AliyunEHPCFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunEHPCFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunEHPCFullAccess policy: Provides full access to E-HPC via Management Console.
Policy details
Type: service system policy
Creation time: 07:02:02 on March 09, 2018
Update time: 03:57:15 on August 16, 2023
Current version: v5
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"ecs:DescribeZones",
"ecs:DescribeAvailableResource",
"ecs:DescribeSecurityGroups",
"ecs:DescribeKeyPairs",
"ecs:DescribeInstanceTypes",
"ecs:DescribeInstances",
"ecs:DescribeSpotInstanceAdvice",
"kms:ListKeys",
"nas:DescribeProtocolMountTarget",
"ecs:DescribeDeploymentSets",
"ecs-workbench:LoginInstance"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"vpc:DescribeVpcs",
"vpc:DescribeVSwitches"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ehpc:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": [
"ram:GetRole",
"ram:CreateRole",
"ram:AttachPolicyToRole"
],
"Resource": [
"acs:ram:*:*:policy/AliyunECSInstanceForEHPCRolePolicy",
"acs:ram:*:*:role/AliyunECSInstanceForEHPCRole"
]
},
{
"Action": "ram:PassRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"acs:Service": "ehpc.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "ehpc.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "workbench.ecs.aliyuncs.com"
}
}
}
]
}