更新时间:2026-05-19 GMT+08:00
分享

未使用访问分析支持的云服务和授权项

下面列出了未使用访问分析已支持的云服务和授权项。

DDoS高防(AAD)

云服务名

身份策略授权项

别名

DDoS高防(AAD)

aad:policy:put

-

aad:domain:put

-

aad:certificate:delete

-

aad:forwardingRule:put

-

aad:domain:create

-

aad:whiteBlackIpRule:delete

-

aad:instance:put

-

aad:policy:delete

-

aad:forwardingRule:create

-

aad:forwardingRule:delete

-

aad:instance:create

-

aad:certificate:set

-

aad:whiteBlackIpRule:create

-

aad:dashboard:set

-

aad:alarmConfig:create

-

aad:domain:delete

-

aad:policy:create

-

aad:alarmConfig:put

-

访问分析(Access Analyzer)

云服务名

身份策略授权项

别名

访问分析(Access Analyzer)

AccessAnalyzer:archiveRule:apply

-

AccessAnalyzer:analyzer:updateFindings

-

AccessAnalyzer::untagResource

-

AccessAnalyzer:analyzer:delete

-

AccessAnalyzer:analyzer:createPreview

-

AccessAnalyzer:archiveRule:create

-

AccessAnalyzer:analyzer:create

-

AccessAnalyzer:notificationSetting:update

-

AccessAnalyzer::tagResource

-

AccessAnalyzer:notificationSetting:delete

-

AccessAnalyzer:archiveRule:update

-

AccessAnalyzer:analyzer:update

-

AccessAnalyzer:notificationSetting:create

-

AccessAnalyzer:analyzer:scan

-

AccessAnalyzer:archiveRule:delete

-

DDoS原生基础防护(Anti-DDoS)

云服务名

身份策略授权项

别名

DDoS原生基础防护(Anti-DDoS)

anti-ddos:alertConfig:update

-

anti-ddos:ip:updateDefensePolicy

-

anti-ddos:defaultDefensePolicy:create

-

anti-ddos:ip:enableDefensePolicy

-

anti-ddos:logConfig:update

-

anti-ddos:ip:disableDefensePolicy

-

anti-ddos:defaultDefensePolicy:delete

-

应用运维管理(AOM)

云服务名

身份策略授权项

别名

应用运维管理(AOM)

aom:actionRule:create

-

aom:muteRule:delete

-

aom:alarmRule:delete

-

aom:agency:delete

-

aom:alarmRuleTemplate:set

-

aom:alarm:put

-

aom:alarmRuleTemplate:delete

-

aom:actionRule:delete

-

aom:subscriberules:create

-

aom:event2AlarmRule:create

-

aom:alarmRuleTemplate:create

-

aom:discoveryRule:set

-

aom:alarmRule:create

-

aom:muteRule:create

-

aom:event2AlarmRule:update

aom:event2AlarmRule:set

aom:notificationTemplate:update

-

aom:discoveryRule:delete

-

aom:event2AlarmRule:delete

-

aom:muteRule:update

-

aom:subscriberules:update

-

aom:notificationTemplate:delete

-

aom:notificationTemplate:create

-

aom:agency:create

-

aom:alarmRule:update

aom:alarmRule:set

aom:actionRule:update

-

aom:subscriberules:delete

-

API网关(APIG)

云服务名

身份策略授权项

别名

API网关(APIG)

apig:apiGroup:createGatewayResponse

apig:gatewayResponses:create

apig:api:debug

apig:apis:debug

apig:certificate:update

-

apig:instance:deleteOutboundEip

apig:instances:update

apig:api:switchVersion

apig:apis:publish

apig:orchestration:update

-

apig:instance:addCustomIngressPort

-

apig:orchestration:delete

-

apig:instance:bindOrChangeEip

apig:instances:update

apig:apiGroup:batchUnbindCertificateFromDomain

apig:domains:unbindCertificate

apig:certificate:delete

-

apig:certificate:create

-

apig:signatureKey:update

apig:signs:update

apig:api:import

apig:apis:import

apig:apiGroup:batchBindCertificateToDomain

apig:domains:bindCertificate

apig:customAuthorizer:create

apig:authorizers:create

apig:apiGroup:create

apig:groups:create

apig:clientQuota:bindApp

-

apig:loadBalanceChannel:deleteBackendServerAddress

apig:vpcChannels:deleteInstance

apig:loadBalanceChannel:createServerGroup

apig:vpcChannels:addOrUpdateMemberGroups

apig:instance:changeIngressEipBindwidth

apig:instances:update

apig:instance:changeOutboundEipBandwidth

apig:instances:update

apig:apiGroup:deleteGatewayResponseType

apig:gatewayResponses:update

apig:api:delete

apig:apis:delete

apig:loadBalanceChannel:updateServerGroup

apig:vpcChannels:updateMemberGroup

apig:loadBalanceChannel:createBackendServerAddress

apig:vpcChannels:addInstance

apig:loadBalanceChannel:batchEnableBackendServerAddress

apig:vpcChannels:batchEnableInstance

apig:acl:delete

apig:acls:delete

apig:apiGroup:updateGatewayResponse

-

apig:instance:createOutboundEip

apig:instances:update

apig:app:updateAcl

apig:apps:get

apig:loadBalanceChannel:updateBackendServerAddress

apig:vpcChannels:addInstance

apig:instance:updateParameter

apig:features:create

apig:apiGroup:updateDomainConfig

-

apig:requestThrottling:deleteSpecial

apig:specialThrottles:delete

apig:instance:batchDeleteVpcEndpointPermission

-

apig:apiGroup:updateSLDomainSetting

apig:domains:updateSLDomainSetting

apig:acl:create

apig:acls:create

apig:environmentVariable:create

apig:variables:create

apig:apiGroup:unbindDomain

apig:domains:delete

apig:instance:batchAddVpcEndpointPermission

-

apig:app:unbindApi

apig:apis:relieveAppAccess

apig:app:deleteAppCode

apig:appCodes:delete

apig:apiGroup:bindDomain

apig:domains:create

apig:instance:resize

apig:instances:update

apig:apiGroup:updateGatewayResponseType

apig:gatewayResponses:update

apig:api:bindRequestThrottling

apig:apis:bindThrottles

apig:requestThrottling:batchDelete

apig:throttles:delete

apig:api:bindPlugin

apig:apis:bindPlugins

apig:loadBalanceChannel:deleteServerGroup

apig:vpcChannels:deleteMemberGroup

apig:app:createAppCode

apig:appCodes:create

apig:api:bindSignatureKey

apig:apis:bindSigns

apig:requestThrottling:create

apig:throttles:create

apig:instance:update

apig:instances:update

apig:instance:importMicroservice

apig:apis:import

apig:api:unbindRequestThrottling

apig:apis:unbindThrottles

apig:clientQuota:unbindApp

-

apig:api:unbindSignatureKey

apig:apis:unbindSigns

apig:apiGroup:createAndBindCertificateToDomain

apig:domains:bindCertificate

apig:environmentVariable:delete

apig:variables:delete

apig:orchestration:create

-

apig:api:onlineOrOffline

apig:apis:publish

apig:apis:offline

apig:loadBalanceChannel:delete

apig:vpcChannels:delete

apig:instance:unbindEip

apig:instances:update

apig:clientQuota:update

-

apig:instance:deleteCustomIngressPort

-

apig:api:batchUnbindAcl

apig:apis:unbindAcls

apig:api:unbindAcl

apig:apis:unbindAcls

apig:apiGroup:deleteGatewayResponse

apig:gatewayResponses:delete

apig:requestThrottling:updateSpecial

apig:specialThrottles:update

apig:app:deleteAcl

apig:apps:get

apig:instance:acceptOrRejectVpcEndpointConnection

-

apig:clientQuota:delete

-

apig:apiGroup:delete

apig:groups:delete

apig:loadBalanceChannel:create

apig:vpcChannels:create

apig:loadBalanceChannel:batchDisableBackendServerAddress

apig:vpcChannels:batchDisableInstance

apig:loadBalanceChannel:updateHealthCheckConfig

apig:vpcChannels:update

apig:api:batchOnlineOrOffline

apig:apis:offline

apig:apis:publish

apig:plugin:update

apig:plugins:update

apig:api:unbindPlugin

apig:apis:unbindPlugins

apig:requestThrottling:createSpecial

apig:specialThrottles:create

apig:api:create

apig:apis:create

apig:instance:batchCreateOrDeleteTag

apig:instanceTags:create

apig:instanceTags:delete

apig:plugin:unbindApi

apig:apis:unbindPlugins

apig::createPrepayOrder

apig:instances:create

apig:app:create

apig:apps:create

apig:signatureKey:create

apig:signs:create

apig:app:generateAppCode

apig:appCodes:update

apig:loadBalanceChannel:update

apig:vpcChannels:update

apig:apiGroup:unbindAndDeleteCertificateFromDomain

apig:domains:unbindCertificate

apig:api:update

apig:apis:update

apig:instance:delete

apig:instances:delete

apig:api:batchUnbindRequestThrottling

apig:apis:unbindThrottles

apig:plugin:create

apig:plugins:create

apig:requestThrottling:update

apig:throttles:update

apig:api:bindAcl

apig:apis:bindAcls

apig:app:update

apig:apis:update

apig:instance:deleteIngressEip

apig:instances:update

apig:environment:create

apig:envs:create

apig:environment:delete

apig:envs:delete

apig:api:batchDelete

apig:apis:delete

apig:plugin:delete

apig:plugins:delete

apig:apiGroup:update

apig:groups:update

apig:acl:update

apig:acls:update

apig:acl:batchDelete

apig:acls:delete

apig:environment:update

apig:envs:update

apig:customAuthorizer:update

apig:authorizers:update

apig:customAuthorizer:delete

apig:authorizers:delete

apig:app:delete

apig:apps:delete

apig:api:deleteHistoryVersion

apig:apis:offline

apig:requestThrottling:delete

apig:throttles:delete

apig:environmentVariable:update

-

apig:plugin:bindApi

apig:apis:bindPlugins

apig:signatureKey:delete

apig:signs:delete

apig:clientQuota:create

-

apig:app:bindApi

apig:apis:grantAppAccess

apig:instance:createIngressEip

apig:instances:update

apig:instance:create

apig:instances:create

apig:app:resetSecret

apig:apps:update

apig:instance:createPrepayResizeOrder

apig:instances:update

弹性伸缩(AS)

云服务名

身份策略授权项

别名

弹性伸缩(AS)

as:scalingGroup:create

as:groups:create

as:scalingGroup:updateLifecycleHook

as:lifecycleHooks:update

as:scalingPolicy:execute

as:policies:action

as::untagResource

as:tags:set

as:scalingConfig:delete

as:configs:delete

as:scalingPolicy:resume

as:policies:action

as:scalingGroup:callbackInstanceHook

as:instanceHooks:action

as:scalingGroup:update

as:groups:update

as:scalingPolicy:update

as:policies:update

as:scalingGroup:deleteLifecycleHook

as:lifecycleHooks:delete

as:scalingGroup:deleteNotification

as:notifications:delete

as:scalingGroup:batchAddInstances

as:instances:batchAction

as:scalingConfig:batchDelete

as:configs:batchDelete

as:scalingPolicy:pause

as:policies:action

as:scalingPolicy:batchDelete

as:policies:batchAction

as:scalingGroup:delete

as:groups:delete

as:scalingGroup:resume

as:groups:action

as:scalingGroup:batchRemoveInstances

as:instances:batchAction

as:scalingGroup:createLifecycleHook

as:lifecycleHooks:create

as:scalingGroup:deleteInstance

as:instances:delete

as:scalingPolicy:create

as:policies:create

as:scalingGroup:batchSetInstancesExitStandby

as:instances:batchAction

as:scalingGroup:createNotification

as:notifications:set

as:scalingPolicy:delete

as:policies:delete

as:scalingPolicy:batchPause

as:policies:batchAction

as::tagResource

as:tags:set

as:scalingGroup:pause

as:groups:action

as:scalingGroup:batchSetInstancesStandby

as:instances:batchAction

as:scalingConfig:create

as:configs:create

费用中心(billing)

云服务名

身份策略授权项

别名

费用中心(billing)

billing:subscription:renew

bss:renewal:update

billing:subscription:unsubscribe

bss:unsubscribe:update

裸金属服务器(BMS)

云服务名

身份策略授权项

别名

裸金属服务器(BMS)

bms:server:deleteNics

-

bms:servers:changeOS

-

bms:servers:addNics

-

bms:servers:start

-

bms:servers:updateMetadata

-

bms:servers:reInstallOS

-

bms:servers:resetServerPwd

-

bms:servers:batchCreateBaremetalServerTags

bms:servers:put

bms:servers:stop

-

bms:servers:create

-

bms:servers:updateBaremetalServer

bms:servers:put

bms:servers:reboot

-

bms:servers:attachVolume

-

bms:servers:detachVolume

-

云堡垒机(CBH)

云服务名

身份策略授权项

别名

云堡垒机(CBH)

cbh:instance:bindInstanceEip

cbh:instance:eipOperate

cbh:instance:rollbackInstance

-

cbh:instance:changeInstanceType

-

cbh:instance:startInstance

cbh:instance:start

cbh:instance:deleteInstance

cbh:instance:modify

cbh:instance:loginInstanceAdmin

-

cbh:instance:upgradeInstance

cbh:instance:upgrade

cbh:instance:stopInstance

cbh:instance:stop

cbh:instance:loginInstance

cbh:instance:login

cbh::operateAuthorization

cbh:agency:authorize

cbh:instance:resetInstancePassword

cbh:instance:resetPassword

cbh:instance:operateInstanceTags

cbh:instance:modify

cbh:instance:switchInstanceVpc

-

cbh:instance:resetInstanceLoginMethod

cbh:instance:resetPassword

cbh:instance:updateInstanceSecurityGroup

cbh:instance:modify

cbh:instance:rebootInstance

cbh:instance:reboot

cbh:instance:unbindInstanceEip

cbh:instance:eipOperate

cbh:instance:createInstance

cbh:instance:create

cbh:instance:alterInstance

cbh:instance:alterSpec

云备份(CBR)

云服务名

身份策略授权项

别名

云备份(CBR)

cbr:organizationPolicies:update

-

cbr::createThirdAuth

cbr:thirdAuth:create

cbr:organizationPolicies:delete

-

cbr:vaults:associatePolicy

-

cbr:vaults:create

-

cbr:vaults:backup

-

cbr:vaults:dissociatePolicy

-

cbr:backups:update

-

cbr::updateSnapshotMetadata

cbr:snapshotMetadata:update

cbr:member:create

-

cbr:vaults:migrateResources

-

cbr:vaults:setTags

-

cbr:vaults:deleteTags

-

cbr:vaults:changeChargeMode

-

cbr::createSnapshotMetadata

cbr:snapshotMetadata:create

cbr:policies:update

-

cbr:vaults:addResources

-

cbr:member:update

-

cbr:backups:replicate

-

cbr:policies:delete

-

cbr:vaults:sync

-

cbr:backups:migratesCreate

-

cbr:agents:delete

-

cbr:backups:import

-

cbr:vaults:bulkCreateOrDeleteTags

-

cbr:member:delete

-

cbr::deleteExportSnapshotAgency

cbr:exportSnapshotAgency:delete

cbr::deleteExportSnapshotJob

cbr:exportSnapshotJob:delete

cbr:policies:create

-

cbr:vaults:delete

-

cbr:backups:restore

-

cbr:agents:update

-

cbr:vaults:replicate

-

cbr:backups:delete

-

cbr:vaults:removeResources

-

cbr::createExportSnapshotAgency

cbr:exportSnapshotAgency:create

cbr::createExportSnapshotJob

cbr:exportSnapshotJob:create

cbr:organizationPolicies:create

-

cbr:agents:register

-

cbr:vaults:update

-

cbr:agents:removePath

-

cbr:agents:addPath

-

cbr:vaults:setResources

-

cbr:vaults:updateOrder

-

云连接(CC)

云服务名

身份策略授权项

别名

云连接(CC)

cc:centralNetwork:createPolicy

-

cc:centralNetwork:delete

-

cc:centralNetwork:create

-

云容器引擎(CCE)

云服务名

身份策略授权项

别名

云容器引擎(CCE)

cce:node:add

cce:node:create

cce:cluster:updateLongAKSKConfig

-

cce:node:reportStatus

cce:node:get

cce:cluster:checkLock

-

cce:accessPolicy:put

-

cce:node:remove

-

cce:nodepool:scale

-

cce:chart:upload

-

cce:node:migrate

-

cce:partition:update

-

cce:nodepool:upgradeNodepool

cce:nodepool:update

cce:node:toperiod

-

cce:cluster:toperiod

-

cce:permissionApplyOrder:create

cce:cluster:upgrade

cce:nodepool:sync

cce:nodepool:get

cce:addonInstance:delete

-

cce:partition:create

-

cce:cluster:delete

-

cce:cluster:createCluster

cce:cluster:create

cce:cluster:rotateCredentials

-

cce:nodepool:updateNodepool

cce:nodepool:update

cce:cluster:updateConfiguration

cce:cluster:update

cce:cluster:updateCluster

cce:cluster:update

cce:cluster:revokeClientCredential

-

cce:accessPolicy:delete

-

cce:release:update

-

cce:addonInstance:create

-

cce:nodepool:migrate

cce:nodepool:update

cce:node:delete

-

cce:cluster:resize

-

cce:accessPolicy:post

-

cce:cluster:eipBinding

cce:cluster:update

cce:cluster:start

-

cce:node:update

-

cce:cluster:upgrade

-

cce:cluster:removeTags

cce:tag:operate

cce:addonInstance:update

-

cce:node:createNode

cce:node:create

cce:node:reset

cce:node:create

cce:nodepool:updateConfiguration

cce:nodepool:update

cce:job:delete

-

cce:chart:update

-

cce:cluster:updateLogConfig

-

cce:release:create

-

cce:cluster:stop

-

cce:release:delete

-

cce:node:unlock

cce:node:update

cce:cluster:addTags

cce:tag:operate

cce:chart:delete

-

cce:nodepool:delete

-

cce:addonInstance:rollback

-

cce:nodepool:create

-

内容分发网络(CDN)

云服务名

身份策略授权项

别名

内容分发网络(CDN)

cdn:configuration:modifyOriginConfInfo

-

cdn:configuration:checkIcp

-

cdn:contentgateway:createAccessControlTask

cdn:contentgateway:queryBanHistoryTask

cdn:configuration:createShareCacheGroup

cdn:configuration:modifyCacheRule

cdn:log:updateLtsPushConfigs

-

cdn:log:deleteLtsPushConfigs

-

cdn:configuration:disableDomains

-

cdn:configuration:tagResource

-

cdn:configuration:pushCloudCert

-

cdn:configuration:batchModifyHttpsConf

cdn:configuration:modifyHttpsConf

cdn:configuration:createResHeader

-

cdn:statistics:createExportTasks

cdn:statistics:queryStats

cdn:configuration:modifyIpAcl

-

cdn:configuration:deleteDomains

-

cdn:configuration:deleteShareCacheGroup

cdn:configuration:modifyCacheRule

cdn:statistics:deleteSubscriptionTasks

-

cdn:statistics:updateSubscriptionTasks

-

cdn:configuration:deleteCloudCert

cdn:configuration:modifyHttpsConf

cdn:configuration:modifyReferConf

-

cdn:configuration:enableDomains

-

cdn:configuration:updateShareCacheGroup

cdn:configuration:modifyCacheRule

cdn:log:createLtsPushConfigs

-

cdn:configuration:modifyTags

-

cdn:configuration:deleteTags

cdn:configuration:modifyTags

cdn:configuration:modifyHttpsConf

-

cdn:configuration:modifyOriginServerInfo

-

cdn:configuration:modifyCacheRule

-

cdn:configuration:preheatCache

-

cdn:configuration:createDomains

-

cdn:contentgateway:createBanTask

cdn:contentgateway:queryBanHistoryTask

cdn:statistics:updateStatsConfigs

-

cdn:configuration:modifyDomainConfigs

-

cdn:configuration:refreshCache

-

cdn:configuration:modifyAccountInfo

cdn:configuration:modifyChargeMode

cdn:statistics:createSubscriptionTasks

-

云监控(CES)

云服务名

身份策略授权项

别名

云监控(CES)

ces:alarms:deleteOneClickAlarms

ces:oneClickAlarms:delete

ces:resourceGroups:deleteResources

ces:resourceGroups:put

ces:customAlarmTemplates:delete

-

ces:resourceGroups:put

-

ces:resourcesReportJob:delete

-

ces:alarms:delete

-

ces:smartReportTask:delete

-

ces:dataShareJob:create

-

ces:notificationObject:delete

-

ces:alarms:put

ces:alarmsOnOff:put

ces:siteMonitorRule:createHealthCheck

ces:siteMonitorHealthCheck:create

ces:alarms:putAlarmNotifications

ces:alarms:put

ces:processMonitorTasks:put

-

ces:dataShareJob:delete

-

ces:processMonitorTasks:delete

-

ces:metric:deleteGroups

-

ces:resourceGroups:delete

-

ces:dashboards:put

-

ces:dashboardGroups:update

ces:dashboardGroups:put

ces:agency:post

-

ces:availabilityMonitorTask:create

-

ces:resourceGroups:putAssociationAlarmTemplate

ces:resourceGroups:put

ces:metricReportJob:create

-

ces:dashboard:createMonitorDashboards

-

ces:metric:createConfig

-

ces:notificationObject:update

-

ces:notificationPolicy:update

-

ces:qualityMonitor:create

-

ces:qualityMonitor:createQuickDetectTask

-

ces:customAlarmTemplates:associateResourceGroup

ces:customAlarmTemplates:put

ces:siteMonitorRule:delete

-

ces:tags:create

ces:tags:action

ces:customAlarmTemplates:create

-

ces:obsTransfers:create

-

ces:notificationObject:create

-

ces:metricData:export

-

ces:agent:deleteSpecifiedProcess

ces:instanceSpecifiedProcesses:delete

ces:resourceGroups:create

-

ces:notificationGroup:create

-

ces:paidContent:update

-

ces:alarmHistoriesReportJob:delete

-

ces:alarmHistory:update

-

ces:dashboardGroups:delete

-

ces:systemDashboard:put

ces:systemDashboard:update

ces:alarms:putAction

ces:alarms:put

ces:alarms:deleteResources

ces:alarms:put

ces:dataShareJob:put

ces:dataShareJob:action

ces:alarmHistoriesReportJob:create

-

ces:alarms:batchDeleteNotificationTemplates

-

ces:alarms:createOneClickAlarms

-

ces:alarms:updateNotificationTemplate

-

ces:notificationPolicy:delete

-

ces:smartReportTask:update

-

ces:customAlarmTemplates:put

-

ces:agent:createAgentInvocations

-

ces:alarms:putOneClickAlarmPolicies

ces:oneClickAlarms:put

ces:alarms:deleteNotificationMaskRules

ces:notificationMasks:delete

ces:qualityMonitor:update

-

ces:widgets:put

-

ces:alarms:publishNotification

-

ces:qualityMonitor:updateMapThresholdConfig

-

ces:alarms:createNotificationTemplate

-

ces:smartReportTask:create

-

ces:notificationPolicy:create

-

ces:notificationPolicy:updateAlarmRelations

-

ces:widgets:create

-

ces:metricReportJobs:delete

-

ces:dashboardGroups:create

-

ces:eventsBlackWhiteList:update

-

ces:dashboards:delete

-

ces:availabilityMonitorTask:update

-

ces:widgets:delete

-

ces:qualityMonitor:delete

-

ces:metric:createGroups

-

ces:processMonitorTasks:create

-

ces:availabilityMonitorTask:delete

-

ces:alarms:putOneClickAlarmNotifications

ces:oneClickAlarms:updateNotifications

ces:metric:updateGroups

-

ces:siteMonitorRule:put

-

ces:sortedMetrics:create

-

ces:alarms:create

-

ces:resourcesReportJob:create

-

ces:notificationGroup:delete

-

ces:alarms:putNotificationMaskRules

-

ces:alarms:updatePolicies

ces:alarms:put

ces:obsTransfers:put

-

ces:dashboards:create

-

ces:alarms:putOneClickAlarms

ces:oneClickAlarms:put

ces:monitorOverview:updateKeyMetrics

-

ces:alarms:addResources

ces:alarms:put

ces:resourceGroups:addResources

ces:resourceGroups:put

DDoS原生高级防护(CNAD)

云服务名

身份策略授权项

别名

DDoS原生高级防护(CNAD)

cnad:package:put

-

cnad:ipTag:put

-

cnad:attackReport:update

cnad:attackReport:list

cnad:package:create

-

cnad:blackWhiteIpList:create

-

cnad:blackWhiteIpList:delete

-

cnad:alarmConfig:delete

-

cnad:bindPolicy:create

-

cnad:policy:put

-

cnad:policy:create

-

cnad:protectedIp:create

-

cnad:policy:unbind

cnad:unbindPolicy:create

cnad:alarmConfig:create

-

cnad:policy:delete

-

云运维中心(COC)

云服务名

身份策略授权项

别名

云运维中心(COC)

coc:attackTask:deleteRelatedRecords

-

coc:assessReport:delete

-

coc:document:updateDocument

-

coc:slaTemplate:delete

-

coc:appkey:update

-

coc:parameter:update

-

coc:assessReport:updateItemStatus

-

coc:slaTemplate:create

-

coc:assessTask:delete

-

coc:instance:executeDocument

-

coc:patchBaseline:delete

-

coc:slaTemplate:disable

-

coc:prrReview:create

-

coc:instance:changeOS

-

coc:vendorAccount:delete

-

coc:instance:reboot

-

coc:instance:syncAccount

coc:account:sync

coc:slo:deleteSloTarget

-

coc:systemConfig:update

-

coc:application:addResources

-

coc:task:create

-

coc:task:complete

-

coc:appkey:create

-

coc:resourceView:delete

-

coc:document:create

-

coc:parameter:create

-

coc:resourceView:syncResources

-

coc:slo:createSloTarget

-

coc:slo:configureSli

-

coc:warroomMeetingRule:delete

-

coc:slaTemplate:enable

-

coc:task:accept

-

coc:task:cancel

-

coc:instance:updateResources

-

coc:appkey:delete

-

coc:slo:updateSloTarget

-

coc:instance:installPatches

-

coc:contingencyPlan:uploadFile

-

coc:instance:addResourceToTags

coc:instance:createResourceTags

coc:personnel:update

-

coc:schedule:approve

-

coc:drillTask:deleteRelatedRecords

-

coc:application:create

-

coc:prrTemplate:create

-

coc:slo:updateInterruptRecords

-

coc:alarm:createAlarmLinkedIncident

-

coc:notificationRule:confirm

-

coc:patchBaseline:registerDefault

-

coc:assessTask:create

-

coc:prrTemplate:update

-

coc:sloBasicData:update

-

coc:slo:createInterruptRecords

-

coc:application:RemoveComponentInvokingRelationships

-

coc::updateEpsCollection

coc:enterpriseProject:updateCollect

coc:application:createGroup

-

coc:warroomMeetingRule:update

-

coc:transferRule:enable

-

coc:ticket:updateEnumValues

-

coc:resourceView:create

-

coc:ticket:update

-

coc:faultMode:create

-

coc:slaTemplate:update

-

coc:prrReview:delete

-

coc:ticket:delete

-

coc:application:delete

-

coc:faultMode:update

-

coc:document:createDocument

-

coc:vm:upgradeOsVersion

-

coc:attackTargetRecord:operate

-

coc:instance:resetPassword

-

coc:oncall:updateRole

-

coc:session:start

-

coc::disablePasswordChangePolicy

coc:accountPasswordChangePolicy:disable

coc:schedule:delete

-

coc:integration:create

-

coc:patchBaseline:updateCustomBaseline

-

coc:application:removeResources

-

coc:patchBaseline:update

-

coc:ticket:createEnumValues

-

coc:schedule:enable

-

coc:schedule:update

-

coc:accountBaseline:create

-

coc:job:action

-

coc:instance:start

-

coc:instance:stop

-

coc:hostAccount:enable

-

coc::updateBiBackboneNetworkTopo

coc:system:updateBiBackboneNetworkTopo

coc:integration:access

-

coc:warroom:sendNotification

-

coc:drillPlan:create

-

coc:warroom:removeAffectedApplications

-

coc:notificationRule:update

-

coc:integration:update

-

coc::deleteAutoManagementRelations

coc:accountAutoManagement:deleteRelations

coc:transferRule:update

-

coc:integration:enable

-

coc:instance:syncResources

-

coc:instance:restartRDSInstance

-

coc:drillReport:create

-

coc:patchBaseline:create

-

coc:drillTask:delete

-

coc:sloBasicData:delete

-

coc:oncall:createScene

-

coc::refreshBiBackboneNetworkTopo

coc:system:refreshBiBackboneNetworkTopo

coc:warroom:addRolePersonnels

-

coc:drillReport:update

-

coc::updateServiceConfigTask

coc:serviceConfigTask:update

coc::createBiSubscription

coc:biSubscription:create

coc:accountBaseline:deleteAccount

-

coc:warroomMeetingRule:create

-

coc:drillPlan:update

-

coc:document:deleteDocument

-

coc:faultMode:delete

-

coc:oncall:updatePersonnels

-

coc:application:CreateResourceTopo

-

coc:application:updateGroup

-

coc:drillRecord:create

-

coc:oncall:addPersonnels

-

coc:drillTask:create

-

coc:accountBaseline:delete

-

coc::enablePasswordChangePolicy

coc:accountPasswordChangePolicy:enable

coc:drillTask:update

-

coc:transferRule:delete

-

coc:notificationRule:disable

-

coc:oncall:deleteScene

-

coc::changeOrders

coc:orders:change

coc:attackTask:create

-

coc:instance:addAccount

coc:account:add

coc::updateBiSubscription

coc:biSubscription:update

coc:document:update

-

coc::updateBiScreenConfig

coc:system:updateBiScreenConfig

coc:prrReview:auditResult

-

coc:instance:createPasswordChangePlan

-

coc:prrReview:recordSummary

-

coc:application:update

-

coc:sloDiagram:update

-

coc::updateTopologyConfigurations

coc:system:updateTopologyConfigurations

coc:oncall:createRole

-

coc::updateAutoManagementStatus

coc:accountAutoManagement:updateStatus

coc:notificationRule:enable

-

coc::addAutoManagementRelations

coc:accountAutoManagement:addRelations

coc:attackRecord:changeMetricType

-

coc:warroom:updateAffectedApplications

-

coc:document:delete

-

coc:ticket:create

-

coc:incident:create

-

coc:ticket:action

-

coc:contingencyPlan:update

-

coc::deleteNotificationGroup

-

coc:transferRule:disable

-

coc:application:syncGroupResource

-

coc:application:CreateDiagnosisTask

-

coc:application:AddComponentInvokingRelationships

-

coc:assessReport:create

-

coc:notificationRule:delete

-

coc:oncall:updateScene

-

coc:alarm:put

-

coc:document:execute

-

coc:vendorAccount:update

-

coc:prrTemplate:delete

-

coc:parameter:delete

-

coc:alarmRule:sync

-

coc:application:updateResources

-

coc:integration:remove

-

coc:accountBaseline:update

-

coc:resourceView:update

-

coc:vendorAccount:create

-

coc:warroom:sendNotificationBriefing

-

coc::updateNotificationGroup

-

coc:schedule:disable

-

coc:incident:handle

-

coc::createOrders

coc:orders:create

coc:vm:rollbackOsVersion

-

coc:alarm:clear

-

coc:ticket:deleteEnumValues

-

coc:sloDiagram:create

-

coc:execution:operate

-

coc:transferRule:create

-

coc:warroom:create

-

coc:warroom:modifyBasicInformation

-

coc:personnel:remove

-

coc:alarmRule:put

-

coc:contingencyPlan:delete

-

coc:schedule:create

-

coc:warroom:addAffectedApplications

-

coc:contingencyPlan:create

-

coc::createNotificationGroup

-

coc::deleteBiSubscription

coc:biSubscription:delete

coc:instance:resetAccountPassword

-

coc:alarmRule:delete

-

coc:instance:updateAccountPassword

-

coc:personnel:add

-

coc:prrReview:update

-

coc:oncall:removePersonnels

-

coc:agency:create

-

coc:instance:autoBatchInstances

-

coc:warroom:addPersonnels

-

coc:warroom:removePersonnels

-

coc:notificationRule:create

-

coc:ticket:uploadFile

-

coc::addEncryptionKey

coc:accountEncryptionKey:add

coc:integration:disable

-

coc:application:deleteGroup

-

coc:oncall:deleteRole

-

coc:instance:deleteResourceTags

-

coc:sloDiagram:delete

-

部署(CodeArts Deploy)

云服务名

身份策略授权项

别名

部署(CodeArts Deploy)

codeartsdeploy:environment:delete

-

codeartsdeploy:application:update

-

codeartsdeploy:environment:create

-

codeartsdeploy:environment:update

-

codeartsdeploy:resource:managePermission

-

codeartsdeploy:application:create

-

codeartsdeploy:application:managePermission

-

codeartsdeploy:resource:addHost

-

codeartsdeploy:application:deploy

-

codeartsdeploy:resource:copyHost

-

codeartsdeploy:resource:create

-

codeartsdeploy:applicationGroup:manage

-

codeartsdeploy:resource:delete

-

codeartsdeploy:resource:update

-

codeartsdeploy:template:update

-

codeartsdeploy:template:create

-

codeartsdeploy:application:disable

-

codeartsdeploy:application:delete

-

codeartsdeploy:application:clone

-

codeartsdeploy:environment:managePermission

-

codeartsdeploy:template:delete

-

漏洞管理服务(CodeArts Inspector)

云服务名

身份策略授权项

别名

漏洞管理服务(CodeArts Inspector)

codeartsinspector:host:updateGroup

-

codeartsinspector::batchDeleteReportFiles

-

codeartsinspector:host:createSshCredential

-

codeartsinspector:host:batchGenerateReportFiles

-

codeartsinspector:host:deleteGroup

-

codeartsinspector:website:generateReportFile

-

codeartsinspector:website:batchStopTasks

-

codeartsinspector:host:BatchStartTasks

-

codeartsinspector:host:batchUpdate

-

codeartsinspector:host:updateSmbCredential

-

codeartsinspector:host:deleteSshCredential

-

codeartsinspector:host:deleteJumpServer

-

codeartsinspector:host:batchDelete

-

codeartsinspector:website:resumeOrPauseMonitorTask

-

codeartsinspector:host:updateSshCredential

-

codeartsinspector:host:createSmbCredential

-

codeartsinspector:host:createGroup

-

codeartsinspector:host:createJumpServer

-

codeartsinspector:website:create

-

codeartsinspector:website:delete

-

codeartsinspector:website:batchStartTasks

-

codeartsinspector:website:stopTask

-

codeartsinspector:website:changeVulnerability

-

codeartsinspector:host:deleteSmbCredential

-

codeartsinspector:host:updateJumpServer

-

codeartsinspector:host:changeVulnerability

-

codeartsinspector:website:authorize

-

codeartsinspector:website:updateSettings

-

codeartsinspector:website:updateTaskSettings

-

codeartsinspector:website:startTask

-

codeartsinspector:website:batchDelete

-

codeartsinspector:host:batchCreate

-

codeartsinspector:website:update

-

codeartsinspector::createOrder

-

测试计划(CodeArts TestPlan)

云服务名

身份策略授权项

别名

测试计划(CodeArts TestPlan)

codeartstestplan:testSuite:update

-

codeartstestplan:variable:update

-

codeartstestplan:testQualityDashboard:update

-

codeartstestplan:actionWord:create

-

codeartstestplan:variable:create

-

codeartstestplan:actionWord:delete

-

codeartstestplan:testCase:execute

-

codeartstestplan:testCase:import

-

codeartstestplan:testSuite:delete

-

codeartstestplan:testCase:create

-

codeartstestplan:testCase:delete

-

codeartstestplan:testCase:update

-

codeartstestplan:testSuite:create

-

codeartstestplan:actionWord:update

-

codeartstestplan:configuration:update

-

codeartstestplan:testVersion:create

-

codeartstestplan:testSuite:execute

-

微服务引擎(CSE)

云服务名

身份策略授权项

别名

微服务引擎(CSE)

cse:engine:upgrade

-

cse:engine:create

-

cse:namespace:create

cse:namespace:write

cse:engine:resize

cse:engine:modify

cse:namespace:update

cse:namespace:write

cse:registry:modify

cse:namespace:delete

cse:namespace:write

cse:policy:update

cse:governance:modify

cse:engine:delete

-

密码安全中心(凭据管理服务 CSMS)

云服务名

身份策略授权项

别名

密码安全中心(凭据管理服务 CSMS)

csms::createEvent

csms:event:create

csms::deleteEvent

csms:event:delete

csms:secret:create

-

csms:secret:updateStage

csms:secretStage:update

csms:secret:updateVersion

-

csms:secret:rotate

-

csms::updateEvent

csms:event:update

csms:secret:delete

-

csms:secret:createVersion

csms:secretVersion:create

csms:secret:update

-

csms:secret:deleteTag

csms:tag:delete

csms:secret:batchCreateOrDeleteTags

csms:tag:batch

csms:secret:restoreSecret

csms:secret:deleteCancelled

csms:secret:scheduleDeletion

csms:secret:deleteScheduled

csms:secret:createTag

csms:tag:create

csms:secret:deleteStage

csms:secretStage:delete

云搜索服务(CSS)

云服务名

身份策略授权项

别名

云搜索服务(CSS)

css:logstash:deleteConfTemplate

-

css:cluster:closeLogSetting

css:log:enableOrDisableLogFunction

css:logstash:configFavorites

-

css:cluster:rollingReboot

css:cluster:rollingRestart

css:publicKibana:close

-

css:logstash:confUpdate

-

css:cluster:createAiOps

-

css:logstash:checkConnection

-

css:cluster:toPeriod

-

css:snapshot:setSnapshotContiguration

-

css:cluster:azmigrate

-

css:cluster:upgradeCluster

-

css:snapshot:restore

-

css:cluster:openLogSetting

css:log:enableOrDisableLogFunction

css:snapshot:disableSnapshotFuction

-

css:cluster:shrinkNodes

-

css:VPCEndpoint:enableOrDisable

-

css:snapshot:create

-

css:cluster:changeSubnet

-

css:VPCEndpoint:updateWhitelist

-

css:cluster:modifyRoute

-

css:VPCEndpoint:manageConnection

-

css:publicIPAddress:associates

-

css:IKThesaurus:load

-

css:logstash:confStop

-

css:snapshot:delete

-

css:logstash:confStart

-

css:cluster:updateElbListener

-

css:cluster:elbSwitch

-

css:cluster:createElbListener

-

css:publicKibana:open

-

css:cluster:scaleIn

-

css:configurations:modify

-

css:logstash:submitConf

-

css:snapshot:enableAtomaticSnapsot

-

css:cluster:modifyPassword

-

css:log:setBasicConfigurations

-

css:cluster:modifyName

-

css:cluster:addIndependenceNodes

-

css:tag:addOrDelete

-

css:cluster:scaleOut

-

css:cluster:modifySpecifications

-

css:cluster:modifySecurityGroup

-

css:logstash:confDelete

-

css:tag:edit

-

css:log:updateBackupPolicy

-

css:IKThesaurus:delete

-

css:cluster:expand

-

css:cluster:changeMode

-

css:publicIPAddress:modifyBandwidth

-

css:log:backup

-

css:cluster:deleteAiOps

-

css:cluster:restart

-

css:tag:delete

-

css:cluster:deleteCerts

-

css:snapshot:setSnapshotPolicy

-

css:cluster:retryAction

-

css:cluster:uploadCerts

-

css:cluster:create

-

css:publicIPAddress:setAccessControl

-

css:publicIPAddress:disassociates

-

css:cluster:delete

-

云审计服务(CTS)

云服务名

身份策略授权项

别名

云审计服务(CTS)

cts:notification:update

-

cts:tracker:create

-

cts:notification:create

-

cts:notification:delete

-

cts:tracker:update

-

cts:tracker:delete

-

数据管理服务(DAS)

云服务名

身份策略授权项

别名

数据管理服务(DAS)

das:connection:cancelShareConnections

-

das:instance:executeTestConnection

das:connections:login

das:clouddba:changeSqlSwitch

-

das:clouddba:createSqlLimitRules

-

das:clouddba:modifySqlLimitRules

-

das:clouddba:executeSql

-

das:clouddba:deleteProcess

-

das:clouddba:dailyReportsSubscribe

-

das:clouddba:modifyDbUser

-

das:clouddba:sqlDiagnosis

-

das:clouddba:stopKillTask

-

das:clouddba:deleteDbUser

-

das:clouddba:registerDbUser

-

das::putGlobalPrivacy

das:connections:list

das:clouddba:changeSqlLimitSwitchStatus

-

das:connection:createShareConnections

-

das:clouddba:createKillTask

-

das:instance:createConnection

das:connections:create

das:clouddba:changeKillTaskSwitch

-

das:clouddba:deleteSqlLimitRules

-

das:clouddba:createSpaceAnalysisTask

-

数智融合计算服务(DataArts Fabric)

云服务名

身份策略授权项

别名

数智融合计算服务(DataArts Fabric)

DataArtsFabric:workspace:createMessagePolicy

-

DataArtsFabric:model:drop

-

DataArtsFabric:workspace:createSqlSession

-

DataArtsFabric:workspace:dropCompute

-

DataArtsFabric:workspace:alter

-

DataArtsFabric:job:cancelJobInstance

-

DataArtsFabric::tagResource

DataArtsFabric:workspace:tagResource

DataArtsFabric:workspace:deleteMessagePolicy

-

DataArtsFabric:workspace:alterCap

-

DataArtsFabric:job:drop

-

DataArtsFabric::unTagResource

DataArtsFabric:workspace:unTagResource

DataArtsFabric:service:destroyInstance

-

DataArtsFabric:workspace:cancelStatement

-

DataArtsFabric:workspace:createCap

-

DataArtsFabric:workspace:deleteSqlSession

-

DataArtsFabric:workspace:createCompute

-

DataArtsFabric:endpoint:subscribe

-

DataArtsFabric:workspace:alterMetrics

-

DataArtsFabric:model:create

-

DataArtsFabric::dropVpcepClient

DataArtsFabric:system:dropVpcepClient

DataArtsFabric::createAccessClient

DataArtsFabric:system:createAccessClient

DataArtsFabric:endpoint:create

-

DataArtsFabric:workspace:drop

-

DataArtsFabric:workspace:dropCap

-

DataArtsFabric::alterAccessClient

DataArtsFabric:system:alterAccessClient

DataArtsFabric:endpoint:drop

-

DataArtsFabric:endpoint:alter

-

DataArtsFabric:workspace:executeStatement

-

DataArtsFabric:service:create

-

DataArtsFabric:workspace:create

-

DataArtsFabric:service:drop

-

DataArtsFabric:service:deploy

-

DataArtsFabric:workspace:dropNetwork

-

DataArtsFabric:workspace:createNetwork

-

DataArtsFabric:workspace:alterCompute

-

DataArtsFabric:job:dropJobInstance

-

DataArtsFabric:job:alter

-

DataArtsFabric:job:create

-

DataArtsFabric:job:run

-

数据治理中心(DataArts Studio)

云服务名

身份策略授权项

别名

数据治理中心(DataArts Studio)

DataArtsStudio:instance:deleteDriver

-

DataArtsStudio:instance:unTagResource

-

DataArtsStudio:instance:create

-

DataArtsStudio:workspace:update

-

DataArtsStudio:workspace:delete

-

DataArtsStudio:instance:uploadDriver

-

DataArtsStudio:instance:createAgency

-

DataArtsStudio:workspace:frozen

-

DataArtsStudio:instance:tagResource

-

DataArtsStudio:instance:createRole

-

DataArtsStudio:workspace:create

-

DataArtsStudio:instance:createIncrementalPackage

-

DataArtsStudio:instance:updateRole

-

DataArtsStudio:workspace:operate

-

DataArtsStudio:instance:operate

-

数据库安全服务(DBSS)

云服务名

身份策略授权项

别名

数据库安全服务(DBSS)

dbss:auditInstance:createOnDemand

-

dbss:auditInstance:instanceStart

dbss:auditInstance:start

dbss::unTagResource

dbss:auditInstance:delete

dbss:auditInstance:upgrade

dbss:auditInstance:createOnOrder

dbss:auditInstance:createOnPeriod

dbss:auditInstance:createOnOrder

dbss::tagResource

dbss:auditInstance:createOnOrder

dbss:auditInstance:reboot

-

dbss:auditInstance:stop

-

云专线(DC)

云服务名

身份策略授权项

别名

云专线(DC)

dcaas:vgw:update

-

dcaas:resources:batchTagUntag

-

dcaas:connectGateway:create

-

dcaas:directConnect:create

-

dcaas:vif:create

-

dcaas:vifPeer:update

-

dcaas:directConnect:delete

-

dcaas:vgw:create

-

dcaas:vif:delete

-

dcaas:gdgw:update

-

dcaas:vgw:delete

-

dcaas:gdgw:delete

-

dcaas:connectGateway:update

-

dcaas:connectGateway:delete

-

dcaas:directConnect:update

-

dcaas:gdgw:create

-

dcaas:gdgw:deletePeerlink

-

dcaas:directConnect:createOnestopDirectConnect

dcaas:directConnect:create

dcaas:vif:update

-

dcaas:directConnect:createOrder

dcaas:directConnect:create

分布式缓存服务(DCS)

云服务名

身份策略授权项

别名

分布式缓存服务(DCS)

dcs:instance:bindPublicIp

dcs:instance:modify

dcs:migrationTask:modify

dcs:migrationTask:rollbackIp

dcs:migrationTask:exchangeIp

dcs:instance:deleteDataBackupFile

-

dcs:template:delete

-

dcs:clientIpTrans:modify

dcs:clientiptrans:modify

dcs:aclaccount:modifyRole

dcs:aclaccount:modify

dcs:instance:deleteHotKeyScanTask

dcs:instance:analyze

dcs:instance:backupData

-

dcs:aclaccount:modifyRemark

dcs:aclaccount:modify

dcs:template:modify

-

dcs:aclaccount:resetPassword

dcs:aclaccount:modify

dcs:instance:unbindPublicIp

dcs:instance:modify

dcs:instance:analyzeBigKey

dcs:instance:analyze

dcs:whitelist:modify

-

dcs:ssl:modifyConfigure

dcs:ssl:modify

dcs:instance:updateHotKeyAutoScanConfig

dcs:instance:analyze

dcs:template:create

-

dcs:instance:deleteBigKeyScanTask

dcs:instance:analyze

dcs:instance:deleteOfflineKeyAnalysisTask

-

dcs:instance:createDiagnosisTask

dcs:instance:diagnosis

dcs:aclaccount:delete

-

dcs:instance:updateBigKeyAutoScanConfig

dcs:instance:analyze

dcs:instance:deleteDiagnosisTask

dcs:instance:diagnosis

dcs:instance:webcli

-

dcs:instance:modifyAuthInfo

-

dcs:instance:modifyBandwidth

dcs:instance:modify

dcs:tag:modify

-

dcs:instance:analyzeHotKey

dcs:instance:analyze

dcs:instance:modifyConfiguration

dcs:instance:modifyConfigureation

dcs:aclaccount:create

-

dcs:instance:create

-

dcs:instance:delete

-

dcs:instance:updateInstanceAttribute

dcs:instance:modify

dcs:migrationTask:create

-

dcs:instance:modifySlavePriority

dcs:instance:modify

dcs:aclaccount:modifyPassword

dcs:aclaccount:modify

dcs:instance:analyzeExpiredKey

dcs:instance:analyze

dcs:migrationTask:delete

-

dcs:instance:removeIpFromDomainName

dcs:instance:modify

dcs:instance:updateExpiredKeyScanConfig

dcs:instance:analyze

dcs:instance:downloadAnalyzeBigKeyResult

dcs:instance:analyze

dcs:instance:swap

-

dcs:instance:scale

-

dcs:instance:deleteBackgroundTask

-

dcs:instance:resetAuthInfo

-

dcs:instance:modifyStatus

-

dcs:instance:restoreData

-

dcs::createServiceAgency

dcs:instance:create

dcs:clients:kill

-

分布式数据库中间件(DDM)

云服务名

身份策略授权项

别名

分布式数据库中间件(DDM)

ddm:database:delete

-

ddm:instance:create

-

ddm:instance:updateSecurityGroup

ddm:instance:modify

ddm:instance:delete

-

ddm:instance:updateElbIp

ddm:instance:modify

ddm:instance:restore

ddm:backup:restore

ddm::deleteParamGroup

ddm:param:delete

ddm:database:create

-

ddm:instance:updateName

ddm:instance:modify

ddm:database:dumpMetadata

ddm:database:get

ddm:instance:createUser

ddm:user:create

ddm::updateTagForResource

ddm:tag:modify

ddm:instance:updateUser

ddm:user:modify

ddm:instance:updateIpGroup

ddm:instance:modify

ddm::untagResource

ddm:tag:modify

ddm::tagResource

ddm:tag:modify

ddm:instance:reboot

-

ddm:database:configBlacklist

ddm:blacklist:config

ddm:instance:updateRwStrategy

ddm:instance:modify

ddm:database:migrate

-

ddm:instance:reload

ddm:instance:modify

ddm::updateParamGroup

ddm:param:update

ddm::applyParamGroup

ddm:param:apply

ddm:instance:syncDataNode

ddm:rds:synchro

ddm:instance:killProcessList

-

ddm::copyParamGroup

ddm:param:create

ddm:instance:reduceNode

ddm:instance:extendNode

ddm:instance:deleteUser

ddm:user:delete

ddm:instance:modifyPublicAccess

-

ddm::createParamGroup

ddm:param:create

ddm:instance:resize

-

ddm:instance:enlargeNode

ddm:instance:extendNode

ddm:instance:modifySsl

-

ddm:instance:updateDataNodeReadWritePolicy

ddm:rds:modifyReadPolicy

ddm:database:migrateRollback

-

ddm:instance:deleteBackup

-

ddm:database:loadMetadata

ddm:database:create

ddm:instance:updatePort

ddm:instance:modify

文档数据库服务(DDS)

云服务名

身份策略授权项

别名

文档数据库服务(DDS)

dds:instance:updateSecurityGroup

dds:instance:modifySecurityGroup

dds:instance:setSlowLogPlaintextStatus

dds:instance:modifySlowLogPlaintextSwitch

dds:instance:updateRemark

dds:instance:modify

dds:backup:create

dds:instance:createManualBackup

dds:configuration:delete

dds:param:delete

dds:instance:updateOpsWindow

dds:instance:modify

dds:instance:migrateAz

dds:instance:migrate

dds:instance:unbindEIP

dds:instance:unbindPublicIp

dds:instance:bindEIP

dds:instance:bindPublicIp

dds:configuration:reset

dds:param:modify

dds:instance:createIp

-

dds:instance:delete

dds:instance:deleteInstance

dds:configuration:update

dds:param:modify

dds:instance:restore

dds:backup:refreshInstanceFromBackup

dds:instance:create

-

dds:instance:updateConfiguration

dds:instance:modifyParameter

dds:instance:setBackupPolicy

dds:instance:modifyBackupPolicy

dds:instance:restart

dds:instance:reboot

dds:instance:resetPassword

dds:instance:resetPasswd

dds:instance:applyConfiguration

dds:instance:modifyParameter

dds:instance:updateSpec

dds:instance:modifySpec

dds:instance:extendVolume

-

dds:instance:setAuditLogPolicy

dds:instance:modifyAuditLogSwitch

dds:configuration:create

dds:param:create

dds:instance:deleteAuditLog

-

dds:instance:updateName

dds:instance:modify

dds:instance:setRecyclePolicy

-

dds:instance:setSourceSubnet

-

dds:instance:switchover

-

dds:instance:upgradeDatabaseVersion

dds:instance:batchUpgradeDatabaseVersion

dds:configuration:copy

dds:param:create

dds:instance:addNode

dds:instance:extendNode

dds:instance:list

dds:instance:setSsl

dds:instance:modifySSL

dds:instance:updateIp

dds:instance:modifyVIP

dds:backup:delete

-

dds:instance:reduceNode

-

dds:instance:setTag

dds:instance:modify

dds:instance:deleteTag

dds:instance:addTag

dds:instance:list

dds:instance:updatePort

dds:instance:modifyPort

密码安全中心(专属加密服务 DHSM)

云服务名

身份策略授权项

别名

密码安全中心(专属加密服务 DHSM)

dhsm:cluster:update

-

dhsm:hsm:updateHsm

-

dhsm:hsm:createOrder

-

dhsm:hsm:create

-

dhsm:hsm:createTags

-

dhsm:hsm:deleteResourceTag

-

dhsm:hsm:createInstallOrder

-

dhsm:hsm:createResourceTag

-

dhsm:cluster:create

-

dhsm:cluster:delete

-

数据湖探索(DLI)

云服务名

身份策略授权项

别名

数据湖探索(DLI)

dli::tagResource

-

dli:datasourceauth:update

dli:datasourceauth:updateAuth

dli:elasticresourcepool:resourceManagement

-

dli:queue:create

dli:queue:createQueue

dli:template:update

-

dli:queue:cancelJob

-

dli:queue:checkConnection

-

dli:jobs:update

-

dli:resource:delete

dli:resource:deleteResource

dli:table:update

-

dli:queue:deleteProperty

dli:queue:updateQueue

dli:sqldefendrule:create

-

dli:queue:createProperty

dli:queue:updateQueue

dli:template:create

-

dli:jobs:delete

-

dli::checkSql

-

dli:edsconnection:delete

-

dli:edsconnection:createRoute

-

dli:jobs:create

-

dli:database:create

dli:database:createDatabase

dli:datasourceauth:create

-

dli:connection:delete

-

dli:edsconnection:update

-

dli:datasourceauth:delete

dli:datasourceauth:dropAuth

dli:queue:scale

dli:queue:scaleQueue

dli:sqldefendrule:delete

-

dli:edsconnection:create

-

dli:elasticresourcepool:create

-

dli:elasticresourcepool:delete

dli:elasticresourcepool:drop

dli::unTagResource

-

dli:queue:updateProperty

dli:queue:updateQueue

dli:sqldefendrule:update

-

dli:queue:createPlan

dli:queue:scaleQueue

dli:template:delete

-

dli:edsconnection:deleteRoute

-

dli:table:delete

dli:table:dropTable

dli:jobs:stopFlinkJob

dli:jobs:stop

dli:variable:create

-

dli::callbackEdgeJobAction

-

dli:queue:submitJob

-

dli:queue:update

dli:queue:updateQueue

dli:jobs:startFlinkJob

dli:jobs:start

dli:resource:update

dli:resource:updateResource

dli:edsconnection:bindQueue

-

dli:variable:delete

-

dli:variable:update

-

dli:database:update

-

dli:queue:delete

dli:queue:dropQueue

dli:resource:create

-

dli:database:createTable

-

dli::operateAuth

-

dli:jobs:import

-

dli:catalog:bind

-

dli::createEdgeChannel

-

dli:elasticresourcepool:update

-

dli:jobs:export

-

dli:database:delete

dli:database:dropDatabase

dli:connection:create

-

dli:queue:deletePlan

dli:queue:scaleQueue

dli:table:insertInto

dli:table:insertIntoTable

dli:edsconnection:unbindQueue

-

dli::createLakehouse

-

分布式消息服务(DMS)

云服务名

身份策略授权项

别名

分布式消息服务(DMS)

dms:instance:modifyStatus

-

dms:topic:autoCreate

dms:instance:modify

dms:instance:deleteDiagnosisReport

dms:instance:get

dms:message:export

dms:instance:modify

dms:exchange:bindingAsSource

dms:instance:modify

dms:instance:modifyPassword

dms:instance:resetAuthInfo

dms:user:delete

dms:instance:modify

dms:group:modify

dms:instance:modify

dms:instance:disableLog

dms:instance:modify

dms:vhost:delete

dms:instance:modify

dms:topic:setAccessPolicy

dms:instance:modify

dms:instance:modifyScheduledTask

dms:instance:modify

dms:instance:modifyConfig

dms:instance:modify

dms:instance:modifyAuthInfo

-

dms:topic:create

dms:instance:modify

dms:exchange:unbind

dms:instance:modify

dms:instance:setClientQuota

dms:instance:modify

dms:instance:createMetadataMigrationTask

dms:instance:modify

dms:instance:delete

-

dms:instance:connector

-

dms:instance:deleteMetadataMigrationTask

dms:instance:modify

dms:topic:delete

dms:instance:modify

dms:topic:updateReplica

dms:instance:modify

dms:instance:reassignTopic

dms:instance:modify

dms:instance:deleteScheduledTask

dms:instance:modify

dms:group:setAccessPolicy

dms:instance:modify

dms:topic:modifyQuota

dms:instance:modify

dms:user:modify

dms:instance:modify

dms:group:delete

dms:instance:modify

dms:group:create

dms:instance:modify

dms:topic:modify

dms:instance:modify

dms:instance:update

dms:instance:modify

dms:instance:updateConnectorTask

dms:instance:createConnectorSinkTask

dms:instance:create

-

dms:message:send

dms:instance:modify

dms:user:create

dms:instance:modify

dms:instance:deleteConnectorTask

dms:instance:deleteConnectorSinkTask

dms:topic:setQuota

dms:instance:modify

dms:group:resetConsumeOffset

dms:instance:modify

dms:instance:scale

-

dms:instance:createConnectorTask

dms:instance:createConnectorSinkTask

dms:plugin:modifyStatus

dms:instance:modify

dms:exchange:create

dms:instance:modify

dms:instance:deleteClientQuota

dms:instance:modify

dms:instance:modifySslSwitch

dms:instance:modify

dms:instance:modifyClientQuota

dms:instance:modify

dms:instance:closeManager

dms:instance:modify

dms:topic:createPartition

dms:instance:modify

dms:message:delete

dms:instance:modify

dms:instance:restore

dms:instance:modify

dms::updateRecyclePolicy

dms:instance:modify

dms:exchange:delete

dms:instance:modify

dms:connector:validate

dms:instance:connector

dms:vhost:create

dms:instance:modify

dms:instance:createDiagnosisTask

dms:instance:get

dms:instance:deleteBackgroundTask

-

dms:instance:enableLog

dms:instance:modify

云解析服务(DNS)

云服务名

身份策略授权项

别名

云解析服务(DNS)

dns:recordset:setStatus

-

dns:zone:disassociaterouter

-

dns:zone:update

-

dns:recordset:update

-

dns:zone:delete

-

dns:lineGroup:update

dns:linegroup:update

dns:zone:disableDnssecConfig

-

dns:zone:enableDnssecConfig

-

dns:zone:associaterouter

-

dns:recordset:batchDeletePublicZoneRecordsets

-

dns:ptr:create

dns:ptr:set

dns:recordset:createPrivateRecordSetImport

dns:privateRecordset:createImport

dns:zone:create

-

dns:tag:set

-

dns:endpoint:create

-

dns:recordset:delete

-

dns:resolverRule:create

-

dns:customLine:create

dns:customline:create

dns:customLine:delete

dns:customline:delete

dns:resolverRule:delete

-

dns:recordset:create

-

dns:endpoint:deleteIpaddress

-

dns:endpoint:update

-

dns:recordset:deletePrivateRecordSetImportTask

dns:privateRecordset:deleteImport

dns:zone:createRetrieval

-

dns:ptr:delete

dns:ptr:set

dns:resolverRule:associaterouter

-

dns:endpoint:delete

-

dns:resolverRule:disassociaterouter

-

dns:resolverRule:update

-

dns:lineGroup:create

dns:linegroup:create

dns:lineGroup:delete

dns:linegroup:delete

dns:zone:setProxyPattern

-

dns:endpoint:createIpaddress

-

dns:zone:setStatus

-

数据复制服务(DRS)

云服务名

身份策略授权项

别名

数据复制服务(DRS)

drs:migrationJob:modifyConflictPolicy

drs:synchronizationJob:update

drs:migrationJob:deleteJob

drs:migrationJob:delete

drs:backupMigrationJob:deleteJob

drs:backupMigrationJob:delete

drs:subscriptionJob:deleteJob

drs:subscriptionJob:delete

drs:migrationJob:batchUpdateJobInfo

drs:migrationJob:modify

drs:migrationJob:createJob

drs:migrationJob:create

drs:migrationJob:selectDatabaseObject

drs:migrationJobs:select

drs:subscriptionJob:updateConsumeTime

drs:subscriptionJob:UpdateConsumeTime

drs:subscriptionJob:editJobInfo

drs:subscriptionJob:edit

drs:configuration:modifyUserInfo

drs:migrationJob:modifyUserInfo

drs:migrationJob:createJobs

drs:migrationJobs:create

drs:migrationJob:batchSetSmn

drs:migrationJob:action

drs:migrationJob:modifyCommonSetting

drs:migrationJob:updateJobConfig

drs:configuration:deleteDataTransformationInfo

drs:dataTransformation:delete

drs:configuration:updateDataTransformationInfo

drs:dataTransformation:update

drs:subscriptionJob:createJob

drs:subscriptionJob:create

drs:migrationJob:updateDDLPolicy

-

drs:migrationJob:batchCreateJob

drs:migrationJobs:create

drs:migrationJob:modifySyncTypePolicy

drs:migrationJob:create

drs:migrationJob:modifyIncreStartPosition

drs:migrationJob:updateJobConfig

drs:migrationJob:batchSetSpeedLimit

-

drs:migrationJob:changeSrcOrTargetPwd

-

drs:migrationJob:updateTuningParams

drs:migrationJob:update

drs:backupMigrationJob:modifyOfflineTaskInfo

drs:backupMigrationJob:modify

drs:migrationJob:updateObjectInfo

drs:migrationJob:update

drs:migrationJob:updateJobInfo

drs:migrationJob:update

drs:configuration:setMigrationTransSpeed

drs:migrationJob:setMigrationTransSpeed

drs:backupMigrationJob:createJob

drs:backupMigrationJob:create

drs:migrationJob:modifyJob

drs:migrationJob:modify

drs:migrationJob:batchUpdateUserMigrate

drs:migrationJob:modifyUserInfo

drs:migrationJob:batchSetTransformation

drs:migrationJob:action

drs:migrationJob:setBatchSyncPolicy

drs:migrationJobs:add

drs:configuration:addDataTransformationInfo

drs:dataTransformation:add

drs:migrationJoAb:batchDeleteJobs

drs:migrationJobs:delete

drs:migrationJob:cloneJobs

drs:migrationJob:create

数据安全中心(DSC)

云服务名

身份策略授权项

别名

数据安全中心(DSC)

dsc:scanTask:create

-

dsc:asset:update

-

dsc:watermark:embed

-

dsc:maskTask:operate

-

dsc:asset:delete

dsc:bigdataAsset:delete

dsc:databaseAsset:delete

dsc:obsAsset:delete

dsc:common:operate

-

dsc:asset:create

dsc:obsAsset:create

dsc:databaseAsset:create

dsc:bigdataAsset:create

dsc:scanTask:delete

-

dsc:watermark:extract

-

云数据库 GaussDB(DWS)

云服务名

身份策略授权项

别名

云数据库 GaussDB(DWS)

dws:cluster:scaleOut

-

dws:cluster:updateQueueResourceForWLM

dws:workLoadManager:operate

dws:cluster:createPerfDashboardForDMS

dws:dmsQuery:terminate

dws:dmsUserBoard:create

dws::unTagResource

dws:openAPITag:delete

dws:cluster:updateDatabaseUserInfo

dws:dbAuthority:updateUser

dws:cluster:resumeOperationalTask

-

dws:cluster:changeSecurityGroup

-

dws:alarm:deleteSubscription

dws:alarmSub:delete

dws:cluster:copySnapshot

dws:snapshot:copy

dws:event:updateSubscription

dws:eventSub:update

dws:cluster:getDisasterRecoveryDetail

dws:disasterRecovery:get

dws:cluster:updateOperationalTask

-

dws:cluster:addQueueUserForWLM

dws:workLoadManager:operate

dws:alarm:createSubscription

dws:alarmSub:create

dws:cluster:addOperationalTask

-

dws:cluster:doUpgrade

dws:cluster:doUpdate

dws:migration:createBucket

-

dws:migration:deleteBucket

-

dws:alarm:updateSubscription

dws:alarmSub:update

dws:cluster:encrypt

-

dws:cluster:deleteDatabaseUser

-

dws:cluster:saveDescriptionInfo

-

dws:cluster:updateSchemaLimitForWLM

dws:workLoadManager:operate

dws:cluster:updateDataSource

dws:MRSConnection:update

dws::tagResource

dws:openAPITag:add

dws:cluster:executeDatabaseOmUserAction

-

dws:cluster:expandDisk

dws:periodExpandPrecheck:operate

dws:disk:expand

dws:cluster:pauseOperationalTask

-

dws:cluster:openAccessLts

dws:ltsAccess:operate

dws:cluster:deleteLogicalClusterPlan

-

dws:cluster:updateConfig

dws:cluster:setSecuritySettings

dws:cluster:addPerfItemForDMS

dws:dmsQuery:terminate

dws:dmsPerformanceMonitor:add

dws:cluster:unbindELB

dws:elb:unbind

dws:cluster:initLogicalClusterSwitch

dws:logicalCluster:operate

dws:cluster:addQueueForWLM

dws:workLoadManager:operate

dws:cluster:updateDatabaseAuthority

dws:dbAuthority:update

dws:cluster:resetPassword

dws:openAPICluster:resetPassword

dws:cluster:updateLogicalCluster

dws:logicalCluster:operate

dws:cluster:rotateKey

-

dws:cluster:deleteOperationalTask

-

dws:cluster:setMaintainceWindow

-

dws:cluster:syncIamUser

dws:dbAuthority:syncIamUser

dws:cluster:createLogicalCluster

dws:logicalCluster:operate

dws:cluster:deleteCN

dws:module:uninstall

dws:cluster:suspendRedistribution

dws:redistribution:suspend

dws:cluster:delete

dws:openAPICluster:delete

dws:cluster:createSnapshot

dws:openAPISnapshot:create

dws:snapshot:create

dws:cluster:addPlanForWLM

dws:workLoadManager:operate

dws:cluster:updatePlanStageForWLM

dws:workLoadManager:operate

dws:cluster:createSnapshotPolicy

dws:cluster:setAutomatedSnapshot

dws:cluster:addAccessWhitelist

-

dws:cluster:addPlanStageForWLM

dws:workLoadManager:operate

dws:cluster:deleteDisasterRecovery

dws:disasterRecovery:delete

dws:cluster:updateQueueRuleForWLM

dws:workLoadManager:operate

dws:cluster:create

dws:openAPICluster:create

dws:checkCluster:create

dws:cluster:deleteDataSource

dws:MRSConnection:delete

dws:cluster:createConnection

dws:dns:create

dws:cluster:createDisasterRecovery

dws:disasterRecovery:create

dws:cluster:bindEIP

dws:eip:operate

dws:cluster:operateDisasterRecovery

dws:disasterRecovery:otherOperate

dws:cluster:startPlanForWLM

dws:workLoadManager:operate

dws:cluster:switchPlanStageForWLM

dws:workLoadManager:operate

dws:cluster:startCluster

-

dws:cluster:deleteQueueForWLM

dws:workLoadManager:operate

dws:cluster:stopPlanForWLM

dws:workLoadManager:operate

dws:cluster:updateConnection

dws:dns:edit

dws:cluster:createDataSource

dws:MRSConnection:create

dws:cluster:deleteLogicalCluster

dws:logicalCluster:operate

dws:cluster:deleteConnection

dws:dns:release

dws:cluster:redistribution

dws:redistribution:operate

dws:cluster:deletePlanForWLM

dws:workLoadManager:operate

dws:cluster:stopCluster

-

dws:cluster:expandWithExistedNodes

dws:expandWithExistedNodes:update

dws:cluster:deleteWorkloadRule

-

dws:event:deleteSubscription

dws:eventSub:delete

dws:cluster:cancelReadonly

-

dws:cluster:addWorkloadRule

-

dws:cluster:switchLogicalCluster

dws:logicalCluster:operate

dws:cluster:deletePlanStageForWLM

dws:workLoadManager:operate

dws:cluster:setFunctionStatusForWLM

dws:workLoadManager:operate

dws:cluster:unbindEIP

dws:eip:operate

dws:event:createSubscription

dws:eventSub:create

dws:cluster:updateWorkloadRule

-

dws:cluster:bindELB

dws:elb:bind

dws:cluster:deleteSnapshot

dws:openAPISnapshot:delete

dws:snapshot:delete

dws:cluster:scaleIn

dws:cluster:shrink

dws:cluster:deleteNode

dws:clusterNodes:operate

dws:cluster:createInspection

-

dws:cluster:addCN

dws:module:install

dws:cluster:switchover

-

dws:cluster:closeAccessLts

dws:ltsAccess:operate

dws:cluster:identifySyncExecute

-

弹性云服务器(ECS)

云服务名

身份策略授权项

别名

弹性云服务器(ECS)

ecs:cloudServers:resize

-

ecs:cloudServers:updateServerBlockDevice

ecs:cloudServers:put

ecs:cloudServers:changeVpc

-

ecs:cloudServers:setAutoTerminateTime

-

ecs:cloudServers:createReservedInstance

-

ecs:cloudServers:deletePassword

-

ecs:cloudServers:detachVolume

-

ecs:cloudServers:batchCreateServerTags

ecs:cloudServers:batchSetServerTags

ecs:cloudServers:put

ecs:cloudServers:batchUpdateServersName

ecs:cloudServers:put

ecs:cloudServers:deleteServerGroupMember

ecs:cloudServers:delete

ecs:cloudServers:rebuild

-

ecs:cloudServers:changeChargeMode

-

ecs:cloudServers:attachSharedVolume

-

ecs:cloudServers:addServerGroupMember

ecs:cloudServers:create

ecs:cloudServers:addNics

-

ecs:recycleBin:deleteServer

-

ecs:cloudServers:changeOS

-

ecs:cloudServers:attach

-

ecs:cloudServers:start

-

ecs:cloudServers:setAutoRecovery

-

ecs:cloudServers:updateMetadata

-

ecs:cloudServers:createServers

ecs:cloudServers:create

ecs:cloudServers:updateServerInterface

ecs:cloudServerNics:update

ecs:cloudServers:deleteMetadata

-

ecs:cloudServers:reboot

-

ecs:cloudServerNics:delete

-

ecs:cloudServers:stop

-

ecs:cloudServers:resetServerPwd

-

ecs:cloudServers:updateServer

ecs:cloudServers:put

ecs:cloudServers:batchDeleteServerTags

ecs:cloudServers:put

ecs:cloudServers:batchSetServerTags

ecs:cloudServers:deleteServers

ecs:cloudServers:delete

ecs:cloudServers:createServerGroup

ecs:cloudServers:create

ecs:cloudServers:deleteServerGroup

ecs:cloudServers:delete

ecs:serverGroups:manage

-

ecs:recycleBin:updatePolicy

-

弹性公网IP(EIP)

云服务名

身份策略授权项

别名

弹性公网IP(EIP)

eip:publicIps:detachBandwidth

-

eip:nativeFloatingIps:create

-

eip:publicIps:enableNat64

-

eip:bandwidths:removePublicIps

-

eip:publicIps:delete

-

eip:bandwidths:insertPublicIps

-

eip:publicIps:update

-

eip:nativeFloatingIps:delete

-

eip:publicIps:disableNat64

-

eip:publicIps:create

-

eip:publicIps:disassociateInstance

-

eip:publicIps:attachBandwidth

-

eip:publicIps:associateInstance

-

弹性负载均衡(ELB)

云服务名

身份策略授权项

别名

弹性负载均衡(ELB)

elb:loadbalancers:updateDnsConfig

-

elb:ipgroups:delete

-

elb:l7rules:update

elb:l7rules:put

elb:security-policies:update

elb:security-policies:put

elb:loadbalancers:create

-

elb:members:update

elb:members:put

elb:ipgroups:update

elb:ipgroups:put

elb:healthmonitors:update

elb:healthmonitors:put

elb:healthmonitors:create

-

elb:healthmonitors:delete

-

elb:certificates:delete

-

elb:certificates:create

-

elb:pools:update

elb:pools:put

elb:security-policies:create

-

elb:logtanks:update

elb:logtanks:put

elb:l7policies:delete

-

elb:loadbalancers:update

elb:loadbalancers:put

elb:pools:create

-

elb:logtanks:create

-

elb:security-policies:delete

-

elb:l7policies:update

elb:l7policies:put

elb:whitelists:update

elb:whitelists:put

elb:whitelists:delete

-

elb:l7rules:create

-

elb:members:delete

-

elb:listeners:delete

-

elb:members:create

-

elb:whitelists:create

-

elb:certificates:update

elb:certificates:put

elb:listeners:update

elb:listeners:put

elb:l7policies:create

-

elb:l7rules:delete

-

elb:pools:delete

-

elb:ipgroups:create

-

elb:listeners:create

-

企业项目(EPS)

云服务名

身份策略授权项

别名

企业项目(EPS)

eps:enterpriseProjects:create

-

eps:enterpriseProjects:enable

-

eps:resources:add

-

eps:enterpriseProjects:update

-

eps:enterpriseProjects:disable

-

eps:enterpriseProjects:delete

-

企业路由器(ER)

云服务名

身份策略授权项

别名

企业路由器(ER)

er:attachments:accept

-

er:attachments:cleanInvalidAttachments

-

er:commonAttachments:update

er:attachments:update

er:connectAttachment:create

er:attachments:create

er:connectAttachment:delete

er:attachments:delete

er:flowLogs:create

-

er:flowLogs:delete

-

er:flowLogs:disable

-

er:flowLogs:enable

-

er:flowLogs:update

-

er:instances:changeCidr

er:instances:update

er:instances:create

-

er:instances:createVpcAttachment

er:attachments:create

er:instances:delete

-

er:instances:deleteVpcAttachment

er:attachments:delete

er:instances:enableVpcAttachmentIpv6

er:attachments:update

er:instances:update

-

er:instances:updateVpcAttachment

er:attachments:update

er:instances:updateVpcAttachmentRouteSynchronization

-

er:intraRegionPeeringAttachment:delete

-

er:routeTables:associate

er:associations:associate

er:routeTables:create

-

er:routeTables:delete

-

er:routeTables:disablePropagation

er:propagations:disable

er:routeTables:disassociate

er:associations:disassociate

er:routeTables:enablePropagation

er:propagations:enable

er:routeTables:update

-

er:routeTables:updateAssociationRoutePolicy

er:associations:update

er:routeTables:updatePropagationRoutePolicy

er:propagations:update

er:routes:publish

-

er:routes:unpublish

-

er:staticRoutes:batchCreate

er:routes:create

er:staticRoutes:batchDelete

er:routes:delete

er:staticRoutes:create

er:routes:create

er:staticRoutes:delete

er:routes:delete

er:staticRoutes:update

er:routes:update

er:tags:batchOperation

er:tags:create

er:tags:delete

-

er:tags:singleCreate

er:tags:create

er:trafficMarkPolicy:addTrafficMatchRules

-

er:trafficMarkPolicy:create

-

er:trafficMarkPolicy:delete

-

er:trafficMarkPolicy:removeTrafficMatchRules

-

er:trafficMarkPolicy:update

-

er:trafficQosPolicy:create

-

er:trafficQosPolicy:createTrafficQosQueues

-

er:trafficQosPolicy:delete

-

er:trafficQosPolicy:deleteTrafficQosQueues

-

er:trafficQosPolicy:update

-

er:trafficQosPolicy:updateTrafficQosQueue

-

云硬盘(EVS)

云服务名

身份策略授权项

别名

云硬盘(EVS)

evs:snapshots:create

-

evs:snapshots:rollback

-

evs:volumes:update

-

evs:nativeSnapshot:update

evs:snapshots:update

evs:volumes:revert

-

evs:volumes:delete

-

evs:snapshots:delete

-

evs:volumes:resize

evs:volumes:extend

evs:volumes:tagResource

evs:volumeTags:create

evs:nativeVolume:create

evs:volumes:create

evs:imageCache:delete

-

evs:volumes:retype

-

evs:nativeSnapshot:delete

evs:snapshots:delete

evs:volumes:unTagResource

evs:volumeTags:delete

evs:volumes:modifyQos

evs:volumes:extend

evs:imageCache:create

-

evs:recycle_policy:update

-

evs:snapshots:update

-

evs:volumes:changeChargeMode

-

evs:nativeVolume:delete

evs:volumes:delete

evs:nativeSnapshot:create

evs:snapshots:create

evs:volumes:create

-

函数工作流(FunctionGraph)

云服务名

身份策略授权项

别名

函数工作流(FunctionGraph)

functiongraph::updateAsyncStatusLog

functiongraph:function:create

functiongraph:workflow:update

functiongraph:function:create

functiongraph:function:createUrl

functiongraph:function:updateConfig

functiongraph:function:updateMaxInstanceConfig

functiongraph:function:updateConfig

functiongraph:dependency:createDependencyVersion

functiongraph:function:create

functiongraph::createVpcEndpoint

functiongraph:function:updateConfig

functiongraph:function:updateTracing

functiongraph:function:create

functiongraph:function:createVersion

-

functiongraph:function:updateUrl

functiongraph:function:updateConfig

functiongraph:function:createAlias

-

functiongraph:function:deleteFunction

functiongraph:function:delete

functiongraph:function:stopAsyncInvoke

functiongraph:function:invokeAsync

functiongraph:workflow:delete

functiongraph:function:delete

functiongraph:function:updateSnapshot

functiongraph:function:updateConfig

functiongraph:dependency:createDependency

functiongraph:function:create

functiongraph:function:deleteAlias

-

functiongraph::deleteTag

functiongraph:function:updateConfig

functiongraph:function:deleteEvent

functiongraph:function:invoke

functiongraph:function:updateReservedInstanceCount

functiongraph:function:updateConfig

functiongraph:function:createEvent

functiongraph:function:invoke

functiongraph::enableLtsLogs

functiongraph:function:create

functiongraph::deleteFunctionApp

functiongraph:function:delete

functiongraph:function:updateFunctionCode

functiongraph:function:updateCode

functiongraph:trigger:batchDelete

functiongraph:trigger:deleteSpecifiedFunctionTriggers

functiongraph:function:createFunction

functiongraph:function:create

functiongraph:function:import

functiongraph:function:create

functiongraph:dependency:deleteDependencyVersion

functiongraph:function:delete

functiongraph:dependency:deleteDependency

functiongraph:function:delete

functiongraph:function:updateAlias

-

functiongraph::createTag

functiongraph:function:updateConfig

functiongraph:function:updateEvent

functiongraph:function:invoke

functiongraph:function:updateFunctionConfig

functiongraph:function:updateConfig

functiongraph::deleteVpcEndpoint

functiongraph:function:delete

functiongraph:trigger:createTrigger

functiongraph:trigger:create

functiongraph:trigger:update

functiongraph:trigger:create

functiongraph:function:deleteUrl

functiongraph:function:updateConfig

functiongraph:trigger:delete

-

functiongraph::createFunctionApp

functiongraph:function:list

functiongraph:workflow:create

functiongraph:function:create

云数据库(GaussDB)

云服务名

身份策略授权项

别名

云数据库(GaussDB)

gaussdb:instance:createDatabaseUser

rds:instance:modify

gaussdb:instance:dropDatabase

rds:instance:modify

gaussdb:instance:createDatabase

rds:instance:modify

gaussdb:instance:deleteCgroup

-

gaussdb:instance:createDatabaseRole

-

gaussdb:instance:reduceVolume

-

gaussdb:instance:createDatabaseSchema

rds:instance:modify

gaussdb:instance:deleteTaskRecord

rds:instance:modify

gaussdb:instance:resizeFlavor

rds:instance:modify

gaussdb:backup:stopBackup

-

gaussdb:instance:resetPassword

rds:password:update

gaussdb:instance:changeDeploymentSolution

-

gaussdb:instance:createCgroup

-

gaussdb:param:createParam

rds:param:save

rds:param:create

gaussdb:instance:setRecyclePolicy

rds:instance:modifyBackupPolicy

gaussdb:backup:createBackup

rds:backup:create

gaussdb:user:addOrUpdate

-

gaussdb:instance:updateBackupPolicy

rds:instance:modifyBackupPolicy

gaussdb:instance:autoEnlargePolicy

-

gaussdb:instance:switchShard

rds:instance:modify

gaussdb:tag:create

rds:instance:modify

gaussdb:param:reset

rds:param:reset

gaussdb:instance:grantDatabasePrivilege

rds:instance:modify

gaussdb:quota:update

rds:instance:modify

gaussdb:instance:renameInstance

rds:instance:modify

gaussdb:databaseUser:drop

rds:databaseUser:drop

gaussdb:instance:restartInstance

rds:password:update

rds:instance:restart

gaussdb:param:deleteParam

rds:param:delete

gaussdb:instance:createInstance

rds:instance:create

gaussdb:instance:bindEIP

rds:instance:modifyPublicAccess

gaussdb:task:delete

rds:task:delete

gaussdb:param:copy

rds:param:create

gaussdb:instance:deleteInstance

rds:instance:delete

gaussdb:instance:createResourcePool

-

gaussdb:instance:createDataRecovery

-

gaussdb:param:applyParam

rds:param:apply

gaussdb:backup:deleteBackup

rds:backup:delete

gaussdb:instance:extend

rds:instance:extendSpace

rds:instance:expandCluster

gaussdb:instance:modifyCgroup

-

gaussdb:instance:modifyResourcePool

-

gaussdb:instance:deleteResourcePool

-

gaussdb:param:update

rds:instance:modify

rds:param:modify

云数据库GaussDB for NoSQL

云服务名

身份策略授权项

别名

云数据库GaussDB for NoSQL

gaussdbfornosql:configuration:delete

nosql:param:delete

gaussdbfornosql:instance:applyConfiguration

nosql:instance:modifyParameter

gaussdbfornosql:instance:setTags

nosql:instance:tag

gaussdbfornosql:instance:setRecyclePolicy

nosql:recyclePolicy:set

gaussdbfornosql:configuration:reset

nosql:param:modify

gaussdbfornosql:instance:updatePassword

nosql:instance:modifyPasswd

gaussdbfornosql:configuration:copy

nosql:param:create

gaussdbfornosql:instance:deleteDatabaseUser

nosql:instance:deleteDatabaseUser

gaussdbfornosql:serverless:deleteDynamoDBTable

-

gaussdbfornosql:configuration:create

nosql:param:create

gaussdbfornosql:instance:deleteNode

nosql:instance:reduceNode

nosql:instance:delete

gaussdbfornosql:serverless:createEndpoint

-

gaussdbfornosql:instance:redisPitrRestore

nosql:instance:redisPitrRestore

gaussdbfornosql:instance:setAutoExtendVolumePolicy

nosql:instance:modifyStorageSize

gaussdbfornosql:instance:stopBackup

nosql:backup:stop

gaussdbfornosql:instance:restart

nosql:instance:restart

gaussdbfornosql:instance:updateColdVolume

nosql:instance:modifyStorageSize

gaussdbfornosql:serverless:updateDynamoDBSubscriptionStatus

nosql:serverless:updateDynamoDBSubscriptionStatus

gaussdbfornosql:instance:updateSpec

nosql:instance:modifySpecification

gaussdbfornosql:instance:setBackupPolicy

nosql:backup:list

gaussdbfornosql:instance:switchSSL

nosql:instance:switchSSL

gaussdbfornosql:instance:updateSecurityGroup

nosql:instance:modifySecurityGroup

gaussdbfornosql:instance:create

nosql:instance:create

gaussdbfornosql:instance:setRedisPitrPolicy

nosql:instance:setRedisPitrPolicy

gaussdbfornosql:instance:updatePort

nosql:instance:modifyPort

gaussdbfornosql:instance:rename

nosql:instance:rename

gaussdbfornosql:instance:updateEIP

nosql:instance:bindPublicIp

nosql:instance:unbindPublicIp

gaussdbfornosql:instance:updateConfiguration

nosql:instance:modifyParameter

gaussdbfornosql:instance:addNode

nosql:instance:extendNode

gaussdbfornosql:instance:delete

nosql:instance:delete

gaussdbfornosql:instance:createBackup

nosql:backup:create

gaussdbfornosql:instance:restore

-

gaussdbfornosql:instance:updateVolume

nosql:instance:modifyStorageSize

gaussdbfornosql:instance:createDatabaseUser

nosql:instance:createDatabaseUser

gaussdbfornosql:instance:deleteBackup

nosql:backup:delete

gaussdbfornosql:serverless:createDynamoDBTable

nosql:serverless:createDynamoDBTable

gaussdbfornosql:instance:setLogConfigs

nosql:instances:saveLtsStreams

gaussdbfornosql:configuration:update

nosql:param:modify

gaussdbfornosql:serverless:deleteEndpoint

-

gaussdbfornosql:instance:createColdVolume

nosql:instance:modifyStorageSize

企业主机安全(HSS)

云服务名

身份策略授权项

别名

企业主机安全(HSS)

hss:event:addSystemUserWhiteList

hss:event:set

hss:securitycheck:updateSecurityCheckConfig

hss:securitycheck:set

hss:setting:modifyLoginCommonIp

hss:commonIPs:set

hss:event:deleteIsolatedFile

hss:event:set

hss:setting:setMalwareReminders

hss:automaticKillMp:set

hss:setting:changeMalwareCollectStatus

hss:automaticKillMp:set

hss:decoyport:deletePolicy

-

hss:wtp:setRemoteWtpBackupInfo

hss:wtpBackup:set

hss:host:uninstallAgents

hss:agent:uninstall

hss:ars:deleteAppWhitelistPolicy

hss:ars:set

hss:setting:changeAutoKillVirusStatus

hss:automaticKillMp:set

hss:antivirus:changeAntivirusPayPerScanStatus

hss:ars:set

hss:container:deleteSecurityGroupPolicy

hss:container-network:set

hss:asset:runHostAssetManualCollect

hss:assets:set

hss:policy:associatePolicyGroup

hss:policy:set

hss:container:createManualImageScanTask

hss:containers:set

hss:rasp:deleteRaspPolicy

hss:rasp:set

hss:ars:switchAppWhitelistPolicyHost

hss:ars:set

hss:antiransomware:associateProtectionPolicy

hss:antiransomware:set

hss:host:associateHostAssetValue

hss:hosts:set

hss:antivirus:switchAntivirusTask

hss:ars:set

hss:setting:modifyLoginCommonLocation

hss:commonLocations:set

hss:event:removeAlarmWhiteList

hss:event:set

hss:vulnerability:addVulWhiteList

hss:vuls:set

hss:policy:addPolicyGroup

hss:policy:set

hss:wtp:setWtpProtectionStatusInfo

hss:wtpProtect:switch

hss:ars:addAppWhitelistPolicyHost

hss:ars:set

hss:vulnerability:changeVulScanPolicy

hss:vuls:set

hss:container:syncMultiCloudClusterStatus

hss:containers:set

hss:quota:cancelHostsQuota

hss:quotas:set

hss:vulnerability:exportVuls

hss:vuls:set

hss:image:batchScanSwrImage

hss:images:set

hss:decoyport:switchHostPolicy

-

hss:safetyReport:deleteSecurityReport

hss:safetyReport:set

hss:securitycheck:startManualSecurityCheck

hss:securitycheck:set

hss:antiransomware:associateBackupPolicy

hss:antiransomware:set

hss:vulnerability:recordUserViewVulTask

hss:vuls:set

hss:safetyReport:uploadReportLogo

hss:report:set

hss:vulnerability:operateEmergency

hss:vuls:set

hss:image:changeExtendedWeakPassword

hss:images:set

hss:image:runSwrImageScan

hss:images:set

hss:images:changeSensitiveInfo

hss:images:set

hss:images:changeFilePathWhiteDetail

hss:images:set

hss:host:switchHostsProtectStatus

hss:hosts:switchVersion

hss:image:createCicdConfigurationCommand

hss:images:set

hss:setting:setAlarmConfig

hss:alertConfig:get

hss:host:batchInstallAgent

hss:hosts:set

hss:overview:changeMonthlyOperaReportTipStatus

hss:overview:set

hss:container:updatePolicy

hss:container-network:set

hss:host:associateHostsGroup

hss:hostGroup:set

hss:quota:dealOrder

hss:quotas:set

hss:image:batchExportLocalVulTask

hss:images:list

hss:host:switchFirewallStatus

hss:hosts:switchVersion

hss:container:isolateK8sContainer

hss:containers:set

hss:container:updateSecurityGroupPolicy

hss:container-network:set

hss:host:manualCheckVul

hss:hosts:manualDetect

hss:safetyReport:addSecurityReport

hss:safetyReport:set

hss:antiransomware:restoreRansomwareDuplicationInfo

hss:antiransomware:set

hss:container:batchDeleteAgentDaemonset

hss:containers:set

hss:container:switchContainerProtectStatus

hss:containers:set

hss:container:deletePolicy

hss:clusterProtect:delete

hss:container:modifyCicdConfiguration

hss:containers:set

hss:decoyport:switchPolicy

-

hss:wtp:deleteWtpBackupHostInfo

hss:wtpBackup:set

hss:image:deleteCicdConfigurations

hss:images:set

hss:container:createSecurityGroupPolicy

hss:container-network:set

hss:ars:deleteAppWhitelistPolicyHost

hss:ars:set

hss:wtp:switchWtpHostProtectDirInfo

hss:wtpDirectorys:set

hss:image:updateRegistry

hss:images:set

hss:host:deleteHostsGroup

hss:hostGroup:set

hss:image:batchExportBaselineTask

hss:images:set

hss:wtp:updateWtpBackupHostInfo

hss:wtpBackup:set

hss:event:changeEvent

hss:event:set

hss:rasp:switchRasp

hss:rasp:set

hss:image:batchExportSWRVulTask

hss:images:list

hss:host:addHostsGroup

hss:hostGroup:set

hss:antiransomware:startRansomwareProtection

hss:antiransomware:set

hss:event:addLoginWhiteList

hss:event:set

hss:antiransomware:addRansomwareProtectionPolicy

hss:antiransomware:set

hss:container:modifyImageScanPolicy

hss:containers:set

hss:ars:changeAppWhitelistPolicy

hss:ars:set

hss:image:batchDeleteRegistry

hss:images:set

hss:image:addCicdConfiguration

hss:images:set

hss:ars:createAppWhitelistPolicy

hss:ars:set

hss:antiransomware:deleteRansomwareDuplicationInfo

hss:antiransomware:set

hss:host:changeHostIgnoreStatus

hss:hosts:set

hss:rasp:updateRaspPolicy

hss:rasp:set

hss:policy:changePolicyGroup

hss:policy:set

hss:event:batchChangeEvent

hss:event:set

hss:policy:deletePolicyGroup

hss:policy:set

hss:antiransomware:updateRansomwareBackupPolicyInfo

hss:antiransomware:set

hss:event:exportEvent

hss:event:set

hss:container:upgradeAgentDaemonset

hss:containers:set

hss:image:runImageSynchronize

hss:images:set

hss:vulnerability:changeVulStatus

hss:vuls:set

hss:vulnerability:deleteVulWhiteList

hss:vuls:set

hss:baseline:deleteSecurityCheckPolicyGroup

hss:baselines:set

hss:baseline:updateSecurityCheckPolicyGroup

hss:baselines:set

hss:baseline:addSecurityCheckPolicyGroup

hss:baselines:set

hss:setting:uploadTemplate

hss:installAgent:set

hss:host:upgradeAgents

hss:hosts:set

hss:image:createImageSynchronizeTask

hss:images:set

hss:vulnerability:rescanVulScanTask

hss:vuls:set

hss:ars:switchAppWhitelistPolicyLearnStatus

hss:ars:set

hss:safetyReport:changeSecurityReport

hss:safetyReport:set

hss:container:createPolicy

hss:container-network:set

hss:host:setManualDetect

hss:hosts:manualDetect

hss:antivirus:createAntivirusTask

hss:ars:set

hss:policy:changePolicyDetail

hss:policy:set

hss:setting:changeAutoOpenQuotaStatus

hss:hosts:list

hss:image:batchScanLocalImage

hss:images:set

hss:safetyReport:switchSecurityReportStatus

hss:safetyReport:set

hss:antivirus:createAntiVirusPaidTask

hss:ars:set

hss:quota:upgradeOrder

hss:quotas:set

hss:setting:installAgent

hss:installAgent:set

hss:wtp:setWtpProtectSwitch

hss:wtpProtect:switch

hss:image:addRegistry

hss:images:set

hss:vulnerability:RestoreVulHostBackup

hss:vuls:set

hss:ars:changeAppWhitelistPolicyProcessStatus

hss:ars:set

hss:container:addCceIntegrationProtection

hss:containers:set

hss:event:changeIsolatedFile

hss:event:set

hss:antivirus:exportAntivirusResult

hss:ars:set

hss:decoyport:createPolicy

-

hss:event:changeBlockedIp

hss:accountCracks:unblock

hss:container:createAgentDaemonset

hss:containers:set

hss:event:updateSystemUserWhiteList

hss:event:set

hss:host:changeHostsGroup

hss:hostGroup:set

hss:securitycheck:stopManualSecurityCheck

hss:securitycheck:set

hss:antiransomware:deleteRansomwareProtectionPolicy

hss:antiransomware:set

hss:container:removeMultiCloudClusters

hss:containers:set

hss:antivirus:deleteAntivirusPolicy

hss:ars:set

hss:ars:addAppWhitelistPolicyProcess

hss:ars:set

hss:setting:updateAlarmConfig

hss:alertConfig:set

hss:decoyport:modifyPolicy

-

hss:setting:modifyLoginWhiteIp

hss:whiteIps:set

hss:quota:deleteResourceInstanceTag

hss:quotas:set

hss:baseline:changeCheckRuleState

hss:configDetects:operate

hss:vulnerability:changeVulWhiteList

hss:vuls:set

hss:quota:batchCreateTags

hss:quotas:set

hss:event:removeLoginWhiteList

hss:event:set

hss:container:saveClusters

hss:containers:set

hss:image:deleteRegistry

hss:images:set

hss:quota:batchDeleteTags

hss:quotas:set

hss:decoyport:switchAutoBind

-

hss:antiransomware:updateRansomwareProtectionPolicy

hss:antiransomware:set

hss:wtp:updateWtpDirectoryInfo

hss:wtpDirectorys:set

hss:antiransomware:batchStartProtection

hss:antiransomware:set

hss:container:deleteAgentDaemonset

hss:containers:set

hss:antivirus:changeAntivirusPolicy

hss:ars:set

hss:decoyport:deleteHostPolicy

-

hss:image:showImageSecurityReportStatistic

hss:images:set

hss:safetyReport:sendSecurityReport

hss:safetyReport:set

hss:antivirus:createAntivirusPolicy

hss:ars:set

hss:setting:changeSwitchesStatus

hss:alertConfig:set

hss:rasp:addRaspPolicy

hss:rasp:set

hss:antiransomware:stopRansomwareProtection

hss:antiransomware:set

hss:event:removeSystemUserWhiteList

hss:event:set

hss:setting:changeAgentAutoUpgradeStatus

hss:hosts:list

hss:container:updateMultiCloudClusters

hss:containers:set

hss:container:changeProtectStatus

hss:clusterProtect:list

hss:setting:setTwoFactorLoginConfig

hss:twofactorAuth:set

统一身份认证(IAM)

云服务名

身份策略授权项

别名

统一身份认证(IAM)

iam:groups:revokeRole

iam:permissions:revokeRoleFromGroup

iam:agencies:deleteServiceLinkedAgencyV5

-

iam:securityPolicies:updateProtectPolicy

iam:securitypolicies:updateProtectPolicy

iam:identityProviders:createProtocol

-

iam:users:deleteUserV5

iam:users:deleteUser

iam:agencies:updateV5

-

iam:groups:updateGroupV5

iam:groups:updateGroup

iam::tagForResourceV5

-

iam:credentials:updateCredentialV5

iam:credentials:updateCredential

iam:groups:update

iam:groups:updateGroup

iam::createAccessKey

iam:credentials:createCredential

iam:identityProviders:create

iam:identityProviders:createIdentityProvider

iam:users:updateLoginProfileV5

-

iam:identityProviders:createOIDCConfig

iam:identityProviders:createOpenIDConnectConfig

iam:securityPolicies:updateConsoleAclPolicy

iam:securitypolicies:updateConsoleAclPolicy

iam:policies:deleteVersionV5

-

iam:permissions:removeUserFromGroupV5

iam:permissions:removeUserFromGroup

iam:users:create

iam:users:createUser

iam:permissions:addUserToGroupV5

iam:permissions:addUserToGroup

iam:agencies:grantRoleOnEnterpriseProject

iam:permissions:grantRoleToAgencyOnEnterpriseProject

iam:users:updateUserV5

iam:users:updateUser

iam:agencies:update

iam:agencies:updateAgency

iam:mfa:enableV5

iam:mfa:enable

iam:users:update

iam:users:updateUser

iam:securitypolicies:updatePasswordPolicyV5

iam:securitypolicies:updatePasswordPolicy

iam:mfa:deleteVirtualMFADeviceV5

iam:mfa:deleteVirtualMFADevice

iam:groups:create

iam:groups:createGroup

iam:groups:grantRoleOnDomain

iam:permissions:grantRoleToGroupOnDomain

iam:identityProviders:deleteMapping

-

iam:users:createUserV5

iam:users:createUser

iam:agencies:revokeRole

iam:permissions:revokeRoleFromAgency

iam:roles:update

iam:roles:updateRole

iam:users:revokeRoleOnEnterpriseProject

iam:permissions:revokeRoleFromUserOnEnterpriseProject

iam:roles:delete

iam:roles:deleteRole

iam:agencies:createServiceLinkedAgencyV5

-

iam:agencies:updateTrustPolicyV5

iam:agencies:updateTrustPolicy

iam:mfa:createVirtualMFADeviceV5

iam:mfa:createVirtualMFADevice

iam:identityProviders:updateOIDCConfig

iam:identityProviders:updateOpenIDConnectConfig

iam:agencies:delete

iam:agencies:deleteAgency

iam:policies:setDefaultVersionV5

-

iam:identityProviders:update

iam:identityProviders:updateIdentityProvider

iam:identityProviders:updateMapping

-

iam:identityProviders:updateProtocol

-

iam:users:grantRoleOnEnterpriseProject

iam:permissions:grantRoleToUserOnEnterpriseProject

iam:projects:create

iam:projects:createProject

iam:agencies:deleteV5

-

iam:groups:addUser

iam:permissions:addUserToGroup

iam:agencies:detachPolicyV5

-

iam:users:changePasswordV5

-

iam::setAsymmetricSignatureSwitchV5

-

iam:users:delete

iam:users:deleteUser

iam:groups:grantRoleOnProject

iam:permissions:grantRoleToGroupOnProject

iam:groups:createGroupV5

iam:groups:createGroup

iam:policies:deleteV5

iam:policies:delete

iam:credentials:createCredentialV5

iam:credentials:createCredential

iam:users:attachPolicyV5

-

iam:agencies:grantRoleOnProject

iam:permissions:grantRoleToAgencyOnProject

iam:users:deleteVirtualMFADevice

iam:mfa:deleteVirtualMFADevice

iam:roles:create

iam:roles:createRole

iam:groups:deleteGroupV5

iam:groups:deleteGroup

iam:users:deleteLoginProfileV5

-

iam:mfa:disableV5

iam:mfa:disable

iam:policies:createV5

iam:policies:create

iam:groups:attachPolicyV5

-

iam:projects:update

iam:projects:updateProject

iam:agencies:grantRoleOnDomain

iam:permissions:grantRoleToAgencyOnDomain

iam:users:bindVirtualMFADevice

iam:mfa:bindMFADevice

iam:identityProviders:createSAMLMetadata

iam:identityProviders:createIDPMetadata

iam:users:unbindVirtualMFADevice

iam:mfa:unbindMFADevice

iam:groups:grantRole

iam:permissions:grantRoleToGroup

iam:groups:removeUser

iam:permissions:removeUserFromGroup

iam:agencies:attachPolicyV5

-

iam:users:createLoginProfileV5

-

iam:groups:revokeRoleOnEnterpriseProject

iam:permissions:revokeRoleFromGroupOnEnterpriseProject

iam:groups:detachPolicyV5

-

iam:securityPolicies:updatePrivacyTransferPolicy

iam:securitypolicies:updatePrivacyTransferPolicy

iam:users:detachPolicyV5

-

iam:groups:revokeRoleOnProject

iam:permissions:revokeRoleFromGroupOnProject

iam:groups:grantRoleOnEnterpriseProject

iam:permissions:grantRoleToGroupOnEnterpriseProject

iam:agencies:revokeRoleOnDomain

iam:permissions:revokeRoleFromAgencyOnDomain

iam:securityPolicies:updatePasswordPolicy

iam:securitypolicies:updatePasswordPolicy

iam::updateAccessKey

iam:credentials:updateCredential

iam:securitypolicies:updateLoginPolicyV5

iam:securitypolicies:updateLoginPolicy

iam:groups:delete

iam:groups:deleteGroup

iam:securityPolicies:updateLoginPolicy

iam:securitypolicies:updateLoginPolicy

iam:identityProviders:deleteProtocol

-

iam:users:createVirtualMFADevice

iam:mfa:createVirtualMFADevice

iam:securityPolicies:updateApiAclPolicy

iam:securitypolicies:updateApiAclPolicy

iam::untagForResourceV5

-

iam:agencies:revokeRoleOnProject

iam:permissions:revokeRoleFromAgencyOnProject

iam:groups:revokeRoleOnDomain

iam:permissions:revokeRoleFromGroupOnDomain

iam:agencies:revokeRoleOnEnterpriseProject

iam:permissions:revokeRoleFromAgencyOnEnterpriseProject

iam:agencies:grantRole

iam:permissions:grantRoleToAgency

iam:identityProviders:createMapping

-

iam:policies:createVersionV5

-

iam:identityProviders:delete

iam:identityProviders:deleteIdentityProvider

iam:credentials:deleteCredentialV5

iam:credentials:deleteCredential

iam:users:updateLoginProtectSetting

iam:users:setUserLoginProtect

iam::deleteAccessKey

iam:credentials:deleteCredential

iam:agencies:create

iam:agencies:createAgency

iam:agencies:createV5

-

IAM 身份中心

云服务名

身份策略授权项

别名

IAM 身份中心

IdentityCenter:user:update

-

IdentityCenter:applicationAssignment:create

-

IdentityCenter:user:updateMfaDevice

-

IdentityCenter:group:update

-

IdentityCenter:externalIdp:disable

-

IdentityCenter:instance:startIdentityCenter

-

IdentityCenter:user:delete

-

IdentityCenter:permissionSet:delete

-

IdentityCenter:accountAssignment:create

-

IdentityCenter:mfaDevices:updateManagementSettings

-

IdentityCenter:permissionSet:detachManagedPolicy

-

IdentityCenter:user:updatePassword

-

IdentityCenter:application:updateApplicationInstanceDisplayData

-

IdentityCenter:externalIdp:update

-

IdentityCenter:permissionSet:provision

-

IdentityCenter:accountAssignment:delete

-

IdentityCenter:permissionSet:update

-

IdentityCenter:application:deleteApplicationInstance

-

IdentityCenter:permissionSet:create

-

IdentityCenter:instance:createAlias

-

IdentityCenter:accountAssignment:disassociationProfile

-

IdentityCenter:externalIdp:deleteBearerToken

-

IdentityCenter:permissionSet:attachCustomRole

-

IdentityCenter:instance:deleteIdentityCenter

-

IdentityCenter:resources:untag

-

IdentityCenter:application:updateApplicationInstanceActiveCertificate

-

IdentityCenter:application:createApplicationInstanceCertificate

-

IdentityCenter:application:updateApplicationInstanceResponseSchemaConfiguration

-

IdentityCenter:application:updateApplicationInstanceResponseConfiguration

-

IdentityCenter:application:updateApplicationInstanceStatus

-

IdentityCenter:group:delete

-

IdentityCenter:externalIdp:deleteProvisioningTenant

-

IdentityCenter:application:deleteProfile

-

IdentityCenter:application:updateApplicationInstanceSecurityConfiguration

-

IdentityCenter:resources:tag

-

IdentityCenter:permissionSet:detachCustomPolicy

-

IdentityCenter:user:create

-

IdentityCenter:permissionSet:attachManagedPolicy

-

IdentityCenter:group:create

-

IdentityCenter:application:importApplicationInstanceServiceProviderMetadata

-

IdentityCenter:externalIdp:enable

-

IdentityCenter:application:updateApplicationInstanceServiceProviderConfiguration

-

IdentityCenter:application:deleteApplicationInstanceCertificate

-

IdentityCenter:ssoConfiguration:update

-

IdentityCenter:externalIdp:importCertificate

-

IdentityCenter:application:createApplicationInstance

-

IdentityCenter:externalIdp:delete

-

IdentityCenter:externalIdp:createBearerToken

-

IdentityCenter:user:verifyEmail

-

IdentityCenter:serviceProvider:activeCertificate

-

IdentityCenter:user:disableUser

-

IdentityCenter:instance:updateInstanceAccessControlAttributeConfiguration

-

IdentityCenter:instance:registerRegion

-

IdentityCenter:serviceProvider:deleteCertificate

-

IdentityCenter:serviceProvider:createCertificate

-

IdentityCenter:permissionSet:detachCustomRole

-

IdentityCenter:externalIdp:createProvisioningTenant

-

IdentityCenter:user:registerVirtualMfaDevice

-

IdentityCenter:permissionSet:attachCustomPolicy

-

IdentityCenter:groupMembership:create

-

IdentityCenter:user:deleteUserMfaDevice

-

IdentityCenter:instance:deleteInstanceAccessControlAttributeConfiguration

-

IdentityCenter:instance:createInstanceAccessControlAttributeConfiguration

-

IdentityCenter:applicationAssignment:delete

-

IdentityCenter:user:enableUser

-

IdentityCenter:externalIdp:deleteCertificate

-

IdentityCenter:groupMembership:delete

-

IdentityCenter:externalIdp:create

-

智能边缘小站(IES)

云服务名

身份策略授权项

别名

智能边缘小站(IES)

ies:edgeSite:create

-

ies:edgeSite:purchaseRacks

ies:rack:purchase

ies:deliveryOrder:createDeliveryOrder

-

镜像服务(IMS)

云服务名

身份策略授权项

别名

镜像服务(IMS)

ims:dataImages:create

-

ims:images:copyInRegion

ims:images:copy

ims:images:create

-

ims:images:addMember

ims:images:share

ims:images:import

-

ims:images:deleteTags

ims:images:update

ims:images:updateMemberStatus

ims:images:share

ims:images:copyCrossRegion

ims:images:copy

ims:images:deleteImage

ims:images:delete

ims:serverImages:create

-

ims:images:updateImage

ims:images:update

ims:images:setTags

ims:images:update

ims:wholeImages:create

-

ims:images:deleteMember

ims:images:share

ims:images:upload

-

设备接入(IoTDA)

云服务名

身份策略授权项

别名

设备接入(IoTDA)

iotda:protocolconfigs:update

-

iotda:batchtaskfiles:create

-

iotda:provisioningtemplate:delete

-

iotda:products:create

-

iotda:provisioningtemplate:create

-

iotda:otapackages:create

-

iotda:otamodules:create

-

iotda:app:create

-

iotda:devicepolicy:delete

-

iotda:otamodules:update

-

iotda:productconfig:create

-

iotda:asynccommands:send

-

iotda:scripts:delete

-

iotda:certificates:debug

-

iotda:devicecertificates:update

-

iotda:devicedebugmessage:send

iotda:bundlemessage:send

iotda:certificates:check

-

iotda:routingbacklogpolicy:delete

-

iotda:devicepolicy:create

-

iotda:servercertificate:create

-

iotda:protocolconfigs:create

-

iotda:devices:register

-

iotda:topics:delete

-

iotda:certificates:upload

-

iotda:devicepolicy:bind

-

iotda:deviceauthenticationtemplate:delete

-

iotda:exporttasks:create

-

iotda:device-proxies:create

-

iotda:provisioningtemplate:update

-

iotda:apps:delete

-

iotda:deviceauthenticationtemplate:debug

-

iotda:devicecertificates:delete

-

iotda:productfunctions:create

-

iotda:tunnel:create

-

iotda:instance:create

-

iotda:devices:delete

-

iotda:bundle:create

-

iotda:appcacertificate:delete

iotda:cacertificates:delete

iotda:shadow:delete

-

iotda:tags:bind

-

iotda:deviceauthorizers:delete

-

iotda:appcacertificate:create

iotda:cacertificates:create

iotda:group:addDevice

-

iotda:batchtasks:create

-

iotda:protocolconfigs:delete

-

iotda:products:modify

-

iotda:devices:resetFingerprint

-

iotda:scripts:create

-

iotda:instance:updateProtocolAdaptor

-

iotda:routingflowcontrolpolicy:create

-

iotda:bundlemapping:save

-

iotda:deviceauthenticationtemplate:update

-

iotda:deviceauthorizers:create

-

iotda:harmonysoftbus:reset

-

iotda:amqpqueue:disconnect

iotda:amqpqueue:delete

iotda:harmonysoftbus:delete

-

iotda:routingrules:verifySql

-

iotda:deviceauthorizers:update

-

iotda:routingrules:create

-

iotda:devicepolicy:unbind

-

iotda:scripts:run

-

iotda:topics:create

-

iotda:bundlemessage:save

-

iotda:routingrules:delete

-

iotda:shadow:config

-

iotda:deviceauthenticationtemplate:create

-

iotda:certificates:update

-

iotda:topics:modify

-

iotda:batchtaskfiles:delete

-

iotda:rules:modify

-

iotda:otamodules:delete

-

iotda:productfunctions:delete

-

iotda:routingactions:verifyConnectivity

iotda:routingactions:modify

iotda:routingactions:create

-

iotda:bundle:update

-

iotda:protocoladaptorimage:create

-

iotda:onlinebundle:deploy

-

iotda:certificates:delete

-

iotda:batchtasks:delete

-

iotda:batchtasks:stop

-

iotda:instance:deleteProtocolAdaptor

-

iotda:messagetrace:update

-

iotda:protocoladaptorimage:delete

-

iotda:tunnel:delete

-

iotda:amqpqueue:delete

-

iotda:routingactions:clearMessage

-

iotda:protocoladaptorimage:update

-

iotda:routingactions:delete

-

iotda:offlinebundle:deploy

-

iotda:messages:send

-

iotda:device-proxies:delete

-

iotda:accesscode:create

-

iotda:instance:createProtocolAdaptor

-

iotda:amqpqueue:create

-

iotda:batchtasks:retry

iotda:batchtasks:create

iotda:rules:delete

-

iotda:device-proxies:modify

-

iotda:messagetracedata:delete

-

iotda:messages:delete

-

iotda:rules:create

-

iotda:products:delete

-

iotda:group:modify

-

iotda:bridge:create

-

iotda:routingflowcontrolpolicy:update

-

iotda:bridge:reset

-

iotda:apps:update

-

iotda:servercertificate:update

-

iotda:simulator:register

-

iotda:commands:send

-

iotda:group:delete

-

iotda:group:create

-

iotda:devices:unfreeze

-

iotda:devicepolicy:update

-

iotda:rules:modifyStatus

-

iotda:routingbacklogpolicy:update

-

iotda:servercertificate:delete

-

iotda:routingbacklogpolicy:create

-

iotda:devices:resetSecret

-

iotda:bridge:delete

-

iotda:routingflowcontrolpolicy:delete

-

iotda:devices:modify

-

iotda:routingrules:modify

-

iotda:devices:freeze

-

iotda:tags:unbind

-

iotda:routingactions:modify

-

密码安全中心(密钥管理服务 KMS)

云服务名

身份策略授权项

别名

密码安全中心(密钥管理服务 KMS)

kms:cmk:disable

-

kms:cmk:createDataKey

kms:dek:create

kms:cmk:updateRotation

-

kms:cmk:decryptDataKey

kms:dek:crypto

kms:dek:decrypt

kms:cmk:encryptDataKey

kms:dek:encrypt

kms:dek:crypto

kms:cmk:verifyMac

-

kms:cmk:updateKeyAlias

kms:cmk:update

kms:cmk:createDataKeyWithoutPlaintext

kms:dek:create

kms:cmk:revokeGrant

kms:grant:revoke

kms:cmk:deleteMaterial

-

kms:cmk:enable

-

kms:cmk:create

-

kms:cmk:decryptData

kms:cmk:crypto

kms:cmk:decrypt

kms:cmk:updatePrimaryRegion

-

kms:cmk:verify

-

kms:alias:delete

-

kms:alias:create

-

kms:cmk:deleteTag

kms:cmkTag:delete

kms:cmk:sign

-

kms:alias:associate

-

kms:cmk:enableRotation

-

kms:cmk:generateMac

-

kms:cmk:disableRotation

-

kms:cmk:createTag

kms:cmkTag:create

kms::generateRandom

kms:cmk:generate

kms:cmk:encryptData

kms:cmk:encrypt

kms:cmk:crypto

kms:cmk:scheduleKeyDeletion

kms:cmk:update

kms:cmk:retireGrant

kms:grant:retire

kms:cmk:createGrant

kms:grant:create

kms:cmk:updateKeyDescription

kms:cmk:update

kms:keystore:disable

-

kms:cmk:replicate

-

kms:cmk:createTags

kms:cmkTag:batch

kms:cmk:cancelKeyDeletion

kms:cmk:update

kms:keystore:enable

-

kms:keystore:delete

-

密码安全中心(密钥对管理服务 KPS)

云服务名

身份策略授权项

别名

密码安全中心(密钥对管理服务 KPS)

kps:SSHKeyPair:clearPrivateKey

-

kps:SSHKeyPair:importPrivateKey

-

kps:SSHKeyPair:exportPrivateKey

-

kps:SSHKeyPair:unbind

-

kps:SSHKeyPair:bind

-

kps:SSHKeyPair:update

-

kps:SSHKeyPair:create

-

kps:SSHKeyPair:delete

-

kps::deleteFailedTask

-

视频直播(live)

云服务名

身份策略授权项

别名

视频直播(live)

live:snapshot:updateRule

-

live:domain:deleteRefererChain

-

live:transcode:updateTranscodingsTemplate

-

live:domain:deleteCDNConfig

-

live:transcode:createTranscodingsTemplate

-

live:record:updateCallback

-

live:domain:createDomain

-

live:stream:createStreamForbiddenOnce

-

live:tenant:updateChargingMode

-

live:stream:createStreamForbidden

-

live:domain:deleteStreamNotification

-

live:snapshot:createRule

-

live:record:createCommand

-

live:domain:createDomainsMapping

-

live:domain:updateCDNConfig

-

live:stream:deleteStreamForbidden

-

live:domain:updateIPAuthList

-

live:record:deleteCallback

-

live:domain:deleteDomainsMapping

-

live:record:createCallback

-

live:record:updateRule

-

live:transcode:deleteTranscodingsTemplate

-

live:record:deleteRule

-

live:stream:deletePullTask

-

live:record:createRule

-

live:domain:updateGeoBlocking

-

live:domain:updateStreamNotification

-

live:domain:updateRefererChain

-

live:transcode:createSEI

-

live:snapshot:deleteRule

-

live:stream:createPullTask

-

live:domain:updateDomain

-

live:domain:deleteDomain

-

云日志服务(LTS)

云服务名

身份策略授权项

别名

云日志服务(LTS)

lts:dashboardGroup:create

lts:topics:create

lts:logGroup:createLogGroup

lts:groups:create

lts:alarmNoticeTemplate:update

lts:sqlalarmrules:put

lts:logStream:deleteQuickQuery

lts:searchcriterias:delete

lts:hostGroup:update

lts:topics:put

lts:structConfig:deleteStructConfig

lts:structConfig:delete

lts:logManager:createAggrs

lts:topics:create

lts:scheduledSql:create

lts:sqlalarmrules:create

lts:accessConfig:delete

-

lts:alarm:cleanAlarm

lts:sqlalarms:delete

lts:transfer:updateTransfer

lts:transfers:put

lts:alarmRule:deleteSqlAlarmRule

lts:sqlalarmrules:delete

lts:hostGroup:delete

lts:topics:delete

lts:dashboard:createFilter

-

lts:csvTable:update

lts:sqlalarmrules:put

lts:tokenizer:create

lts:topics:put

lts:alarmRule:createWordAlarmRule

lts:sqlalarmrules:create

lts:transfer:registerDmsKafkaInstance

-

lts:transfer:createTransfer

lts:transfers:create

lts:logFavorite:delete

lts:topics:delete

lts:hostGroup:create

lts:topics:create

lts:alarmRule:updateWordAlarmRule

lts:sqlalarmrules:put

lts:transfer:deleteTransfer

lts:transfers:delete

lts:logStream:updateLogStream

lts:topics:put

lts:log2MetricRule:create

-

lts:consumerGroup:delete

lts:topics:delete

lts:consumerGroup:create

lts:topics:create

lts:structConfig:updateStructConfig

lts:structConfig:put

lts:topics:put

lts:log2MetricRule:update

-

lts:log2MetricRule:delete

-

lts:dashboard:create

lts:topics:create

lts:logStream:createQuickQuery

lts:searchcriterias:create

lts:searchcriterias:put

lts:logStream:deleteLogStream

lts:topics:delete

lts:tag:create

lts:resourceTags:put

lts:csvTable:create

lts:sqlalarmrules:create

lts:csvTable:delete

lts:sqlalarmrules:delete

lts:dashboard:updateFilter

-

lts:alarmRule:deleteWordAlarmRule

lts:sqlalarmrules:delete

lts:alarmRule:createSqlAlarmRule

lts:sqlalarmrules:create

lts:dashboard:update

lts:topics:put

lts:alarmNoticeTemplate:delete

lts:sqlalarmrules:delete

lts:logGroup:deleteLogGroup

lts:groups:delete

lts:logFavorite:create

lts:topics:create

lts:alarmNoticeTemplate:create

lts:sqlalarmrules:create

lts:accessConfig:create

lts:topics:create

lts:dashboard:deleteFilter

-

lts:IndexConfig:create

lts:groups:create

lts:topics:put

lts:logConverge:update

-

lts:alarmRule:updateSqlAlarmRule

lts:sqlalarmrules:put

lts:scheduledSql:update

lts:sqlalarmrules:put

lts:logManager:deleteAggrs

lts:topics:delete

lts:logGroup:updateLogGroup

lts:groups:put

lts:configCenter:updateOverCollectSwitch

-

lts:accessConfig:update

lts:topics:put

lts:structConfig:createStructConfig

lts:topics:create

lts:structConfig:create

lts:logStream:createLogStream

lts:topics:create

ModelArts

云服务名

身份策略授权项

别名

ModelArts

modelarts:workspace:updateQuotas

-

modelarts:pool:update

-

modelarts:notebook:create

-

modelarts:image:create

-

modelarts:notebook:delete

-

modelarts:model:delete

-

modelarts:devserver:batchAction

-

modelarts:devserver:sync

-

modelarts:pool:create

-

modelarts:devserver:createRoceNetwork

-

modelarts:model:create

-

modelarts:workspace:update

-

modelarts:workflow:execute

-

modelarts:notebook:open

-

modelarts:notebook:stop

-

modelarts:trainJob:stop

-

modelarts:workflow:update

-

modelarts:aiAlgorithm:create

-

modelarts:edgePool:delete

-

modelarts:workflow:delete

-

modelarts:trainJob:delete

-

modelarts:pool:delete

-

modelarts::createLogDiagnosisJob

modelarts:brain:createLogDiagnosisJob

modelarts:workflow:create

-

modelarts:edgePool:create

-

modelarts::stopLogDiagnosisJob

modelarts:brain:stopLogDiagnosisJob

modelarts:image:delete

-

modelarts:trainJob:update

-

modelarts::createInspectionJob

modelarts:brain:createInspectionJob

modelarts:devserver:deleteJobs

-

modelarts:aiAlgorithm:delete

-

modelarts::deleteInspectionJob

modelarts:brain:dropInspectionJob

modelarts:devserver:start

-

modelarts:aiAlgorithm:update

-

modelarts:image:register

-

modelarts::stopProfilingDiagnosisJob

modelarts:brain:stopProfilingDiagnosisJob

modelarts:network:update

-

modelarts:devserver:delete

-

modelarts:service:delete

-

modelarts:devserver:reboot

-

modelarts:service:create

-

modelarts:model:update

-

modelarts::deleteLogDiagnosisJob

modelarts:brain:dropLogDiagnosisJob

modelarts:notebook:update

-

modelarts:workspace:delete

-

modelarts:devserver:createJob

-

modelarts:notebook:updateStopPolicy

-

modelarts:workspace:create

-

modelarts:edgePool:update

-

modelarts::stopInspectionJob

modelarts:brain:stopInspectionJob

modelarts:network:delete

-

modelarts:devserver:update

-

modelarts:devserver:create

-

modelarts:devserver:stop

-

modelarts::updateProfilingDiagnosisJob

modelarts:brain:updateProfilingDiagnosisJob

modelarts::deleteProfilingDiagnosisJob

modelarts:brain:dropProfilingDiagnosisJob

modelarts::updateLogDiagnosisJob

modelarts:brain:updateLogDiagnosisJob

modelarts:service:update

modelarts:service:action

modelarts:devserver:changeOS

-

modelarts:notebook:start

-

modelarts:trainJob:create

-

modelarts::updateInspectionJob

modelarts:brain:updateInspectionJob

modelarts::createProfilingDiagnosisJob

modelarts:brain:createProfilingDiagnosisJob

modelarts:devserver:reinstallOS

-

modelarts:network:create

-

MapReduce服务(MRS)

云服务名

身份策略授权项

别名

MapReduce服务(MRS)

mrs:cluster:stopJob

mrs:job:stop

mrs:cluster:updatePolicies

mrs:cluster:policy

mrs:cluster:updateUsers

mrs:cluster:syncUser

mrs:cluster:updateClusterName

mrs:cluster:resize

mrs:cluster:deleteJobs

mrs:job:batchDelete

mrs:cluster:createSql

mrs:job:checkSql

mrs:sql:execute

mrs:cluster:createCluster

mrs:cluster:create

mrs:cluster:createJob

mrs:job:submit

mrs:dataConnector:updateInstance

mrs:cluster:create

mrs:cluster:updateTags

mrs:tag:delete

mrs:tag:batchOperate

mrs:tag:create

mrs:cluster:updateAgencyMapping

mrs:cluster:syncUser

mrs:cluster:resizeNodes

mrs:cluster:resize

mrs:volumes:resize

mrs:cluster:scaleUp

对象存储服务(OBS)

云服务名

身份策略授权项

别名

对象存储服务(OBS)

obs:bucket:putBucketAcl

obs:bucket:PutBucketAcl

obs:bucket:createBucket

obs:bucket:CreateBucket

obs:bucket:deleteBucketWebsite

obs:bucket:DeleteBucketWebsite

obs:bucket:putBucketCustomDomainConfiguration

obs:bucket:PutBucketCustomDomainConfiguration

obs:bucket:deleteBucketTagging

obs:bucket:DeleteBucketTagging

obs:bucket:putBucketVersioning

obs:bucket:PutBucketVersioning

obs:bucket:putBucketWebsite

obs:bucket:PutBucketWebsite

obs:bucket:putBucketPublicAccessBlock

obs:bucket:PutBucketPublicAccessBlock

obs:bucket:putBucketNotification

obs:bucket:PutBucketNotification

obs:bucket:putBucketTagging

obs:bucket:PutBucketTagging

obs:bucket:putBucketCORS

obs:bucket:PutBucketCORS

obs:bucket:putLifecycleConfiguration

obs:bucket:PutLifecycleConfiguration

obs:bucket:deleteBucket

obs:bucket:DeleteBucket

obs:bucket:putBucketPolicy

obs:bucket:PutBucketPolicy

obs:bucket:putReplicationConfiguration

obs:bucket:PutReplicationConfiguration

obs:bucket:putBucketLogging

obs:bucket:PutBucketLogging

obs:bucket:deleteBucketInventoryConfiguration

obs:bucket:DeleteBucketInventoryConfiguration

obs:bucket:putBucketInventoryConfiguration

obs:bucket:PutBucketInventoryConfiguration

obs:bucket:putBucketStoragePolicy

obs:bucket:PutBucketStoragePolicy

obs:bucket:deleteReplicationConfiguration

obs:bucket:DeleteReplicationConfiguration

obs:bucket:deleteBucketCustomDomainConfiguration

obs:bucket:DeleteBucketCustomDomainConfiguration

obs:bucket:putEncryptionConfiguration

obs:bucket:PutEncryptionConfiguration

obs:bucket:deleteBucketPublicAccessBlock

obs:bucket:DeleteBucketPublicAccessBlock

对象存储迁移服务(OMS)

云服务名

身份策略授权项

别名

对象存储迁移服务(OMS)

oms:task:create

-

oms:synctask:delete

-

oms:task:update

-

oms:taskgroup:update

-

oms:task:delete

-

oms:taskgroup:create

-

oms:synctask:create

-

oms:taskgroup:delete

-

oms:synctask:update

-

组织(Organizations)

云服务名

身份策略授权项

别名

组织(Organizations)

organizations:handshakes:cancel

-

organizations:resources:untag

-

organizations:accounts:close

-

organizations:ous:delete

-

organizations:ous:update

-

organizations:policies:update

-

organizations:policies:disable

-

organizations:organizations:delete

-

organizations:accounts:update

-

organizations:policies:attach

-

organizations:organizations:create

-

organizations:policies:delete

-

organizations:organizations:leave

-

organizations:resources:tag

-

organizations:handshakes:decline

-

organizations:accounts:remove

-

organizations:trustedServices:disable

-

organizations:ous:create

-

organizations:policies:create

-

organizations:accounts:move

-

organizations:handshakes:accept

-

organizations:accounts:invite

-

organizations:accounts:create

-

organizations:trustedServices:enable

-

organizations:delegatedAdministrators:deregister

-

organizations:policies:enable

-

organizations:policies:detach

-

organizations:delegatedAdministrators:register

-

私有证书管理(PCA)

云服务名

身份策略授权项

别名

私有证书管理(PCA)

pca:ca:import

-

pca:ca:revoke

-

pca:ca:create

-

pca:ca:deleteTag

-

pca:ca:disableCrl

-

pca:ca:disable

-

pca:cert:delete

-

pca:ca:createTag

-

pca:cert:deleteTag

-

pca:ca:delete

-

pca:ca:revokeCert

pca:cert:revoke

pca:ca:enable

-

pca:ca:enableCrl

-

pca:ca:issueCert

-

pca:ca:restore

-

pca:ca:activate

pca:ca:active

pca:ca:issueCertByCsr

pca:ca:issueCertThroughCSR

pca:cert:createTag

-

资源访问管理(RAM)

云服务名

身份策略授权项

别名

资源访问管理(RAM)

ram:resourceShares:disassociatePermission

-

ram:resourceShares:delete

-

ram:resourceShares:update

-

ram:resourceShares:enableSharingWithOrganization

-

ram:resourceShares:create

-

ram:resourceShares:disassociate

-

ram:resourceShares:tag

-

ram:resourceShares:associate

-

ram:resourceShareInvitations:reject

-

ram:resourceShares:untag

-

ram:resourceShares:associatePermission

-

ram:resourceShares:disableSharingWithOrganization

-

ram:resourceShareInvitations:accept

-

云数据库(RDS)

云服务名

身份策略授权项

别名

云数据库(RDS)

rds:instance:start

-

rds:instance:create

-

rds:instance:updateParameter

-

rds:instance:openReadonly

-

rds:databasePrivilege:grant

-

rds:instance:modifySSL

-

rds:database:shrink

-

rds:instance:enableSecondLevelMonitoring

-

rds:instance:deleteInstance

-

rds:backup:create

-

rds:instance:extendSpace

-

rds:password:update

-

rds:param:apply

-

rds:databasePrivilege:revoke

-

rds:instance:singleToHa

-

rds:databaseUser:drop

-

rds:instance:deleteTag

-

rds:database:createDatabase

-

rds:instance:modifyExceptionSnapshotConfig

-

rds:param:delete

-

rds:task:delete

-

rds:databaseUser:update

-

rds:ltsConfig:update

-

rds:instance:switchLogReplay

-

rds:instance:createTag

-

rds:databaseUser:create

-

rds:instance:updateRemark

-

rds:instance:restart

-

rds:instance:tableRestore

-

rds:instance:updateDnsName

-

rds:param:updateTemplate

-

rds:instance:modifyBackupPolicy

-

rds:instance:modifyStrategy

-

rds:instance:createDns

-

rds:instance:updateOpsWindow

-

rds:binlog:setPolicy

-

rds:instance:restoreInPlace

-

rds::updateDownloadPolicy

-

rds:param:copy

-

rds:instance:update

-

rds:backup:delete

-

rds:instance:SetMsdtcHosts

-

rds:instance:modifyHost

-

rds:instance:deleteDisasterRecovery

-

rds:instance:modifySpec

-

rds:instance:modifyIp

-

rds:database:drop

-

rds:auditlog:operate

-

rds:instance:modifySynchronizeModel

-

rds:instance:setRecycleBin

-

rds:param:createTemplate

-

rds:instance:modifyProxy

-

rds:instance:modifyPort

-

rds:instance:stop

-

rds:instance:tde

-

rds:instance:upgradeDatabaseVersion

-

rds:log:setSlowLogSensitiveStatus

-

rds:instance:modifySecurityGroup

-

rds:instance:switchover

-

rds:instance:updateName

-

rds:instance:modifyPublicAccess

-

rds:instance:setAutoEnlargePolicy

-

rds:database:update

-

资源编排服务(RFS)

云服务名

身份策略授权项

别名

资源编排服务(RFS)

rf:privateTemplate:updateMetadata

-

rf:privateProvider:create

-

rf:stackSet:deleteStackInstances

-

rf:stack:applyExecutionPlan

-

rf:privateHook:deleteVersion

-

rf:privateProvider:delete

-

rf:privateTemplate:createVersion

-

rf:stack:create

rf:stack:createStack

rf:privateProvider:createVersion

-

rf:privateModule:updateMetadata

-

rf:stack:continueDeploy

rf:stack:continueDeployStack

rf:privateModule:deleteVersion

-

rf:privateTemplate:create

-

rf:stack:delete

rf:stack:deleteStack

rf:stack:continueRollback

rf:stack:continueRollbackStack

rf:privateModule:delete

-

rf:stackSet:delete

-

rf:privateProvider:updateMetadata

-

rf:privateHook:delete

-

rf:privateProvider:deleteVersion

-

rf:privateHook:updateMetadata

-

rf:stack:update

rf:stack:updateStack

rf:stackSet:createStackInstances

-

rf:stackSet:updateStackInstances

-

rf:stackSet:create

-

rf:privateTemplate:deleteVersion

-

rf:privateTemplate:delete

-

rf:privateHook:createVersion

-

rf:privateModule:create

-

rf:stackSet:deploy

-

rf:stack:deploy

rf:stack:deployStack

rf:privateHook:create

-

rf:stack:deleteExecutionPlan

-

rf:stackSet:update

-

rf:stack:createExecutionPlan

-

rf:privateModule:createVersion

-

资源治理中心(RGC)

云服务名

身份策略授权项

别名

资源治理中心(RGC)

rgc:managedOrganizationalUnit:reRegister

-

rgc:template:create

-

rgc:control:enable

-

rgc:bestPractice:createDetect

-

rgc:landingZone:setup

-

rgc:managedOrganizationalUnit:register

-

rgc:template:delete

-

rgc:managedOrganizationalUnit:deRegister

-

rgc:managedAccount:unEnroll

-

rgc:managedAccount:create

-

rgc:landingZone:delete

-

rgc:managedAccount:enroll

-

rgc:preLaunch:check

-

rgc:managedAccount:update

-

rgc:managedOrganizationalUnit:create

-

rgc:control:disable

-

rgc:managedOrganizationalUnit:delete

-

配置审计(Config)

云服务名

身份策略授权项

别名

配置审计(Config)

rms:organizationPolicyAssignments:put

-

rms:policyStates:update

-

rms:conformancePacks:delete

-

rms:storedQueries:create

-

rms::tagResource

rms:resources:tagResource

rms::unTagResource

rms:resources:unTagResource

rms:aggregators:update

-

rms:trackerConfig:put

-

rms:policyAssignmentsRemediation:runRemediation

-

rms:conformancePacks:create

-

rms:policyAssignmentsRemediation:deleteRemediationExceptions

-

rms:policyAssignmentsRemediation:putRemediationConfiguration

-

rms:policyAssignmentsRemediation:deleteRemediationConfiguration

-

rms:aggregationRequests:delete

-

rms:aggregationAuthorizations:delete

-

rms:aggregators:create

-

rms:storedQueries:delete

-

rms:policyAssignments:update

-

rms:aggregators:delete

-

rms:organizationConformancePacks:create

-

rms:storedQueries:update

-

rms:aggregationAuthorizations:create

-

rms:conformancePacks:update

-

rms:policyAssignments:create

-

rms:trackerConfig:delete

-

rms:policyAssignments:delete

-

rms:policyAssignmentsRemediation:createRemediationExceptions

-

rms:organizationPolicyAssignments:delete

-

rms:organizationConformancePacks:update

-

rms:policyStates:runEvaluation

-

rms:organizationConformancePacks:delete

-

SSL证书管理(SCM)

云服务名

身份策略授权项

别名

SSL证书管理(SCM)

scm::deleteDomainMonitor

-

scm::updateDomainMonitor

-

scm::updateDomainMonitorSwitch

-

scm::deleteCsr

-

scm:cert:upload

-

scm:cert:deployResources

-

scm:cert:createTag

-

scm:cert:cancel

-

scm:cert:enableAutoDeploy

-

scm::createDomainMonitor

-

scm:cert:reissue

-

scm:cert:addDomain

scm:cert:supplement

scm:cert:expandQuota

-

scm:cert:deletePrivacyAuthorization

scm:privacyProtection:delete

scm:cert:renew

-

scm:cert:unsubscribe

-

scm::updateCsr

-

scm::orderDomainMonitor

-

scm:cert:push

-

scm:cert:save

scm:cert:complete

scm:cert:subscribe

scm:cert:purchase

scm::createCsr

-

scm:cert:apply

-

scm:cert:update

scm:cert:edit

scm:cert:autoRenew

-

scm::uploadCsr

-

scm:cert:seekHelp

-

scm:cert:import

scm:cert:upload

应用管理与运维平台(ServiceStage)

云服务名

身份策略授权项

别名

应用管理与运维平台(ServiceStage)

servicestage:config:deleteGroup

-

servicestage::createReleasePlan

servicestage:app:create

servicestage::deleteReleasePlan

servicestage:app:delete

servicestage:environment:modify

-

servicestage:environment:delete

-

servicestage:app:deleteComponent

servicestage:app:delete

servicestage:repositoryAuth:create

servicestage:app:create

servicestage:app:modifyConfiguration

servicestage:app:modify

servicestage:pipeline:modify

servicestage:pipeline:execute

servicestage:app:createComponent

servicestage:app:create

servicestage:environment:create

-

servicestage::deleteRuntimeStack

servicestage:runtimestack:delete

servicestage::switchRuntimeStackStatus

-

servicestage::createRuntimeStack

servicestage:runtimestack:create

servicestage:app:deleteConfiguration

servicestage:app:modify

servicestage::modifyRuntimeStack

servicestage:runtimestack:modify

servicestage:app:unTagResource

servicestage:app:modify

servicestage:app:tag

servicestage:app:modify

servicestage:app:deleteApplication

servicestage:app:delete

servicestage:environment:tag

servicestage:environment:modify

servicestage:pipeline:create

-

servicestage:app:modifyComponent

servicestage:app:modify

servicestage:app:createApplication

servicestage:app:create

servicestage:app:modifyApplication

servicestage:app:modify

高性能弹性文件服务(SFS Turbo)

云服务名

身份策略授权项

别名

高性能弹性文件服务(SFS Turbo)

sfsturbo:shares:updateLdap

-

sfsturbo:shares:createFsAsyncTask

-

sfsturbo:shares:changeChargeMode

-

sfsturbo:shares:updateActiveDirectoryDomain

-

sfsturbo:shares:deleteFsDirQuota

-

sfsturbo:shares:createFsDirQuota

-

sfsturbo:shares:createLdap

-

sfsturbo:shares:createShare

-

sfsturbo:shares:createFsDir

-

sfsturbo:shares:deleteBackendTarget

-

sfsturbo:shares:createDataRepositoryTask

-

sfsturbo:shares:updatePermRule

-

sfsturbo:shares:deleteLdap

-

sfsturbo:shares:deleteFsAsyncTask

-

sfsturbo:shares:deleteTag

-

sfsturbo:shares:extendShare

sfsturbo:shares:shareAction

sfsturbo:shares:addTag

-

sfsturbo:shares:renameShare

sfsturbo:shares:shareAction

sfsturbo:shares:updateFsDirQuota

-

sfsturbo:shares:deletePermRule

-

sfsturbo:shares:addActiveDirectoryDomain

-

sfsturbo:shares:updateShareSecurityGroup

sfsturbo:shares:shareAction

sfsturbo:shares:deleteDataRepositoryTask

-

sfsturbo:shares:deleteActiveDirectoryDomain

-

sfsturbo:shares:createBackendTarget

-

sfsturbo:shares:createPermRule

-

sfsturbo:shares:deleteFsDir

-

sfsturbo:shares:updateObsTargetPolicy

-

sfsturbo:shares:addDataRepository

sfsturbo:shares:shareAction

sfsturbo:shares:batchResTag

-

sfsturbo:shares:deleteShare

-

sfsturbo:shares:updateObsTargetAttributes

-

sfsturbo:shares:updateHpcShare

-

消息通知服务(SMN)

云服务名

身份策略授权项

别名

消息通知服务(SMN)

smn:template:update

-

smn:topic:create

-

smn:topic:deleteSubscription

smn:topic:update

smn:template:create

-

smn:topic:deleteAttribute

smn:topic:update

smn:topic:updateTopic

smn:topic:update

smn:tag:create

-

smn:topic:delete

-

smn:topic:subscribe

smn:topic:update

smn:topic:updateAttribute

smn:topic:update

smn:topic:updateLogTank

smn:topic:update

smn:tag:batchModify

smn:tag:update

smn:topic:updateSubscription

smn:topic:update

smn:topic:deleteLogTank

smn:topic:update

smn:tag:delete

smn:tag:update

smn:template:delete

-

smn:topic:createLogTank

smn:topic:update

主机迁移服务(SMS)

云服务名

身份策略授权项

别名

主机迁移服务(SMS)

sms:migproject:update

sms:server:migrationServer

sms:server:updateNetworkCheckInfo

sms:server:migrationServer

sms:server:collectLog

sms:server:migrationServer

sms:template:update

sms:server:migrationServer

sms:server:register

sms:server:registerServer

sms:server:update

sms:server:migrationServer

sms:server:updateTaskConfig

sms:server:migrationServer

sms:server:updateTaskProgress

sms:server:migrationServer

sms:server:updateState

sms:server:migrationServer

sms:server:updateCommandResult

sms:server:migrationServer

sms:template:batchDelete

sms:server:migrationServer

sms:server:createTask

sms:server:migrationServer

sms:server:batchDeleteTask

sms:server:migrationServer

sms:migproject:delete

sms:server:migrationServer

sms:server:updateTask

sms:server:migrationServer

sms:server:unlock

-

sms:server:updateTaskSpeedLimit

sms:server:migrationServer

sms:template:create

sms:server:migrationServer

sms:migproject:create

sms:server:migrationServer

sms:server:updateDiskInfo

sms:server:registerServer

sms:server:deleteTask

sms:server:migrationServer

sms:server:delete

sms:server:migrationServer

sms:server:batchDelete

sms:server:migrationServer

sms:server:updateConsistencyCheckResult

sms:server:migrationServer

sms:template:delete

sms:server:migrationServer

sms:server:manageTask

sms:server:migrationServer

安全令牌服务(STS)

云服务名

身份策略授权项

别名

安全令牌服务(STS)

sts::decodeAuthorizationMessage

-

sts:agencies:assume

-

容器镜像服务(SWR)

云服务名

身份策略授权项

别名

容器镜像服务(SWR)

swr:repository:deleteTag

-

swr:instance:deleteReplicationPolicy

-

swr:instance:delete

-

swr:repo:createRepo

-

swr:repo:updateRepoDomain

-

swr:repository:startManualScanning

-

swr:repo:deleteAutoSyncRepoJob

-

swr:instance:deleteJob

-

swr:namespace:deleteNamespaceAccess

-

swr:instance:create

-

swr:repository:deleteNamespace

-

swr:repository:updateRepository

-

swr:instance:updateEndpointPolicy

-

swr:instance:executeReplicationPolicy

-

swr:repo:createRepoDomain

-

swr:namespace:createNamespace

-

swr:repo:deleteRepoTag

-

swr:instance:addDomainName

-

swr:repo:updateRetention

-

swr:namespace:updateNamespaceAccess

-

swr:instance:deleteInternalEndpoint

-

swr::createAuthorizationToken

-

swr:repo:deleteRetention

-

swr:repository:updateImmutableRule

-

swr:repo:createRetention

-

swr:repo:deleteRepoAccess

-

swr:namespace:createNamespaceAccess

-

swr:instance:deleteDomainName

-

swr:instance:deleteRegistry

-

swr:namespace:deleteNamespace

-

swr::createLoginSecret

swr:system:createLoginSecret

swr:instance:updateDomainName

-

swr:instance:createLTCredential

-

swr:instance:createReplicationPolicy

-

swr:repository:createImmutableRule

-

swr:instance:updateConfigurations

-

swr:instance:createInternalEndpoint

-

swr:repository:createWebhook

-

swr:repo:createAutoSyncRepoJob

-

swr:repo:deleteRepoShare

-

swr:namespace:multipartUpload

-

swr:repository:updateNamespace

-

swr:repo:updateRepoAccess

-

swr:instance:createTempCredential

-

swr:repository:executeRetentionPolicy

-

swr:instance:updateLTCredential

-

swr:repository:deleteRetentionPolicy

-

swr:repository:createNamespace

-

swr:repo:deleteRepo

-

swr:repository:deleteSignPolicy

-

swr:instance:deleteLTCredential

-

swr:repository:updateSignPolicy

-

swr:repository:deleteWebhook

-

swr:instance:deleteResourceTags

-

swr:instance:updateRegistry

-

swr:repository:deleteArtifact

-

swr:repo:deleteRepoDomain

-

swr:repository:deleteRepository

-

swr:repo:createManualSyncRepoJob

-

swr:repository:executeSignPolicy

-

swr:repository:updateWebhook

-

swr:repository:deleteImmutableRule

-

swr:repository:createSignPolicy

-

swr:repo:deleteTrigger

-

swr:instance:updateEndpointPolicyStatus

-

swr:repo:updateRepo

-

swr:instance:createRegistry

-

swr:repository:updateRetentionPolicy

-

swr:instance:createResourceTags

-

swr:repo:createRepoTag

-

swr:repo:updateTrigger

-

swr:repo:createTrigger

-

swr:repo:createRepoAccess

-

swr:instance:stopReplicationPolicyExecution

-

swr:repository:createRetentionPolicy

-

swr:repo:updateRepoShare

-

swr:instance:updateReplicationPolicy

-

swr:repo:createRepoShare

-

swr:repo:upload

-

标签管理服务(TMS)

云服务名

身份策略授权项

别名

标签管理服务(TMS)

tms:predefineTags:update

-

tms:predefineTags:delete

-

tms:resourceTags:delete

-

tms:resourceTags:create

-

tms:predefineTags:create

-

虚拟私有云(VPC)

云服务名

身份策略授权项

别名

虚拟私有云(VPC)

vpc:securityGroupRules:update

-

vpc:peerings:delete

-

vpc:addressGroups:create

-

vpc:addressGroups:update

-

vpc:addressGroups:delete

-

vpc:vpcs:deleteTags

vpc:vpcTags:delete

vpc:vpcs:createTags

vpc:vpcTags:create

vpc:nativeSubnets:update

vpc:subnets:update

vpc:trafficMirrorFilterRules:delete

-

vpc:trafficMirrorFilterRules:create

-

vpc:vpcs:create

-

vpc:securityGroups:update

-

vpc:nativePorts:create

vpc:ports:create

vpc:routeTables:delete

-

vpc:subnets:deleteReservation

-

vpc:nativeNetworks:update

vpc:networks:update

vpc:nativeRouters:create

vpc:routers:create

vpc:nativeNetworks:create

vpc:networks:create

vpc:routeTables:create

-

vpc:nativeSecurityGroupRules:delete

vpc:securityGroupRules:delete

vpc:nativeRouters:update

vpc:routers:update

vpc:ports:update

vpc:vips:update

vpc:vips:delete

vpc:nativeSecurityGroups:delete

vpc:securityGroups:delete

vpc:flowLogs:update

-

vpc:nativeSecurityGroups:update

vpc:securityGroups:update

vpc:ports:create

-

vpc:firewalls:create

-

vpc:trafficMirrorFilters:create

-

vpc:trafficMirrorFilterRules:update

-

vpc:nativeSubnets:create

vpc:subnets:create

vpc:nativePorts:update

vpc:ports:update

vpc:securityGroupRules:create

-

vpc:firewalls:delete

-

vpc:subNetworkInterfaces:delete

-

vpc:subnets:createReservation

-

vpc:securityGroups:deleteTags

vpc:securityGroupTags:delete

vpc:firewalls:deleteTags

vpc:firewallTags:delete

vpc:trafficMirrorSessions:update

-

vpc:nativeRouters:removeInterface

vpc:routers:removeInterface

vpc:networks:delete

-

vpc:nativeRouters:addInterface

vpc:routers:addInterface

vpc:vpcs:delete

-

vpc:securityGroups:delete

-

vpc:subNetworkInterfaces:update

-

vpc:subnets:createTags

vpc:subnetTags:create

vpc:peerings:reject

-

vpc:flowLogs:delete

-

vpc:trafficMirrorFilters:delete

-

vpc:subnets:deleteTags

vpc:subnetTags:delete

vpc:flowLogs:create

-

vpc:subnets:delete

-

vpc:securityGroups:create

-

vpc:routeTables:update

-

vpc:firewalls:update

-

vpc:firewalls:createTags

vpc:firewallTags:create

vpc:nativeSecurityGroupRules:create

vpc:securityGroupRules:create

vpc:ports:deleteTags

vpc:portTags:delete

vpc:nativeSecurityGroups:create

vpc:securityGroups:create

vpc:peerings:update

-

vpc:ports:createTags

vpc:portTags:create

vpc:peerings:create

-

vpc:nativePorts:delete

vpc:ports:delete

vpc:trafficMirrorSessions:removeSource

-

vpc:nativeSubnets:delete

vpc:subnets:delete

vpc:trafficMirrorSessions:addSource

-

vpc:securityGroupRules:delete

-

vpc:trafficMirrorSessions:create

-

vpc:subnets:create

-

vpc:privateIps:delete

-

vpc:subnets:update

-

vpc:peerings:accept

-

vpc:networks:create

-

vpc:privateIps:create

-

vpc:subNetworkInterfaces:create

-

vpc:nativeNetworks:delete

vpc:networks:delete

vpc:ports:delete

-

vpc:vpcs:update

-

vpc:securityGroups:createTags

vpc:securityGroupTags:create

vpc:trafficMirrorFilters:update

-

VPC终端节点(VPCEP)

云服务名

身份策略授权项

别名

VPC终端节点(VPCEP)

vpcep:endpointServices:updateConnections

vpcep:connections:update

vpcep:endpointServices:updateName

vpcep:epservices:update

vpcep:endpoints:updateRouteTables

vpcep:endpoints:update

vpcep:endpoints:deletePolicy

vpcep:endpoints:delete

vpcep:endpoints:updatePolicy

vpcep:endpoints:update

vpcep:endpointServices:update

vpcep:epservices:update

vpcep:endpointServices:create

vpcep:epservices:create

vpcep:endpointServices:updateConnectionDescription

vpcep:connections:update

vpcep::updateResourceTags

vpcep:tags:update

vpcep:endpointServices:updatePermissionsDescription

vpcep:permissions:update

vpcep:endpointServices:delete

vpcep:epservices:delete

vpcep:endpoints:create

-

vpcep:endpoints:delete

-

vpcep:endpoints:update

-

vpcep:endpointServices:deletePermissions

vpcep:permissions:update

vpcep:endpointServices:upgrade

vpcep:epservices:upgrade

vpcep:endpointServices:createPermissions

vpcep:permissions:update

vpcep:endpointServices:updatePermissions

vpcep:permissions:update

Web应用防火墙(WAF)

云服务名

身份策略授权项

别名

Web应用防火墙(WAF)

waf:pool:create

-

waf:falseAlarmMaskRule:put

waf:falseAlarmMaskRule:recount

waf:preciseProtectionRule:create

-

waf:certificate:delete

-

waf:preciseProtectionRule:put

-

waf:alert:put

-

waf:preciseProtectionRule:delete

-

waf:geoIpRule:delete

-

waf:securityReportSubscription:create

-

waf:host:create

waf:instance:create

waf:ruleset:put

-

waf:policy:delete

-

waf:punishmentRule:put

-

waf:host:delete

waf:instance:delete

waf:ruleset:create

-

waf:antiTamperRule:put

-

waf:ruleset:delete

-

waf:ltsConfig:put

-

waf:securityReportSubscription:delete

-

waf:pool:put

-

waf:ipgroup:delete

-

waf:certificate:create

-

waf:securityReportSubscription:put

-

waf:pool:delete

-

waf:premiumInstance:delete

-

waf:antiLeakageRule:delete

-

waf:ccRule:delete

-

waf:certificate:put

-

waf:host:put

waf:instance:put

waf:valueList:put

waf:valuelist:put

waf:punishmentRule:delete

-

waf:whiteBlackIpRule:create

-

waf:anticrawlerRule:batchUpdate

-

waf:antiLeakageRule:create

-

waf:ccRule:create

-

waf:anticrawlerRule:delete

-

waf:valueList:delete

waf:valuelist:delete

waf:geoIpRule:put

-

waf:privacyRule:delete

-

waf:policy:create

-

waf:agency:delete

-

waf:falseAlarmMaskRule:delete

-

waf:falseAlarmMaskRule:create

-

waf:postpaid:create

-

waf:postpaid:delete

-

waf:agency:create

-

waf:premiumInstance:create

-

waf:privacyRule:create

-

waf:anticrawlerRule:put

-

waf:ipgroup:create

-

waf:ccRule:put

waf:ccRuleRule:put

waf:privacyRule:put

-

waf:premiumInstance:put

-

waf:antiTamperRule:delete

-

waf:valueList:create

waf:valuelist:create

waf:ipgroup:put

-

waf:whiteBlackIpRule:put

-

waf:antiLeakageRule:put

-

waf:policy:put

-

waf:anticrawlerRule:create

-

waf:geoIpRule:create

-

waf:punishmentRule:create

-

云桌面(Workspace)

云服务名

身份策略授权项

别名

云桌面(Workspace)

workspace:orders:createDesktopOrder

-

workspace:bindingPolicies:update

-

workspace:volumes:batchExpand

-

workspace:userGroups:create

-

workspace:desktops:batchInstallAgents

-

workspace:desktops:delete

-

workspace:privacystatements:sign

-

workspace:ou:create

-

workspace:desktopPools:update

-

workspace:orders:batchInquiry

-

workspace:desktops:verifyDesktopName

-

workspace:desktops:batchDeleteSnapshots

-

workspace:accessPolicies:updateTarget

-

workspace:statistics:deleteNotificationRules

-

workspace:images:checkIfExist

-

workspace:accessPolicies:delete

-

workspace:bindingPolicies:add

-

workspace:users:importUser

-

workspace:desktopPools:batchDeleteVolumes

-

workspace:orders:change

-

workspace:desktops:update

-

workspace:desktops:logoff

-

workspace:desktops:batchCreateSnapshots

-

workspace:desktops:prepAttachUsers

-

workspace:bindingPolicies:import

-

workspace:desktopPools:batchAddVolumes

-

workspace:volumes:modifyQos

-

workspace:bandwidth:createChangeOrder

-

workspace:statistics:exportAppUserAccessData

-

workspace:natMappings:updateConfig

-

workspace:desktopPools:delete

-

workspace:userGroups:batchDelete

-

workspace:exclusiveHosts:create

-

workspace:policyGroups:updatePolicies

-

workspace:users:update

-

workspace:policyGroups:updateTargets

-

workspace:users:batchDelete

-

workspace:policyGroups:createTemplate

-

workspace:desktops:batchChangeNetwork

-

workspace:orders:createResourcePackagesOrder

-

workspace:cloudStorage:resetUserProfile

-

workspace:desktops:attach

-

workspace:mkp:createOrder

-

workspace:desktops:createImage

-

workspace:bindingPolicies:createConfig

-

workspace:tenants:checkEnterpriseIds

-

workspace:orders:create

-

workspace:users:create

-

workspace:desktops:setMaintenanceMode

-

workspace:tenants:deleteExportTasks

-

workspace:desktops:detach

-

workspace:users:delete

-

workspace:volumes:add

-

workspace:policyGroups:update

-

workspace:sites:checkEdgeSiteResources

-

workspace:desktops:create

-

workspace:jobs:deleteSubJobRecords

-

workspace:desktops:operate

-

workspace:desktopPools:operate

-

workspace:userGroups:delete

-

workspace:desktops:changeUserPrivilegeGroup

-

workspace:policyGroups:delete

-

workspace:userGroups:update

-

workspace:networks:createNat

-

workspace:bandwidth:create

-

workspace:renderDesktops:resize

-

workspace:users:deleteOtps

-

workspace:networks:createEips

-

workspace:networks:bindEips

-

workspace:policyGroups:import

-

workspace:desktopPools:authorizeUsers

-

workspace:userEvents:export

-

workspace:assistAuthConfigs:update

-

workspace:scripts:executeByDesktopTag

-

workspace:tenants:updateDesktopNamePolicy

-

workspace:assistAuthConfigs:updateApplyObjects

-

workspace:sites:add

-

workspace:desktopPools:sendNotifications

-

workspace:desktopPools:batchExpandVolumes

-

workspace:desktops:rebuild

-

workspace:volumes:batchAdd

-

workspace:agencies:create

-

workspace:tenants:updateAccessAddressBackupConfig

-

workspace:scheduledTasks:create

-

workspace:sites:delete

-

workspace:scheduledTasks:delete

-

workspace:tenants:updateConfig

-

workspace:users:subscribeSharer

-

workspace:desktops:addSubResources

-

workspace:userGroups:operate

-

workspace:desktopPools:expand

-

workspace:scheduledTasks:update

-

workspace:statistics:createNotifyRules

-

workspace:statistics:updateNotificationRules

-

workspace:desktops:batchAttachUsers

-

workspace:desktopPools:create

-

workspace:users:checkExist

-

workspace:desktops:batchDelete

-

workspace:tenants:delete

-

workspace:screenRecord:batchDelete

-

workspace:desktops:rejoinDomain

-

workspace:desktopPools:executeScripts

-

workspace:ou:update

-

workspace:tenants:updateShareSpaceConfig

-

workspace:tenants:updateEnterpriseId

-

workspace:accessPolicies:update

-

workspace:ou:importUsersByOU

-

workspace:bindingPolicies:delete

-

workspace:users:operate

-

workspace:accessPolicies:create

-

workspace:tenants:update

-

workspace:desktopPools:resize

-

workspace:policyGroups:create

-

workspace:tenants:open

-

workspace:bandwidth:delete

-

workspace:desktops:deleteSubResources

-

workspace:sites:updateAccessMode

-

workspace:desktops:createRemoteAssistance

-

workspace:bandwidth:updateControlConfig

-

workspace:desktopPools:rebuild

-

workspace:users:batchCreate

-

workspace:users:import

-

workspace:userEvents:setLtsConfigurations

-

workspace:tenants:batchDeleteDesktopNamePolicies

-

workspace:desktops:batchRestoreSnapshots

-

workspace:desktops:checkBatchChangeImage

-

workspace:authConfig:validate

-

workspace:authConfigs:update

-

workspace:volumes:delete

-

workspace:desktops:batchDetach

-

workspace:sites:updateSubnets

-

workspace:bandwidth:update

-

workspace:tenants:unlock

-

workspace:desktops:cancelRemoteAssistance

-

workspace:tenants:createDesktopNamePolicy

-

workspace:jobs:retry

-

相关文档