RAM authorization - Anti-DDoS - Alibaba Cloud Documentation Center

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. Using RAM helps you avoid sharing your Alibaba Cloud account keys with other users and allows you to grant users the least privilege access. RAM uses permission policies to define authorizations. This topic describes the general structure of a RAM policy, and the policy statement elements (Action, Resource, and Condition) defined by Anti-DDoS for RAM permission policies. The RAM code (RamCode) for Anti-DDoS is yundun-high,yundun-ddoscoo , and the supported authorization granularity is OPERATION .

General structure of a policy

Permission policies support JSON format with the following general structure:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

The following list describes the fields in the policy:

Version: Specifies the policy version number. It is fixed at 1.
Statement:
- Effect: Specifies the authorization result. Valid values: Allow and Deny.
- Action: Specifies one or more operations that are allowed or denied.
- Resource: Specifies the specific objects affected by the operations. You can use Alibaba Cloud Resource Names (ARNs) to describe specific resources.
- Condition: Specifies the conditions for the authorization to take effect. This field is optional.
  - Condition operator: Specifies the conditional operators. Different types of conditions support different conditional operators.
  - Condition_key: Specifies the condition keys.
  - Condition_value: Specifies the condition values.

Action

The following table lists the actions defined by Anti-DDoS. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that support authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding ARN in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys that are applicable across all RAM-integrated services. For more information, see Common condition keys.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action	API	Access level	Resource type	Condition key	Dependent action
yundun-ddoscoo:DescribeBlackholeStatus	DescribeBlackholeStatus	get	All Resource ``	None	None
yundun-ddoscoo:DeleteSceneDefensePolicy	DeleteSceneDefensePolicy	delete	All Resource ``	None	None
yundun-ddoscoo:DeleteWebRule	DeleteWebRule	delete	All Resource ``	None	None
yundun-ddoscoo:EnableWebAccessLogConfig	EnableWebAccessLogConfig	update	All Resource ``	None	None
yundun-ddoscoo:DescribeBlockStatus	DescribeBlockStatus	get	All Resource ``	None	None
yundun-ddoscoo:CreateNetworkRules	CreateNetworkRules	create	All Resource ``	None	None
yundun-ddoscoo:DescribeInstanceStatus	DescribeInstanceStatus	get	All Resource ``	None	None
yundun-ddoscoo:DescribeWebAccessLogDispatchStatus	DescribeWebAccessLogDispatchStatus	get	All Resource ``	None	None
yundun-ddoscoo:DeleteTagResources	DeleteTagResources	delete	All Resource ``	None	None
yundun-ddoscoo:DescribePortConnsList	DescribePortConnsList	get	All Resource ``	None	None
yundun-ddoscoo:CreateSchedulerRule	CreateSchedulerRule	create	All Resource ``	None	None
yundun-ddoscoo:DescribeHealthCheckList	DescribeHealthCheckList	get	All Resource ``	None	None
yundun-ddoscoo:DescribeUnBlockCount	DescribeUnBlockCount	get	All Resource ``	None	None
yundun-ddoscoo:DescribeWebCcProtectSwitch	DescribeWebCcProtectSwitch	get	All Resource ``	None	None
yundun-ddoscoo:DescribeSchedulerRules	DescribeSchedulerRules	get	All Resource ``	None	None
yundun-ddoscoo:DescribeHealthCheckStatus	DescribeHealthCheckStatus	get	All Resource ``	None	None
yundun-ddoscoo:ModifyWebCCRule	ModifyWebCCRule	update	All Resource ``	None	None
yundun-ddoscoo:DeleteWebPreciseAccessRule	DeleteWebPreciseAccessRule	delete	All Resource ``	None	None
yundun-ddoscoo:DeleteAutoCcWhitelist	DeleteAutoCcWhitelist	delete	All Resource ``	None	None
yundun-ddoscoo:ModifyElasticBizQps	ModifyElasticBizQps	update	All Resource ``	None	None
yundun-ddoscoo:CreateTagResources	CreateTagResources	create	All Resource ``	None	None
yundun-ddoscoo:CreateSceneDefensePolicy	CreateSceneDefensePolicy	create	All Resource ``	None	None
yundun-ddoscoo:DescribeAsyncTasks	DescribeAsyncTasks	get	All Resource ``	None	None
yundun-ddoscoo:ModifyDomainResource	ModifyDomainResource	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDestinationPortEvent	DescribeDestinationPortEvent	list	All Resource ``	None	None
yundun-ddoscoo:ConfigL7GlobalRule	ConfigL7GlobalRule	none	All Resource ``	None	None
yundun-ddoscoo:ModifyWebAreaBlock	ModifyWebAreaBlock	update	All Resource ``	None	None
yundun-ddoscoo:DescribeAutoCcBlacklist	DescribeAutoCcBlacklist	get	All Resource ``	None	None
yundun-ddoscoo:DescribeNetworkRuleAttributes	DescribeNetworkRuleAttributes	get	All Resource ``	None	None
yundun-ddoscoo:DescribeL7GlobalRule	DescribeL7GlobalRule	none	All Resource ``	None	None
yundun-ddoscoo:ModifyElasticBandWidth	ModifyElasticBandWidth	update	All Resource ``	None	None
yundun-ddoscoo:ModifyWebAIProtectSwitch	ModifyWebAIProtectSwitch	update	All Resource ``	None	None
yundun-ddoscoo:ModifyInstanceRemark	ModifyInstanceRemark	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainStatusCodeList	DescribeDomainStatusCodeList	get	All Resource ``	None	None
yundun-ddoscoo:DescribeTagKeys	DescribeTagKeys	get	All Resource ``	None	None
yundun-ddoscoo:EnableWebCCRule	EnableWebCCRule	update	All Resource ``	None	None
yundun-ddoscoo:ConfigLayer4Remark	ConfigLayer4Remark	update	All Resource ``	None	None
yundun-ddoscoo:DescribeUdpReflect	DescribeUdpReflect	get	All Resource ``	None	None
yundun-ddoscoo:DescribeLogStoreExistStatus	DescribeLogStoreExistStatus	get	All Resource ``	None	None
yundun-ddoscoo:ModifyWebCacheMode	ModifyWebCacheMode	update	All Resource ``	None	None
yundun-ddoscoo:AddAutoCcBlacklist	AddAutoCcBlacklist	create	All Resource ``	None	None
yundun-ddoscoo:DescribeSceneDefensePolicies	DescribeSceneDefensePolicies	get	All Resource ``	None	None
yundun-ddoscoo:DescribeBackSourceCidr	DescribeBackSourceCidr	get	All Resource ``	None	None
yundun-ddoscoo:DescribeWebCCRulesV2	DescribeWebCCRulesV2	list	All Resource ``	None	None
yundun-ddoscoo:ModifyPort	ModifyPort	update	All Resource ``	None	None
yundun-ddoscoo:ModifyBlackholeStatus	ModifyBlackholeStatus	update	All Resource ``	None	None
yundun-ddoscoo:AssociateWebCert	AssociateWebCert	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainAttackEvents	DescribeDomainAttackEvents	get	All Resource ``	None	None
yundun-ddoscoo:ModifyWebCacheSwitch	ModifyWebCacheSwitch	update	All Resource ``	None	None
yundun-ddoscoo:DescribePortMaxConns	DescribePortMaxConns	get	All Resource ``	None	None
yundun-ddoscoo:AttachSceneDefenseObject	AttachSceneDefenseObject	update	All Resource ``	None	None
yundun-ddoscoo:DeleteAsyncTask	DeleteAsyncTask	delete	All Resource ``	None	None
yundun-ddoscoo:DescribeWebAccessMode	DescribeWebAccessMode	get	All Resource ``	None	None
yundun-ddoscoo:ModifyWebAccessMode	ModifyWebAccessMode	update	All Resource ``	None	None
yundun-ddoscoo:DescribeWebAccessLogEmptyCount	DescribeWebAccessLogEmptyCount	get	All Resource ``	None	None
yundun-ddoscoo:ReleaseInstance	ReleaseInstance	update	All Resource ``	None	None
yundun-ddoscoo:DescribeCnameReuses	DescribeCnameReuses	get	All Resource ``	None	None
yundun-ddoscoo:DescribeWebCustomPorts	DescribeWebCustomPorts	get	All Resource ``	None	None
yundun-ddoscoo:DescribeElasticQpsRecord	DescribeElasticQpsRecord	list	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainTopFingerprint	DescribeDomainH2Fingerprint	list	All Resource ``	None	None
yundun-ddoscoo:DescribeSlsAuthStatus	DescribeSlsAuthStatus	get	All Resource ``	None	None
yundun-ddoscoo:DescribeUnBlackholeCount	DescribeUnBlackholeCount	get	All Resource ``	None	None
yundun-ddoscoo:DescribeInstanceExt	DescribeInstanceExt	get	All Resource ``	None	None
yundun-ddoscoo:ConfigNetworkRegionBlock	ConfigNetworkRegionBlock	update	All Resource ``	None	None
yundun-ddoscoo:ModifyWebCacheCustomRule	ModifyWebCacheCustomRule	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainOverview	DescribeDomainOverview	get	All Resource ``	None	None
yundun-ddoscoo:DescribeSlaEventList	DescribeSlaEventList	list	All Resource ``	None	None
yundun-ddoscoo:DescribeNetworkRules	DescribeNetworkRules	get	All Resource ``	None	None
yundun-ddoscoo:ModifyPortAutoCcStatus	ModifyPortAutoCcStatus	update	All Resource ``	None	None
yundun-ddoscoo:EmptyAutoCcBlacklist	EmptyAutoCcBlacklist	update	All Resource ``	None	None
yundun-ddoscoo:ConfigWebIpSet	ConfigWebIpSet	update	All Resource ``	None	None
yundun-ddoscoo:ModifySchedulerRule	ModifySchedulerRule	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainTopReferer	DescribeDomainTopReferer	list	All Resource ``	None	None
yundun-ddoscoo:DescribeDDosEventArea	DescribeDDosEventArea	list	All Resource ``	None	None
yundun-ddoscoo:DescribeWebCacheConfigs	DescribeWebCacheConfigs	get	All Resource ``	None	None
yundun-ddoscoo:ConfigL7RsKeepalive	ConfigL7UsKeepalive	none	All Resource ``	None	None
yundun-ddoscoo:ModifyQpsMode	ModifyQpsMode	update	All Resource ``	None	None
yundun-ddoscoo:CreateWebCCRule	CreateWebCCRule	create	All Resource ``	None	None
yundun-ddoscoo:EnableSceneDefensePolicy	EnableSceneDefensePolicy	update	All Resource ``	None	None
yundun-ddoscoo:DeleteAutoCcBlacklist	DeleteAutoCcBlacklist	delete	All Resource ``	None	None
yundun-ddoscoo:ModifyWebAreaBlockSwitch	ModifyWebAreaBlockSwitch	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainCcProtectSwitch	DescribeDomainCcProtectSwitch	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainTopFingerprint	DescribeDomainTopFingerprint	list	All Resource ``	None	None
yundun-ddoscoo:DescribeInstances	DescribeInstances	get	All Resource ``	None	None
yundun-ddoscoo:ModifyWebRule	ModifyWebRule	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDDoSEvents	DescribeDDoSEvents	get	All Resource ``	None	None
yundun-ddoscoo:DescribeL7RsPolicy	DescribeL7RsPolicy	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDefenseRecords	DescribeDefenseRecords	get	All Resource ``	None	None
yundun-ddoscoo:EmptySlsLogstore	EmptySlsLogstore	update	All Resource ``	None	None
yundun-ddoscoo:DescribeSlsLogstoreInfo	DescribeSlsLogstoreInfo	get	All Resource ``	None	None
yundun-ddoscoo:ModifyFullLogTtl	ModifyFullLogTtl	update	All Resource ``	None	None
yundun-ddoscoo:DescribeInstanceStatistics	DescribeInstanceStatistics	get	All Resource ``	None	None
yundun-ddoscoo:DescribeTagResources	DescribeTagResources	get	All Resource ``	None	None
yundun-ddoscoo:ModifyCnameReuse	ModifyCnameReuse	update	All Resource ``	None	None
yundun-ddoscoo:ModifyWebAIProtectMode	ModifyWebAIProtectMode	update	All Resource ``	None	None
yundun-ddoscoo:ModifyHttp2Enable	ModifyHttp2Enable	update	All Resource ``	None	None
yundun-ddoscoo:CreateDomainResource	CreateDomainResource	create	All Resource ``	None	None
yundun-ddoscoo:DescribeWebAreaBlockConfigs	DescribeWebAreaBlockConfigs	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDDosAllEventList	DescribeDDosAllEventList	get	All Resource ``	None	None
yundun-ddoscoo:ModifySceneDefensePolicy	ModifySceneDefensePolicy	update	All Resource ``	None	None
yundun-ddoscoo:ConfigUdpReflect	ConfigUdpReflect	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainTopHttpMethod	DescribeDomainTopHttpMethod	list	All Resource ``	None	None
yundun-ddoscoo:DescribeWebCCRules	DescribeWebCCRules	get	All Resource ``	None	None
yundun-ddoscoo:DescribePortAttackMaxFlow	DescribePortAttackMaxFlow	none	All Resource ``	None	None
yundun-ddoscoo:DisableWebCCRule	DisableWebCCRule	update	All Resource ``	None	None
yundun-ddoscoo:ModifyWebIpSetSwitch	ModifyWebIpSetSwitch	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDomains	DescribeDomains	get	All Resource ``	None	None
yundun-ddoscoo:DeleteDomainResource	DeleteDomainResource	list	All Resource ``	None	None
yundun-ddoscoo:DescribeOpEntities	DescribeOpEntities	get	All Resource ``	None	None
yundun-ddoscoo:DescribeStsGrantStatus	DescribeStsGrantStatus	get	All Resource ``	None	None
yundun-ddoscoo:DescribeElasticBandwidthSpec	DescribeElasticBandwidthSpec	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDDosEventMax	DescribeDDosEventMax	get	All Resource ``	None	None
yundun-ddoscoo:DescribeAutoCcWhitelist	DescribeAutoCcWhitelist	get	All Resource ``	None	None
yundun-ddoscoo:ModifyTlsConfig	ModifyTlsConfig	update	All Resource ``	None	None
yundun-ddoscoo:DescribeSceneDefenseObjects	DescribeSceneDefenseObjects	get	All Resource ``	None	None
yundun-ddoscoo:ModifyInstance	ModifyInstance	update	All Resource ``	None	None
yundun-ddoscoo:SwitchSchedulerRule	SwitchSchedulerRule	update	All Resource ``	None	None
yundun-ddoscoo:DescribeElasticQps	DescribeElasticQps	get	All Resource ``	None	None
yundun-ddoscoo:ConfigLayer4RulePolicy	ConfigLayer4RulePolicy	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDefenseCountStatistics	DescribeDefenseCountStatistics	get	All Resource ``	None	None
yundun-ddoscoo:DescribePortViewSourceCountries	DescribePortViewSourceCountries	get	All Resource ``	None	None
yundun-ddoscoo:ConfigWebCCRuleV2	ConfigWebCCRuleV2	update	All Resource ``	None	None
yundun-ddoscoo:CreateWebRule	CreateWebRule	create	All Resource ``	None	None
yundun-ddoscoo:DescribePortConnsCount	DescribePortConnsCount	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainStatusCodeCount	DescribeDomainStatusCodeCount	get	All Resource ``	None	None
yundun-ddoscoo:DescribePortViewSourceIsps	DescribePortViewSourceIsps	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDDosEventAttackType	DescribeDDosEventAttackType	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainViewTopCostTime	DescribeDomainViewTopCostTime	get	All Resource ``	None	None
yundun-ddoscoo:DescribeNetworkRegionBlock	DescribeNetworkRegionBlock	get	All Resource ``	None	None
yundun-ddoscoo:DescribePortAutoCcStatus	DescribePortAutoCcStatus	get	All Resource ``	None	None
yundun-ddoscoo:ModifyOcspStatus	ModifyOcspStatus	get	All Resource ``	None	None
yundun-ddoscoo:DeleteWebCacheCustomRule	DeleteWebCacheCustomRule	delete	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainTopUserAgent	DescribeDomainTopUserAgent	list	All Resource ``	None	None
yundun-ddoscoo:DescribeWebPreciseAccessRule	DescribeWebPreciseAccessRule	get	All Resource ``	None	None
yundun-ddoscoo:DescribePortFlowList	DescribePortFlowList	get	All Resource ``	None	None
yundun-ddoscoo:ModifyHealthCheckConfig	ModifyHealthCheckConfig	update	All Resource ``	None	None
yundun-ddoscoo:DescribeCdnLinkageRules	DescribeCdnLinkageRules	get	All Resource ``	None	None
yundun-ddoscoo:DisableSceneDefensePolicy	DisableSceneDefensePolicy	update	All Resource ``	None	None
yundun-ddoscoo:DescribeL7RsKeepalive	DescribeL7UsKeepalive	none	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainViewSourceProvinces	DescribeDomainViewSourceProvinces	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainViewSourceCountries	DescribeDomainViewSourceCountries	get	All Resource ``	None	None
yundun-ddoscoo:ModifyNetworkRuleAttribute	ModifyNetworkRuleAttribute	update	All Resource ``	None	None
yundun-ddoscoo:DescribeInstanceDetails	DescribeInstanceDetails	get	All Resource ``	None	None
yundun-ddoscoo:DescribeWebInstanceRelations	DescribeWebInstanceRelations	get	All Resource ``	None	None
yundun-ddoscoo:ConfigWebCCTemplate	ConfigWebCCTemplate	update	All Resource ``	None	None
yundun-ddoscoo:ConfigL7RsPolicy	ConfigL7RsPolicy	none	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainViewTopUrl	DescribeDomainViewTopUrl	get	All Resource ``	None	None
yundun-ddoscoo:DescribeWebAccessLogStatus	DescribeWebAccessLogStatus	get	All Resource ``	None	None
yundun-ddoscoo:CreatePort	CreatePort	create	All Resource ``	None	None
yundun-ddoscoo:DeleteWebCCRuleV2	DeleteWebCCRuleV2	delete	All Resource ``	None	None
yundun-ddoscoo:DescribeSystemLog	DescribeSystemLog	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainQPSList	DescribeDomainQPSList	get	All Resource ``	None	None
yundun-ddoscoo:DescribeAutoCcListCount	DescribeAutoCcListCount	get	All Resource ``	None	None
yundun-ddoscoo:DescribeCerts	DescribeCerts	get	All Resource ``	None	None
yundun-ddoscoo:ModifyWebCCGlobalSwitch	ModifyWebCCGlobalSwitch	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainTopAttackList	DescribeDomainTopAttackList	get	All Resource ``	None	None
yundun-ddoscoo:DescribeSlsOpenStatus	DescribeSlsOpenStatus	get	All Resource ``	None	None
yundun-ddoscoo:DescribeInstanceIds	DescribeInstanceIds	get	All Resource ``	None	None
yundun-ddoscoo:ConfigLayer4RuleBakMode	ConfigLayer4RuleBakMode	update	All Resource ``	None	None
yundun-ddoscoo:DisableWebCC	DisableWebCC	update	All Resource ``	None	None
yundun-ddoscoo:DescribeDDosEventSrcIp	DescribeDDosEventSrcIp	get	All Resource ``	None	None
yundun-ddoscoo:DeleteSchedulerRule	DeleteSchedulerRule	delete	All Resource ``	None	None
yundun-ddoscoo:DeleteWebCCRule	DeleteWebCCRule	delete	All Resource ``	None	None
yundun-ddoscoo:DescribeDDosEventIsp	DescribeDDosEventIsp	get	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainBps	DescribeDomainBps	list	All Resource ``	None	None
yundun-ddoscoo:AddAutoCcWhitelist	AddAutoCcWhitelist	create	All Resource ``	None	None
yundun-ddoscoo:DescribePortViewSourceProvinces	DescribePortViewSourceProvinces	get	All Resource ``	None	None
yundun-ddoscoo:ModifyWebPreciseAccessRule	ModifyWebPreciseAccessRule	update	All Resource ``	None	None
yundun-ddoscoo:DescribeAttackAnalysisMaxQps	DescribeAttackAnalysisMaxQps	get	All Resource ``	None	None
yundun-ddoscoo:EmptyAutoCcWhitelist	EmptyAutoCcWhitelist	update	All Resource ``	None	None
yundun-ddoscoo:DescribeHeaders	DescribeHeaders	get	All Resource ``	None	None
yundun-ddoscoo:EnableWebCC	EnableWebCC	update	All Resource ``	None	None
yundun-ddoscoo:ModifyHeaders	ModifyHeaders	update	All Resource ``	None	None
yundun-ddoscoo:ConfigDomainSecurityProfile	ConfigDomainSecurityProfile	update	All Resource ``	None	None
yundun-ddoscoo:DescribeWebRules	DescribeWebRules	list	All Resource ``	None	None
yundun-ddoscoo:DescribeDomainResource	DescribeDomainResource	list	All Resource ``	None	None
yundun-ddoscoo:ModifyWebPreciseAccessSwitch	ModifyWebPreciseAccessSwitch	update	All Resource ``	None	None
yundun-ddoscoo:DeleteNetworkRule	DeleteNetworkRule	delete	All Resource ``	None	None
yundun-ddoscoo:DescribeLayer4RulePolicy	DescribeLayer4RulePolicy	get	All Resource ``	None	None
yundun-ddoscoo:CreateAsyncTask	CreateAsyncTask	create	All Resource ``	None	None
yundun-ddoscoo:DescribeInstanceSpecs	DescribeInstanceSpecs	get	All Resource ``	None	None
yundun-ddoscoo:DisableWebAccessLogConfig	DisableWebAccessLogConfig	update	All Resource ``	None	None
yundun-ddoscoo:DescribePort	DescribePort	get	All Resource ``	None	None
yundun-ddoscoo:DetachSceneDefenseObject	DetachSceneDefenseObject	update	All Resource ``	None	None
yundun-ddoscoo:ConfigNetworkRules	ConfigNetworkRules	update	All Resource ``	None	None
yundun-ddoscoo:ModifyBlockStatus	ModifyBlockStatus	update	All Resource ``	None	None
yundun-ddoscoo:DeletePort	DeletePort	delete	All Resource ``	None	None

Resource

The following table lists the resources defined by Anti-DDoS. Specify them in the Resource element of RAM policy statements to grant permissions for specific operations. They are uniquely identified by ARNs. Format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: The initialism of Alibaba Cloud service, which indicates the public cloud of Alibaba Cloud.
{#ramcode}: The code used in RAM to indicate an Alibaba Cloud service.
{#regionId}: The region ID. If the resource covers all regions, set it to an asterisk (*).
{#accountId}: The ID of the Alibaba Cloud account. If the resource covers all Alibaba Cloud accounts, set it to an asterisk (*).
{#resourceType}: The service-defined resource identifier. It supports a hierarchical structure, which is similar to a file path. If the statement covers global resources, set it to an asterisk (*).

Resource type

ARN

Condition

Anti-DDoS does not define product-level condition keys. However, you can use Alibaba Cloud common condition keys for access control. For more information, see Common condition keys.

How to create custom RAM policies?

You can create custom policies and grant them to RAM users, RAM user groups, or RAM roles. For instructions, see: