All Products
Search
Document Center

Virtual Private Cloud:RAM authorization

Last Updated:Nov 20, 2024
Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. You can use RAM to prevent RAM users from sharing the AccessKey pairs of your Alibaba Cloud account. You can also use RAM to grant minimum permissions to RAM users. RAM uses policies to define permissions.
This topic describes the elements, such as Action, Resource, and Condition, which are defined by VPC. You can use the elements to create policies in RAM. The code (RamCode) in RAM that is used to indicate VPC is [{"popCode":"Vpc","ramCodes":["vpc"]},{"popCode":"Netana","ramCodes":["vpc"]},{"popCode":"VpcPeer","ramCodes":["vpc"]}]. You can grant permissions on VPC at the RESOURCE.

General structure of a policy

Policies can be stored as JSON files. The following code provides an example on the general structure of a policy:
{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}
The following list describes the fields in the policy:
  • Effect: specifies the authorization effect. Valid values: Allow, Deny.
  • Action: specifies one or more API operations that are allowed or denied. For more information, see the Action section of this topic.
  • Resource: specifies one or more resources to which the policy applies. You can use an Alibaba Cloud Resource Name (ARN) to specify a resource. For more information, see the Resource section of this topic.
  • Condition: specifies one or more conditions that are required for the policy to take effect. This is an optional field. For more information, see the Condition section of this topic.
    • Condition_operator: specifies the conditional operators. Different types of conditions support different conditional operators. For more information, see Policy elements.
    • Condition_key: specifies the condition keys.
    • Condition_value: specifies the condition values.

Action

VPC defines the values that you can use in the Action element of a policy statement. The following table describes the values.
  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • API operation: the API operation that you can call to perform the operation.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition key: the condition keys that are defined by the Alibaba Cloud service. The Condition key column does not list the common condition keys that are defined by Alibaba Cloud. For more information about the common condition keys, see Generic Condition Keyword.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
ActionsAPI operationAccess levelResource typeCondition keyAssociated operation
vpc:DeleteIpv4GatewayDeleteIpv4Gatewaydelete
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
NoneNone
vpc:UpdateVirtualBorderBandwidthUpdateVirtualBorderBandwidthupdate
VirtualBorderRouter
acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:CreatePhysicalConnectionSetupOrderCreatePhysicalConnectionSetupOrdercreate
All Resources
*
NoneNone
vpc:ListIpv4GatewaysListIpv4Gatewayslist
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
NoneNone
vpc:DownloadVpnConnectionConfigDownloadVpnConnectionConfigget
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:ListPublicIpAddressPoolsListPublicIpAddressPoolsget
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
NoneNone
vpc:ModifyVSwitchAttributeModifyVSwitchAttributeupdate
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
NoneNone
vpc:GetPublicIpAddressPoolServiceStatusGetPublicIpAddressPoolServiceStatusget
All Resources
*
NoneNone
vpc:DescribeSslVpnServersDescribeSslVpnServerslist
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
NoneNone
vpc:DeletePublicIpAddressPoolDeletePublicIpAddressPooldelete
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
NoneNone
vpc:DescribeBgpGroupsDescribeBgpGroupsget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:DescribeSnatTableEntriesDescribeSnatTableEntriesget
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
NoneNone
vpc:CreatePhysicalConnectionCreatePhysicalConnectioncreate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
NoneNone
vpc:CreateHaVipCreateHaVipcreate
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/*
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
NoneNone
vpc:ModifyRouteEntryModifyRouteEntryupdate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
NoneNone
vpc:AllocateVpcIpv6CidrAllocateVpcIpv6Cidrnone
All Resources
*
NoneNone
vpc:DescribeVpcAttributeDescribeVpcAttributeget
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
None
vpc:CreateExpressConnectTrafficQosQueueCreateExpressConnectTrafficQosQueuecreate
All Resources
*
NoneNone
vpc:UnassociateEipAddressUnassociateEipAddressdelete
Instance
acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
NoneNone
vpc:ModifyVpnPbrRouteEntryPriorityModifyVpnPbrRouteEntryPriorityupdate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:StartFailoverTestJobStartFailoverTestJobupdate
All Resources
*
NoneNone
vpc:CreateForwardEntryCreateForwardEntrycreate
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
NoneNone
vpc:AddBgpNetworkAddBgpNetworkget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:DescribeExpressConnectTrafficQosRuleDescribeExpressConnectTrafficQosRulelist
All Resources
*
NoneNone
vpc:CreateVpcPrefixListCreateVpcPrefixListcreate
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/*
NoneNone
vpc:RecoverPhysicalConnectionRecoverPhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
NoneNone
vpc:ModifyTunnelAttributeModifyTunnelAttributeupdate
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:CreateExpressConnectTrafficQosRuleCreateExpressConnectTrafficQosRulecreate
All Resources
*
NoneNone
vpc:UpdateTrafficMirrorFilterAttributeUpdateTrafficMirrorFilterAttributeupdate
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
NoneNone
vpc:AssociateRouteTableWithGatewayAssociateRouteTableWithGatewaycreate
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
NoneNone
vpc:DescribeVpnSslServerLogsDescribeVpnSslServerLogsget
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
NoneNone
vpc:UpdateGatewayRouteTableEntryAttributeUpdateGatewayRouteTableEntryAttributeupdate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
NoneNone
vpc:DescribeNetworkAclsDescribeNetworkAclslist
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/*
NoneNone
vpc:ModifyRouterInterfaceSpecModifyRouterInterfaceSpecupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:TerminateVirtualBorderRouterTerminateVirtualBorderRouterupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:DescribeFlowLogsDescribeFlowLogsget
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/*
NoneNone
vpc:TerminatePhysicalConnectionTerminatePhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:ListDhcpOptionsSetsListDhcpOptionsSetsget
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
NoneNone
vpc:DeleteVpnConnectionDeleteVpnConnectiondelete
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:ModifyEipAddressAttributeModifyEipAddressAttributeupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NoneNone
vpc:ListVpcEndpointServicesByEndUserListVpcEndpointServicesByEndUserlist
All Resources
*
NoneNone
vpc:AssociateRouteTableAssociateRouteTableupdate
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}
NoneNone
vpc:DeactiveFlowLogDeactiveFlowLogupdate
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
NoneNone
vpc:DescribeFailoverTestJobDescribeFailoverTestJobget
All Resources
*
NoneNone
vpc:ModifyCommonBandwidthPackageSpecModifyCommonBandwidthPackageSpecupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NoneNone
vpc:ModifyBgpPeerAttributeModifyBgpPeerAttributeupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:EnableVpcClassicLinkEnableVpcClassicLinkupdate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:CreateNatGatewayCreateNatGatewaycreate
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/*
NoneNone
vpc:DescribeVpnGatewayDescribeVpnGatewayget
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:ModifyIpv6GatewayAttributeModifyIpv6GatewayAttributeupdate
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
NoneNone
vpc:AddCommonBandwidthPackageIpAddCommonBandwidthPackageIpcreate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NoneNone
vpc:DeleteRouterInterfaceDeleteRouterInterfacedelete
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:SetHighDefinitionMonitorLogStatusSetHighDefinitionMonitorLogStatusWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NoneNone
vpc:ModifyVSwitchCidrReservationAttributeModifyVSwitchCidrReservationAttributeupdate
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
NoneNone
vpc:DeleteFailoverTestJobDeleteFailoverTestJobdelete
All Resources
*
NoneNone
vpc:DeleteVpnAttachmentDeleteVpnAttachmentdelete
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:ActiveFlowLogActiveFlowLogupdate
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
NoneNone
vpc:DeleteVpnPbrRouteEntryDeleteVpnPbrRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:AllocateEipAddressProAllocateEipAddressProupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
NoneNone
vpc:ListGeographicSubRegionsListGeographicSubRegionslist
All Resources
*
NoneNone
vpc:CreateIpv6EgressOnlyRuleCreateIpv6EgressOnlyRulecreate
Ipv6EgressRule
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
NoneNone
vpc:DescribeVcoRouteEntriesDescribeVcoRouteEntrieslist
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:DeleteTrafficMirrorSessionDeleteTrafficMirrorSessiondelete
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
NoneNone
vpc:DissociateRouteTableFromGatewayDissociateRouteTableFromGatewayget
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
NoneNone
vpc:UpdateTrafficMirrorFilterRuleAttributeUpdateTrafficMirrorFilterRuleAttributeupdate
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
NoneNone
vpc:DescribeHighDefinitionMonitorLogAttributeDescribeHighDefinitionMonitorLogAttributeget
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NoneNone
vpc:DescribeVpnCrossAccountAuthorizationsDescribeVpnCrossAccountAuthorizationsget
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:CreateSnatEntryCreateSnatEntrycreate
SnatEntry
acs:vpc:{#regionId}:{#accountId}:snattable/*
NoneNone
vpc:CreateRouteEntriesCreateRouteEntriescreate
RouteEntry
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
NoneNone
vpc:DescribeNetworkAclAttributesDescribeNetworkAclAttributesget
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
NoneNone
vpc:ListVSwitchCidrReservationsListVSwitchCidrReservationslist
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
NoneNone
vpc:DeleteVSwitchDeleteVSwitchdelete
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
NoneNone
vpc:ModifyVpcAttributeModifyVpcAttributeupdate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
None
vpc:AllocateEipAddressAllocateEipAddresscreate
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
NoneNone
vpc:CreateVpnRouteEntryCreateVpnRouteEntrycreate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:CreateIpv4GatewayCreateIpv4Gatewaycreate
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
NoneNone
vpc:ModifySnatEntryModifySnatEntryupdate
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
NoneNone
vpc:ListTagResourcesForExpressConnectListTagResourcesForExpressConnectlist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:DescribeVSwitchAttributesDescribeVSwitchAttributesget
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
NoneNone
vpc:DeleteVpcGatewayEndpointDeleteVpcGatewayEndpointdelete
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
NoneNone
vpc:ChangeResourceGroupChangeResourceGroupupdate
PhysicalConnection
acs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:CreateVirtualBorderRouterCreateVirtualBorderRoutercreate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*
NoneNone
vpc:GetPhysicalConnectionServiceStatusGetPhysicalConnectionServiceStatusget
All Resources
*
NoneNone
vpc:ReleaseIpv6AddressReleaseIpv6Addressdelete
Ipv6Address
acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
NoneNone
vpc:CreateFailoverTestJobCreateFailoverTestJobcreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:OpenTrafficMirrorServiceOpenTrafficMirrorServicecreate
All Resources
*
NoneNone
vpc:CreateDhcpOptionsSetCreateDhcpOptionsSetcreate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
NoneNone
vpc:ListGatewayRouteTableEntriesListGatewayRouteTableEntrieslist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
NoneNone
vpc:DeleteHaVipDeleteHaVipdelete
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
NoneNone
vpc:AttachDhcpOptionsSetToVpcAttachDhcpOptionsSetToVpcupdate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:DescribeIpv6AddressesDescribeIpv6Addresseslist
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:vpc/*
NoneNone
vpc:ListFullNatEntriesListFullNatEntriesget
FullNat
acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}
NoneNone
vpc:CreateVcoRouteEntryCreateVcoRouteEntrycreate
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:CreateVpconnFromVbrCreateVpconnFromVbrcreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}
NoneNone
vpc:CreateNetworkAclCreateNetworkAclcreate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:DeleteFlowLogDeleteFlowLogdelete
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
NoneNone
vpc:CreateVpnPbrRouteEntryCreateVpnPbrRouteEntrycreate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:DeleteVpnRouteEntryDeleteVpnRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:UnassociateRouteTableUnassociateRouteTableupdate
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
NoneNone
vpc:DeleteTrafficMirrorFilterDeleteTrafficMirrorFilterdelete
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
NoneNone
vpc:DeleteForwardEntryDeleteForwardEntrydelete
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
NoneNone
vpc:UpdateNetworkAclEntriesUpdateNetworkAclEntriesupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
NoneNone
vpc:DeleteExpressConnectTrafficQosDeleteExpressConnectTrafficQosdelete
All Resources
*
NoneNone
vpc:DeleteVSwitchCidrReservationDeleteVSwitchCidrReservationdelete
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
NoneNone
vpc:DescribeVirtualBorderRoutersForPhysicalConnectionDescribeVirtualBorderRoutersForPhysicalConnectionlist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:PhysicalConnection
None
vpc:ModifyCustomerGatewayAttributeModifyCustomerGatewayAttributeupdate
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
NoneNone
vpc:ModifyVRouterAttributeModifyVRouterAttributeupdate
VRouter
acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}
NoneNone
vpc:DeleteTrafficMirrorFilterRulesDeleteTrafficMirrorFilterRulesdelete
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
NoneNone
vpc:MoveVpnResourceGroupMoveVpnResourceGroupupdate
All Resources
*
NoneNone
vpc:DeleteVcoRouteEntryDeleteVcoRouteEntryWrite
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:GetDhcpOptionsSetGetDhcpOptionsSetget
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
NoneNone
vpc:ListEnhanhcedNatGatewayAvailableZonesListEnhanhcedNatGatewayAvailableZoneslist
All Resources
*
NoneNone
vpc:ModifyNetworkAclAttributesModifyNetworkAclAttributesupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
NoneNone
vpc:DeleteVirtualBorderRouterDeleteVirtualBorderRouterdelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:DeleteVpcDeleteVpcdelete
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
None
vpc:GetVpcPrefixListAssociationsGetVpcPrefixListAssociationsget
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
NoneNone
vpc:DeleteIpv6EgressOnlyRuleDeleteIpv6EgressOnlyRuledelete
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
NoneNone
vpc:OpenPhysicalConnectionServiceOpenPhysicalConnectionServicecreate
All Resources
*
NoneNone
vpc:DescribeNatGatewaysDescribeNatGatewaysget
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/*
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
NoneNone
vpc:DescribeCustomerGatewayDescribeCustomerGatewayget
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
NoneNone
vpc:DescribeEcGrantRelationDescribeEcGrantRelationlist
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:CreateFlowLogCreateFlowLogcreate
VSwitch
acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId}
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:ModifyIpv6AddressAttributeModifyIpv6AddressAttributeupdate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:ModifyHaVipAttributeModifyHaVipAttributeupdate
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
NoneNone
vpc:DescribeRouteEntryListDescribeRouteEntryListget
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
NoneNone
vpc:GetVpcRouteEntrySummaryGetVpcRouteEntrySummarylist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}
NoneNone
vpc:CreateRouteEntryCreateRouteEntrycreate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
NoneNone
vpc:CopyNetworkAclEntriesCopyNetworkAclEntriesupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
NoneNone
vpc:CreateVirtualPhysicalConnectionCreateVirtualPhysicalConnectioncreate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
NoneNone
vpc:ListBusinessAccessPointsListBusinessAccessPointslist
All Resources
*
NoneNone
vpc:UnassociateNetworkAclUnassociateNetworkAclupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
NoneNone
vpc:ModifyBgpGroupAttributeModifyBgpGroupAttributeupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:DescribeTagKeysForExpressConnectDescribeTagKeysForExpressConnectlist
PhysicalConnection
acs:vpc:{#regionId}:{#AccountId}:physicalconnection/{#PhysicalConnectionId}
RouterInterface
acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:ModifyCommonBandwidthPackageIpBandwidthModifyCommonBandwidthPackageIpBandwidthupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NoneNone
vpc:ApplyPhysicalConnectionLOAApplyPhysicalConnectionLOAupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:AllocateIpv6AddressAllocateIpv6Addresscreate
Ipv6Address
acs:vpc:{#regionId}:{#accountId}:ipv6address/*
NoneNone
vpc:DescribeVpnConnectionDescribeVpnConnectionget
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:CreateVbrHaCreateVbrHacreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:CreateVpnAttachmentCreateVpnAttachmentcreate
All Resources
*
NoneNone
vpc:VpcDescribeVpcNatGatewayNetworkInterfaceQuotaVpcDescribeVpcNatGatewayNetworkInterfaceQuotaget
All Resources
*
NoneNone
vpc:GetIpv4GatewayAttributeGetIpv4GatewayAttributeget
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}
NoneNone
vpc:RecoverVirtualBorderRouterRecoverVirtualBorderRouterupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:GetFlowLogServiceStatusGetFlowLogServiceStatusget
FlowLogService
acs:vpc:{#regionId}:{#accountId}:flowlog/*
NoneNone
vpc:RevokeInstanceFromVbrRevokeInstanceFromVbrupdate
VPC
acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}
NoneNone
vpc:AssociateEipAddressAssociateEipAddressupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
Association
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
NoneNone
vpc:ModifyVpnRouteEntryWeightModifyVpnRouteEntryWeightWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:DescribeVpnRouteEntriesDescribeVpnRouteEntriesget
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:RemoveSourcesFromTrafficMirrorSessionRemoveSourcesFromTrafficMirrorSessionupdate
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
NoneNone
vpc:CreateBgpGroupCreateBgpGroupcreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:CreateRouterInterfaceCreateRouterInterfacecreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/*
vpc:TargetAccountRDId
None
vpc:AssociateRouteTablesWithVpcGatewayEndpointAssociateRouteTablesWithVpcGatewayEndpointcreate
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
NoneNone
vpc:GrantInstanceToVbrGrantInstanceToVbrupdate
VPC
acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}
NoneNone
vpc:DescribeVpnPbrRouteEntriesDescribeVpnPbrRouteEntriesget
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:AttachVbrToVpconnAttachVbrToVpconnupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}
NoneNone
vpc:GrantInstanceToCenGrantInstanceToCenupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:RetryVpcPrefixListAssociationRetryVpcPrefixListAssociationupdate
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
NoneNone
vpc:GetNatGatewayAttributeGetNatGatewayAttributeget
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
NoneNone
vpc:CheckCanAllocateVpcPrivateIpAddressCheckCanAllocateVpcPrivateIpAddressnone
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
NoneNone
vpc:DiagnoseVpnConnectionsDiagnoseVpnConnectionsget
All Resources
*
NoneNone
vpc:Describe95TrafficDescribe95Trafficget
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NoneNone
vpc:DescribeVpnGatewaysDescribeVpnGatewayslist
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}
NoneNone
vpc:UntagResourcesForExpressConnectUntagResourcesForExpressConnectupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:CreateVpnConnectionCreateVpnConnectioncreate
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:DescribeCommonBandwidthPackagesDescribeCommonBandwidthPackagesget
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
NoneNone
vpc:ModifySslVpnClientCertModifySslVpnClientCertWrite
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
NoneNone
vpc:UpdateVirtualPhysicalConnectionUpdateVirtualPhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
NoneNone
vpc:AddSourcesToTrafficMirrorSessionAddSourcesToTrafficMirrorSessionupdate
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
NoneNone
vpc:DescribeEipGatewayInfoDescribeEipGatewayInfolist
GatewayInfo
acs:vpc:{#regionId}:{#accountId}:eip/*
NoneNone
vpc:ModifyExpressConnectTrafficQosModifyExpressConnectTrafficQosupdate
All Resources
*
NoneNone
vpc:DeleteCustomerGatewayDeleteCustomerGatewaydelete
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
NoneNone
vpc:GetVpcPrefixListEntriesGetVpcPrefixListEntriesget
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
NoneNone
vpc:UpdateDhcpOptionsSetAttributeUpdateDhcpOptionsSetAttributeupdate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
NoneNone
vpc:CreateVSwitchCreateVSwitchcreate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/*
vpc:tag
None
vpc:ModifyNatGatewayAttributeModifyNatGatewayAttributeupdate
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
NoneNone
vpc:CreateExpressConnectTrafficQosCreateExpressConnectTrafficQoscreate
TrafficQos
acs:vpc:{#regionId}:{#accountId}:TrafficQos/*
NoneNone
vpc:UpdateTrafficMirrorSessionAttributeUpdateTrafficMirrorSessionAttributeupdate
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
NoneNone
vpc:ListPublicIpAddressPoolCidrBlocksListPublicIpAddressPoolCidrBlocksget
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
NoneNone
vpc:CreateDefaultVSwitchCreateDefaultVSwitchWrite
VSwitch
acs:vpc:{#regionid}:{#accountId}:vswitch/*
NoneNone
vpc:TagResourcesTagResourcesupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:tag
None
vpc:DescribeVRoutersDescribeVRouterslist
VRouter
acs:vpc:{#regionId}:{#accountId}:vrouter/*
vpc:VPC
None
vpc:DeleteSslVpnClientCertDeleteSslVpnClientCertWrite
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
NoneNone
vpc:ListVirtualPhysicalConnectionsListVirtualPhysicalConnectionslist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:CreateRouteTableCreateRouteTablecreate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/*
NoneNone
vpc:DeleteBgpGroupDeleteBgpGroupdelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:CreateVpcCreateVpccreate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
NoneNone
vpc:AssociateEipAddressBatchAssociateEipAddressBatchupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
NoneNone
vpc:DeleteRouteTableDeleteRouteTabledelete
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
NoneNone
vpc:UpdateVpcGatewayEndpointAttributeUpdateVpcGatewayEndpointAttributeupdate
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
NoneNone
vpc:ModifyRouterInterfaceAttributeModifyRouterInterfaceAttributeupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:TargetAccountRDId
None
vpc:ModifyPhysicalConnectionAttributeModifyPhysicalConnectionAttributeupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:DescribeGrantRulesToCenDescribeGrantRulesToCenget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}
GrantRuleToCen
acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
NoneNone
vpc:DescribeIpv6GatewayAttributeDescribeIpv6GatewayAttributeget
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
NoneNone
vpc:DetachDhcpOptionsSetFromVpcDetachDhcpOptionsSetFromVpcupdate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:DescribeIpv6GatewaysDescribeIpv6Gatewaysget
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
NoneNone
vpc:ModifyIpv6InternetBandwidthModifyIpv6InternetBandwidthupdate
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
NoneNone
vpc:ModifyVirtualBorderRouterAttributeModifyVirtualBorderRouterAttributeupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:ActivateRouterInterfaceActivateRouterInterfaceupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:ModifyVpnPbrRouteEntryWeightModifyVpnPbrRouteEntryWeightWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:EnableVpcIpv4GatewayEnableVpcIpv4Gatewayupdate
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
NoneNone
vpc:DescribeRouterInterfaceAttributeDescribeRouterInterfaceAttributeget
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:CreatePublicIpAddressPoolCreatePublicIpAddressPoolcreate
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
NoneNone
vpc:ListTagResourcesListTagResourcesget
All Resources
*
vpc:tag
None
vpc:CreatePhysicalConnectionOccupancyOrderCreatePhysicalConnectionOccupancyOrdercreate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:UnassociateVpcCidrBlockUnassociateVpcCidrBlockdelete
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:ModifyVpnGatewayAttributeModifyVpnGatewayAttributeupdate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:ListTrafficMirrorFiltersListTrafficMirrorFilterslist
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
NoneNone
vpc:CancelCommonBandwidthPackageIpBandwidthCancelCommonBandwidthPackageIpBandwidthupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NoneNone
vpc:ListTrafficMirrorSessionsListTrafficMirrorSessionslist
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
NoneNone
vpc:DescribeIpv6EgressOnlyRulesDescribeIpv6EgressOnlyRulesget
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
NoneNone
vpc:DissociateRouteTablesFromVpcGatewayEndpointDissociateRouteTablesFromVpcGatewayEndpointdelete
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
NoneNone
vpc:DescribeVbrHaDescribeVbrHaget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:CreateTrafficMirrorFilterCreateTrafficMirrorFiltercreate
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
NoneNone
vpc:DescribeBgpPeersDescribeBgpPeersget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:ModifyNatGatewaySpecModifyNatGatewaySpecWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
NoneNone
vpc:DescribeTagsDescribeTagsget
All Resources
*
vpc:tag
None
vpc:EnableNatGatewayEcsMetricEnableNatGatewayEcsMetriccreate
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
NoneNone
vpc:CreateBgpPeerCreateBgpPeercreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:DescribePhysicalConnectionLOADescribePhysicalConnectionLOAget
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:ModifyNatIpAttributeModifyNatIpAttributeupdate
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
NoneNone
vpc:DescribeRouterInterfacesDescribeRouterInterfaceslist
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:DeleteRouteEntryDeleteRouteEntrydelete
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
NoneNone
vpc:UnassociatePhysicalConnectionFromVirtualBorderRouterUnassociatePhysicalConnectionFromVirtualBorderRouterupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:DescribeTagKeysDescribeTagKeysget
All Resources
*
NoneNone
vpc:GetVSwitchCidrReservationUsageGetVSwitchCidrReservationUsageget
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
NoneNone
vpc:DescribeVpnConnectionsDescribeVpnConnectionslist
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/*
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:ReleaseEipSegmentAddressReleaseEipSegmentAddressdelete
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NoneNone
vpc:CheckVpnBgpEnabledCheckVpnBgpEnablednone
All Resources
*
NoneNone
vpc:DeleteIpsecServerDeleteIpsecServerdelete
IpsecServer
acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}
NoneNone
vpc:DescribeSslVpnClientsDescribeSslVpnClientslist
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:CreateVSwitchCidrReservationCreateVSwitchCidrReservationcreate
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
NoneNone
vpc:ListVpcGatewayEndpointsListVpcGatewayEndpointslist
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
NoneNone
vpc:DescribeVirtualBorderRoutersDescribeVirtualBorderRouterslist
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:DeleteIpv6InternetBandwidthDeleteIpv6InternetBandwidthdelete
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
NoneNone
vpc:DescribeRouteTableListDescribeRouteTableListlist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/*
vpc:VRouter
vpc:VBR
None
vpc:GetVpcGatewayEndpointAttributeGetVpcGatewayEndpointAttributeget
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
NoneNone
vpc:CreateSslVpnServerCreateSslVpnServercreate
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:AddPublicIpAddressPoolCidrBlockAddPublicIpAddressPoolCidrBlockcreate
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
NoneNone
vpc:PublishVpnRouteEntryPublishVpnRouteEntryupdate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:DisableNatGatewayEcsMetricDisableNatGatewayEcsMetricdelete
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
NoneNone
vpc:UpdatePublicIpAddressPoolAttributeUpdatePublicIpAddressPoolAttributeWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
NoneNone
vpc:ListIpsecServersListIpsecServerslist
All Resources
*
NoneNone
vpc:CreateVpnGatewayCreateVpnGatewaycreate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/*
NoneNone
vpc:DeleteBgpNetworkDeleteBgpNetworkdelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:ModifyExpressConnectTrafficQosRuleModifyExpressConnectTrafficQosRuleupdate
All Resources
*
NoneNone
vpc:DeactivateRouterInterfaceDeactivateRouterInterfaceupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:AssociatePhysicalConnectionToVirtualBorderRouterAssociatePhysicalConnectionToVirtualBorderRouterupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:UpdateIpv4GatewayAttributeUpdateIpv4GatewayAttributeupdate
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
NoneNone
vpc:DescribeCustomerGatewaysDescribeCustomerGatewayslist
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/*
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
NoneNone
vpc:DescribeVpcsDescribeVpcslist
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId}
vpc:tag
None
vpc:AllocateEipSegmentAddressAllocateEipSegmentAddresscreate
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/*
NoneNone
vpc:DescribeVSwitchesDescribeVSwitcheslist
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/*
vpc:VPC
None
vpc:DescribePhysicalConnectionsDescribePhysicalConnectionslist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
NoneNone
vpc:ConnectRouterInterfaceConnectRouterInterfaceupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:DescribeFailoverTestJobsDescribeFailoverTestJobslist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:DeletePhysicalConnectionDeletePhysicalConnectiondelete
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:ConfirmPhysicalConnectionConfirmPhysicalConnectionget
PhysicalConnection
acs:vpc:{#regionid}:{#accountid}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:AssociateNetworkAclAssociateNetworkAclupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
NoneNone
vpc:CreateTrafficMirrorFilterRulesCreateTrafficMirrorFilterRulescreate
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
NoneNone
vpc:DisableVpcClassicLinkDisableVpcClassicLinkupdate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:ModifySslVpnServerModifySslVpnServerupdate
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
NoneNone
vpc:ModifyCommonBandwidthPackageAttributeModifyCommonBandwidthPackageAttributeupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NoneNone
vpc:AssociateHaVipAssociateHaVipcreate
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
NoneNone
vpc:DescribeHaVipsDescribeHaVipsget
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/*
NoneNone
vpc:UnassociateHaVipUnassociateHaVipdelete
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
NoneNone
vpc:ModifyForwardEntryModifyForwardEntryupdate
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
NoneNone
vpc:DeleteExpressConnectTrafficQosRuleDeleteExpressConnectTrafficQosRuledelete
All Resources
*
NoneNone
vpc:ReplaceVpcDhcpOptionsSetReplaceVpcDhcpOptionsSetupdate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:DescribeRouteTablesDescribeRouteTableslist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:VBR
vpc:VRouter
None
vpc:CreateIpsecServerCreateIpsecServercreate
All Resources
*
NoneNone
vpc:OpenFlowLogServiceOpenFlowLogServicecreate
FlowLogService
acs:vpc:{#regionId}:{#accountId}:flowlog/*
NoneNone
vpc:DescribeBgpNetworksDescribeBgpNetworksget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:AllocateIpv6InternetBandwidthAllocateIpv6InternetBandwidthcreate
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*
NoneNone
vpc:CreateTrafficMirrorSessionCreateTrafficMirrorSessioncreate
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
NoneNone
vpc:CreateSslVpnClientCertCreateSslVpnClientCertcreate
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
NoneNone
vpc:CancelPhysicalConnectionCancelPhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:ModifyFlowLogAttributeModifyFlowLogAttributeupdate
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
NoneNone
vpc:DescribeSslVpnClientCertsDescribeSslVpnClientCertslist
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
NoneNone
vpc:CreateDefaultVpcCreateDefaultVpcWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
NoneNone
vpc:ModifyExpressConnectTrafficQosQueueModifyExpressConnectTrafficQosQueueupdate
All Resources
*
NoneNone
vpc:GetTrafficMirrorServiceStatusGetTrafficMirrorServiceStatusget
All Resources
*
NoneNone
vpc:UpdateIpsecServerUpdateIpsecServerupdate
All Resources
*
NoneNone
vpc:AddCommonBandwidthPackageIpsAddCommonBandwidthPackageIpscreate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NoneNone
vpc:ModifyVpnPbrRouteEntryAttributeModifyVpnPbrRouteEntryAttributeupdate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:DeleteCommonBandwidthPackageDeleteCommonBandwidthPackagedelete
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}
vpc:tag
None
vpc:RevokeInstanceFromCenRevokeInstanceFromCenupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:DeleteVpcPrefixListDeleteVpcPrefixListdelete
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
NoneNone
vpc:DeleteIpv6GatewayDeleteIpv6Gatewaydelete
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
NoneNone
vpc:ReleaseEipAddressReleaseEipAddressupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:tag
None
vpc:DeleteRouteEntriesDeleteRouteEntriesdelete
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
NoneNone
vpc:DeleteNetworkAclDeleteNetworkAcldelete
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
NoneNone
vpc:CreateCommonBandwidthPackageCreateCommonBandwidthPackagecreate
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
NoneNone
vpc:SecondApplyPhysicalConnectionLOASecondApplyPhysicalConnectionLOAnone
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:AssociateVpcCidrBlockAssociateVpcCidrBlockcreate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
NoneNone
vpc:DescribeEipAddressesDescribeEipAddresseslist
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:tag
None
vpc:DescribeVpnConnectionLogsDescribeVpnConnectionLogslist
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:ModifyVpcPrefixListModifyVpcPrefixListupdate
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
NoneNone
vpc:CreateIpv6GatewayCreateIpv6Gatewaycreate
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
NoneNone
vpc:DeleteVbrHaDeleteVbrHadelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
NoneNone
vpc:RemoveCommonBandwidthPackageIpRemoveCommonBandwidthPackageIpdelete
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NoneNone
vpc:CreateVpcGatewayEndpointCreateVpcGatewayEndpointcreate
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
NoneNone
vpc:ModifyRouteTableAttributesModifyRouteTableAttributesupdate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:VRouter
None
vpc:ModifyVcoRouteEntryWeightModifyVcoRouteEntryWeightWrite
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:DescribeVpnAttachmentsDescribeVpnAttachmentslist
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:DescribeForwardTableEntriesDescribeForwardTableEntriesget
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
NoneNone
vpc:MoveResourceGroupMoveResourceGroupupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}
Eip
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
NoneNone
vpc:CompletePhysicalConnectionLOACompletePhysicalConnectionLOAupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:UnTagResourcesUnTagResourcesupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:tag
None
vpc:CreateCustomerGatewayCreateCustomerGatewaycreate
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/*
NoneNone
vpc:TagResourcesForExpressConnectTagResourcesForExpressConnectupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
NoneNone
vpc:DeletePublicIpAddressPoolCidrBlockDeletePublicIpAddressPoolCidrBlockWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
NoneNone
vpc:DeleteSnatEntryDeleteSnatEntrydelete
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
NoneNone
vpc:DescribeEipSegmentDescribeEipSegmentget
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/*
NoneNone
vpc:EnablePhysicalConnectionEnablePhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
NoneNone
vpc:DeletionProtectionDeletionProtectiondelete
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NoneNone
vpc:DeleteSslVpnServerDeleteSslVpnServerWrite
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
NoneNone
vpc:ListPrefixListsListPrefixListslist
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/*
NoneNone
vpc:ModifyVpnConnectionAttributeModifyVpnConnectionAttributeupdate
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:DescribeSslVpnClientCertDescribeSslVpnClientCertget
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
NoneNone
vpc:DeleteVpnGatewayDeleteVpnGatewaydelete
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NoneNone
vpc:DeleteBgpPeerDeleteBgpPeerdelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
NoneNone
vpc:DeleteDhcpOptionsSetDeleteDhcpOptionsSetdelete
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
NoneNone
vpc:DeleteNatGatewayDeleteNatGatewaydelete
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid}
NoneNone
vpc:ModifyVpnAttachmentAttributeModifyVpnAttachmentAttributeupdate
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
NoneNone
vpc:DescribeEipMonitorDataDescribeEipMonitorDataget
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NoneNone

Resource

VPC defines the values that you can use in the Resource. You can attach the policy to a RAM user or a RAM role so that the RAM user or the RAM role can perform a specific operation on a specific resource. The ARN is the unique identifier of the resource on Alibaba Cloud. Take note of the following items:
  • {#}indicates a variable. {#} must be replaced with an actual value. For example, {#ramcode} must be replaced with the actual code of an Alibaba Cloud service in RAM.
  • An asterisk (*) is used as a wildcard. Examples:
    • {#resourceType} is set to *, all resources are specified.
    • {#regionId} is set to *, all regions are specified.
    • {#accountId} is set to *, all Alibaba Cloud accounts are specified.
Resource typeARN
Ipv4Gatewayacs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
VpnGatewayacs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}
VirtualBorderRouteracs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
PhysicalConnectionacs:vpc:{#regionId}:{#accountId}:physicalconnection/*
VirtualBorderRouteracs:expressconnect:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
Ipv4Gatewayacs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
VpnConnectionacs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
PublicIpAddressPoolacs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
VSwitchacs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
PublicIpAddressPoolServiceacs:vpc:{#regionId}:{#accountId}:publicipaddresspoolservice/*
SslVpnServeracs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
SslVpnServeracs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
PublicIpAddressPoolacs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
VirtualBorderRouteracs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
SnatTableacs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
RouterInterfaceacs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
HaVipacs:vpc:{#regionId}:{#accountId}:havip/*
BandwidthPackageacs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}
RouteTableacs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
VPCacs:vpc:{#regionId}:{#accountId}:vpc/*
VPCacs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
TrafficQosacs:vpc:{#regionId}:{#accountId}:TrafficQos/*
Instanceacs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}
Addressacs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
HaVipacs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
VpnGatewayacs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
PhysicalConnectionacs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
ForwardTableacs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
VirtualBorderRouteracs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
PrefixListacs:vpc:{#regionId}:{#accountId}:prefixlist/*
TrafficMirrorFilteracs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
NetworkAclacs:vpc:{#regionId}:{#accountId}:networkacl/*
Ipv6Translatoracs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}
FlowLogacs:vpc:{#regionId}:{#accountId}:flowlog/*
DhcpOptionsSetacs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
DhcpOptionsSetacs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
GatewayEndpointacs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
FlowLogacs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
BandwidthPackageacs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
NatGatewayacs:vpc:{#regionId}:{#accountId}:natgateway/*
Ipv6Gatewayacs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
VSwitchCidrReservationacs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
VpnConnectionsacs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
Addressacs:vpc:{#regionId}:{#accountId}:eip/*
NatGatewayacs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid}
Instanceacs:ecs:{#regionId}:{#accountId}:instance/*
GlobalAccelerationInstanceacs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}
Ipv6EgressRuleacs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
TrafficMirrorSessionacs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
SnatEntryacs:vpc:{#regionId}:{#accountId}:snattable/*
RouteEntryacs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
NetworkAclacs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
VSwitchCidrReservationacs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
GatewayEndpointacs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
PhysicalConnectionacs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouteracs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterfaceacs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId}
VirtualBorderRouteracs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*
Ipv6Translatoracs:vpc:{#regionId}:{#accountId}:ipv6trans/*
Ipv6Addressacs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
TrafficMirrorServiceacs:vpc:{#regionId}:{#accountId}:trafficmirror/*
Ipv6InternetBandwidthacs:vpc:{#regionId}:{#accountId}:vpc/*
FullNatacs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}
BandwidthPackageacs:vpc:{#regionId}:{#accountId}:bandwidthpackage/*
CustomerGatewayacs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
VRouteracs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}
VpnGatewayacs:vpc:{#Region}:{#AccountId}:vpngateway/{#VpnInstanceId}
CustomerGatewayacs:vpc:{#Region}:{#AccountId}:customergateway/{#CustomerGatewayId}
VpnAttachmentacs:vpc:{#Region}:{#AccountId}:vpnattachment/{#VpnConnectionId}
VpnConnectionacs:vpc:{#Region}:{#AccountId}:vpnconnection/{#VpnConnectionId}
IpsecServeracs:vpc:{#Region}:{#AccountId}: vpnipsecserver/{#IpsecServerId}
SslVpnServeracs:vpc:{#Region}:{#AccountId}:sslvpnserver/{#SslVpnServerId}
SslVpnClientCertacs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
PrefixListacs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
Ipv6Addressacs:vpc:{#regionId}:{#accountId}:ipv6address/*
VpnGatewayacs:vpc:{#regionId}:{#accountId}:vpngateway/*
Eipacs:vpc:{#regionId}:{#accountId}:eip/{#EipId}
FlowLogServiceacs:vpc:{#regionId}:{#accountId}:flowlog/*
Instanceacs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
Associationacs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
physicalconnectionacs:vpc:{#regionId}:{#accountId}:physicalconnection/*
RouterInterfaceacs:vpc:{#regionId}:{#accountId}:routerinterface/*
IPv6Translatoracs:vpc:{#regionId}:{#accountId}:ipv6trans/*
IPv6Translatoracs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId}
VpnConnectionacs:vpc:{#regionId}:{#accountId}:*
VpnConnectionacs:vpc:{#regionId}:{#accountId}:vpnconnection/*
CommonBandwidthPackageacs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
NatIpCidracs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
GatewayInfoacs:vpc:{#regionId}:{#accountId}:eip/*
VSwitchacs:vpc:{#regionId}:{#accountId}:vswitch/*
VRouteracs:vpc:{#regionId}:{#accountId}:vrouter/*
RouteTableacs:vpc:{#regionId}:{#accountId}:routetable/*
NatIpacs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
VirtualBorderRouteracs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}
GrantRuleToCenacs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
Ipv6Gatewayacs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
Ipv6InternetBandwidthacs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
RouteTableacs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable}
TrafficMirrorFilteracs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
TrafficMirrorSessionacs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
RouterInterfaceacs:vpc:*:{#accountId}:routerinterface/*
VPCacs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
SegmentAddressacs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
GlobalAccelerationInstanceacs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/*
IpsecServeracs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}
GlobalAccelerationInstanceacs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/*
VpnGatewayacs:vpc:{#regionId}:{#accountId}:
CustomerGatewayacs:vpc:{#regionId}:{#accountId}:customergateway/*
SegmentAddressacs:vpc:{#regionId}:{#accountId}:eip/*
Ipv6InternetBandwidthacs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*
SslVpnClientCertacs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
IpsecServeracs:vpc:{#regionId}:{#accountId}:ipsecserver/*
Instanceacs:ecs:{#regionId}:{#accountId}:instance/{#BackendServerId}
CommonBandwidthPackageacs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}
Eipacs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
BandwidthPackageacs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*

Condition

VPC defines the values that you can use in the Condition element of a policy statement. The following table describes the values. The following table describes the service-specific condition keys. The common condition keys that are defined by Alibaba Cloud also apply to VPC. For more information about the common condition keys, see Generic Condition Keyword.
The data type determines the conditional operators that you can use to compare the value in a request with the value in a policy statement. You must use conditional operators that are supported by the data type. Otherwise, you cannot compare the value in the request with the value in the policy statement. In this case, the authorization is invalid. For more information about the conditional operators that are supported by each data type, see Policy elements.
Condition keyDescriptionData type
vpc:PhysicalConnectionPhysical Line InformationString
vpc:VBRBorder Router InformationString
vpc:VPCVPC InformationString
vpc:VRouterRouter InformationString
vpc:tagTags of the VPCString
vpc:TargetAccountRDIdpeer user resource directory ID informationString

What to do next

You can create a custom policy and attach the policy to a RAM user, RAM user group, or RAM role. For more information, see the following topics: