AliyunComputeNestUserFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunComputeNestUserFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunComputeNestUserFullAccess policy: Provides full access to Compute Nest for User via Management Console.
Policy details
Type: service system policy
Creation time: 05:27:00 on January 05, 2022
Update time: 01:48:58 on September 08, 2022
Current version: v3
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"computenest:*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"oos:GetParametersByPath",
"oos:GetParameter",
"oos:UpdateParameter"
],
"Resource": "acs:oos:*:*:parameter/computenest/*",
"Effect": "Allow"
},
{
"Action": [
"oos:GetSecretParametersByPath",
"oos:GetSecretParameter",
"oos:UpdateSecretParameter"
],
"Resource": "acs:oos:*:*:secretparameter/computenest/*",
"Effect": "Allow"
},
{
"Action": [
"kms:GetSecretValue",
"kms:PutSecretValue"
],
"Resource": "acs:kms:*:*:secret/oos/computenest/*",
"Effect": "Allow"
},
{
"Action": [
"ram:CreateServiceLinkedRole"
],
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"user.computenest.aliyuncs.com"
]
}
}
},
{
"Action": [
"ram:CreateRole",
"ram:GetRole"
],
"Resource": "acs:ram:*:*:role/AliyunCloudMonitorSendOperationMessageToComputeNestRole",
"Effect": "Allow"
}
]
}