AliyunDataWorksFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunDataWorksFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunDataWorksFullAccess policy: Provides full access to DataWorks via Management Console.
Policy details
Type: service system policy
Creation time: 09:13:50 on August 28, 2018
Update time: 11:12:02 on August 22, 2023
Current version: v12
Policy content
{
"Version": "1",
"Statement": [
{
"Action": "dataworks:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"bpstudio:CreateApplication",
"bpstudio:ValidateApplication",
"bpstudio:GetApplication",
"bpstudio:ValuateApplication",
"bpstudio:AddApplication",
"bpstudio:DeployApplication",
"bpstudio:CreateOneClickOrder",
"bpstudio:DeployOneClickOrder",
"bpstudio:CheckOneClickOrder",
"bpstudio:GetApplicationDetail",
"bpstudio:QueryTemplateNodeInfo"
],
"Resource": [
"acs:bpstudio::*:template/B3O8L8S0Q6G7OPCE",
"acs:bpstudio::*:template/1CQU6W4Y42HXLZ14",
"acs:bpstudio::*:template/37KVVXY607PO3J99",
"acs:bpstudio::*:template/C479JZ7D4M8404NX",
"acs:bpstudio::*:template/F802CGSF25BJUH56",
"acs:bpstudio::*:template/V0FQ5ZSITFSIQL3I",
"acs:bpstudio::*:template/24Z2G5SLTU0K351R"
],
"Effect": "Allow"
},
{
"Action": [
"bpstudio:ExecuteOperationASync",
"bpstudio:GetExecuteResult",
"bss:DescribeOrderDetail",
"bpstudio:ValuateResource",
"quotas:ListProductQuotas",
"bss:DescribeInstances",
"odps:CreateProject"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ram:CreateServiceLinkedRole",
"ram:CheckServiceLinkedRoleExistence"
],
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"di.dataworks.aliyuncs.com",
"datamap.dataworks.aliyuncs.com",
"openplatform.dataworks.aliyuncs.com",
"dataworks.aliyuncs.com",
"dlf.dataworks.aliyuncs.com",
"engine.dataworks.aliyuncs.com",
"emr.dataworks.aliyuncs.com",
"identity.odps.aliyuncs.com"
]
}
}
}
]
}