All Products
Search
Document Center

Resource Access Management:AliyunVPNGatewayReadOnlyAccess

Last Updated:Jan 22, 2026

AliyunVPNGatewayReadOnlyAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunVPNGatewayReadOnlyAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunVPNGatewayReadOnlyAccess policy: Provides read-only access to VPN Gateway via Management Console.

Policy details

  • Type: service system policy

  • Creation time: 08:24:58 on June 19, 2017

  • Update time: 08:22:01 on January 22, 2026

  • Current version: v8

Policy content

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "vpc:DescribeVpnGateway*",
        "vpc:DescribeVpnConnection*",
        "vpc:DescribeCustomerGateway*",
        "vpc:DescribeSslVpnServer*",
        "vpc:DescribeSslVpnClientCert*",
        "vpc:DescribeSslVpnClients",
        "vpc:DescribeVpn*",
        "vpc:GetVpn*",
        "vpc:ListVpn*",
        "vpc:ListIpsecServer*",
        "vpc:DescribeVpnCrossAccountAuthorizations",
        "vpc:DescribeVcoRouteEntries",
        "vpc:DescribeVpnAttachments",
        "vpc:CheckVpnBgpEnabled",
        "vpc:GetVpnReplacementStatus"
      ],
      "Resource": "*",
      "Effect": "Allow"
    }
  ]
}

References