AliyunADBSparkProcessingDataRolePolicy is the authorization policy dedicated to a service role. In most cases, when a service role is created, the policy is attached to the service role. Then, the service role is authorized to access other cloud services. This policy is updated by the relevant Alibaba Cloud service. Do not attach this policy to a RAM identity other than a service role.
Policy details
Type: service system policy
Creation time: 15:35:30 on June 29, 2022
Update time: 01:24:30 on June 23, 2025
Current version: v9
Policy content
{
"Statement": [
{
"Action": [
"oss:ListObjects",
"oss:GetBucketAcl",
"oss:GetBucketLocation",
"oss:GetBucketInfo",
"oss:GetBucketLogging",
"oss:GetBucketWebsite",
"oss:GetBucketReferer",
"oss:GetBucketLifecycle",
"oss:GetBucketEncryption",
"oss:GetBucketStat",
"oss:GetBucketMetadata",
"oss:GetBucketTagging",
"oss:GetBucketVersioning",
"oss:GetSimplifiedObjectMeta",
"oss:GetObjectMetadata",
"oss:GetBucketStorageCapacity",
"oss:GetBucketEncryption",
"oss:GetObject",
"oss:GetObjectAcl",
"oss:GetObjectTagging",
"oss:GetService",
"oss:ListObjects",
"oss:ListMultipartUploads",
"oss:ListParts",
"oss:ListBuckets",
"oss:ListVpcip",
"oss:ListVersions",
"oss:GetBucketCname",
"oss:GetBucketRequestPayment",
"oss:GetBucketVpcip",
"oss:DoesBucketExist",
"oss:DoesObjectExist",
"oss:ListObjectsV2",
"oss:PutBucket",
"oss:PutObject",
"oss:PutObjectTagging",
"oss:CopyObject",
"oss:AbortMultipartUpload",
"oss:RestoreObject",
"oss:UploadFile",
"oss:DownloadFile",
"oss:DeleteObject",
"oss:DeleteObjects",
"oss:DeleteObjectVersion",
"oss:ListObjectVersions",
"oss:HeadObject",
"oss:HeadBucket",
"oss:PostDataLakeStorageFileOperation",
"oss:PostDataLakeStorageAdminOperation"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ots:GetRow",
"ots:BatchGetRow",
"ots:GetRange",
"ots:GetShardIterator",
"ots:GetStreamRecord",
"ots:ListStream",
"ots:ListTable",
"ots:ListSearchIndex",
"ots:DescribeStream",
"ots:DescribeTable",
"ots:DescribeSearchIndex",
"ots:ComputeSplitPointsBySize",
"ots:CreateTable",
"ots:UpdateTable",
"ots:DeleteTable",
"ots:PutRow",
"ots:UpdateRow",
"ots:DeleteRow",
"ots:BatchWriteRow",
"ots:CreateIndex",
"ots:DropIndex",
"ots:CreateSearchIndex",
"ots:DeleteSearchIndex",
"ots:Search",
"ots:ComputeSplits",
"ots:ParallelScan",
"ots:BulkImport",
"ots:BulkExport"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"cr:GetAuthorizationToken",
"cr:PullRepository"
],
"Effect": "Allow",
"Resource": "*"
},
{
"Action": [
"adb:ListSparkApps",
"adb:ListSparkAppAttempts",
"adb:ListSparkTemplateFileIds",
"adb:ListSparkLogAnalyzeTasks",
"adb:GetSparkAppLog",
"adb:GetSparkAppInfo",
"adb:GetSparkAppState",
"adb:GetSparkAppMetrics",
"adb:GetSparkDefinitions",
"adb:GetSparkReplSession",
"adb:GetSparkReplStatement",
"adb:GetSparkConfigLogPath",
"adb:GetSparkSQLEngineState",
"adb:GetSparkLogAnalyzeTask",
"adb:GetSparkAppWebUiAddress",
"adb:GetSparkTemplateFullTree",
"adb:GetSparkTemplateFolderTree",
"adb:GetSparkTemplateFileContent",
"adb:DescribeAdbSparkLogs",
"adb:DescribeSparkAppType",
"adb:DescribeSparkCodeLog",
"adb:DescribeSparkCodeWebUi",
"adb:DescribeSparkCodeOutput",
"adb:DescribeSparkSQLDiagnosisList",
"adb:DescribeSparkAppDiagnosisInfo",
"adb:DescribeSparkSQLDiagnosisAttribute",
"adb:SetSparkAppLogRootPath",
"adb:GetSparkAppAttemptLog",
"adb:GetSparkLogAnalyzeTask",
"adb:CreateSparkTemplate",
"adb:DeleteSparkTemplate",
"adb:DeleteSparkTemplateFile",
"adb:StartSparkSQLEngine",
"adb:StartSparkReplSession",
"adb:KillSparkApp",
"adb:KillSparkSQLEngine",
"adb:KillSparkLogAnalyzeTask",
"adb:PreloadSparkAppMetrics",
"adb:UpdateSparkTemplateFile",
"adb:SubmitSparkApp",
"adb:SubmitSparkLogAnalyzeTask",
"adb:CancelSparkReplStatement",
"adb:ExecuteSparkReplStatement"
],
"Effect": "Allow",
"Resource": "*"
},
{
"Action": [
"dms:GetDataLakeCatalog",
"dms:ListDataLakeCatalog",
"dms:GetDataLakeDatabase",
"dms:ListDataLakeDatabase",
"dms:CreateDataLakeDatabase",
"dms:DeleteDataLakeDatabase",
"dms:UpdateDataLakeDatabase",
"dms:GetDataLakeTable",
"dms:ListDataLakeTable",
"dms:ListDataLakeTableName",
"dms:CreateDataLakeTable",
"dms:UpdateDataLakeTable",
"dms:DeleteDataLakeTable",
"dms:ListDataLakePartitionByFilter",
"dms:ListDataLakePartitionName",
"dms:ListDataLakePartition",
"dms:GetDataLakePartition",
"dms:CreateDataLakePartition",
"dms:BatchCreateDataLakePartitions",
"dms:UpdateDataLakePartition",
"dms:BatchUpdateDataLakePartitions",
"dms:DeleteDataLakePartition",
"dms:BatchDeleteDataLakePartitions",
"dms:CreateDataLakeFunction",
"dms:GetDataLakeFunction",
"dms:UpdateDataLakeFunction",
"dms:DeleteDataLakeFunction",
"dms:ListDataLakeFunctionName",
"dms:ListDataLakeFunction",
"dms:GetForeignInstance",
"dms:GetForeignInstanceCredInfo"
],
"Effect": "Allow",
"Resource": "*"
}
],
"Version": "1"
}