Home PageResource Access ManagementDeveloper ReferenceSystem Policy ReferenceAliyunServiceRolePolicyForVPNCertificate
Search for Help Content

AliyunServiceRolePolicyForVPNCertificate

Updated at: 2023-12-28 12:37
Product
Community

AliyunServiceRolePolicyForVPNCertificate is the authorization policy dedicated to a service-linked role. The policy is automatically attached to a service role when the service role is created. Then, the service-linked role is authorized to access other cloud services. This policy is updated by the relevant Alibaba Cloud service. Do not attach this policy to a RAM identity other than a service-linked role.

Policy details

  • Type: service system policy

  • Creation time: 06:28:09 on November 12, 2020

  • Update time: 06:37:48 on October 08, 2022

  • Current version: v4

Policy content

{
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "kms:DescribeCertificate",
        "kms:GetCertificate",
        "kms:CertificatePublicKeyEncrypt",
        "kms:CertificatePrivateKeyDecrypt",
        "kms:CertificatePublicKeyVerify",
        "kms:CertificatePrivateKeySign",
        "yundun-cert:DescribeSSLCertificateList",
        "yundun-cert:DescribeSSLCertificateMatchDomainList",
        "yundun-cert:DescribeSSLCertificatePublicKeyDetail",
        "yundun-cert:DescribeSSLCertificatePrivateKey",
        "yundun-cert:Sign",
        "yundun-cert:Verify",
        "yundun-cert:Encrypt",
        "yundun-cert:Decrypt"
      ],
      "Resource": "*"
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "certificate.vpn.aliyuncs.com"
        }
      }
    }
  ],
  "Version": "1"
}

References

Previous: AliyunServiceRolePolicyForTagNext: AliyunServiceRolePolicyForVpn
  • On this page （1）
  • Policy details
  • Policy content
  • References
Feedback
phone Contact Us

Chat now with Alibaba Cloud Customer Service to assist you in finding the right products and services to meet your needs.

alicare alicarealicarealicare