AliyunECIFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunECIFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunECIFullAccess policy: Provides full access to Elastic Container Instance via Management Console.
Policy details
Type: service system policy
Creation time: 04:43:02 on September 18, 2018
Update time: 03:27:43 on October 11, 2021
Current version: v3
Policy content
{
"Version": "1",
"Statement": [
{
"Action": "eci:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ecs:DescribeSecurityGroups"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"vpc:DescribeVSwitches",
"vpc:DescribeVpcs",
"vpc:DescribeEipAddresses"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"eci.aliyuncs.com",
"vnode.eci.aliyuncs.com"
]
}
}
}
]
}