All Products
Search
Document Center

Resource Access Management:AliyunYundunBastionHostFullAccess

Last Updated:Dec 16, 2024

AliyunYundunBastionHostFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunYundunBastionHostFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunYundunBastionHostFullAccess policy: Provides full access to Bastion Host Service via Management Console.

Policy details

  • Type: service system policy

  • Creation time: 04:27:51 on May 24, 2017

  • Update time: 11:11:59 on December 16, 2024

  • Current version: v4

Policy content

{
    "Version": "1",
    "Statement": [
        {
            "Action": "yundun-bastionhost:*",
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": "pam:GetInstanceDetail",
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "ram:CreateServiceLinkedRole",
                "ram:CheckServiceLinkedRoleExistence"
            ],
            "Resource": "*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": "bastionhost.aliyuncs.com"
                }
            }
        }
    ]
}

References