AliyunYundunCloudFirewallFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunYundunCloudFirewallFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunYundunCloudFirewallFullAccess policy: Provides full access to Cloud Firewall via Management Console.
Policy details
Type: service system policy
Creation time: 01:32:26 on August 24, 2017
Update time: 05:53:35 on September 17, 2025
Current version: v4
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"yundun-cloudfirewall:*",
"sasti:Get*",
"sasti:Describe*",
"sasti:Query*",
"sasti:List*",
"sasti:Grant*",
"bss:QueryAvailableInstances",
"bssapi:QuerySavingsPlansInstance"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"yundun-sas:DescribeServiceLinkedRoleStatus",
"yundun-sas:CreateServiceLinkedRole",
"sasti:AskTextToTextMsg",
"sasti:SaveSecllmTalk",
"sasti:DeleteHistoryTalk",
"sasti:AddTalkScore",
"sasti:AddSessionScore"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"sas.aliyuncs.com",
"secllm.sas.aliyuncs.com",
"cloudfw.aliyuncs.com"
]
}
}
}
]
}