackIp dcs:migrationTask:exchangeIp | |
| dcs:instance:deleteDataBackupFile | - | |
| dcs:template:delete | - | |
| dcs:clientIpTrans:modify | dcs:clientiptrans:modify | |
| dcs:aclaccount:modifyRole | dcs:aclaccount:modify | |
| dcs:instance:deleteHotKeyScanTask | dcs:instance:analyze | |
| dcs:instance:backupData | - | |
| dcs:aclaccount:modifyRemark | dcs:aclaccount:modify | |
| dcs:template:modify | - | |
| dcs:aclaccount:resetPassword | dcs:aclaccount:modify | |
| dcs:instance:unbindPublicIp | dcs:instance:modify | |
| dcs:instance:analyzeBigKey | dcs:instance:analyze | |
| dcs:whitelist:modify | - | |
| dcs:ssl:modifyConfigure | dcs:ssl:modify | |
| dcs:instance:updateHotKeyAutoScanConfig | dcs:instance:analyze | |
| dcs:template:create | - | |
| dcs:instance:deleteBigKeyScanTask | dcs:instance:analyze | |
| dcs:instance:deleteOfflineKeyAnalysisTask | - | |
| dcs:instance:createDiagnosisTask | dcs:instance:diagnosis | |
| dcs:aclaccount:delete | - | |
| dcs:instance:updateBigKeyAutoScanConfig | dcs:instance:analyze | |
| dcs:instance:deleteDiagnosisTask | dcs:instance:diagnosis | |
| dcs:instance:webcli | - | |
| dcs:instance:modifyAuthInfo | - | |
| dcs:instance:modifyBandwidth | dcs:instance:modify | |
| dcs:tag:modify | - | |
| dcs:instance:analyzeHotKey | dcs:instance:analyze | |
| dcs:instance:modifyConfiguration | dcs:instance:modifyConfigureation | |
| dcs:aclaccount:create | - | |
| dcs:instance:create | - | |
| dcs:instance:delete | - | |
| dcs:instance:updateInstanceAttribute | dcs:instance:modify | |
| dcs:migrationTask:create | - | |
| dcs:instance:modifySlavePriority | dcs:instance:modify | |
| dcs:aclaccount:modifyPassword | dcs:aclaccount:modify | |
| dcs:instance:analyzeExpiredKey | dcs:instance:analyze | |
| dcs:migrationTask:delete | - | |
| dcs:instance:removeIpFromDomainName | dcs:instance:modify | |
| dcs:instance:updateExpiredKeyScanConfig | dcs:instance:analyze | |
| dcs:instance:downloadAnalyzeBigKeyResult | dcs:instance:analyze | |
| dcs:instance:swap | - | |
| dcs:instance:scale | - | |
| dcs:instance:deleteBackgroundTask | - | |
| dcs:instance:resetAuthInfo | - | |
| dcs:instance:modifyStatus | - | |
| dcs:instance:restoreData | - | |
| dcs::createServiceAgency | dcs:instance:create | |
| dcs:clients:kill | - |
分布式数据库中间件(DDM)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 分布式数据库中间件(DDM) | ddm:database:delete | - |
| ddm:instance:create | - | |
| ddm:instance:updateSecurityGroup | ddm:instance:modify | |
| ddm:instance:delete | - | |
| ddm:instance:updateElbIp | ddm:instance:modify | |
| ddm:instance:restore | ddm:backup:restore | |
| ddm::deleteParamGroup | ddm:param:delete | |
| ddm:database:create | - | |
| ddm:instance:updateName | ddm:instance:modify | |
| ddm:database:dumpMetadata | ddm:database:get | |
| ddm:instance:createUser | ddm:user:create | |
| ddm::updateTagForResource | ddm:tag:modify | |
| ddm:instance:updateUser | ddm:user:modify | |
| ddm:instance:updateIpGroup | ddm:instance:modify | |
| ddm::untagResource | ddm:tag:modify | |
| ddm::tagResource | ddm:tag:modify | |
| ddm:instance:reboot | - | |
| ddm:database:configBlacklist | ddm:blacklist:config | |
| ddm:instance:updateRwStrategy | ddm:instance:modify | |
| ddm:database:migrate | - | |
| ddm:instance:reload | ddm:instance:modify | |
| ddm::updateParamGroup | ddm:param:update | |
| ddm::applyParamGroup | ddm:param:apply | |
| ddm:instance:syncDataNode | ddm:rds:synchro | |
| ddm:instance:killProcessList | - | |
| ddm::copyParamGroup | ddm:param:create | |
| ddm:instance:reduceNode | ddm:instance:extendNode | |
| ddm:instance:deleteUser | ddm:user:delete | |
| ddm:instance:modifyPublicAccess | - | |
| ddm::createParamGroup | ddm:param:create | |
| ddm:instance:resize | - | |
| ddm:instance:enlargeNode | ddm:instance:extendNode | |
| ddm:instance:modifySsl | - | |
| ddm:instance:updateDataNodeReadWritePolicy | ddm:rds:modifyReadPolicy | |
| ddm:database:migrateRollback | - | |
| ddm:instance:deleteBackup | - | |
| ddm:database:loadMetadata | ddm:database:create | |
| ddm:instance:updatePort | ddm:instance:modify |
文档数据库服务(DDS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 文档数据库服务(DDS) | dds:instance:updateSecurityGroup | dds:instance:modifySecurityGroup |
| dds:instance:setSlowLogPlaintextStatus | dds:instance:modifySlowLogPlaintextSwitch | |
| dds:instance:updateRemark | dds:instance:modify | |
| dds:backup:create | dds:instance:createManualBackup | |
| dds:configuration:delete | dds:param:delete | |
| dds:instance:updateOpsWindow | dds:instance:modify | |
| dds:instance:migrateAz | dds:instance:migrate | |
| dds:instance:unbindEIP | dds:instance:unbindPublicIp | |
| dds:instance:bindEIP | dds:instance:bindPublicIp | |
| dds:configuration:reset | dds:param:modify | |
| dds:instance:createIp | - | |
| dds:instance:delete | dds:instance:deleteInstance | |
| dds:configuration:update | dds:param:modify | |
| dds:instance:restore | dds:backup:refreshInstanceFromBackup | |
| dds:instance:create | - | |
| dds:instance:updateConfiguration | dds:instance:modifyParameter | |
| dds:instance:setBackupPolicy | dds:instance:modifyBackupPolicy | |
| dds:instance:restart | dds:instance:reboot | |
| dds:instance:resetPassword | dds:instance:resetPasswd | |
| dds:instance:applyConfiguration | dds:instance:modifyParameter | |
| dds:instance:updateSpec | dds:instance:modifySpec | |
| dds:instance:extendVolume | - | |
| dds:instance:setAuditLogPolicy | dds:instance:modifyAuditLogSwitch | |
| dds:configuration:create | dds:param:create | |
| dds:instance:deleteAuditLog | - | |
| dds:instance:updateName | dds:instance:modify | |
| dds:instance:setRecyclePolicy | - | |
| dds:instance:setSourceSubnet | - | |
| dds:instance:switchover | - | |
| dds:instance:upgradeDatabaseVersion | dds:instance:batchUpgradeDatabaseVersion | |
| dds:configuration:copy | dds:param:create | |
| dds:instance:addNode | dds:instance:extendNode dds:instance:list | |
| dds:instance:setSsl | dds:instance:modifySSL | |
| dds:instance:updateIp | dds:instance:modifyVIP | |
| dds:backup:delete | - | |
| dds:instance:reduceNode | - | |
| dds:instance:setTag | dds:instance:modify dds:instance:deleteTag dds:instance:addTag dds:instance:list | |
| dds:instance:updatePort | dds:instance:modifyPort |
密码安全中心(专属加密服务 DHSM)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 密码安全中心(专属加密服务 DHSM) | dhsm:cluster:update | - |
| dhsm:hsm:updateHsm | - | |
| dhsm:hsm:createOrder | - | |
| dhsm:hsm:create | - | |
| dhsm:hsm:createTags | - | |
| dhsm:hsm:deleteResourceTag | - | |
| dhsm:hsm:createInstallOrder | - | |
| dhsm:hsm:createResourceTag | - | |
| dhsm:cluster:create | - | |
| dhsm:cluster:delete | - |
数据湖探索(DLI)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 数据湖探索(DLI) | dli::tagResource | - |
| dli:datasourceauth:update | dli:datasourceauth:updateAuth | |
| dli:elasticresourcepool:resourceManagement | - | |
| dli:queue:create | dli:queue:createQueue | |
| dli:template:update | - | |
| dli:queue:cancelJob | - | |
| dli:queue:checkConnection | - | |
| dli:jobs:update | - | |
| dli:resource:delete | dli:resource:deleteResource | |
| dli:table:update | - | |
| dli:queue:deleteProperty | dli:queue:updateQueue | |
| dli:sqldefendrule:create | - | |
| dli:queue:createProperty | dli:queue:updateQueue | |
| dli:template:create | - | |
| dli:jobs:delete | - | |
| dli::checkSql | - | |
| dli:edsconnection:delete | - | |
| dli:edsconnection:createRoute | - | |
| dli:jobs:create | - | |
| dli:database:create | dli:database:createDatabase | |
| dli:datasourceauth:create | - | |
| dli:connection:delete | - | |
| dli:edsconnection:update | - | |
| dli:datasourceauth:delete | dli:datasourceauth:dropAuth | |
| dli:queue:scale | dli:queue:scaleQueue | |
| dli:sqldefendrule:delete | - | |
| dli:edsconnection:create | - | |
| dli:elasticresourcepool:create | - | |
| dli:elasticresourcepool:delete | dli:elasticresourcepool:drop | |
| dli::unTagResource | - | |
| dli:queue:updateProperty | dli:queue:updateQueue | |
| dli:sqldefendrule:update | - | |
| dli:queue:createPlan | dli:queue:scaleQueue | |
| dli:template:delete | - | |
| dli:edsconnection:deleteRoute | - | |
| dli:table:delete | dli:table:dropTable | |
| dli:jobs:stopFlinkJob | dli:jobs:stop | |
| dli:variable:create | - | |
| dli::callbackEdgeJobAction | - | |
| dli:queue:submitJob | - | |
| dli:queue:update | dli:queue:updateQueue | |
| dli:jobs:startFlinkJob | dli:jobs:start | |
| dli:resource:update | dli:resource:updateResource | |
| dli:edsconnection:bindQueue | - | |
| dli:variable:delete | - | |
| dli:variable:update | - | |
| dli:database:update | - | |
| dli:queue:delete | dli:queue:dropQueue | |
| dli:resource:create | - | |
| dli:database:createTable | - | |
| dli::operateAuth | - | |
| dli:jobs:import | - | |
| dli:catalog:bind | - | |
| dli::createEdgeChannel | - | |
| dli:elasticresourcepool:update | - | |
| dli:jobs:export | - | |
| dli:database:delete | dli:database:dropDatabase | |
| dli:connection:create | - | |
| dli:queue:deletePlan | dli:queue:scaleQueue | |
| dli:table:insertInto | dli:table:insertIntoTable | |
| dli:edsconnection:unbindQueue | - | |
| dli::createLakehouse | - |
分布式消息服务(DMS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 分布式消息服务(DMS) | dms:instance:modifyStatus | - |
| dms:topic:autoCreate | dms:instance:modify | |
| dms:instance:deleteDiagnosisReport | dms:instance:get | |
| dms:message:export | dms:instance:modify | |
| dms:exchange:bindingAsSource | dms:instance:modify | |
| dms:instance:modifyPassword | dms:instance:resetAuthInfo | |
| dms:user:delete | dms:instance:modify | |
| dms:group:modify | dms:instance:modify | |
| dms:instance:disableLog | dms:instance:modify | |
| dms:vhost:delete | dms:instance:modify | |
| dms:topic:setAccessPolicy | dms:instance:modify | |
| dms:instance:modifyScheduledTask | dms:instance:modify | |
| dms:instance:modifyConfig | dms:instance:modify | |
| dms:instance:modifyAuthInfo | - | |
| dms:topic:create | dms:instance:modify | |
| dms:exchange:unbind | dms:instance:modify | |
| dms:instance:setClientQuota | dms:instance:modify | |
| dms:instance:createMetadataMigrationTask | dms:instance:modify | |
| dms:instance:delete | - | |
| dms:instance:connector | - | |
| dms:instance:deleteMetadataMigrationTask | dms:instance:modify | |
| dms:topic:delete | dms:instance:modify | |
| dms:topic:updateReplica | dms:instance:modify | |
| dms:instance:reassignTopic | dms:instance:modify | |
| dms:instance:deleteScheduledTask | dms:instance:modify | |
| dms:group:setAccessPolicy | dms:instance:modify | |
| dms:topic:modifyQuota | dms:instance:modify | |
| dms:user:modify | dms:instance:modify | |
| dms:group:delete | dms:instance:modify | |
| dms:group:create | dms:instance:modify | |
| dms:topic:modify | dms:instance:modify | |
| dms:instance:update | dms:instance:modify | |
| dms:instance:updateConnectorTask | dms:instance:createConnectorSinkTask | |
| dms:instance:create | - | |
| dms:message:send | dms:instance:modify | |
| dms:user:create | dms:instance:modify | |
| dms:instance:deleteConnectorTask | dms:instance:deleteConnectorSinkTask | |
| dms:topic:setQuota | dms:instance:modify | |
| dms:group:resetConsumeOffset | dms:instance:modify | |
| dms:instance:scale | - | |
| dms:instance:createConnectorTask | dms:instance:createConnectorSinkTask | |
| dms:plugin:modifyStatus | dms:instance:modify | |
| dms:exchange:create | dms:instance:modify | |
| dms:instance:deleteClientQuota | dms:instance:modify | |
| dms:instance:modifySslSwitch | dms:instance:modify | |
| dms:instance:modifyClientQuota | dms:instance:modify | |
| dms:instance:closeManager | dms:instance:modify | |
| dms:topic:createPartition | dms:instance:modify | |
| dms:message:delete | dms:instance:modify | |
| dms:instance:restore | dms:instance:modify | |
| dms::updateRecyclePolicy | dms:instance:modify | |
| dms:exchange:delete | dms:instance:modify | |
| dms:connector:validate | dms:instance:connector | |
| dms:vhost:create | dms:instance:modify | |
| dms:instance:createDiagnosisTask | dms:instance:get | |
| dms:instance:deleteBackgroundTask | - | |
| dms:instance:enableLog | dms:instance:modify |
云解析服务(DNS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云解析服务(DNS) | dns:recordset:setStatus | - |
| dns:zone:disassociaterouter | - | |
| dns:zone:update | - | |
| dns:recordset:update | - | |
| dns:zone:delete | - | |
| dns:lineGroup:update | dns:linegroup:update | |
| dns:zone:disableDnssecConfig | - | |
| dns:zone:enableDnssecConfig | - | |
| dns:zone:associaterouter | - | |
| dns:recordset:batchDeletePublicZoneRecordsets | - | |
| dns:ptr:create | dns:ptr:set | |
| dns:recordset:createPrivateRecordSetImport | dns:privateRecordset:createImport | |
| dns:zone:create | - | |
| dns:tag:set | - | |
| dns:endpoint:create | - | |
| dns:recordset:delete | - | |
| dns:resolverRule:create | - | |
| dns:customLine:create | dns:customline:create | |
| dns:customLine:delete | dns:customline:delete | |
| dns:resolverRule:delete | - | |
| dns:recordset:create | - | |
| dns:endpoint:deleteIpaddress | - | |
| dns:endpoint:update | - | |
| dns:recordset:deletePrivateRecordSetImportTask | dns:privateRecordset:deleteImport | |
| dns:zone:createRetrieval | - | |
| dns:ptr:delete | dns:ptr:set | |
| dns:resolverRule:associaterouter | - | |
| dns:endpoint:delete | - | |
| dns:resolverRule:disassociaterouter | - | |
| dns:resolverRule:update | - | |
| dns:lineGroup:create | dns:linegroup:create | |
| dns:lineGroup:delete | dns:linegroup:delete | |
| dns:zone:setProxyPattern | - | |
| dns:endpoint:createIpaddress | - | |
| dns:zone:setStatus | - |
数据复制服务(DRS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 数据复制服务(DRS) | drs:migrationJob:modifyConflictPolicy | drs:synchronizationJob:update |
| drs:migrationJob:deleteJob | drs:migrationJob:delete | |
| drs:backupMigrationJob:deleteJob | drs:backupMigrationJob:delete | |
| drs:subscriptionJob:deleteJob | drs:subscriptionJob:delete | |
| drs:migrationJob:batchUpdateJobInfo | drs:migrationJob:modify | |
| drs:migrationJob:createJob | drs:migrationJob:create | |
| drs:migrationJob:selectDatabaseObject | drs:migrationJobs:select | |
| drs:subscriptionJob:updateConsumeTime | drs:subscriptionJob:UpdateConsumeTime | |
| drs:subscriptionJob:editJobInfo | drs:subscriptionJob:edit | |
| drs:configuration:modifyUserInfo | drs:migrationJob:modifyUserInfo | |
| drs:migrationJob:createJobs | drs:migrationJobs:create | |
| drs:migrationJob:batchSetSmn | drs:migrationJob:action | |
| drs:migrationJob:modifyCommonSetting | drs:migrationJob:updateJobConfig | |
| drs:configuration:deleteDataTransformationInfo | drs:dataTransformation:delete | |
| drs:configuration:updateDataTransformationInfo | drs:dataTransformation:update | |
| drs:subscriptionJob:createJob | drs:subscriptionJob:create | |
| drs:migrationJob:updateDDLPolicy | - | |
| drs:migrationJob:batchCreateJob | drs:migrationJobs:create | |
| drs:migrationJob:modifySyncTypePolicy | drs:migrationJob:create | |
| drs:migrationJob:modifyIncreStartPosition | drs:migrationJob:updateJobConfig | |
| drs:migrationJob:batchSetSpeedLimit | - | |
| drs:migrationJob:changeSrcOrTargetPwd | - | |
| drs:migrationJob:updateTuningParams | drs:migrationJob:update | |
| drs:backupMigrationJob:modifyOfflineTaskInfo | drs:backupMigrationJob:modify | |
| drs:migrationJob:updateObjectInfo | drs:migrationJob:update | |
| drs:migrationJob:updateJobInfo | drs:migrationJob:update | |
| drs:configuration:setMigrationTransSpeed | drs:migrationJob:setMigrationTransSpeed | |
| drs:backupMigrationJob:createJob | drs:backupMigrationJob:create | |
| drs:migrationJob:modifyJob | drs:migrationJob:modify | |
| drs:migrationJob:batchUpdateUserMigrate | drs:migrationJob:modifyUserInfo | |
| drs:migrationJob:batchSetTransformation | drs:migrationJob:action | |
| drs:migrationJob:setBatchSyncPolicy | drs:migrationJobs:add | |
| drs:configuration:addDataTransformationInfo | drs:dataTransformation:add | |
| drs:migrationJoAb:batchDeleteJobs | drs:migrationJobs:delete | |
| drs:migrationJob:cloneJobs | drs:migrationJob:create |
数据安全中心(DSC)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 数据安全中心(DSC) | dsc:scanTask:create | - |
| dsc:asset:update | - | |
| dsc:watermark:embed | - | |
| dsc:maskTask:operate | - | |
| dsc:asset:delete | dsc:bigdataAsset:delete dsc:databaseAsset:delete dsc:obsAsset:delete | |
| dsc:common:operate | - | |
| dsc:asset:create | dsc:obsAsset:create dsc:databaseAsset:create dsc:bigdataAsset:create | |
| dsc:scanTask:delete | - | |
| dsc:watermark:extract | - |
云数据库 GaussDB(DWS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云数据库 GaussDB(DWS) | dws:cluster:scaleOut | - |
| dws:cluster:updateQueueResourceForWLM | dws:workLoadManager:operate | |
| dws:cluster:createPerfDashboardForDMS | dws:dmsQuery:terminate dws:dmsUserBoard:create | |
| dws::unTagResource | dws:openAPITag:delete | |
| dws:cluster:updateDatabaseUserInfo | dws:dbAuthority:updateUser | |
| dws:cluster:resumeOperationalTask | - | |
| dws:cluster:changeSecurityGroup | - | |
| dws:alarm:deleteSubscription | dws:alarmSub:delete | |
| dws:cluster:copySnapshot | dws:snapshot:copy | |
| dws:event:updateSubscription | dws:eventSub:update | |
| dws:cluster:getDisasterRecoveryDetail | dws:disasterRecovery:get | |
| dws:cluster:updateOperationalTask | - | |
| dws:cluster:addQueueUserForWLM | dws:workLoadManager:operate | |
| dws:alarm:createSubscription | dws:alarmSub:create | |
| dws:cluster:addOperationalTask | - | |
| dws:cluster:doUpgrade | dws:cluster:doUpdate | |
| dws:migration:createBucket | - | |
| dws:migration:deleteBucket | - | |
| dws:alarm:updateSubscription | dws:alarmSub:update | |
| dws:cluster:encrypt | - | |
| dws:cluster:deleteDatabaseUser | - | |
| dws:cluster:saveDescriptionInfo | - | |
| dws:cluster:updateSchemaLimitForWLM | dws:workLoadManager:operate | |
| dws:cluster:updateDataSource | dws:MRSConnection:update | |
| dws::tagResource | dws:openAPITag:add | |
| dws:cluster:executeDatabaseOmUserAction | - | |
| dws:cluster:expandDisk | dws:periodExpandPrecheck:operate dws:disk:expand | |
| dws:cluster:pauseOperationalTask | - | |
| dws:cluster:openAccessLts | dws:ltsAccess:operate | |
| dws:cluster:deleteLogicalClusterPlan | - | |
| dws:cluster:updateConfig | dws:cluster:setSecuritySettings | |
| dws:cluster:addPerfItemForDMS | dws:dmsQuery:terminate dws:dmsPerformanceMonitor:add | |
| dws:cluster:unbindELB | dws:elb:unbind | |
| dws:cluster:initLogicalClusterSwitch | dws:logicalCluster:operate | |
| dws:cluster:addQueueForWLM | dws:workLoadManager:operate | |
| dws:cluster:updateDatabaseAuthority | dws:dbAuthority:update | |
| dws:cluster:resetPassword | dws:openAPICluster:resetPassword | |
| dws:cluster:updateLogicalCluster | dws:logicalCluster:operate | |
| dws:cluster:rotateKey | - | |
| dws:cluster:deleteOperationalTask | - | |
| dws:cluster:setMaintainceWindow | - | |
| dws:cluster:syncIamUser | dws:dbAuthority:syncIamUser | |
| dws:cluster:createLogicalCluster | dws:logicalCluster:operate | |
| dws:cluster:deleteCN | dws:module:uninstall | |
| dws:cluster:suspendRedistribution | dws:redistribution:suspend | |
| dws:cluster:delete | dws:openAPICluster:delete | |
| dws:cluster:createSnapshot | dws:openAPISnapshot:create dws:snapshot:create | |
| dws:cluster:addPlanForWLM | dws:workLoadManager:operate | |
| dws:cluster:updatePlanStageForWLM | dws:workLoadManager:operate | |
| dws:cluster:createSnapshotPolicy | dws:cluster:setAutomatedSnapshot | |
| dws:cluster:addAccessWhitelist | - | |
| dws:cluster:addPlanStageForWLM | dws:workLoadManager:operate | |
| dws:cluster:deleteDisasterRecovery | dws:disasterRecovery:delete | |
| dws:cluster:updateQueueRuleForWLM | dws:workLoadManager:operate | |
| dws:cluster:create | dws:openAPICluster:create dws:checkCluster:create | |
| dws:cluster:deleteDataSource | dws:MRSConnection:delete | |
| dws:cluster:createConnection | dws:dns:create | |
| dws:cluster:createDisasterRecovery | dws:disasterRecovery:create | |
| dws:cluster:bindEIP | dws:eip:operate | |
| dws:cluster:operateDisasterRecovery | dws:disasterRecovery:otherOperate | |
| dws:cluster:startPlanForWLM | dws:workLoadManager:operate | |
| dws:cluster:switchPlanStageForWLM | dws:workLoadManager:operate | |
| dws:cluster:startCluster | - | |
| dws:cluster:deleteQueueForWLM | dws:workLoadManager:operate | |
| dws:cluster:stopPlanForWLM | dws:workLoadManager:operate | |
| dws:cluster:updateConnection | dws:dns:edit | |
| dws:cluster:createDataSource | dws:MRSConnection:create | |
| dws:cluster:deleteLogicalCluster | dws:logicalCluster:operate | |
| dws:cluster:deleteConnection | dws:dns:release | |
| dws:cluster:redistribution | dws:redistribution:operate | |
| dws:cluster:deletePlanForWLM | dws:workLoadManager:operate | |
| dws:cluster:stopCluster | - | |
| dws:cluster:expandWithExistedNodes | dws:expandWithExistedNodes:update | |
| dws:cluster:deleteWorkloadRule | - | |
| dws:event:deleteSubscription | dws:eventSub:delete | |
| dws:cluster:cancelReadonly | - | |
| dws:cluster:addWorkloadRule | - | |
| dws:cluster:switchLogicalCluster | dws:logicalCluster:operate | |
| dws:cluster:deletePlanStageForWLM | dws:workLoadManager:operate | |
| dws:cluster:setFunctionStatusForWLM | dws:workLoadManager:operate | |
| dws:cluster:unbindEIP | dws:eip:operate | |
| dws:event:createSubscription | dws:eventSub:create | |
| dws:cluster:updateWorkloadRule | - | |
| dws:cluster:bindELB | dws:elb:bind | |
| dws:cluster:deleteSnapshot | dws:openAPISnapshot:delete dws:snapshot:delete | |
| dws:cluster:scaleIn | dws:cluster:shrink | |
| dws:cluster:deleteNode | dws:clusterNodes:operate | |
| dws:cluster:createInspection | - | |
| dws:cluster:addCN | dws:module:install | |
| dws:cluster:switchover | - | |
| dws:cluster:closeAccessLts | dws:ltsAccess:operate | |
| dws:cluster:identifySyncExecute | - |
弹性云服务器(ECS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 弹性云服务器(ECS) | ecs:cloudServers:resize | - |
| ecs:cloudServers:updateServerBlockDevice | ecs:cloudServers:put | |
| ecs:cloudServers:changeVpc | - | |
| ecs:cloudServers:setAutoTerminateTime | - | |
| ecs:cloudServers:createReservedInstance | - | |
| ecs:cloudServers:deletePassword | - | |
| ecs:cloudServers:detachVolume | - | |
| ecs:cloudServers:batchCreateServerTags | ecs:cloudServers:batchSetServerTags ecs:cloudServers:put | |
| ecs:cloudServers:batchUpdateServersName | ecs:cloudServers:put | |
| ecs:cloudServers:deleteServerGroupMember | ecs:cloudServers:delete | |
| ecs:cloudServers:rebuild | - | |
| ecs:cloudServers:changeChargeMode | - | |
| ecs:cloudServers:attachSharedVolume | - | |
| ecs:cloudServers:addServerGroupMember | ecs:cloudServers:create | |
| ecs:cloudServers:addNics | - | |
| ecs:recycleBin:deleteServer | - | |
| ecs:cloudServers:changeOS | - | |
| ecs:cloudServers:attach | - | |
| ecs:cloudServers:start | - | |
| ecs:cloudServers:setAutoRecovery | - | |
| ecs:cloudServers:updateMetadata | - | |
| ecs:cloudServers:createServers | ecs:cloudServers:create | |
| ecs:cloudServers:updateServerInterface | ecs:cloudServerNics:update | |
| ecs:cloudServers:deleteMetadata | - | |
| ecs:cloudServers:reboot | - | |
| ecs:cloudServerNics:delete | - | |
| ecs:cloudServers:stop | - | |
| ecs:cloudServers:resetServerPwd | - | |
| ecs:cloudServers:updateServer | ecs:cloudServers:put | |
| ecs:cloudServers:batchDeleteServerTags | ecs:cloudServers:put ecs:cloudServers:batchSetServerTags | |
| ecs:cloudServers:deleteServers | ecs:cloudServers:delete | |
| ecs:cloudServers:createServerGroup | ecs:cloudServers:create | |
| ecs:cloudServers:deleteServerGroup | ecs:cloudServers:delete | |
| ecs:serverGroups:manage | - | |
| ecs:recycleBin:updatePolicy | - |
弹性公网IP(EIP)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 弹性公网IP(EIP) | eip:publicIps:detachBandwidth | - |
| eip:nativeFloatingIps:create | - | |
| eip:publicIps:enableNat64 | - | |
| eip:bandwidths:removePublicIps | - | |
| eip:publicIps:delete | - | |
| eip:bandwidths:insertPublicIps | - | |
| eip:publicIps:update | - | |
| eip:nativeFloatingIps:delete | - | |
| eip:publicIps:disableNat64 | - | |
| eip:publicIps:create | - | |
| eip:publicIps:disassociateInstance | - | |
| eip:publicIps:attachBandwidth | - | |
| eip:publicIps:associateInstance | - |
弹性负载均衡(ELB)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 弹性负载均衡(ELB) | elb:loadbalancers:updateDnsConfig | - |
| elb:ipgroups:delete | - | |
| elb:l7rules:update | elb:l7rules:put | |
| elb:security-policies:update | elb:security-policies:put | |
| elb:loadbalancers:create | - | |
| elb:members:update | elb:members:put | |
| elb:ipgroups:update | elb:ipgroups:put | |
| elb:healthmonitors:update | elb:healthmonitors:put | |
| elb:healthmonitors:create | - | |
| elb:healthmonitors:delete | - | |
| elb:certificates:delete | - | |
| elb:certificates:create | - | |
| elb:pools:update | elb:pools:put | |
| elb:security-policies:create | - | |
| elb:logtanks:update | elb:logtanks:put | |
| elb:l7policies:delete | - | |
| elb:loadbalancers:update | elb:loadbalancers:put | |
| elb:pools:create | - | |
| elb:logtanks:create | - | |
| elb:security-policies:delete | - | |
| elb:l7policies:update | elb:l7policies:put | |
| elb:whitelists:update | elb:whitelists:put | |
| elb:whitelists:delete | - | |
| elb:l7rules:create | - | |
| elb:members:delete | - | |
| elb:listeners:delete | - | |
| elb:members:create | - | |
| elb:whitelists:create | - | |
| elb:certificates:update | elb:certificates:put | |
| elb:listeners:update | elb:listeners:put | |
| elb:l7policies:create | - | |
| elb:l7rules:delete | - | |
| elb:pools:delete | - | |
| elb:ipgroups:create | - | |
| elb:listeners:create | - |
企业项目(EPS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 企业项目(EPS) | eps:enterpriseProjects:create | - |
| eps:enterpriseProjects:enable | - | |
| eps:resources:add | - | |
| eps:enterpriseProjects:update | - | |
| eps:enterpriseProjects:disable | - | |
| eps:enterpriseProjects:delete | - |
企业路由器(ER)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 企业路由器(ER) | er:attachments:accept | - |
| er:attachments:cleanInvalidAttachments | - | |
| er:commonAttachments:update | er:attachments:update | |
| er:connectAttachment:create | er:attachments:create | |
| er:connectAttachment:delete | er:attachments:delete | |
| er:flowLogs:create | - | |
| er:flowLogs:delete | - | |
| er:flowLogs:disable | - | |
| er:flowLogs:enable | - | |
| er:flowLogs:update | - | |
| er:instances:changeCidr | er:instances:update | |
| er:instances:create | - | |
| er:instances:createVpcAttachment | er:attachments:create | |
| er:instances:delete | - | |
| er:instances:deleteVpcAttachment | er:attachments:delete | |
| er:instances:enableVpcAttachmentIpv6 | er:attachments:update | |
| er:instances:update | - | |
| er:instances:updateVpcAttachment | er:attachments:update | |
| er:instances:updateVpcAttachmentRouteSynchronization | - | |
| er:intraRegionPeeringAttachment:delete | - | |
| er:routeTables:associate | er:associations:associate | |
| er:routeTables:create | - | |
| er:routeTables:delete | - | |
| er:routeTables:disablePropagation | er:propagations:disable | |
| er:routeTables:disassociate | er:associations:disassociate | |
| er:routeTables:enablePropagation | er:propagations:enable | |
| er:routeTables:update | - | |
| er:routeTables:updateAssociationRoutePolicy | er:associations:update | |
| er:routeTables:updatePropagationRoutePolicy | er:propagations:update | |
| er:routes:publish | - | |
| er:routes:unpublish | - | |
| er:staticRoutes:batchCreate | er:routes:create | |
| er:staticRoutes:batchDelete | er:routes:delete | |
| er:staticRoutes:create | er:routes:create | |
| er:staticRoutes:delete | er:routes:delete | |
| er:staticRoutes:update | er:routes:update | |
| er:tags:batchOperation | er:tags:create | |
| er:tags:delete | - | |
| er:tags:singleCreate | er:tags:create | |
| er:trafficMarkPolicy:addTrafficMatchRules | - | |
| er:trafficMarkPolicy:create | - | |
| er:trafficMarkPolicy:delete | - | |
| er:trafficMarkPolicy:removeTrafficMatchRules | - | |
| er:trafficMarkPolicy:update | - | |
| er:trafficQosPolicy:create | - | |
| er:trafficQosPolicy:createTrafficQosQueues | - | |
| er:trafficQosPolicy:delete | - | |
| er:trafficQosPolicy:deleteTrafficQosQueues | - | |
| er:trafficQosPolicy:update | - | |
| er:trafficQosPolicy:updateTrafficQosQueue | - |
云硬盘(EVS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云硬盘(EVS) | evs:snapshots:create | - |
| evs:snapshots:rollback | - | |
| evs:volumes:update | - | |
| evs:nativeSnapshot:update | evs:snapshots:update | |
| evs:volumes:revert | - | |
| evs:volumes:delete | - | |
| evs:snapshots:delete | - | |
| evs:volumes:resize | evs:volumes:extend | |
| evs:volumes:tagResource | evs:volumeTags:create | |
| evs:nativeVolume:create | evs:volumes:create | |
| evs:imageCache:delete | - | |
| evs:volumes:retype | - | |
| evs:nativeSnapshot:delete | evs:snapshots:delete | |
| evs:volumes:unTagResource | evs:volumeTags:delete | |
| evs:volumes:modifyQos | evs:volumes:extend | |
| evs:imageCache:create | - | |
| evs:recycle_policy:update | - | |
| evs:snapshots:update | - | |
| evs:volumes:changeChargeMode | - | |
| evs:nativeVolume:delete | evs:volumes:delete | |
| evs:nativeSnapshot:create | evs:snapshots:create | |
| evs:volumes:create | - |
函数工作流(FunctionGraph)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 函数工作流(FunctionGraph) | functiongraph::updateAsyncStatusLog | functiongraph:function:create |
| functiongraph:workflow:update | functiongraph:function:create | |
| functiongraph:function:createUrl | functiongraph:function:updateConfig | |
| functiongraph:function:updateMaxInstanceConfig | functiongraph:function:updateConfig | |
| functiongraph:dependency:createDependencyVersion | functiongraph:function:create | |
| functiongraph::createVpcEndpoint | functiongraph:function:updateConfig | |
| functiongraph:function:updateTracing | functiongraph:function:create | |
| functiongraph:function:createVersion | - | |
| functiongraph:function:updateUrl | functiongraph:function:updateConfig | |
| functiongraph:function:createAlias | - | |
| functiongraph:function:deleteFunction | functiongraph:function:delete | |
| functiongraph:function:stopAsyncInvoke | functiongraph:function:invokeAsync | |
| functiongraph:workflow:delete | functiongraph:function:delete | |
| functiongraph:function:updateSnapshot | functiongraph:function:updateConfig | |
| functiongraph:dependency:createDependency | functiongraph:function:create | |
| functiongraph:function:deleteAlias | - | |
| functiongraph::deleteTag | functiongraph:function:updateConfig | |
| functiongraph:function:deleteEvent | functiongraph:function:invoke | |
| functiongraph:function:updateReservedInstanceCount | functiongraph:function:updateConfig | |
| functiongraph:function:createEvent | functiongraph:function:invoke | |
| functiongraph::enableLtsLogs | functiongraph:function:create | |
| functiongraph::deleteFunctionApp | functiongraph:function:delete | |
| functiongraph:function:updateFunctionCode | functiongraph:function:updateCode | |
| functiongraph:trigger:batchDelete | functiongraph:trigger:deleteSpecifiedFunctionTriggers | |
| functiongraph:function:createFunction | functiongraph:function:create | |
| functiongraph:function:import | functiongraph:function:create | |
| functiongraph:dependency:deleteDependencyVersion | functiongraph:function:delete | |
| functiongraph:dependency:deleteDependency | functiongraph:function:delete | |
| functiongraph:function:updateAlias | - | |
| functiongraph::createTag | functiongraph:function:updateConfig | |
| functiongraph:function:updateEvent | functiongraph:function:invoke | |
| functiongraph:function:updateFunctionConfig | functiongraph:function:updateConfig | |
| functiongraph::deleteVpcEndpoint | functiongraph:function:delete | |
| functiongraph:trigger:createTrigger | functiongraph:trigger:create | |
| functiongraph:trigger:update | functiongraph:trigger:create | |
| functiongraph:function:deleteUrl | functiongraph:function:updateConfig | |
| functiongraph:trigger:delete | - | |
| functiongraph::createFunctionApp | functiongraph:function:list | |
| functiongraph:workflow:create | functiongraph:function:create |
云数据库(GaussDB)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云数据库(GaussDB) | gaussdb:instance:createDatabaseUser | rds:instance:modify |
| gaussdb:instance:dropDatabase | rds:instance:modify | |
| gaussdb:instance:createDatabase | rds:instance:modify | |
| gaussdb:instance:deleteCgroup | - | |
| gaussdb:instance:createDatabaseRole | - | |
| gaussdb:instance:reduceVolume | - | |
| gaussdb:instance:createDatabaseSchema | rds:instance:modify | |
| gaussdb:instance:deleteTaskRecord | rds:instance:modify | |
| gaussdb:instance:resizeFlavor | rds:instance:modify | |
| gaussdb:backup:stopBackup | - | |
| gaussdb:instance:resetPassword | rds:password:update | |
| gaussdb:instance:changeDeploymentSolution | - | |
| gaussdb:instance:createCgroup | - | |
| gaussdb:param:createParam | rds:param:save rds:param:create | |
| gaussdb:instance:setRecyclePolicy | rds:instance:modifyBackupPolicy | |
| gaussdb:backup:createBackup | rds:backup:create | |
| gaussdb:user:addOrUpdate | - | |
| gaussdb:instance:updateBackupPolicy | rds:instance:modifyBackupPolicy | |
| gaussdb:instance:autoEnlargePolicy | - | |
| gaussdb:instance:switchShard | rds:instance:modify | |
| gaussdb:tag:create | rds:instance:modify | |
| gaussdb:param:reset | rds:param:reset | |
| gaussdb:instance:grantDatabasePrivilege | rds:instance:modify | |
| gaussdb:quota:update | rds:instance:modify | |
| gaussdb:instance:renameInstance | rds:instance:modify | |
| gaussdb:databaseUser:drop | rds:databaseUser:drop | |
| gaussdb:instance:restartInstance | rds:password:update rds:instance:restart | |
| gaussdb:param:deleteParam | rds:param:delete | |
| gaussdb:instance:createInstance | rds:instance:create | |
| gaussdb:instance:bindEIP | rds:instance:modifyPublicAccess | |
| gaussdb:task:delete | rds:task:delete | |
| gaussdb:param:copy | rds:param:create | |
| gaussdb:instance:deleteInstance | rds:instance:delete | |
| gaussdb:instance:createResourcePool | - | |
| gaussdb:instance:createDataRecovery | - | |
| gaussdb:param:applyParam | rds:param:apply | |
| gaussdb:backup:deleteBackup | rds:backup:delete | |
| gaussdb:instance:extend | rds:instance:extendSpace rds:instance:expandCluster | |
| gaussdb:instance:modifyCgroup | - | |
| gaussdb:instance:modifyResourcePool | - | |
| gaussdb:instance:deleteResourcePool | - | |
| gaussdb:param:update | rds:instance:modify rds:param:modify |
云数据库GaussDB for NoSQL
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云数据库GaussDB for NoSQL | gaussdbfornosql:configuration:delete | nosql:param:delete |
| gaussdbfornosql:instance:applyConfiguration | nosql:instance:modifyParameter | |
| gaussdbfornosql:instance:setTags | nosql:instance:tag | |
| gaussdbfornosql:instance:setRecyclePolicy | nosql:recyclePolicy:set | |
| gaussdbfornosql:configuration:reset | nosql:param:modify | |
| gaussdbfornosql:instance:updatePassword | nosql:instance:modifyPasswd | |
| gaussdbfornosql:configuration:copy | nosql:param:create | |
| gaussdbfornosql:instance:deleteDatabaseUser | nosql:instance:deleteDatabaseUser | |
| gaussdbfornosql:serverless:deleteDynamoDBTable | - | |
| gaussdbfornosql:configuration:create | nosql:param:create | |
| gaussdbfornosql:instance:deleteNode | nosql:instance:reduceNode nosql:instance:delete | |
| gaussdbfornosql:serverless:createEndpoint | - | |
| gaussdbfornosql:instance:redisPitrRestore | nosql:instance:redisPitrRestore | |
| gaussdbfornosql:instance:setAutoExtendVolumePolicy | nosql:instance:modifyStorageSize | |
| gaussdbfornosql:instance:stopBackup | nosql:backup:stop | |
| gaussdbfornosql:instance:restart | nosql:instance:restart | |
| gaussdbfornosql:instance:updateColdVolume | nosql:instance:modifyStorageSize | |
| gaussdbfornosql:serverless:updateDynamoDBSubscriptionStatus | nosql:serverless:updateDynamoDBSubscriptionStatus | |
| gaussdbfornosql:instance:updateSpec | nosql:instance:modifySpecification | |
| gaussdbfornosql:instance:setBackupPolicy | nosql:backup:list | |
| gaussdbfornosql:instance:switchSSL | nosql:instance:switchSSL | |
| gaussdbfornosql:instance:updateSecurityGroup | nosql:instance:modifySecurityGroup | |
| gaussdbfornosql:instance:create | nosql:instance:create | |
| gaussdbfornosql:instance:setRedisPitrPolicy | nosql:instance:setRedisPitrPolicy | |
| gaussdbfornosql:instance:updatePort | nosql:instance:modifyPort | |
| gaussdbfornosql:instance:rename | nosql:instance:rename | |
| gaussdbfornosql:instance:updateEIP | nosql:instance:bindPublicIp nosql:instance:unbindPublicIp | |
| gaussdbfornosql:instance:updateConfiguration | nosql:instance:modifyParameter | |
| gaussdbfornosql:instance:addNode | nosql:instance:extendNode | |
| gaussdbfornosql:instance:delete | nosql:instance:delete | |
| gaussdbfornosql:instance:createBackup | nosql:backup:create | |
| gaussdbfornosql:instance:restore | - | |
| gaussdbfornosql:instance:updateVolume | nosql:instance:modifyStorageSize | |
| gaussdbfornosql:instance:createDatabaseUser | nosql:instance:createDatabaseUser | |
| gaussdbfornosql:instance:deleteBackup | nosql:backup:delete | |
| gaussdbfornosql:serverless:createDynamoDBTable | nosql:serverless:createDynamoDBTable | |
| gaussdbfornosql:instance:setLogConfigs | nosql:instances:saveLtsStreams | |
| gaussdbfornosql:configuration:update | nosql:param:modify | |
| gaussdbfornosql:serverless:deleteEndpoint | - | |
| gaussdbfornosql:instance:createColdVolume | nosql:instance:modifyStorageSize |
企业主机安全(HSS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 企业主机安全(HSS) | hss:event:addSystemUserWhiteList | hss:event:set |
| hss:securitycheck:updateSecurityCheckConfig | hss:securitycheck:set | |
| hss:setting:modifyLoginCommonIp | hss:commonIPs:set | |
| hss:event:deleteIsolatedFile | hss:event:set | |
| hss:setting:setMalwareReminders | hss:automaticKillMp:set | |
| hss:setting:changeMalwareCollectStatus | hss:automaticKillMp:set | |
| hss:decoyport:deletePolicy | - | |
| hss:wtp:setRemoteWtpBackupInfo | hss:wtpBackup:set | |
| hss:host:uninstallAgents | hss:agent:uninstall | |
| hss:ars:deleteAppWhitelistPolicy | hss:ars:set | |
| hss:setting:changeAutoKillVirusStatus | hss:automaticKillMp:set | |
| hss:antivirus:changeAntivirusPayPerScanStatus | hss:ars:set | |
| hss:container:deleteSecurityGroupPolicy | hss:container-network:set | |
| hss:asset:runHostAssetManualCollect | hss:assets:set | |
| hss:policy:associatePolicyGroup | hss:policy:set | |
| hss:container:createManualImageScanTask | hss:containers:set | |
| hss:rasp:deleteRaspPolicy | hss:rasp:set | |
| hss:ars:switchAppWhitelistPolicyHost | hss:ars:set | |
| hss:antiransomware:associateProtectionPolicy | hss:antiransomware:set | |
| hss:host:associateHostAssetValue | hss:hosts:set | |
| hss:antivirus:switchAntivirusTask | hss:ars:set | |
| hss:setting:modifyLoginCommonLocation | hss:commonLocations:set | |
| hss:event:removeAlarmWhiteList | hss:event:set | |
| hss:vulnerability:addVulWhiteList | hss:vuls:set | |
| hss:policy:addPolicyGroup | hss:policy:set | |
| hss:wtp:setWtpProtectionStatusInfo | hss:wtpProtect:switch | |
| hss:ars:addAppWhitelistPolicyHost | hss:ars:set | |
| hss:vulnerability:changeVulScanPolicy | hss:vuls:set | |
| hss:container:syncMultiCloudClusterStatus | hss:containers:set | |
| hss:quota:cancelHostsQuota | hss:quotas:set | |
| hss:vulnerability:exportVuls | hss:vuls:set | |
| hss:image:batchScanSwrImage | hss:images:set | |
| hss:decoyport:switchHostPolicy | - | |
| hss:safetyReport:deleteSecurityReport | hss:safetyReport:set | |
| hss:securitycheck:startManualSecurityCheck | hss:securitycheck:set | |
| hss:antiransomware:associateBackupPolicy | hss:antiransomware:set | |
| hss:vulnerability:recordUserViewVulTask | hss:vuls:set | |
| hss:safetyReport:uploadReportLogo | hss:report:set | |
| hss:vulnerability:operateEmergency | hss:vuls:set | |
| hss:image:changeExtendedWeakPassword | hss:images:set | |
| hss:image:runSwrImageScan | hss:images:set | |
| hss:images:changeSensitiveInfo | hss:images:set | |
| hss:images:changeFilePathWhiteDetail | hss:images:set | |
| hss:host:switchHostsProtectStatus | hss:hosts:switchVersion | |
| hss:image:createCicdConfigurationCommand | hss:images:set | |
| hss:setting:setAlarmConfig | hss:alertConfig:get | |
| hss:host:batchInstallAgent | hss:hosts:set | |
| hss:overview:changeMonthlyOperaReportTipStatus | hss:overview:set | |
| hss:container:updatePolicy | hss:container-network:set | |
| hss:host:associateHostsGroup | hss:hostGroup:set | |
| hss:quota:dealOrder | hss:quotas:set | |
| hss:image:batchExportLocalVulTask | hss:images:list | |
| hss:host:switchFirewallStatus | hss:hosts:switchVersion | |
| hss:container:isolateK8sContainer | hss:containers:set | |
| hss:container:updateSecurityGroupPolicy | hss:container-network:set | |
| hss:host:manualCheckVul | hss:hosts:manualDetect | |
| hss:safetyReport:addSecurityReport | hss:safetyReport:set | |
| hss:antiransomware:restoreRansomwareDuplicationInfo | hss:antiransomware:set | |
| hss:container:batchDeleteAgentDaemonset | hss:containers:set | |
| hss:container:switchContainerProtectStatus | hss:containers:set | |
| hss:container:deletePolicy | hss:clusterProtect:delete | |
| hss:container:modifyCicdConfiguration | hss:containers:set | |
| hss:decoyport:switchPolicy | - | |
| hss:wtp:deleteWtpBackupHostInfo | hss:wtpBackup:set | |
| hss:image:deleteCicdConfigurations | hss:images:set | |
| hss:container:createSecurityGroupPolicy | hss:container-network:set | |
| hss:ars:deleteAppWhitelistPolicyHost | hss:ars:set | |
| hss:wtp:switchWtpHostProtectDirInfo | hss:wtpDirectorys:set | |
| hss:image:updateRegistry | hss:images:set | |
| hss:host:deleteHostsGroup | hss:hostGroup:set | |
| hss:image:batchExportBaselineTask | hss:images:set | |
| hss:wtp:updateWtpBackupHostInfo | hss:wtpBackup:set | |
| hss:event:changeEvent | hss:event:set | |
| hss:rasp:switchRasp | hss:rasp:set | |
| hss:image:batchExportSWRVulTask | hss:images:list | |
| hss:host:addHostsGroup | hss:hostGroup:set | |
| hss:antiransomware:startRansomwareProtection | hss:antiransomware:set | |
| hss:event:addLoginWhiteList | hss:event:set | |
| hss:antiransomware:addRansomwareProtectionPolicy | hss:antiransomware:set | |
| hss:container:modifyImageScanPolicy | hss:containers:set | |
| hss:ars:changeAppWhitelistPolicy | hss:ars:set | |
| hss:image:batchDeleteRegistry | hss:images:set | |
| hss:image:addCicdConfiguration | hss:images:set | |
| hss:ars:createAppWhitelistPolicy | hss:ars:set | |
| hss:antiransomware:deleteRansomwareDuplicationInfo | hss:antiransomware:set | |
| hss:host:changeHostIgnoreStatus | hss:hosts:set | |
| hss:rasp:updateRaspPolicy | hss:rasp:set | |
| hss:policy:changePolicyGroup | hss:policy:set | |
| hss:event:batchChangeEvent | hss:event:set | |
| hss:policy:deletePolicyGroup | hss:policy:set | |
| hss:antiransomware:updateRansomwareBackupPolicyInfo | hss:antiransomware:set | |
| hss:event:exportEvent | hss:event:set | |
| hss:container:upgradeAgentDaemonset | hss:containers:set | |
| hss:image:runImageSynchronize | hss:images:set | |
| hss:vulnerability:changeVulStatus | hss:vuls:set | |
| hss:vulnerability:deleteVulWhiteList | hss:vuls:set | |
| hss:baseline:deleteSecurityCheckPolicyGroup | hss:baselines:set | |
| hss:baseline:updateSecurityCheckPolicyGroup | hss:baselines:set | |
| hss:baseline:addSecurityCheckPolicyGroup | hss:baselines:set | |
| hss:setting:uploadTemplate | hss:installAgent:set | |
| hss:host:upgradeAgents | hss:hosts:set | |
| hss:image:createImageSynchronizeTask | hss:images:set | |
| hss:vulnerability:rescanVulScanTask | hss:vuls:set | |
| hss:ars:switchAppWhitelistPolicyLearnStatus | hss:ars:set | |
| hss:safetyReport:changeSecurityReport | hss:safetyReport:set | |
| hss:container:createPolicy | hss:container-network:set | |
| hss:host:setManualDetect | hss:hosts:manualDetect | |
| hss:antivirus:createAntivirusTask | hss:ars:set | |
| hss:policy:changePolicyDetail | hss:policy:set | |
| hss:setting:changeAutoOpenQuotaStatus | hss:hosts:list | |
| hss:image:batchScanLocalImage | hss:images:set | |
| hss:safetyReport:switchSecurityReportStatus | hss:safetyReport:set | |
| hss:antivirus:createAntiVirusPaidTask | hss:ars:set | |
| hss:quota:upgradeOrder | hss:quotas:set | |
| hss:setting:installAgent | hss:installAgent:set | |
| hss:wtp:setWtpProtectSwitch | hss:wtpProtect:switch | |
| hss:image:addRegistry | hss:images:set | |
| hss:vulnerability:RestoreVulHostBackup | hss:vuls:set | |
| hss:ars:changeAppWhitelistPolicyProcessStatus | hss:ars:set | |
| hss:container:addCceIntegrationProtection | hss:containers:set | |
| hss:event:changeIsolatedFile | hss:event:set | |
| hss:antivirus:exportAntivirusResult | hss:ars:set | |
| hss:decoyport:createPolicy | - | |
| hss:event:changeBlockedIp | hss:accountCracks:unblock | |
| hss:container:createAgentDaemonset | hss:containers:set | |
| hss:event:updateSystemUserWhiteList | hss:event:set | |
| hss:host:changeHostsGroup | hss:hostGroup:set | |
| hss:securitycheck:stopManualSecurityCheck | hss:securitycheck:set | |
| hss:antiransomware:deleteRansomwareProtectionPolicy | hss:antiransomware:set | |
| hss:container:removeMultiCloudClusters | hss:containers:set | |
| hss:antivirus:deleteAntivirusPolicy | hss:ars:set | |
| hss:ars:addAppWhitelistPolicyProcess | hss:ars:set | |
| hss:setting:updateAlarmConfig | hss:alertConfig:set | |
| hss:decoyport:modifyPolicy | - | |
| hss:setting:modifyLoginWhiteIp | hss:whiteIps:set | |
| hss:quota:deleteResourceInstanceTag | hss:quotas:set | |
| hss:baseline:changeCheckRuleState | hss:configDetects:operate | |
| hss:vulnerability:changeVulWhiteList | hss:vuls:set | |
| hss:quota:batchCreateTags | hss:quotas:set | |
| hss:event:removeLoginWhiteList | hss:event:set | |
| hss:container:saveClusters | hss:containers:set | |
| hss:image:deleteRegistry | hss:images:set | |
| hss:quota:batchDeleteTags | hss:quotas:set | |
| hss:decoyport:switchAutoBind | - | |
| hss:antiransomware:updateRansomwareProtectionPolicy | hss:antiransomware:set | |
| hss:wtp:updateWtpDirectoryInfo | hss:wtpDirectorys:set | |
| hss:antiransomware:batchStartProtection | hss:antiransomware:set | |
| hss:container:deleteAgentDaemonset | hss:containers:set | |
| hss:antivirus:changeAntivirusPolicy | hss:ars:set | |
| hss:decoyport:deleteHostPolicy | - | |
| hss:image:showImageSecurityReportStatistic | hss:images:set | |
| hss:safetyReport:sendSecurityReport | hss:safetyReport:set | |
| hss:antivirus:createAntivirusPolicy | hss:ars:set | |
| hss:setting:changeSwitchesStatus | hss:alertConfig:set | |
| hss:rasp:addRaspPolicy | hss:rasp:set | |
| hss:antiransomware:stopRansomwareProtection | hss:antiransomware:set | |
| hss:event:removeSystemUserWhiteList | hss:event:set | |
| hss:setting:changeAgentAutoUpgradeStatus | hss:hosts:list | |
| hss:container:updateMultiCloudClusters | hss:containers:set | |
| hss:container:changeProtectStatus | hss:clusterProtect:list | |
| hss:setting:setTwoFactorLoginConfig | hss:twofactorAuth:set |
统一身份认证(IAM)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 统一身份认证(IAM) | iam:groups:revokeRole | iam:permissions:revokeRoleFromGroup |
| iam:agencies:deleteServiceLinkedAgencyV5 | - | |
| iam:securityPolicies:updateProtectPolicy | iam:securitypolicies:updateProtectPolicy | |
| iam:identityProviders:createProtocol | - | |
| iam:users:deleteUserV5 | iam:users:deleteUser | |
| iam:agencies:updateV5 | - | |
| iam:groups:updateGroupV5 | iam:groups:updateGroup | |
| iam::tagForResourceV5 | - | |
| iam:credentials:updateCredentialV5 | iam:credentials:updateCredential | |
| iam:groups:update | iam:groups:updateGroup | |
| iam::createAccessKey | iam:credentials:createCredential | |
| iam:identityProviders:create | iam:identityProviders:createIdentityProvider | |
| iam:users:updateLoginProfileV5 | - | |
| iam:identityProviders:createOIDCConfig | iam:identityProviders:createOpenIDConnectConfig | |
| iam:securityPolicies:updateConsoleAclPolicy | iam:securitypolicies:updateConsoleAclPolicy | |
| iam:policies:deleteVersionV5 | - | |
| iam:permissions:removeUserFromGroupV5 | iam:permissions:removeUserFromGroup | |
| iam:users:create | iam:users:createUser | |
| iam:permissions:addUserToGroupV5 | iam:permissions:addUserToGroup | |
| iam:agencies:grantRoleOnEnterpriseProject | iam:permissions:grantRoleToAgencyOnEnterpriseProject | |
| iam:users:updateUserV5 | iam:users:updateUser | |
| iam:agencies:update | iam:agencies:updateAgency | |
| iam:mfa:enableV5 | iam:mfa:enable | |
| iam:users:update | iam:users:updateUser | |
| iam:securitypolicies:updatePasswordPolicyV5 | iam:securitypolicies:updatePasswordPolicy | |
| iam:mfa:deleteVirtualMFADeviceV5 | iam:mfa:deleteVirtualMFADevice | |
| iam:groups:create | iam:groups:createGroup | |
| iam:groups:grantRoleOnDomain | iam:permissions:grantRoleToGroupOnDomain | |
| iam:identityProviders:deleteMapping | - | |
| iam:users:createUserV5 | iam:users:createUser | |
| iam:agencies:revokeRole | iam:permissions:revokeRoleFromAgency | |
| iam:roles:update | iam:roles:updateRole | |
| iam:users:revokeRoleOnEnterpriseProject | iam:permissions:revokeRoleFromUserOnEnterpriseProject | |
| iam:roles:delete | iam:roles:deleteRole | |
| iam:agencies:createServiceLinkedAgencyV5 | - | |
| iam:agencies:updateTrustPolicyV5 | iam:agencies:updateTrustPolicy | |
| iam:mfa:createVirtualMFADeviceV5 | iam:mfa:createVirtualMFADevice | |
| iam:identityProviders:updateOIDCConfig | iam:identityProviders:updateOpenIDConnectConfig | |
| iam:agencies:delete | iam:agencies:deleteAgency | |
| iam:policies:setDefaultVersionV5 | - | |
| iam:identityProviders:update | iam:identityProviders:updateIdentityProvider | |
| iam:identityProviders:updateMapping | - | |
| iam:identityProviders:updateProtocol | - | |
| iam:users:grantRoleOnEnterpriseProject | iam:permissions:grantRoleToUserOnEnterpriseProject | |
| iam:projects:create | iam:projects:createProject | |
| iam:agencies:deleteV5 | - | |
| iam:groups:addUser | iam:permissions:addUserToGroup | |
| iam:agencies:detachPolicyV5 | - | |
| iam:users:changePasswordV5 | - | |
| iam::setAsymmetricSignatureSwitchV5 | - | |
| iam:users:delete | iam:users:deleteUser | |
| iam:groups:grantRoleOnProject | iam:permissions:grantRoleToGroupOnProject | |
| iam:groups:createGroupV5 | iam:groups:createGroup | |
| iam:policies:deleteV5 | iam:policies:delete | |
| iam:credentials:createCredentialV5 | iam:credentials:createCredential | |
| iam:users:attachPolicyV5 | - | |
| iam:agencies:grantRoleOnProject | iam:permissions:grantRoleToAgencyOnProject | |
| iam:users:deleteVirtualMFADevice | iam:mfa:deleteVirtualMFADevice | |
| iam:roles:create | iam:roles:createRole | |
| iam:groups:deleteGroupV5 | iam:groups:deleteGroup | |
| iam:users:deleteLoginProfileV5 | - | |
| iam:mfa:disableV5 | iam:mfa:disable | |
| iam:policies:createV5 | iam:policies:create | |
| iam:groups:attachPolicyV5 | - | |
| iam:projects:update | iam:projects:updateProject | |
| iam:agencies:grantRoleOnDomain | iam:permissions:grantRoleToAgencyOnDomain | |
| iam:users:bindVirtualMFADevice | iam:mfa:bindMFADevice | |
| iam:identityProviders:createSAMLMetadata | iam:identityProviders:createIDPMetadata | |
| iam:users:unbindVirtualMFADevice | iam:mfa:unbindMFADevice | |
| iam:groups:grantRole | iam:permissions:grantRoleToGroup | |
| iam:groups:removeUser | iam:permissions:removeUserFromGroup | |
| iam:agencies:attachPolicyV5 | - | |
| iam:users:createLoginProfileV5 | - | |
| iam:groups:revokeRoleOnEnterpriseProject | iam:permissions:revokeRoleFromGroupOnEnterpriseProject | |
| iam:groups:detachPolicyV5 | - | |
| iam:securityPolicies:updatePrivacyTransferPolicy | iam:securitypolicies:updatePrivacyTransferPolicy | |
| iam:users:detachPolicyV5 | - | |
| iam:groups:revokeRoleOnProject | iam:permissions:revokeRoleFromGroupOnProject | |
| iam:groups:grantRoleOnEnterpriseProject | iam:permissions:grantRoleToGroupOnEnterpriseProject | |
| iam:agencies:revokeRoleOnDomain | iam:permissions:revokeRoleFromAgencyOnDomain | |
| iam:securityPolicies:updatePasswordPolicy | iam:securitypolicies:updatePasswordPolicy | |
| iam::updateAccessKey | iam:credentials:updateCredential | |
| iam:securitypolicies:updateLoginPolicyV5 | iam:securitypolicies:updateLoginPolicy | |
| iam:groups:delete | iam:groups:deleteGroup | |
| iam:securityPolicies:updateLoginPolicy | iam:securitypolicies:updateLoginPolicy | |
| iam:identityProviders:deleteProtocol | - | |
| iam:users:createVirtualMFADevice | iam:mfa:createVirtualMFADevice | |
| iam:securityPolicies:updateApiAclPolicy | iam:securitypolicies:updateApiAclPolicy | |
| iam::untagForResourceV5 | - | |
| iam:agencies:revokeRoleOnProject | iam:permissions:revokeRoleFromAgencyOnProject | |
| iam:groups:revokeRoleOnDomain | iam:permissions:revokeRoleFromGroupOnDomain | |
| iam:agencies:revokeRoleOnEnterpriseProject | iam:permissions:revokeRoleFromAgencyOnEnterpriseProject | |
| iam:agencies:grantRole | iam:permissions:grantRoleToAgency | |
| iam:identityProviders:createMapping | - | |
| iam:policies:createVersionV5 | - | |
| iam:identityProviders:delete | iam:identityProviders:deleteIdentityProvider | |
| iam:credentials:deleteCredentialV5 | iam:credentials:deleteCredential | |
| iam:users:updateLoginProtectSetting | iam:users:setUserLoginProtect | |
| iam::deleteAccessKey | iam:credentials:deleteCredential | |
| iam:agencies:create | iam:agencies:createAgency | |
| iam:agencies:createV5 | - |
IAM 身份中心
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| IAM 身份中心 | IdentityCenter:user:update | - |
| IdentityCenter:applicationAssignment:create | - | |
| IdentityCenter:user:updateMfaDevice | - | |
| IdentityCenter:group:update | - | |
| IdentityCenter:externalIdp:disable | - | |
| IdentityCenter:instance:startIdentityCenter | - | |
| IdentityCenter:user:delete | - | |
| IdentityCenter:permissionSet:delete | - | |
| IdentityCenter:accountAssignment:create | - | |
| IdentityCenter:mfaDevices:updateManagementSettings | - | |
| IdentityCenter:permissionSet:detachManagedPolicy | - | |
| IdentityCenter:user:updatePassword | - | |
| IdentityCenter:application:updateApplicationInstanceDisplayData | - | |
| IdentityCenter:externalIdp:update | - | |
| IdentityCenter:permissionSet:provision | - | |
| IdentityCenter:accountAssignment:delete | - | |
| IdentityCenter:permissionSet:update | - | |
| IdentityCenter:application:deleteApplicationInstance | - | |
| IdentityCenter:permissionSet:create | - | |
| IdentityCenter:instance:createAlias | - | |
| IdentityCenter:accountAssignment:disassociationProfile | - | |
| IdentityCenter:externalIdp:deleteBearerToken | - | |
| IdentityCenter:permissionSet:attachCustomRole | - | |
| IdentityCenter:instance:deleteIdentityCenter | - | |
| IdentityCenter:resources:untag | - | |
| IdentityCenter:application:updateApplicationInstanceActiveCertificate | - | |
| IdentityCenter:application:createApplicationInstanceCertificate | - | |
| IdentityCenter:application:updateApplicationInstanceResponseSchemaConfiguration | - | |
| IdentityCenter:application:updateApplicationInstanceResponseConfiguration | - | |
| IdentityCenter:application:updateApplicationInstanceStatus | - | |
| IdentityCenter:group:delete | - | |
| IdentityCenter:externalIdp:deleteProvisioningTenant | - | |
| IdentityCenter:application:deleteProfile | - | |
| IdentityCenter:application:updateApplicationInstanceSecurityConfiguration | - | |
| IdentityCenter:resources:tag | - | |
| IdentityCenter:permissionSet:detachCustomPolicy | - | |
| IdentityCenter:user:create | - | |
| IdentityCenter:permissionSet:attachManagedPolicy | - | |
| IdentityCenter:group:create | - | |
| IdentityCenter:application:importApplicationInstanceServiceProviderMetadata | - | |
| IdentityCenter:externalIdp:enable | - | |
| IdentityCenter:application:updateApplicationInstanceServiceProviderConfiguration | - | |
| IdentityCenter:application:deleteApplicationInstanceCertificate | - | |
| IdentityCenter:ssoConfiguration:update | - | |
| IdentityCenter:externalIdp:importCertificate | - | |
| IdentityCenter:application:createApplicationInstance | - | |
| IdentityCenter:externalIdp:delete | - | |
| IdentityCenter:externalIdp:createBearerToken | - | |
| IdentityCenter:user:verifyEmail | - | |
| IdentityCenter:serviceProvider:activeCertificate | - | |
| IdentityCenter:user:disableUser | - | |
| IdentityCenter:instance:updateInstanceAccessControlAttributeConfiguration | - | |
| IdentityCenter:instance:registerRegion | - | |
| IdentityCenter:serviceProvider:deleteCertificate | - | |
| IdentityCenter:serviceProvider:createCertificate | - | |
| IdentityCenter:permissionSet:detachCustomRole | - | |
| IdentityCenter:externalIdp:createProvisioningTenant | - | |
| IdentityCenter:user:registerVirtualMfaDevice | - | |
| IdentityCenter:permissionSet:attachCustomPolicy | - | |
| IdentityCenter:groupMembership:create | - | |
| IdentityCenter:user:deleteUserMfaDevice | - | |
| IdentityCenter:instance:deleteInstanceAccessControlAttributeConfiguration | - | |
| IdentityCenter:instance:createInstanceAccessControlAttributeConfiguration | - | |
| IdentityCenter:applicationAssignment:delete | - | |
| IdentityCenter:user:enableUser | - | |
| IdentityCenter:externalIdp:deleteCertificate | - | |
| IdentityCenter:groupMembership:delete | - | |
| IdentityCenter:externalIdp:create | - |
智能边缘小站(IES)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 智能边缘小站(IES) | ies:edgeSite:create | - |
| ies:edgeSite:purchaseRacks | ies:rack:purchase | |
| ies:deliveryOrder:createDeliveryOrder | - |
镜像服务(IMS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 镜像服务(IMS) | ims:dataImages:create | - |
| ims:images:copyInRegion | ims:images:copy | |
| ims:images:create | - | |
| ims:images:addMember | ims:images:share | |
| ims:images:import | - | |
| ims:images:deleteTags | ims:images:update | |
| ims:images:updateMemberStatus | ims:images:share | |
| ims:images:copyCrossRegion | ims:images:copy | |
| ims:images:deleteImage | ims:images:delete | |
| ims:serverImages:create | - | |
| ims:images:updateImage | ims:images:update | |
| ims:images:setTags | ims:images:update | |
| ims:wholeImages:create | - | |
| ims:images:deleteMember | ims:images:share | |
| ims:images:upload | - |
设备接入(IoTDA)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 设备接入(IoTDA) | iotda:protocolconfigs:update | - |
| iotda:batchtaskfiles:create | - | |
| iotda:provisioningtemplate:delete | - | |
| iotda:products:create | - | |
| iotda:provisioningtemplate:create | - | |
| iotda:otapackages:create | - | |
| iotda:otamodules:create | - | |
| iotda:app:create | - | |
| iotda:devicepolicy:delete | - | |
| iotda:otamodules:update | - | |
| iotda:productconfig:create | - | |
| iotda:asynccommands:send | - | |
| iotda:scripts:delete | - | |
| iotda:certificates:debug | - | |
| iotda:devicecertificates:update | - | |
| iotda:devicedebugmessage:send | iotda:bundlemessage:send | |
| iotda:certificates:check | - | |
| iotda:routingbacklogpolicy:delete | - | |
| iotda:devicepolicy:create | - | |
| iotda:servercertificate:create | - | |
| iotda:protocolconfigs:create | - | |
| iotda:devices:register | - | |
| iotda:topics:delete | - | |
| iotda:certificates:upload | - | |
| iotda:devicepolicy:bind | - | |
| iotda:deviceauthenticationtemplate:delete | - | |
| iotda:exporttasks:create | - | |
| iotda:device-proxies:create | - | |
| iotda:provisioningtemplate:update | - | |
| iotda:apps:delete | - | |
| iotda:deviceauthenticationtemplate:debug | - | |
| iotda:devicecertificates:delete | - | |
| iotda:productfunctions:create | - | |
| iotda:tunnel:create | - | |
| iotda:instance:create | - | |
| iotda:devices:delete | - | |
| iotda:bundle:create | - | |
| iotda:appcacertificate:delete | iotda:cacertificates:delete | |
| iotda:shadow:delete | - | |
| iotda:tags:bind | - | |
| iotda:deviceauthorizers:delete | - | |
| iotda:appcacertificate:create | iotda:cacertificates:create | |
| iotda:group:addDevice | - | |
| iotda:batchtasks:create | - | |
| iotda:protocolconfigs:delete | - | |
| iotda:products:modify | - | |
| iotda:devices:resetFingerprint | - | |
| iotda:scripts:create | - | |
| iotda:instance:updateProtocolAdaptor | - | |
| iotda:routingflowcontrolpolicy:create | - | |
| iotda:bundlemapping:save | - | |
| iotda:deviceauthenticationtemplate:update | - | |
| iotda:deviceauthorizers:create | - | |
| iotda:harmonysoftbus:reset | - | |
| iotda:amqpqueue:disconnect | iotda:amqpqueue:delete | |
| iotda:harmonysoftbus:delete | - | |
| iotda:routingrules:verifySql | - | |
| iotda:deviceauthorizers:update | - | |
| iotda:routingrules:create | - | |
| iotda:devicepolicy:unbind | - | |
| iotda:scripts:run | - | |
| iotda:topics:create | - | |
| iotda:bundlemessage:save | - | |
| iotda:routingrules:delete | - | |
| iotda:shadow:config | - | |
| iotda:deviceauthenticationtemplate:create | - | |
| iotda:certificates:update | - | |
| iotda:topics:modify | - | |
| iotda:batchtaskfiles:delete | - | |
| iotda:rules:modify | - | |
| iotda:otamodules:delete | - | |
| iotda:productfunctions:delete | - | |
| iotda:routingactions:verifyConnectivity | iotda:routingactions:modify | |
| iotda:routingactions:create | - | |
| iotda:bundle:update | - | |
| iotda:protocoladaptorimage:create | - | |
| iotda:onlinebundle:deploy | - | |
| iotda:certificates:delete | - | |
| iotda:batchtasks:delete | - | |
| iotda:batchtasks:stop | - | |
| iotda:instance:deleteProtocolAdaptor | - | |
| iotda:messagetrace:update | - | |
| iotda:protocoladaptorimage:delete | - | |
| iotda:tunnel:delete | - | |
| iotda:amqpqueue:delete | - | |
| iotda:routingactions:clearMessage | - | |
| iotda:protocoladaptorimage:update | - | |
| iotda:routingactions:delete | - | |
| iotda:offlinebundle:deploy | - | |
| iotda:messages:send | - | |
| iotda:device-proxies:delete | - | |
| iotda:accesscode:create | - | |
| iotda:instance:createProtocolAdaptor | - | |
| iotda:amqpqueue:create | - | |
| iotda:batchtasks:retry | iotda:batchtasks:create | |
| iotda:rules:delete | - | |
| iotda:device-proxies:modify | - | |
| iotda:messagetracedata:delete | - | |
| iotda:messages:delete | - | |
| iotda:rules:create | - | |
| iotda:products:delete | - | |
| iotda:group:modify | - | |
| iotda:bridge:create | - | |
| iotda:routingflowcontrolpolicy:update | - | |
| iotda:bridge:reset | - | |
| iotda:apps:update | - | |
| iotda:servercertificate:update | - | |
| iotda:simulator:register | - | |
| iotda:commands:send | - | |
| iotda:group:delete | - | |
| iotda:group:create | - | |
| iotda:devices:unfreeze | - | |
| iotda:devicepolicy:update | - | |
| iotda:rules:modifyStatus | - | |
| iotda:routingbacklogpolicy:update | - | |
| iotda:servercertificate:delete | - | |
| iotda:routingbacklogpolicy:create | - | |
| iotda:devices:resetSecret | - | |
| iotda:bridge:delete | - | |
| iotda:routingflowcontrolpolicy:delete | - | |
| iotda:devices:modify | - | |
| iotda:routingrules:modify | - | |
| iotda:devices:freeze | - | |
| iotda:tags:unbind | - | |
| iotda:routingactions:modify | - |
密码安全中心(密钥管理服务 KMS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 密码安全中心(密钥管理服务 KMS) | kms:cmk:disable | - |
| kms:cmk:createDataKey | kms:dek:create | |
| kms:cmk:updateRotation | - | |
| kms:cmk:decryptDataKey | kms:dek:crypto kms:dek:decrypt | |
| kms:cmk:encryptDataKey | kms:dek:encrypt kms:dek:crypto | |
| kms:cmk:verifyMac | - | |
| kms:cmk:updateKeyAlias | kms:cmk:update | |
| kms:cmk:createDataKeyWithoutPlaintext | kms:dek:create | |
| kms:cmk:revokeGrant | kms:grant:revoke | |
| kms:cmk:deleteMaterial | - | |
| kms:cmk:enable | - | |
| kms:cmk:create | - | |
| kms:cmk:decryptData | kms:cmk:crypto kms:cmk:decrypt | |
| kms:cmk:updatePrimaryRegion | - | |
| kms:cmk:verify | - | |
| kms:alias:delete | - | |
| kms:alias:create | - | |
| kms:cmk:deleteTag | kms:cmkTag:delete | |
| kms:cmk:sign | - | |
| kms:alias:associate | - | |
| kms:cmk:enableRotation | - | |
| kms:cmk:generateMac | - | |
| kms:cmk:disableRotation | - | |
| kms:cmk:createTag | kms:cmkTag:create | |
| kms::generateRandom | kms:cmk:generate | |
| kms:cmk:encryptData | kms:cmk:encrypt kms:cmk:crypto | |
| kms:cmk:scheduleKeyDeletion | kms:cmk:update | |
| kms:cmk:retireGrant | kms:grant:retire | |
| kms:cmk:createGrant | kms:grant:create | |
| kms:cmk:updateKeyDescription | kms:cmk:update | |
| kms:keystore:disable | - | |
| kms:cmk:replicate | - | |
| kms:cmk:createTags | kms:cmkTag:batch | |
| kms:cmk:cancelKeyDeletion | kms:cmk:update | |
| kms:keystore:enable | - | |
| kms:keystore:delete | - |
密码安全中心(密钥对管理服务 KPS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 密码安全中心(密钥对管理服务 KPS) | kps:SSHKeyPair:clearPrivateKey | - |
| kps:SSHKeyPair:importPrivateKey | - | |
| kps:SSHKeyPair:exportPrivateKey | - | |
| kps:SSHKeyPair:unbind | - | |
| kps:SSHKeyPair:bind | - | |
| kps:SSHKeyPair:update | - | |
| kps:SSHKeyPair:create | - | |
| kps:SSHKeyPair:delete | - | |
| kps::deleteFailedTask | - |
视频直播(live)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 视频直播(live) | live:snapshot:updateRule | - |
| live:domain:deleteRefererChain | - | |
| live:transcode:updateTranscodingsTemplate | - | |
| live:domain:deleteCDNConfig | - | |
| live:transcode:createTranscodingsTemplate | - | |
| live:record:updateCallback | - | |
| live:domain:createDomain | - | |
| live:stream:createStreamForbiddenOnce | - | |
| live:tenant:updateChargingMode | - | |
| live:stream:createStreamForbidden | - | |
| live:domain:deleteStreamNotification | - | |
| live:snapshot:createRule | - | |
| live:record:createCommand | - | |
| live:domain:createDomainsMapping | - | |
| live:domain:updateCDNConfig | - | |
| live:stream:deleteStreamForbidden | - | |
| live:domain:updateIPAuthList | - | |
| live:record:deleteCallback | - | |
| live:domain:deleteDomainsMapping | - | |
| live:record:createCallback | - | |
| live:record:updateRule | - | |
| live:transcode:deleteTranscodingsTemplate | - | |
| live:record:deleteRule | - | |
| live:stream:deletePullTask | - | |
| live:record:createRule | - | |
| live:domain:updateGeoBlocking | - | |
| live:domain:updateStreamNotification | - | |
| live:domain:updateRefererChain | - | |
| live:transcode:createSEI | - | |
| live:snapshot:deleteRule | - | |
| live:stream:createPullTask | - | |
| live:domain:updateDomain | - | |
| live:domain:deleteDomain | - |
云日志服务(LTS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云日志服务(LTS) | lts:dashboardGroup:create | lts:topics:create |
| lts:logGroup:createLogGroup | lts:groups:create | |
| lts:alarmNoticeTemplate:update | lts:sqlalarmrules:put | |
| lts:logStream:deleteQuickQuery | lts:searchcriterias:delete | |
| lts:hostGroup:update | lts:topics:put | |
| lts:structConfig:deleteStructConfig | lts:structConfig:delete | |
| lts:logManager:createAggrs | lts:topics:create | |
| lts:scheduledSql:create | lts:sqlalarmrules:create | |
| lts:accessConfig:delete | - | |
| lts:alarm:cleanAlarm | lts:sqlalarms:delete | |
| lts:transfer:updateTransfer | lts:transfers:put | |
| lts:alarmRule:deleteSqlAlarmRule | lts:sqlalarmrules:delete | |
| lts:hostGroup:delete | lts:topics:delete | |
| lts:dashboard:createFilter | - | |
| lts:csvTable:update | lts:sqlalarmrules:put | |
| lts:tokenizer:create | lts:topics:put | |
| lts:alarmRule:createWordAlarmRule | lts:sqlalarmrules:create | |
| lts:transfer:registerDmsKafkaInstance | - | |
| lts:transfer:createTransfer | lts:transfers:create | |
| lts:logFavorite:delete | lts:topics:delete | |
| lts:hostGroup:create | lts:topics:create | |
| lts:alarmRule:updateWordAlarmRule | lts:sqlalarmrules:put | |
| lts:transfer:deleteTransfer | lts:transfers:delete | |
| lts:logStream:updateLogStream | lts:topics:put | |
| lts:log2MetricRule:create | - | |
| lts:consumerGroup:delete | lts:topics:delete | |
| lts:consumerGroup:create | lts:topics:create | |
| lts:structConfig:updateStructConfig | lts:structConfig:put lts:topics:put | |
| lts:log2MetricRule:update | - | |
| lts:log2MetricRule:delete | - | |
| lts:dashboard:create | lts:topics:create | |
| lts:logStream:createQuickQuery | lts:searchcriterias:create lts:searchcriterias:put | |
| lts:logStream:deleteLogStream | lts:topics:delete | |
| lts:tag:create | lts:resourceTags:put | |
| lts:csvTable:create | lts:sqlalarmrules:create | |
| lts:csvTable:delete | lts:sqlalarmrules:delete | |
| lts:dashboard:updateFilter | - | |
| lts:alarmRule:deleteWordAlarmRule | lts:sqlalarmrules:delete | |
| lts:alarmRule:createSqlAlarmRule | lts:sqlalarmrules:create | |
| lts:dashboard:update | lts:topics:put | |
| lts:alarmNoticeTemplate:delete | lts:sqlalarmrules:delete | |
| lts:logGroup:deleteLogGroup | lts:groups:delete | |
| lts:logFavorite:create | lts:topics:create | |
| lts:alarmNoticeTemplate:create | lts:sqlalarmrules:create | |
| lts:accessConfig:create | lts:topics:create | |
| lts:dashboard:deleteFilter | - | |
| lts:IndexConfig:create | lts:groups:create lts:topics:put | |
| lts:logConverge:update | - | |
| lts:alarmRule:updateSqlAlarmRule | lts:sqlalarmrules:put | |
| lts:scheduledSql:update | lts:sqlalarmrules:put | |
| lts:logManager:deleteAggrs | lts:topics:delete | |
| lts:logGroup:updateLogGroup | lts:groups:put | |
| lts:configCenter:updateOverCollectSwitch | - | |
| lts:accessConfig:update | lts:topics:put | |
| lts:structConfig:createStructConfig | lts:topics:create lts:structConfig:create | |
| lts:logStream:createLogStream | lts:topics:create |
ModelArts
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| ModelArts | modelarts:workspace:updateQuotas | - |
| modelarts:pool:update | - | |
| modelarts:notebook:create | - | |
| modelarts:image:create | - | |
| modelarts:notebook:delete | - | |
| modelarts:model:delete | - | |
| modelarts:devserver:batchAction | - | |
| modelarts:devserver:sync | - | |
| modelarts:pool:create | - | |
| modelarts:devserver:createRoceNetwork | - | |
| modelarts:model:create | - | |
| modelarts:workspace:update | - | |
| modelarts:workflow:execute | - | |
| modelarts:notebook:open | - | |
| modelarts:notebook:stop | - | |
| modelarts:trainJob:stop | - | |
| modelarts:workflow:update | - | |
| modelarts:aiAlgorithm:create | - | |
| modelarts:edgePool:delete | - | |
| modelarts:workflow:delete | - | |
| modelarts:trainJob:delete | - | |
| modelarts:pool:delete | - | |
| modelarts::createLogDiagnosisJob | modelarts:brain:createLogDiagnosisJob | |
| modelarts:workflow:create | - | |
| modelarts:edgePool:create | - | |
| modelarts::stopLogDiagnosisJob | modelarts:brain:stopLogDiagnosisJob | |
| modelarts:image:delete | - | |
| modelarts:trainJob:update | - | |
| modelarts::createInspectionJob | modelarts:brain:createInspectionJob | |
| modelarts:devserver:deleteJobs | - | |
| modelarts:aiAlgorithm:delete | - | |
| modelarts::deleteInspectionJob | modelarts:brain:dropInspectionJob | |
| modelarts:devserver:start | - | |
| modelarts:aiAlgorithm:update | - | |
| modelarts:image:register | - | |
| modelarts::stopProfilingDiagnosisJob | modelarts:brain:stopProfilingDiagnosisJob | |
| modelarts:network:update | - | |
| modelarts:devserver:delete | - | |
| modelarts:service:delete | - | |
| modelarts:devserver:reboot | - | |
| modelarts:service:create | - | |
| modelarts:model:update | - | |
| modelarts::deleteLogDiagnosisJob | modelarts:brain:dropLogDiagnosisJob | |
| modelarts:notebook:update | - | |
| modelarts:workspace:delete | - | |
| modelarts:devserver:createJob | - | |
| modelarts:notebook:updateStopPolicy | - | |
| modelarts:workspace:create | - | |
| modelarts:edgePool:update | - | |
| modelarts::stopInspectionJob | modelarts:brain:stopInspectionJob | |
| modelarts:network:delete | - | |
| modelarts:devserver:update | - | |
| modelarts:devserver:create | - | |
| modelarts:devserver:stop | - | |
| modelarts::updateProfilingDiagnosisJob | modelarts:brain:updateProfilingDiagnosisJob | |
| modelarts::deleteProfilingDiagnosisJob | modelarts:brain:dropProfilingDiagnosisJob | |
| modelarts::updateLogDiagnosisJob | modelarts:brain:updateLogDiagnosisJob | |
| modelarts:service:update | modelarts:service:action | |
| modelarts:devserver:changeOS | - | |
| modelarts:notebook:start | - | |
| modelarts:trainJob:create | - | |
| modelarts::updateInspectionJob | modelarts:brain:updateInspectionJob | |
| modelarts::createProfilingDiagnosisJob | modelarts:brain:createProfilingDiagnosisJob | |
| modelarts:devserver:reinstallOS | - | |
| modelarts:network:create | - |
MapReduce服务(MRS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| MapReduce服务(MRS) | mrs:cluster:stopJob | mrs:job:stop |
| mrs:cluster:updatePolicies | mrs:cluster:policy | |
| mrs:cluster:updateUsers | mrs:cluster:syncUser | |
| mrs:cluster:updateClusterName | mrs:cluster:resize | |
| mrs:cluster:deleteJobs | mrs:job:batchDelete | |
| mrs:cluster:createSql | mrs:job:checkSql mrs:sql:execute | |
| mrs:cluster:createCluster | mrs:cluster:create | |
| mrs:cluster:createJob | mrs:job:submit | |
| mrs:dataConnector:updateInstance | mrs:cluster:create | |
| mrs:cluster:updateTags | mrs:tag:delete mrs:tag:batchOperate mrs:tag:create | |
| mrs:cluster:updateAgencyMapping | mrs:cluster:syncUser | |
| mrs:cluster:resizeNodes | mrs:cluster:resize mrs:volumes:resize mrs:cluster:scaleUp |
对象存储服务(OBS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 对象存储服务(OBS) | obs:bucket:putBucketAcl | obs:bucket:PutBucketAcl |
| obs:bucket:createBucket | obs:bucket:CreateBucket | |
| obs:bucket:deleteBucketWebsite | obs:bucket:DeleteBucketWebsite | |
| obs:bucket:putBucketCustomDomainConfiguration | obs:bucket:PutBucketCustomDomainConfiguration | |
| obs:bucket:deleteBucketTagging | obs:bucket:DeleteBucketTagging | |
| obs:bucket:putBucketVersioning | obs:bucket:PutBucketVersioning | |
| obs:bucket:putBucketWebsite | obs:bucket:PutBucketWebsite | |
| obs:bucket:putBucketPublicAccessBlock | obs:bucket:PutBucketPublicAccessBlock | |
| obs:bucket:putBucketNotification | obs:bucket:PutBucketNotification | |
| obs:bucket:putBucketTagging | obs:bucket:PutBucketTagging | |
| obs:bucket:putBucketCORS | obs:bucket:PutBucketCORS | |
| obs:bucket:putLifecycleConfiguration | obs:bucket:PutLifecycleConfiguration | |
| obs:bucket:deleteBucket | obs:bucket:DeleteBucket | |
| obs:bucket:putBucketPolicy | obs:bucket:PutBucketPolicy | |
| obs:bucket:putReplicationConfiguration | obs:bucket:PutReplicationConfiguration | |
| obs:bucket:putBucketLogging | obs:bucket:PutBucketLogging | |
| obs:bucket:deleteBucketInventoryConfiguration | obs:bucket:DeleteBucketInventoryConfiguration | |
| obs:bucket:putBucketInventoryConfiguration | obs:bucket:PutBucketInventoryConfiguration | |
| obs:bucket:putBucketStoragePolicy | obs:bucket:PutBucketStoragePolicy | |
| obs:bucket:deleteReplicationConfiguration | obs:bucket:DeleteReplicationConfiguration | |
| obs:bucket:deleteBucketCustomDomainConfiguration | obs:bucket:DeleteBucketCustomDomainConfiguration | |
| obs:bucket:putEncryptionConfiguration | obs:bucket:PutEncryptionConfiguration | |
| obs:bucket:deleteBucketPublicAccessBlock | obs:bucket:DeleteBucketPublicAccessBlock |
对象存储迁移服务(OMS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 对象存储迁移服务(OMS) | oms:task:create | - |
| oms:synctask:delete | - | |
| oms:task:update | - | |
| oms:taskgroup:update | - | |
| oms:task:delete | - | |
| oms:taskgroup:create | - | |
| oms:synctask:create | - | |
| oms:taskgroup:delete | - | |
| oms:synctask:update | - |
组织(Organizations)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 组织(Organizations) | organizations:handshakes:cancel | - |
| organizations:resources:untag | - | |
| organizations:accounts:close | - | |
| organizations:ous:delete | - | |
| organizations:ous:update | - | |
| organizations:policies:update | - | |
| organizations:policies:disable | - | |
| organizations:organizations:delete | - | |
| organizations:accounts:update | - | |
| organizations:policies:attach | - | |
| organizations:organizations:create | - | |
| organizations:policies:delete | - | |
| organizations:organizations:leave | - | |
| organizations:resources:tag | - | |
| organizations:handshakes:decline | - | |
| organizations:accounts:remove | - | |
| organizations:trustedServices:disable | - | |
| organizations:ous:create | - | |
| organizations:policies:create | - | |
| organizations:accounts:move | - | |
| organizations:handshakes:accept | - | |
| organizations:accounts:invite | - | |
| organizations:accounts:create | - | |
| organizations:trustedServices:enable | - | |
| organizations:delegatedAdministrators:deregister | - | |
| organizations:policies:enable | - | |
| organizations:policies:detach | - | |
| organizations:delegatedAdministrators:register | - |
私有证书管理(PCA)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 私有证书管理(PCA) | pca:ca:import | - |
| pca:ca:revoke | - | |
| pca:ca:create | - | |
| pca:ca:deleteTag | - | |
| pca:ca:disableCrl | - | |
| pca:ca:disable | - | |
| pca:cert:delete | - | |
| pca:ca:createTag | - | |
| pca:cert:deleteTag | - | |
| pca:ca:delete | - | |
| pca:ca:revokeCert | pca:cert:revoke | |
| pca:ca:enable | - | |
| pca:ca:enableCrl | - | |
| pca:ca:issueCert | - | |
| pca:ca:restore | - | |
| pca:ca:activate | pca:ca:active | |
| pca:ca:issueCertByCsr | pca:ca:issueCertThroughCSR | |
| pca:cert:createTag | - |
资源访问管理(RAM)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 资源访问管理(RAM) | ram:resourceShares:disassociatePermission | - |
| ram:resourceShares:delete | - | |
| ram:resourceShares:update | - | |
| ram:resourceShares:enableSharingWithOrganization | - | |
| ram:resourceShares:create | - | |
| ram:resourceShares:disassociate | - | |
| ram:resourceShares:tag | - | |
| ram:resourceShares:associate | - | |
| ram:resourceShareInvitations:reject | - | |
| ram:resourceShares:untag | - | |
| ram:resourceShares:associatePermission | - | |
| ram:resourceShares:disableSharingWithOrganization | - | |
| ram:resourceShareInvitations:accept | - |
云数据库(RDS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云数据库(RDS) | rds:instance:start | - |
| rds:instance:create | - | |
| rds:instance:updateParameter | - | |
| rds:instance:openReadonly | - | |
| rds:databasePrivilege:grant | - | |
| rds:instance:modifySSL | - | |
| rds:database:shrink | - | |
| rds:instance:enableSecondLevelMonitoring | - | |
| rds:instance:deleteInstance | - | |
| rds:backup:create | - | |
| rds:instance:extendSpace | - | |
| rds:password:update | - | |
| rds:param:apply | - | |
| rds:databasePrivilege:revoke | - | |
| rds:instance:singleToHa | - | |
| rds:databaseUser:drop | - | |
| rds:instance:deleteTag | - | |
| rds:database:createDatabase | - | |
| rds:instance:modifyExceptionSnapshotConfig | - | |
| rds:param:delete | - | |
| rds:task:delete | - | |
| rds:databaseUser:update | - | |
| rds:ltsConfig:update | - | |
| rds:instance:switchLogReplay | - | |
| rds:instance:createTag | - | |
| rds:databaseUser:create | - | |
| rds:instance:updateRemark | - | |
| rds:instance:restart | - | |
| rds:instance:tableRestore | - | |
| rds:instance:updateDnsName | - | |
| rds:param:updateTemplate | - | |
| rds:instance:modifyBackupPolicy | - | |
| rds:instance:modifyStrategy | - | |
| rds:instance:createDns | - | |
| rds:instance:updateOpsWindow | - | |
| rds:binlog:setPolicy | - | |
| rds:instance:restoreInPlace | - | |
| rds::updateDownloadPolicy | - | |
| rds:param:copy | - | |
| rds:instance:update | - | |
| rds:backup:delete | - | |
| rds:instance:SetMsdtcHosts | - | |
| rds:instance:modifyHost | - | |
| rds:instance:deleteDisasterRecovery | - | |
| rds:instance:modifySpec | - | |
| rds:instance:modifyIp | - | |
| rds:database:drop | - | |
| rds:auditlog:operate | - | |
| rds:instance:modifySynchronizeModel | - | |
| rds:instance:setRecycleBin | - | |
| rds:param:createTemplate | - | |
| rds:instance:modifyProxy | - | |
| rds:instance:modifyPort | - | |
| rds:instance:stop | - | |
| rds:instance:tde | - | |
| rds:instance:upgradeDatabaseVersion | - | |
| rds:log:setSlowLogSensitiveStatus | - | |
| rds:instance:modifySecurityGroup | - | |
| rds:instance:switchover | - | |
| rds:instance:updateName | - | |
| rds:instance:modifyPublicAccess | - | |
| rds:instance:setAutoEnlargePolicy | - | |
| rds:database:update | - |
资源编排服务(RFS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 资源编排服务(RFS) | rf:privateTemplate:updateMetadata | - |
| rf:privateProvider:create | - | |
| rf:stackSet:deleteStackInstances | - | |
| rf:stack:applyExecutionPlan | - | |
| rf:privateHook:deleteVersion | - | |
| rf:privateProvider:delete | - | |
| rf:privateTemplate:createVersion | - | |
| rf:stack:create | rf:stack:createStack | |
| rf:privateProvider:createVersion | - | |
| rf:privateModule:updateMetadata | - | |
| rf:stack:continueDeploy | rf:stack:continueDeployStack | |
| rf:privateModule:deleteVersion | - | |
| rf:privateTemplate:create | - | |
| rf:stack:delete | rf:stack:deleteStack | |
| rf:stack:continueRollback | rf:stack:continueRollbackStack | |
| rf:privateModule:delete | - | |
| rf:stackSet:delete | - | |
| rf:privateProvider:updateMetadata | - | |
| rf:privateHook:delete | - | |
| rf:privateProvider:deleteVersion | - | |
| rf:privateHook:updateMetadata | - | |
| rf:stack:update | rf:stack:updateStack | |
| rf:stackSet:createStackInstances | - | |
| rf:stackSet:updateStackInstances | - | |
| rf:stackSet:create | - | |
| rf:privateTemplate:deleteVersion | - | |
| rf:privateTemplate:delete | - | |
| rf:privateHook:createVersion | - | |
| rf:privateModule:create | - | |
| rf:stackSet:deploy | - | |
| rf:stack:deploy | rf:stack:deployStack | |
| rf:privateHook:create | - | |
| rf:stack:deleteExecutionPlan | - | |
| rf:stackSet:update | - | |
| rf:stack:createExecutionPlan | - | |
| rf:privateModule:createVersion | - |
资源治理中心(RGC)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 资源治理中心(RGC) | rgc:managedOrganizationalUnit:reRegister | - |
| rgc:template:create | - | |
| rgc:control:enable | - | |
| rgc:bestPractice:createDetect | - | |
| rgc:landingZone:setup | - | |
| rgc:managedOrganizationalUnit:register | - | |
| rgc:template:delete | - | |
| rgc:managedOrganizationalUnit:deRegister | - | |
| rgc:managedAccount:unEnroll | - | |
| rgc:managedAccount:create | - | |
| rgc:landingZone:delete | - | |
| rgc:managedAccount:enroll | - | |
| rgc:preLaunch:check | - | |
| rgc:managedAccount:update | - | |
| rgc:managedOrganizationalUnit:create | - | |
| rgc:control:disable | - | |
| rgc:managedOrganizationalUnit:delete | - |
配置审计(Config)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 配置审计(Config) | rms:organizationPolicyAssignments:put | - |
| rms:policyStates:update | - | |
| rms:conformancePacks:delete | - | |
| rms:storedQueries:create | - | |
| rms::tagResource | rms:resources:tagResource | |
| rms::unTagResource | rms:resources:unTagResource | |
| rms:aggregators:update | - | |
| rms:trackerConfig:put | - | |
| rms:policyAssignmentsRemediation:runRemediation | - | |
| rms:conformancePacks:create | - | |
| rms:policyAssignmentsRemediation:deleteRemediationExceptions | - | |
| rms:policyAssignmentsRemediation:putRemediationConfiguration | - | |
| rms:policyAssignmentsRemediation:deleteRemediationConfiguration | - | |
| rms:aggregationRequests:delete | - | |
| rms:aggregationAuthorizations:delete | - | |
| rms:aggregators:create | - | |
| rms:storedQueries:delete | - | |
| rms:policyAssignments:update | - | |
| rms:aggregators:delete | - | |
| rms:organizationConformancePacks:create | - | |
| rms:storedQueries:update | - | |
| rms:aggregationAuthorizations:create | - | |
| rms:conformancePacks:update | - | |
| rms:policyAssignments:create | - | |
| rms:trackerConfig:delete | - | |
| rms:policyAssignments:delete | - | |
| rms:policyAssignmentsRemediation:createRemediationExceptions | - | |
| rms:organizationPolicyAssignments:delete | - | |
| rms:organizationConformancePacks:update | - | |
| rms:policyStates:runEvaluation | - | |
| rms:organizationConformancePacks:delete | - |
SSL证书管理(SCM)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| SSL证书管理(SCM) | scm::deleteDomainMonitor | - |
| scm::updateDomainMonitor | - | |
| scm::updateDomainMonitorSwitch | - | |
| scm::deleteCsr | - | |
| scm:cert:upload | - | |
| scm:cert:deployResources | - | |
| scm:cert:createTag | - | |
| scm:cert:cancel | - | |
| scm:cert:enableAutoDeploy | - | |
| scm::createDomainMonitor | - | |
| scm:cert:reissue | - | |
| scm:cert:addDomain | scm:cert:supplement | |
| scm:cert:expandQuota | - | |
| scm:cert:deletePrivacyAuthorization | scm:privacyProtection:delete | |
| scm:cert:renew | - | |
| scm:cert:unsubscribe | - | |
| scm::updateCsr | - | |
| scm::orderDomainMonitor | - | |
| scm:cert:push | - | |
| scm:cert:save | scm:cert:complete | |
| scm:cert:subscribe | scm:cert:purchase | |
| scm::createCsr | - | |
| scm:cert:apply | - | |
| scm:cert:update | scm:cert:edit | |
| scm:cert:autoRenew | - | |
| scm::uploadCsr | - | |
| scm:cert:seekHelp | - | |
| scm:cert:import | scm:cert:upload |
应用管理与运维平台(ServiceStage)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 应用管理与运维平台(ServiceStage) | servicestage:config:deleteGroup | - |
| servicestage::createReleasePlan | servicestage:app:create | |
| servicestage::deleteReleasePlan | servicestage:app:delete | |
| servicestage:environment:modify | - | |
| servicestage:environment:delete | - | |
| servicestage:app:deleteComponent | servicestage:app:delete | |
| servicestage:repositoryAuth:create | servicestage:app:create | |
| servicestage:app:modifyConfiguration | servicestage:app:modify | |
| servicestage:pipeline:modify | servicestage:pipeline:execute | |
| servicestage:app:createComponent | servicestage:app:create | |
| servicestage:environment:create | - | |
| servicestage::deleteRuntimeStack | servicestage:runtimestack:delete | |
| servicestage::switchRuntimeStackStatus | - | |
| servicestage::createRuntimeStack | servicestage:runtimestack:create | |
| servicestage:app:deleteConfiguration | servicestage:app:modify | |
| servicestage::modifyRuntimeStack | servicestage:runtimestack:modify | |
| servicestage:app:unTagResource | servicestage:app:modify | |
| servicestage:app:tag | servicestage:app:modify | |
| servicestage:app:deleteApplication | servicestage:app:delete | |
| servicestage:environment:tag | servicestage:environment:modify | |
| servicestage:pipeline:create | - | |
| servicestage:app:modifyComponent | servicestage:app:modify | |
| servicestage:app:createApplication | servicestage:app:create | |
| servicestage:app:modifyApplication | servicestage:app:modify |
高性能弹性文件服务(SFS Turbo)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 高性能弹性文件服务(SFS Turbo) | sfsturbo:shares:updateLdap | - |
| sfsturbo:shares:createFsAsyncTask | - | |
| sfsturbo:shares:changeChargeMode | - | |
| sfsturbo:shares:updateActiveDirectoryDomain | - | |
| sfsturbo:shares:deleteFsDirQuota | - | |
| sfsturbo:shares:createFsDirQuota | - | |
| sfsturbo:shares:createLdap | - | |
| sfsturbo:shares:createShare | - | |
| sfsturbo:shares:createFsDir | - | |
| sfsturbo:shares:deleteBackendTarget | - | |
| sfsturbo:shares:createDataRepositoryTask | - | |
| sfsturbo:shares:updatePermRule | - | |
| sfsturbo:shares:deleteLdap | - | |
| sfsturbo:shares:deleteFsAsyncTask | - | |
| sfsturbo:shares:deleteTag | - | |
| sfsturbo:shares:extendShare | sfsturbo:shares:shareAction | |
| sfsturbo:shares:addTag | - | |
| sfsturbo:shares:renameShare | sfsturbo:shares:shareAction | |
| sfsturbo:shares:updateFsDirQuota | - | |
| sfsturbo:shares:deletePermRule | - | |
| sfsturbo:shares:addActiveDirectoryDomain | - | |
| sfsturbo:shares:updateShareSecurityGroup | sfsturbo:shares:shareAction | |
| sfsturbo:shares:deleteDataRepositoryTask | - | |
| sfsturbo:shares:deleteActiveDirectoryDomain | - | |
| sfsturbo:shares:createBackendTarget | - | |
| sfsturbo:shares:createPermRule | - | |
| sfsturbo:shares:deleteFsDir | - | |
| sfsturbo:shares:updateObsTargetPolicy | - | |
| sfsturbo:shares:addDataRepository | sfsturbo:shares:shareAction | |
| sfsturbo:shares:batchResTag | - | |
| sfsturbo:shares:deleteShare | - | |
| sfsturbo:shares:updateObsTargetAttributes | - | |
| sfsturbo:shares:updateHpcShare | - |
消息通知服务(SMN)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 消息通知服务(SMN) | smn:template:update | - |
| smn:topic:create | - | |
| smn:topic:deleteSubscription | smn:topic:update | |
| smn:template:create | - | |
| smn:topic:deleteAttribute | smn:topic:update | |
| smn:topic:updateTopic | smn:topic:update | |
| smn:tag:create | - | |
| smn:topic:delete | - | |
| smn:topic:subscribe | smn:topic:update | |
| smn:topic:updateAttribute | smn:topic:update | |
| smn:topic:updateLogTank | smn:topic:update | |
| smn:tag:batchModify | smn:tag:update | |
| smn:topic:updateSubscription | smn:topic:update | |
| smn:topic:deleteLogTank | smn:topic:update | |
| smn:tag:delete | smn:tag:update | |
| smn:template:delete | - | |
| smn:topic:createLogTank | smn:topic:update |
主机迁移服务(SMS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 主机迁移服务(SMS) | sms:migproject:update | sms:server:migrationServer |
| sms:server:updateNetworkCheckInfo | sms:server:migrationServer | |
| sms:server:collectLog | sms:server:migrationServer | |
| sms:template:update | sms:server:migrationServer | |
| sms:server:register | sms:server:registerServer | |
| sms:server:update | sms:server:migrationServer | |
| sms:server:updateTaskConfig | sms:server:migrationServer | |
| sms:server:updateTaskProgress | sms:server:migrationServer | |
| sms:server:updateState | sms:server:migrationServer | |
| sms:server:updateCommandResult | sms:server:migrationServer | |
| sms:template:batchDelete | sms:server:migrationServer | |
| sms:server:createTask | sms:server:migrationServer | |
| sms:server:batchDeleteTask | sms:server:migrationServer | |
| sms:migproject:delete | sms:server:migrationServer | |
| sms:server:updateTask | sms:server:migrationServer | |
| sms:server:unlock | - | |
| sms:server:updateTaskSpeedLimit | sms:server:migrationServer | |
| sms:template:create | sms:server:migrationServer | |
| sms:migproject:create | sms:server:migrationServer | |
| sms:server:updateDiskInfo | sms:server:registerServer | |
| sms:server:deleteTask | sms:server:migrationServer | |
| sms:server:delete | sms:server:migrationServer | |
| sms:server:batchDelete | sms:server:migrationServer | |
| sms:server:updateConsistencyCheckResult | sms:server:migrationServer | |
| sms:template:delete | sms:server:migrationServer | |
| sms:server:manageTask | sms:server:migrationServer |
安全令牌服务(STS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 安全令牌服务(STS) | sts::decodeAuthorizationMessage | - |
| sts:agencies:assume | - |
容器镜像服务(SWR)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 容器镜像服务(SWR) | swr:repository:deleteTag | - |
| swr:instance:deleteReplicationPolicy | - | |
| swr:instance:delete | - | |
| swr:repo:createRepo | - | |
| swr:repo:updateRepoDomain | - | |
| swr:repository:startManualScanning | - | |
| swr:repo:deleteAutoSyncRepoJob | - | |
| swr:instance:deleteJob | - | |
| swr:namespace:deleteNamespaceAccess | - | |
| swr:instance:create | - | |
| swr:repository:deleteNamespace | - | |
| swr:repository:updateRepository | - | |
| swr:instance:updateEndpointPolicy | - | |
| swr:instance:executeReplicationPolicy | - | |
| swr:repo:createRepoDomain | - | |
| swr:namespace:createNamespace | - | |
| swr:repo:deleteRepoTag | - | |
| swr:instance:addDomainName | - | |
| swr:repo:updateRetention | - | |
| swr:namespace:updateNamespaceAccess | - | |
| swr:instance:deleteInternalEndpoint | - | |
| swr::createAuthorizationToken | - | |
| swr:repo:deleteRetention | - | |
| swr:repository:updateImmutableRule | - | |
| swr:repo:createRetention | - | |
| swr:repo:deleteRepoAccess | - | |
| swr:namespace:createNamespaceAccess | - | |
| swr:instance:deleteDomainName | - | |
| swr:instance:deleteRegistry | - | |
| swr:namespace:deleteNamespace | - | |
| swr::createLoginSecret | swr:system:createLoginSecret | |
| swr:instance:updateDomainName | - | |
| swr:instance:createLTCredential | - | |
| swr:instance:createReplicationPolicy | - | |
| swr:repository:createImmutableRule | - | |
| swr:instance:updateConfigurations | - | |
| swr:instance:createInternalEndpoint | - | |
| swr:repository:createWebhook | - | |
| swr:repo:createAutoSyncRepoJob | - | |
| swr:repo:deleteRepoShare | - | |
| swr:namespace:multipartUpload | - | |
| swr:repository:updateNamespace | - | |
| swr:repo:updateRepoAccess | - | |
| swr:instance:createTempCredential | - | |
| swr:repository:executeRetentionPolicy | - | |
| swr:instance:updateLTCredential | - | |
| swr:repository:deleteRetentionPolicy | - | |
| swr:repository:createNamespace | - | |
| swr:repo:deleteRepo | - | |
| swr:repository:deleteSignPolicy | - | |
| swr:instance:deleteLTCredential | - | |
| swr:repository:updateSignPolicy | - | |
| swr:repository:deleteWebhook | - | |
| swr:instance:deleteResourceTags | - | |
| swr:instance:updateRegistry | - | |
| swr:repository:deleteArtifact | - | |
| swr:repo:deleteRepoDomain | - | |
| swr:repository:deleteRepository | - | |
| swr:repo:createManualSyncRepoJob | - | |
| swr:repository:executeSignPolicy | - | |
| swr:repository:updateWebhook | - | |
| swr:repository:deleteImmutableRule | - | |
| swr:repository:createSignPolicy | - | |
| swr:repo:deleteTrigger | - | |
| swr:instance:updateEndpointPolicyStatus | - | |
| swr:repo:updateRepo | - | |
| swr:instance:createRegistry | - | |
| swr:repository:updateRetentionPolicy | - | |
| swr:instance:createResourceTags | - | |
| swr:repo:createRepoTag | - | |
| swr:repo:updateTrigger | - | |
| swr:repo:createTrigger | - | |
| swr:repo:createRepoAccess | - | |
| swr:instance:stopReplicationPolicyExecution | - | |
| swr:repository:createRetentionPolicy | - | |
| swr:repo:updateRepoShare | - | |
| swr:instance:updateReplicationPolicy | - | |
| swr:repo:createRepoShare | - | |
| swr:repo:upload | - |
标签管理服务(TMS)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 标签管理服务(TMS) | tms:predefineTags:update | - |
| tms:predefineTags:delete | - | |
| tms:resourceTags:delete | - | |
| tms:resourceTags:create | - | |
| tms:predefineTags:create | - |
虚拟私有云(VPC)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 虚拟私有云(VPC) | vpc:securityGroupRules:update | - |
| vpc:peerings:delete | - | |
| vpc:addressGroups:create | - | |
| vpc:addressGroups:update | - | |
| vpc:addressGroups:delete | - | |
| vpc:vpcs:deleteTags | vpc:vpcTags:delete | |
| vpc:vpcs:createTags | vpc:vpcTags:create | |
| vpc:nativeSubnets:update | vpc:subnets:update | |
| vpc:trafficMirrorFilterRules:delete | - | |
| vpc:trafficMirrorFilterRules:create | - | |
| vpc:vpcs:create | - | |
| vpc:securityGroups:update | - | |
| vpc:nativePorts:create | vpc:ports:create | |
| vpc:routeTables:delete | - | |
| vpc:subnets:deleteReservation | - | |
| vpc:nativeNetworks:update | vpc:networks:update | |
| vpc:nativeRouters:create | vpc:routers:create | |
| vpc:nativeNetworks:create | vpc:networks:create | |
| vpc:routeTables:create | - | |
| vpc:nativeSecurityGroupRules:delete | vpc:securityGroupRules:delete | |
| vpc:nativeRouters:update | vpc:routers:update | |
| vpc:ports:update | vpc:vips:update vpc:vips:delete | |
| vpc:nativeSecurityGroups:delete | vpc:securityGroups:delete | |
| vpc:flowLogs:update | - | |
| vpc:nativeSecurityGroups:update | vpc:securityGroups:update | |
| vpc:ports:create | - | |
| vpc:firewalls:create | - | |
| vpc:trafficMirrorFilters:create | - | |
| vpc:trafficMirrorFilterRules:update | - | |
| vpc:nativeSubnets:create | vpc:subnets:create | |
| vpc:nativePorts:update | vpc:ports:update | |
| vpc:securityGroupRules:create | - | |
| vpc:firewalls:delete | - | |
| vpc:subNetworkInterfaces:delete | - | |
| vpc:subnets:createReservation | - | |
| vpc:securityGroups:deleteTags | vpc:securityGroupTags:delete | |
| vpc:firewalls:deleteTags | vpc:firewallTags:delete | |
| vpc:trafficMirrorSessions:update | - | |
| vpc:nativeRouters:removeInterface | vpc:routers:removeInterface | |
| vpc:networks:delete | - | |
| vpc:nativeRouters:addInterface | vpc:routers:addInterface | |
| vpc:vpcs:delete | - | |
| vpc:securityGroups:delete | - | |
| vpc:subNetworkInterfaces:update | - | |
| vpc:subnets:createTags | vpc:subnetTags:create | |
| vpc:peerings:reject | - | |
| vpc:flowLogs:delete | - | |
| vpc:trafficMirrorFilters:delete | - | |
| vpc:subnets:deleteTags | vpc:subnetTags:delete | |
| vpc:flowLogs:create | - | |
| vpc:subnets:delete | - | |
| vpc:securityGroups:create | - | |
| vpc:routeTables:update | - | |
| vpc:firewalls:update | - | |
| vpc:firewalls:createTags | vpc:firewallTags:create | |
| vpc:nativeSecurityGroupRules:create | vpc:securityGroupRules:create | |
| vpc:ports:deleteTags | vpc:portTags:delete | |
| vpc:nativeSecurityGroups:create | vpc:securityGroups:create | |
| vpc:peerings:update | - | |
| vpc:ports:createTags | vpc:portTags:create | |
| vpc:peerings:create | - | |
| vpc:nativePorts:delete | vpc:ports:delete | |
| vpc:trafficMirrorSessions:removeSource | - | |
| vpc:nativeSubnets:delete | vpc:subnets:delete | |
| vpc:trafficMirrorSessions:addSource | - | |
| vpc:securityGroupRules:delete | - | |
| vpc:trafficMirrorSessions:create | - | |
| vpc:subnets:create | - | |
| vpc:privateIps:delete | - | |
| vpc:subnets:update | - | |
| vpc:peerings:accept | - | |
| vpc:networks:create | - | |
| vpc:privateIps:create | - | |
| vpc:subNetworkInterfaces:create | - | |
| vpc:nativeNetworks:delete | vpc:networks:delete | |
| vpc:ports:delete | - | |
| vpc:vpcs:update | - | |
| vpc:securityGroups:createTags | vpc:securityGroupTags:create | |
| vpc:trafficMirrorFilters:update | - |
VPC终端节点(VPCEP)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| VPC终端节点(VPCEP) | vpcep:endpointServices:updateConnections | vpcep:connections:update |
| vpcep:endpointServices:updateName | vpcep:epservices:update | |
| vpcep:endpoints:updateRouteTables | vpcep:endpoints:update | |
| vpcep:endpoints:deletePolicy | vpcep:endpoints:delete | |
| vpcep:endpoints:updatePolicy | vpcep:endpoints:update | |
| vpcep:endpointServices:update | vpcep:epservices:update | |
| vpcep:endpointServices:create | vpcep:epservices:create | |
| vpcep:endpointServices:updateConnectionDescription | vpcep:connections:update | |
| vpcep::updateResourceTags | vpcep:tags:update | |
| vpcep:endpointServices:updatePermissionsDescription | vpcep:permissions:update | |
| vpcep:endpointServices:delete | vpcep:epservices:delete | |
| vpcep:endpoints:create | - | |
| vpcep:endpoints:delete | - | |
| vpcep:endpoints:update | - | |
| vpcep:endpointServices:deletePermissions | vpcep:permissions:update | |
| vpcep:endpointServices:upgrade | vpcep:epservices:upgrade | |
| vpcep:endpointServices:createPermissions | vpcep:permissions:update | |
| vpcep:endpointServices:updatePermissions | vpcep:permissions:update |
Web应用防火墙(WAF)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| Web应用防火墙(WAF) | waf:pool:create | - |
| waf:falseAlarmMaskRule:put | waf:falseAlarmMaskRule:recount | |
| waf:preciseProtectionRule:create | - | |
| waf:certificate:delete | - | |
| waf:preciseProtectionRule:put | - | |
| waf:alert:put | - | |
| waf:preciseProtectionRule:delete | - | |
| waf:geoIpRule:delete | - | |
| waf:securityReportSubscription:create | - | |
| waf:host:create | waf:instance:create | |
| waf:ruleset:put | - | |
| waf:policy:delete | - | |
| waf:punishmentRule:put | - | |
| waf:host:delete | waf:instance:delete | |
| waf:ruleset:create | - | |
| waf:antiTamperRule:put | - | |
| waf:ruleset:delete | - | |
| waf:ltsConfig:put | - | |
| waf:securityReportSubscription:delete | - | |
| waf:pool:put | - | |
| waf:ipgroup:delete | - | |
| waf:certificate:create | - | |
| waf:securityReportSubscription:put | - | |
| waf:pool:delete | - | |
| waf:premiumInstance:delete | - | |
| waf:antiLeakageRule:delete | - | |
| waf:ccRule:delete | - | |
| waf:certificate:put | - | |
| waf:host:put | waf:instance:put | |
| waf:valueList:put | waf:valuelist:put | |
| waf:punishmentRule:delete | - | |
| waf:whiteBlackIpRule:create | - | |
| waf:anticrawlerRule:batchUpdate | - | |
| waf:antiLeakageRule:create | - | |
| waf:ccRule:create | - | |
| waf:anticrawlerRule:delete | - | |
| waf:valueList:delete | waf:valuelist:delete | |
| waf:geoIpRule:put | - | |
| waf:privacyRule:delete | - | |
| waf:policy:create | - | |
| waf:agency:delete | - | |
| waf:falseAlarmMaskRule:delete | - | |
| waf:falseAlarmMaskRule:create | - | |
| waf:postpaid:create | - | |
| waf:postpaid:delete | - | |
| waf:agency:create | - | |
| waf:premiumInstance:create | - | |
| waf:privacyRule:create | - | |
| waf:anticrawlerRule:put | - | |
| waf:ipgroup:create | - | |
| waf:ccRule:put | waf:ccRuleRule:put | |
| waf:privacyRule:put | - | |
| waf:premiumInstance:put | - | |
| waf:antiTamperRule:delete | - | |
| waf:valueList:create | waf:valuelist:create | |
| waf:ipgroup:put | - | |
| waf:whiteBlackIpRule:put | - | |
| waf:antiLeakageRule:put | - | |
| waf:policy:put | - | |
| waf:anticrawlerRule:create | - | |
| waf:geoIpRule:create | - | |
| waf:punishmentRule:create | - |
云桌面(Workspace)
| 云服务名 | 身份策略授权项 | 别名 |
|---|---|---|
| 云桌面(Workspace) | workspace:orders:createDesktopOrder | - |
| workspace:bindingPolicies:update | - | |
| workspace:volumes:batchExpand | - | |
| workspace:userGroups:create | - | |
| workspace:desktops:batchInstallAgents | - | |
| workspace:desktops:delete | - | |
| workspace:privacystatements:sign | - | |
| workspace:ou:create | - | |
| workspace:desktopPools:update | - | |
| workspace:orders:batchInquiry | - | |
| workspace:desktops:verifyDesktopName | - | |
| workspace:desktops:batchDeleteSnapshots | - | |
| workspace:accessPolicies:updateTarget | - | |
| workspace:statistics:deleteNotificationRules | - | |
| workspace:images:checkIfExist | - | |
| workspace:accessPolicies:delete | - | |
| workspace:bindingPolicies:add | - | |
| workspace:users:importUser | - | |
| workspace:desktopPools:batchDeleteVolumes | - | |
| workspace:orders:change | - | |
| workspace:desktops:update | - | |
| workspace:desktops:logoff | - | |
| workspace:desktops:batchCreateSnapshots | - | |
| workspace:desktops:prepAttachUsers | - | |
| workspace:bindingPolicies:import | - | |
| workspace:desktopPools:batchAddVolumes | - | |
| workspace:volumes:modifyQos | - | |
| workspace:bandwidth:createChangeOrder | - | |
| workspace:statistics:exportAppUserAccessData | - | |
| workspace:natMappings:updateConfig | - | |
| workspace:desktopPools:delete | - | |
| workspace:userGroups:batchDelete | - | |
| workspace:exclusiveHosts:create | - | |
| workspace:policyGroups:updatePolicies | - | |
| workspace:users:update | - | |
| workspace:policyGroups:updateTargets | - | |
| workspace:users:batchDelete | - | |
| workspace:policyGroups:createTemplate | - | |
| workspace:desktops:batchChangeNetwork | - | |
| workspace:orders:createResourcePackagesOrder | - | |
| workspace:cloudStorage:resetUserProfile | - | |
| workspace:desktops:attach | - | |
| workspace:mkp:createOrder | - | |
| workspace:desktops:createImage | - | |
| workspace:bindingPolicies:createConfig | - | |
| workspace:tenants:checkEnterpriseIds | - | |
| workspace:orders:create | - | |
| workspace:users:create | - | |
| workspace:desktops:setMaintenanceMode | - | |
| workspace:tenants:deleteExportTasks | - | |
| workspace:desktops:detach | - | |
| workspace:users:delete | - | |
| workspace:volumes:add | - | |
| workspace:policyGroups:update | - | |
| workspace:sites:checkEdgeSiteResources | - | |
| workspace:desktops:create | - | |
| workspace:jobs:deleteSubJobRecords | - | |
| workspace:desktops:operate | - | |
| workspace:desktopPools:operate | - | |
| workspace:userGroups:delete | - | |
| workspace:desktops:changeUserPrivilegeGroup | - | |
| workspace:policyGroups:delete | - | |
| workspace:userGroups:update | - | |
| workspace:networks:createNat | - | |
| workspace:bandwidth:create | - | |
| workspace:renderDesktops:resize | - | |
| workspace:users:deleteOtps | - | |
| workspace:networks:createEips | - | |
| workspace:networks:bindEips | - | |
| workspace:policyGroups:import | - | |
| workspace:desktopPools:authorizeUsers | - | |
| workspace:userEvents:export | - | |
| workspace:assistAuthConfigs:update | - | |
| workspace:scripts:executeByDesktopTag | - | |
| workspace:tenants:updateDesktopNamePolicy | - | |
| workspace:assistAuthConfigs:updateApplyObjects | - | |
| workspace:sites:add | - | |
| workspace:desktopPools:sendNotifications | - | |
| workspace:desktopPools:batchExpandVolumes | - | |
| workspace:desktops:rebuild | - | |
| workspace:volumes:batchAdd | - | |
| workspace:agencies:create | - | |
| workspace:tenants:updateAccessAddressBackupConfig | - | |
| workspace:scheduledTasks:create | - | |
| workspace:sites:delete | - | |
| workspace:scheduledTasks:delete | - | |
| workspace:tenants:updateConfig | - | |
| workspace:users:subscribeSharer | - | |
| workspace:desktops:addSubResources | - | |
| workspace:userGroups:operate | - | |
| workspace:desktopPools:expand | - | |
| workspace:scheduledTasks:update | - | |
| workspace:statistics:createNotifyRules | - | |
| workspace:statistics:updateNotificationRules | - | |
| workspace:desktops:batchAttachUsers | - | |
| workspace:desktopPools:create | - | |
| workspace:users:checkExist | - | |
| workspace:desktops:batchDelete | - | |
| workspace:tenants:delete | - | |
| workspace:screenRecord:batchDelete | - | |
| workspace:desktops:rejoinDomain | - | |
| workspace:desktopPools:executeScripts | - | |
| workspace:ou:update | - | |
| workspace:tenants:updateShareSpaceConfig | - | |
| workspace:tenants:updateEnterpriseId | - | |
| workspace:accessPolicies:update | - | |
| workspace:ou:importUsersByOU | - | |
| workspace:bindingPolicies:delete | - | |
| workspace:users:operate | - | |
| workspace:accessPolicies:create | - | |
| workspace:tenants:update | - | |
| workspace:desktopPools:resize | - | |
| workspace:policyGroups:create | - | |
| workspace:tenants:open | - | |
| workspace:bandwidth:delete | - | |
| workspace:desktops:deleteSubResources | - | |
| workspace:sites:updateAccessMode | - | |
| workspace:desktops:createRemoteAssistance | - | |
| workspace:bandwidth:updateControlConfig | - | |
| workspace:desktopPools:rebuild | - | |
| workspace:users:batchCreate | - | |
| workspace:users:import | - | |
| workspace:userEvents:setLtsConfigurations | - | |
| workspace:tenants:batchDeleteDesktopNamePolicies | - | |
| workspace:desktops:batchRestoreSnapshots | - | |
| workspace:desktops:checkBatchChangeImage | - | |
| workspace:authConfig:validate | - | |
| workspace:authConfigs:update | - | |
| workspace:volumes:delete | - | |
| workspace:desktops:batchDetach | - | |
| workspace:sites:updateSubnets | - | |
| workspace:bandwidth:update | - | |
| workspace:tenants:unlock | - | |
| workspace:desktops:cancelRemoteAssistance | - | |
| workspace:tenants:createDesktopNamePolicy | - | |
| workspace:jobs:retry | - |