All Products
Search
Document Center

Resource Access Management:AliyunDLFFullAccess

Last Updated:Aug 29, 2024

AliyunDLFFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunDLFFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunDLFFullAccess policy: Provides full access of OpenAPI and pages in Data Lake Formation.

Policy details

  • Type: service system policy

  • Creation time: 06:14:10 on September 07, 2020

  • Update time: 09:46:14 on April 26, 2023

  • Current version: v1

Policy content

{
  "Version": "1",
  "Statement": [
    {
      "Action": "dlf:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:ListRoles",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:PassRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "acs:Service": "dlf.aliyuncs.com"
        }
      }
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "flink.dlf-next.aliyuncs.com"
        }
      }           
    }
  ]
}

References