許可情報 - Virtual Private Cloud - Alibaba Cloud ドキュメントセンター

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. You can use RAM to prevent RAM users from sharing the AccessKey pairs of your Alibaba Cloud account. You can also use RAM to grant minimum permissions to RAM users. RAM uses policies to define permissions.

This topic describes the elements, such as Action, Resource, and Condition, which are defined by VPC. You can use the elements to create policies in RAM. The code (RamCode) in RAM that is used to indicate VPC is [{"popCode":"Vpc","ramCodes":["vpc"]},{"popCode":"Netana","ramCodes":["vpc"]},{"popCode":"VpcPeer","ramCodes":["vpc"]}]. You can grant permissions on VPC at the RESOURCE.

General structure of a policy

Policies can be stored as JSON files. The following code provides an example on the general structure of a policy:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

The following list describes the fields in the policy:

Effect: specifies the authorization effect. Valid values: Allow, Deny.
Action: specifies one or more API operations that are allowed or denied. For more information, see the Action section of this topic.
Resource: specifies one or more resources to which the policy applies. You can use an Alibaba Cloud Resource Name (ARN) to specify a resource. For more information, see the Resource section of this topic.
Condition: specifies one or more conditions that are required for the policy to take effect. This is an optional field. For more information, see the Condition section of this topic.
- Condition_operator: specifies the conditional operators. Different types of conditions support different conditional operators. For more information, see Policy elements.
- Condition_key: specifies the condition keys.
- Condition_value: specifies the condition values.

Action

VPC defines the values that you can use in the Action element of a policy statement. The following table describes the values.

Operation: the value that you can use in the Action element to specify the operation on a resource.
API operation: the API operation that you can call to perform the operation.
Access level: the access level of each operation. The levels are read, write, and list.
Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
- The required resource types are displayed in bold characters.
- If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
Condition key: the condition keys that are defined by the Alibaba Cloud service. The Condition key column does not list the common condition keys that are defined by Alibaba Cloud. For more information about the common condition keys, see Generic Condition Keyword.
Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.

Actions	API operation	Access level	Resource type	Condition key	Associated operation
vpc:CreateVpnAttachment	CreateVpnAttachment	create	All Resources *	None	None
vpc:ModifyEipAddressAttribute	ModifyEipAddressAttribute	update	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}	None	None
vpc:ListFullNatEntries	ListFullNatEntries	get	FullNat acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}	None	None
vpc:CancelPhysicalConnection	CancelPhysicalConnection	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:ModifyVpnRouteEntryWeight	ModifyVpnRouteEntryWeight	Write	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:AssociateEipAddress	AssociateEipAddress	update	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId} Association acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}	None	None
vpc:SecondApplyPhysicalConnectionLOA	SecondApplyPhysicalConnectionLOA	none	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:ListVpcGatewayEndpoints	ListVpcGatewayEndpoints	list	GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/* GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}	None	None
vpc:DissociateRouteTablesFromVpcGatewayEndpoint	DissociateRouteTablesFromVpcGatewayEndpoint	delete	GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}	None	None
vpc:SetHighDefinitionMonitorLogStatus	SetHighDefinitionMonitorLogStatus	Write	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}	None	None
vpc:CreateIPv6TranslatorAclList	CreateIPv6TranslatorAclList	create	All Resources *	None	None
vpc:ModifyGlobalAccelerationInstanceSpec	ModifyGlobalAccelerationInstanceSpec	update	GlobalAccelerationInstance acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}	None	None
vpc:CreateGlobalAccelerationInstance	CreateGlobalAccelerationInstance	create	GlobalAccelerationInstance acs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/*	None	None
vpc:ModifyCommonBandwidthPackageIpBandwidth	ModifyCommonBandwidthPackageIpBandwidth	update	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}	None	None
vpc:ModifyRouteTableAttributes	ModifyRouteTableAttributes	update	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	vpc:VRouter	None
vpc:DescribeRouterInterfaceAttribute	DescribeRouterInterfaceAttribute	get	RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:UnassociateGlobalAccelerationInstance	UnassociateGlobalAccelerationInstance	delete	All Resources *	None	None
vpc:DescribeExpressConnectTrafficQosQueue	DescribeExpressConnectTrafficQosQueue	list	All Resources *	None	None
vpc:DeleteForwardEntry	DeleteForwardEntry	delete	ForwardTable acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}	None	None
vpc:ModifyHaVipAttribute	ModifyHaVipAttribute	update	HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}	None	None
vpc:UpdateDhcpOptionsSetAttribute	UpdateDhcpOptionsSetAttribute	update	DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}	None	None
vpc:MoveResourceGroup	MoveResourceGroup	update	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId} Eip acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId} HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId} Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}	None	None
vpc:ApplyPhysicalConnectionLOA	ApplyPhysicalConnectionLOA	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:CreateVpnPbrRouteEntry	CreateVpnPbrRouteEntry	create	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:DeleteNetworkAcl	DeleteNetworkAcl	delete	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}	None	None
vpc:VpcDescribeVpcNatGatewayNetworkInterfaceQuota	VpcDescribeVpcNatGatewayNetworkInterfaceQuota	get	All Resources *	None	None
vpc:ModifyIpv6InternetBandwidth	ModifyIpv6InternetBandwidth	update	Ipv6InternetBandwidth acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}	None	None
vpc:DescribeVirtualBorderRouters	DescribeVirtualBorderRouters	list	VirtualBorderRouter acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}	None	None
vpc:ActivateRouterInterface	ActivateRouterInterface	update	RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:CreateBgpPeer	CreateBgpPeer	create	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:ModifySnatEntry	ModifySnatEntry	update	SnatTable acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}	None	None
vpc:DisableNatGatewayEcsMetric	DisableNatGatewayEcsMetric	delete	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:CreateVpcPrefixList	CreateVpcPrefixList	create	PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/*	None	None
vpc:DescribeRouteEntryList	DescribeRouteEntryList	get	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:DeleteIpsecServer	DeleteIpsecServer	delete	IpsecServer acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}	None	None
vpc:DescribeVpcs	DescribeVpcs	list	VPC acs:vpc:{#regionId}:{#accountId}:vpc/* VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId}	vpc:tag	None
vpc:RecoverVirtualBorderRouter	RecoverVirtualBorderRouter	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:DescribeVpnConnection	DescribeVpnConnection	get	VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:ModifyRouterInterfaceAttribute	ModifyRouterInterfaceAttribute	update	RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	vpc:TargetAccountRDId	None
vpc:CreateSslVpnServer	CreateSslVpnServer	create	SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/* VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:DescribeHighDefinitionMonitorLogAttribute	DescribeHighDefinitionMonitorLogAttribute	get	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}	None	None
vpc:DescribeVpnGateway	DescribeVpnGateway	get	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:GetVpcGatewayEndpointAttribute	GetVpcGatewayEndpointAttribute	get	GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}	None	None
vpc:CreateIpv4Gateway	CreateIpv4Gateway	create	Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*	None	None
vpc:ModifyVpnPbrRouteEntryAttribute	ModifyVpnPbrRouteEntryAttribute	update	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:CancelCommonBandwidthPackageIpBandwidth	CancelCommonBandwidthPackageIpBandwidth	update	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}	None	None
vpc:OpenPhysicalConnectionService	OpenPhysicalConnectionService	create	All Resources *	None	None
vpc:GrantInstanceToVbr	GrantInstanceToVbr	update	VPC acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}	None	None
vpc:DeleteIPv6TranslatorAclList	DeleteIPv6TranslatorAclList	delete	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:CreateFlowLog	CreateFlowLog	create	VSwitch acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId} FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/* VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:DescribeVpnRouteEntries	DescribeVpnRouteEntries	get	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:AllocateIpv6InternetBandwidth	AllocateIpv6InternetBandwidth	create	Ipv6InternetBandwidth acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*	None	None
vpc:CreateNetworkAcl	CreateNetworkAcl	create	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/* VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:CheckCanAllocateVpcPrivateIpAddress	CheckCanAllocateVpcPrivateIpAddress	none	VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	None	None
vpc:ModifyVcoRouteEntryWeight	ModifyVcoRouteEntryWeight	Write	VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:AddIPv6TranslatorAclListEntry	AddIPv6TranslatorAclListEntry	create	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:CreateIPv6TranslatorEntry	CreateIPv6TranslatorEntry	create	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:DeleteVbrHa	DeleteVbrHa	delete	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:DescribeIPv6Translators	DescribeIPv6Translators	get	All Resources *	None	None
vpc:UpdateGatewayRouteTableEntryAttribute	UpdateGatewayRouteTableEntryAttribute	update	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:ModifyNetworkAclAttributes	ModifyNetworkAclAttributes	update	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}	None	None
vpc:ModifyVpnAttachmentAttribute	ModifyVpnAttachmentAttribute	update	VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:ModifyVpcPrefixList	ModifyVpcPrefixList	update	PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}	None	None
vpc:CreateTrafficMirrorFilterRules	CreateTrafficMirrorFilterRules	create	TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}	None	None
vpc:DescribeSslVpnClientCerts	DescribeSslVpnClientCerts	list	SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/* SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}	None	None
vpc:CreateExpressConnectTrafficQosQueue	CreateExpressConnectTrafficQosQueue	create	All Resources *	None	None
vpc:DescribePhysicalConnectionLOA	DescribePhysicalConnectionLOA	get	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:DescribeVpnAttachments	DescribeVpnAttachments	list	VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:DescribeBgpPeers	DescribeBgpPeers	get	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:ModifyExpressConnectTrafficQosQueue	ModifyExpressConnectTrafficQosQueue	update	All Resources *	None	None
vpc:DescribeVbrHa	DescribeVbrHa	get	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:ListTagResourcesForExpressConnect	ListTagResourcesForExpressConnect	list	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId} RouterInterface acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:AssociateHaVip	AssociateHaVip	create	Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId} HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}	None	None
vpc:AddCommonBandwidthPackageIps	AddCommonBandwidthPackageIps	create	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}	None	None
vpc:CreateExpressCloudConnection	CreateExpressCloudConnection	create	All Resources *	None	None
vpc:PublishVpnRouteEntry	PublishVpnRouteEntry	update	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:ModifyVSwitchCidrReservationAttribute	ModifyVSwitchCidrReservationAttribute	update	VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}	None	None
vpc:DescribeVSwitchAttributes	DescribeVSwitchAttributes	get	VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	None	None
vpc:EnableVpcClassicLink	EnableVpcClassicLink	update	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:DescribeVpnConnections	DescribeVpnConnections	list	VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/* VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:UpdateVirtualBorderBandwidth	UpdateVirtualBorderBandwidth	update	VirtualBorderRouter acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:Describe95Traffic	Describe95Traffic	get	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}	None	None
vpc:CreatePhysicalConnectionSetupOrder	CreatePhysicalConnectionSetupOrder	create	All Resources *	None	None
vpc:CreateVpnGateway	CreateVpnGateway	create	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/*	None	None
vpc:AttachDhcpOptionsSetToVpc	AttachDhcpOptionsSetToVpc	update	DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:UpdateIpv4GatewayAttribute	UpdateIpv4GatewayAttribute	update	Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}	None	None
vpc:DeleteVpnPbrRouteEntry	DeleteVpnPbrRouteEntry	Write	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:DeleteIpv6Gateway	DeleteIpv6Gateway	delete	Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}	None	None
vpc:ModifyIpv6GatewayAttribute	ModifyIpv6GatewayAttribute	update	Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}	None	None
vpc:DescribeEipGatewayInfo	DescribeEipGatewayInfo	list	GatewayInfo acs:vpc:{#regionId}:{#accountId}:eip/*	None	None
vpc:DescribeVpnPbrRouteEntries	DescribeVpnPbrRouteEntries	get	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:CreateCustomerGateway	CreateCustomerGateway	create	CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/*	None	None
vpc:DescribeVSwitches	DescribeVSwitches	list	VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/*	vpc:VPC	None
vpc:GetDhcpOptionsSet	GetDhcpOptionsSet	get	DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}	None	None
vpc:CheckVpnBgpEnabled	CheckVpnBgpEnabled	none	All Resources *	None	None
vpc:DescribeGlobalAccelerationInstances	DescribeGlobalAccelerationInstances	get	GlobalAccelerationInstance acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/*	None	None
vpc:DeleteCommonBandwidthPackage	DeleteCommonBandwidthPackage	delete	CommonBandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}	vpc:tag	None
vpc:DescribeRouteTableList	DescribeRouteTableList	list	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/*	vpc:VRouter vpc:VBR	None
vpc:DescribeEipAddresses	DescribeEipAddresses	list	Address acs:vpc:{#regionId}:{#accountId}:eip/*	vpc:tag	None
vpc:DeleteFlowLog	DeleteFlowLog	delete	FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}	None	None
vpc:ModifyIPv6TranslatorBandwidth	ModifyIPv6TranslatorBandwidth	update	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:ListDhcpOptionsSets	ListDhcpOptionsSets	get	DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/* DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}	None	None
vpc:CreateDefaultVpc	CreateDefaultVpc	Write	VPC acs:vpc:{#regionId}:{#accountId}:vpc/*	None	None
vpc:UpdateVpcGatewayEndpointAttribute	UpdateVpcGatewayEndpointAttribute	update	GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}	None	None
vpc:CreateDhcpOptionsSet	CreateDhcpOptionsSet	create	DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*	None	None
vpc:DescribeTagKeys	DescribeTagKeys	get	All Resources *	None	None
vpc:AddSourcesToTrafficMirrorSession	AddSourcesToTrafficMirrorSession	update	TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}	None	None
vpc:ListTagResources	ListTagResources	get	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	vpc:tag	None
vpc:DeleteTrafficMirrorFilter	DeleteTrafficMirrorFilter	delete	TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}	None	None
vpc:ModifyVpnGatewayAttribute	ModifyVpnGatewayAttribute	update	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:DeleteExpressConnectTrafficQosQueue	DeleteExpressConnectTrafficQosQueue	delete	All Resources *	None	None
vpc:ConnectRouterInterface	ConnectRouterInterface	update	RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:CreateNatGateway	CreateNatGateway	create	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/*	None	None
vpc:DescribeVpnSslServerLogs	DescribeVpnSslServerLogs	get	SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}	None	None
vpc:DescribeVRouters	DescribeVRouters	list	VRouter acs:vpc:{#regionId}:{#accountId}:vrouter/*	vpc:VPC	None
vpc:UpdateNetworkAclEntries	UpdateNetworkAclEntries	update	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}	None	None
vpc:ChangeResourceGroup	ChangeResourceGroup	update	PhysicalConnection acs:vpc::{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc::{#AccountId}:virtualborderrouter/{#VbrId} RouterInterface acs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:TerminateVirtualBorderRouter	TerminateVirtualBorderRouter	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:DeleteVpnRouteEntry	DeleteVpnRouteEntry	Write	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:ModifySslVpnClientCert	ModifySslVpnClientCert	Write	SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}	None	None
vpc:DescribeVcoRouteEntries	DescribeVcoRouteEntries	list	VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:DeleteCustomerGateway	DeleteCustomerGateway	delete	CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}	None	None
vpc:DownloadVpnConnectionConfig	DownloadVpnConnectionConfig	get	VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:ListVpcEndpointServicesByEndUser	ListVpcEndpointServicesByEndUser	list	All Resources *	None	None
vpc:GrantInstanceToCen	GrantInstanceToCen	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:UpdateTrafficMirrorFilterAttribute	UpdateTrafficMirrorFilterAttribute	update	TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}	None	None
vpc:RemoveSourcesFromTrafficMirrorSession	RemoveSourcesFromTrafficMirrorSession	update	TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}	None	None
vpc:DescribeNatGateways	DescribeNatGateways	get	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/* NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:DescribeTagKeysForExpressConnect	DescribeTagKeysForExpressConnect	list	PhysicalConnection acs:vpc:{#regionId}:{#AccountId}:physicalconnection/{#PhysicalConnectionId} RouterInterface acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId} VirtualBorderRouter acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}	None	None
vpc:DeletionProtection	DeletionProtection	delete	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}	None	None
vpc:DescribeVpnGatewayAvailableZones	DescribeVpnGatewayAvailableZones	list	All Resources *	None	None
vpc:GetPublicIpAddressPoolServiceStatus	GetPublicIpAddressPoolServiceStatus	get	All Resources *	None	None
vpc:DeleteSslVpnClientCert	DeleteSslVpnClientCert	Write	SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}	None	None
vpc:ModifyBgpPeerAttribute	ModifyBgpPeerAttribute	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:UpdateTrafficMirrorFilterRuleAttribute	UpdateTrafficMirrorFilterRuleAttribute	update	TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}	None	None
vpc:DescribeIPv6TranslatorEntries	DescribeIPv6TranslatorEntries	get	All Resources *	None	None
vpc:DeleteBgpPeer	DeleteBgpPeer	delete	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:DeleteFailoverTestJob	DeleteFailoverTestJob	delete	All Resources *	None	None
vpc:ListTrafficMirrorFilters	ListTrafficMirrorFilters	list	TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*	None	None
vpc:DescribeFailoverTestJob	DescribeFailoverTestJob	get	All Resources *	None	None
vpc:ActiveFlowLog	ActiveFlowLog	update	FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}	None	None
vpc:DeactivateRouterInterface	DeactivateRouterInterface	update	RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:DeleteVpc	DeleteVpc	delete	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	vpc:tag	None
vpc:GetVpcRouteEntrySummary	GetVpcRouteEntrySummary	list	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}	None	None
vpc:DeleteExpressConnectTrafficQos	DeleteExpressConnectTrafficQos	delete	All Resources *	None	None
vpc:DeleteIpv6EgressOnlyRule	DeleteIpv6EgressOnlyRule	delete	Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}	None	None
vpc:DeleteVirtualBorderRouter	DeleteVirtualBorderRouter	delete	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:AssociateRouteTableWithGateway	AssociateRouteTableWithGateway	create	Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId} RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}	None	None
vpc:TerminatePhysicalConnection	TerminatePhysicalConnection	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:CreateVpnConnection	CreateVpnConnection	create	CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId} VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/* VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:DeleteBgpGroup	DeleteBgpGroup	delete	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:DescribeCustomerGateway	DescribeCustomerGateway	get	CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}	None	None
vpc:ModifyIPv6TranslatorAttribute	ModifyIPv6TranslatorAttribute	update	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:AssociateNetworkAcl	AssociateNetworkAcl	update	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	None	None
vpc:DescribeFlowLogs	DescribeFlowLogs	get	FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/*	None	None
vpc:ListIpsecServers	ListIpsecServers	list	All Resources *	None	None
vpc:CreateVirtualBorderRouter	CreateVirtualBorderRouter	create	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*	None	None
vpc:ModifyRouterInterfaceSpec	ModifyRouterInterfaceSpec	update	RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:CreateHighReliablePhysicalConnection	CreateHighReliablePhysicalConnection	create	All Resources *	None	None
vpc:CreateTrafficMirrorSession	CreateTrafficMirrorSession	create	TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/* TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}	None	None
vpc:ModifyNatGatewayAttribute	ModifyNatGatewayAttribute	update	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:DeleteVcoRouteEntry	DeleteVcoRouteEntry	Write	VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:DeleteRouteTable	DeleteRouteTable	delete	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:DescribeVpcAttribute	DescribeVpcAttribute	get	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	vpc:tag	None
vpc:UnassociateNetworkAcl	UnassociateNetworkAcl	update	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	None	None
vpc:ModifyVpnConnectionAttribute	ModifyVpnConnectionAttribute	update	VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:ReplaceVpcDhcpOptionsSet	ReplaceVpcDhcpOptionsSet	update	DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:DeleteVpnConnection	DeleteVpnConnection	delete	VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:DescribeFailoverTestJobs	DescribeFailoverTestJobs	list	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:DeleteRouteEntry	DeleteRouteEntry	delete	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:DescribeVpnGateways	DescribeVpnGateways	list	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/* VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}	None	None
vpc:UnassociatePhysicalConnectionFromVirtualBorderRouter	UnassociatePhysicalConnectionFromVirtualBorderRouter	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:EnableNatGatewayEcsMetric	EnableNatGatewayEcsMetric	create	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:DiagnoseVpnConnections	DiagnoseVpnConnections	get	All Resources *	None	None
vpc:DeletePublicIpAddressPoolCidrBlock	DeletePublicIpAddressPoolCidrBlock	Write	PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}	None	None
vpc:CreateVcoRouteEntry	CreateVcoRouteEntry	create	VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:UpdateIpsecServer	UpdateIpsecServer	update	All Resources *	None	None
vpc:DescribeHaVips	DescribeHaVips	get	HaVip acs:vpc:{#regionId}:{#accountId}:havip/*	None	None
vpc:DescribeBgpGroups	DescribeBgpGroups	get	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:DescribeCustomerGateways	DescribeCustomerGateways	list	CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/* CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}	None	None
vpc:ModifyNatIpAttribute	ModifyNatIpAttribute	update	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:CompletePhysicalConnectionLOA	CompletePhysicalConnectionLOA	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:CreateIpv6EgressOnlyRule	CreateIpv6EgressOnlyRule	create	Ipv6EgressRule acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}	None	None
vpc:AddPublicIpAddressPoolCidrBlock	AddPublicIpAddressPoolCidrBlock	create	PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}	None	None
vpc:UpdateTrafficMirrorSessionAttribute	UpdateTrafficMirrorSessionAttribute	update	TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId} TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}	None	None
vpc:UnassociateVpcCidrBlock	UnassociateVpcCidrBlock	delete	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:DescribeServerRelatedGlobalAccelerationInstances	DescribeServerRelatedGlobalAccelerationInstances	get	All Resources *	None	None
vpc:CreatePhysicalConnection	CreatePhysicalConnection	create	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/*	None	None
vpc:ModifyExpressConnectTrafficQosRule	ModifyExpressConnectTrafficQosRule	update	All Resources *	None	None
vpc:CopyNetworkAclEntries	CopyNetworkAclEntries	update	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}	None	None
vpc:CreateVSwitchCidrReservation	CreateVSwitchCidrReservation	create	VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*	None	None
vpc:ModifyExpressCloudConnectionAttribute	ModifyExpressCloudConnectionAttribute	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:ModifyVpnPbrRouteEntryWeight	ModifyVpnPbrRouteEntryWeight	Write	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:TagResourcesForExpressConnect	TagResourcesForExpressConnect	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:MoveVpnResourceGroup	MoveVpnResourceGroup	update	All Resources *	None	None
vpc:ModifyExpressCloudConnectionBandwidth	ModifyExpressCloudConnectionBandwidth	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:DeleteHaVip	DeleteHaVip	delete	HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}	None	None
vpc:DeleteIpv6InternetBandwidth	DeleteIpv6InternetBandwidth	delete	Ipv6InternetBandwidth acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}	None	None
vpc:RemoveCommonBandwidthPackageIp	RemoveCommonBandwidthPackageIp	delete	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}	None	None
vpc:ListPrefixLists	ListPrefixLists	list	PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/*	None	None
vpc:ModifyCommonBandwidthPackageAttribute	ModifyCommonBandwidthPackageAttribute	update	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}	None	None
vpc:AddBgpNetwork	AddBgpNetwork	get	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:ModifyVRouterAttribute	ModifyVRouterAttribute	update	VRouter acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}	None	None
vpc:OpenFlowLogService	OpenFlowLogService	create	FlowLogService acs:vpc:{#regionId}:{#accountId}:flowlog/*	None	None
vpc:ModifyVirtualBorderRouterAttribute	ModifyVirtualBorderRouterAttribute	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:ModifyIPv6TranslatorAclAttribute	ModifyIPv6TranslatorAclAttribute	update	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:DeleteSnatEntry	DeleteSnatEntry	delete	SnatTable acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}	None	None
vpc:DissociateRouteTableFromGateway	DissociateRouteTableFromGateway	get	Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId} RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}	None	None
vpc:CreateSslVpnClientCert	CreateSslVpnClientCert	create	SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/* SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}	None	None
vpc:ModifyFlowLogAttribute	ModifyFlowLogAttribute	update	FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}	None	None
vpc:CreateRouteTable	CreateRouteTable	create	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/*	None	None
vpc:ListTrafficMirrorSessions	ListTrafficMirrorSessions	list	TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*	None	None
vpc:DescribeEipMonitorData	DescribeEipMonitorData	get	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}	None	None
vpc:DescribeBgpNetworks	DescribeBgpNetworks	get	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:PublishVpcRouteEntries	PublishVpcRouteEntries	update	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:CreateSnatEntry	CreateSnatEntry	create	SnatEntry acs:vpc:{#regionId}:{#accountId}:snattable/*	None	None
vpc:CreateCommonBandwidthPackage	CreateCommonBandwidthPackage	create	CommonBandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*	None	None
vpc:ModifyForwardEntry	ModifyForwardEntry	update	ForwardTable acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}	None	None
vpc:ReleaseEipAddress	ReleaseEipAddress	update	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}	vpc:tag	None
vpc:DescribeIpv6Gateways	DescribeIpv6Gateways	get	Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/* Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}	None	None
vpc:DescribeIpv6EgressOnlyRules	DescribeIpv6EgressOnlyRules	get	Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}	None	None
vpc:DetachDhcpOptionsSetFromVpc	DetachDhcpOptionsSetFromVpc	update	DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:UpdateVirtualPhysicalConnection	UpdateVirtualPhysicalConnection	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}	None	None
vpc:DescribeVpnConnectionLogs	DescribeVpnConnectionLogs	list	VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:ModifyNatGatewaySpec	ModifyNatGatewaySpec	Write	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:ModifyRouteEntry	ModifyRouteEntry	update	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:DeleteDhcpOptionsSet	DeleteDhcpOptionsSet	delete	DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}	None	None
vpc:DeleteExpressConnectTrafficQosRule	DeleteExpressConnectTrafficQosRule	delete	All Resources *	None	None
vpc:CreateExpressConnectTrafficQos	CreateExpressConnectTrafficQos	create	TrafficQos acs:vpc:{#regionId}:{#accountId}:TrafficQos/*	None	None
vpc:DescribeIpv6GatewayAttribute	DescribeIpv6GatewayAttribute	get	Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}	None	None
vpc:ModifySslVpnServer	ModifySslVpnServer	update	SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}	None	None
vpc:CreateVpc	CreateVpc	create	VPC acs:vpc:{#regionId}:{#accountId}:vpc/*	None	None
vpc:ModifyPhysicalConnectionAttribute	ModifyPhysicalConnectionAttribute	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:CreateExpressConnectTrafficQosRule	CreateExpressConnectTrafficQosRule	create	All Resources *	None	None
vpc:ModifyCommonBandwidthPackageSpec	ModifyCommonBandwidthPackageSpec	update	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}	None	None
vpc:ModifyCustomerGatewayAttribute	ModifyCustomerGatewayAttribute	update	CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}	None	None
vpc:WithdrawVpcPublishedRouteEntries	WithdrawVpcPublishedRouteEntries	update	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:ListBusinessAccessPoints	ListBusinessAccessPoints	list	All Resources *	None	None
vpc:DeleteSslVpnServer	DeleteSslVpnServer	Write	SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}	None	None
vpc:ListIpv4Gateways	ListIpv4Gateways	list	Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*	None	None
vpc:DescribeIPv6TranslatorAclLists	DescribeIPv6TranslatorAclLists	get	All Resources *	None	None
vpc:AllocateVpcIpv6Cidr	AllocateVpcIpv6Cidr	none	All Resources *	None	None
vpc:CreateRouteEntries	CreateRouteEntries	create	RouteEntry acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:ModifyTunnelAttribute	ModifyTunnelAttribute	update	VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:ModifyVpnPbrRouteEntryPriority	ModifyVpnPbrRouteEntryPriority	update	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:UntagResourcesForExpressConnect	UntagResourcesForExpressConnect	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:CreateVirtualPhysicalConnection	CreateVirtualPhysicalConnection	create	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}	None	None
vpc:OpenTrafficMirrorService	OpenTrafficMirrorService	create	All Resources *	None	None
vpc:DescribeGrantRulesToCen	DescribeGrantRulesToCen	get	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId} GrantRuleToCen acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}	None	None
vpc:DescribeEcGrantRelation	DescribeEcGrantRelation	list	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:RevokeInstanceFromVbr	RevokeInstanceFromVbr	update	VPC acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}	None	None
vpc:DeleteVpnAttachment	DeleteVpnAttachment	delete	VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:ReleaseIpv6Address	ReleaseIpv6Address	delete	Ipv6Address acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}	None	None
vpc:TagResources	TagResources	update	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	vpc:tag	None
vpc:DescribeRouteTables	DescribeRouteTables	list	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	vpc:VBR vpc:VRouter	None
vpc:DescribeRouterInterfaces	DescribeRouterInterfaces	list	RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:DeleteIpv4Gateway	DeleteIpv4Gateway	delete	Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}	None	None
vpc:RetryVpcPrefixListAssociation	RetryVpcPrefixListAssociation	update	PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}	None	None
vpc:ListVSwitchCidrReservations	ListVSwitchCidrReservations	list	VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*	None	None
vpc:AllocateEipAddressPro	AllocateEipAddressPro	update	Address acs:vpc:{#regionId}:{#accountId}:eip/*	None	None
vpc:DescribeSslVpnClientCert	DescribeSslVpnClientCert	get	SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}	None	None
vpc:ModifyIpv6AddressAttribute	ModifyIpv6AddressAttribute	update	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:StartFailoverTestJob	StartFailoverTestJob	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:DeleteVSwitchCidrReservation	DeleteVSwitchCidrReservation	delete	VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}	None	None
vpc:AllocateIpv6Address	AllocateIpv6Address	create	Ipv6Address acs:vpc:{#regionId}:{#accountId}:ipv6address/*	None	None
vpc:DescribeExpressConnectTrafficQos	DescribeExpressConnectTrafficQos	list	TrafficQos acs:vpc:{#regionId}:{#accountId}:TrafficQos/*	None	None
vpc:ListPublicIpAddressPoolCidrBlocks	ListPublicIpAddressPoolCidrBlocks	get	PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}	None	None
vpc:UpdateNatGatewayNatType	UpdateNatGatewayNatType	update	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:DescribePhysicalConnections	DescribePhysicalConnections	list	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/*	None	None
vpc:DeletePublicIpAddressPool	DeletePublicIpAddressPool	delete	PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}	None	None
vpc:ModifyVSwitchAttribute	ModifyVSwitchAttribute	update	VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	None	None
vpc:DeletePhysicalConnection	DeletePhysicalConnection	delete	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:AddCommonBandwidthPackageIp	AddCommonBandwidthPackageIp	create	BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}	None	None
vpc:DeactiveFlowLog	DeactiveFlowLog	update	FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}	None	None
vpc:GetVpcPrefixListAssociations	GetVpcPrefixListAssociations	get	PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}	None	None
vpc:CreateIPv6Translator	CreateIPv6Translator	create	All Resources *	None	None
vpc:DeleteTrafficMirrorFilterRules	DeleteTrafficMirrorFilterRules	delete	TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}	None	None
vpc:CreatePublicIpAddressPool	CreatePublicIpAddressPool	create	PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*	None	None
vpc:ConvertBandwidthPackage	ConvertBandwidthPackage	update	All Resources *	None	None
vpc:DescribeVpnCrossAccountAuthorizations	DescribeVpnCrossAccountAuthorizations	get	VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}	None	None
vpc:DescribeSnatTableEntries	DescribeSnatTableEntries	get	SnatTable acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}	None	None
vpc:ListPublicIpAddressPools	ListPublicIpAddressPools	get	PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*	None	None
vpc:DeleteRouteEntries	DeleteRouteEntries	delete	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}	None	None
vpc:RemoveIPv6TranslatorAclListEntry	RemoveIPv6TranslatorAclListEntry	delete	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:EnablePhysicalConnection	EnablePhysicalConnection	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:CreateRouteEntry	CreateRouteEntry	create	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:CreateVpconnFromVbr	CreateVpconnFromVbr	create	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}	None	None
vpc:ListGatewayRouteTableEntries	ListGatewayRouteTableEntries	list	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}	None	None
vpc:CreateIpsecServer	CreateIpsecServer	create	All Resources *	None	None
vpc:UpdateFailoverTestJob	UpdateFailoverTestJob	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:CreateBgpGroup	CreateBgpGroup	create	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:RecoverPhysicalConnection	RecoverPhysicalConnection	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}	None	None
vpc:ModifyIPv6TranslatorAclListEntry	ModifyIPv6TranslatorAclListEntry	update	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:ModifyExpressConnectTrafficQos	ModifyExpressConnectTrafficQos	update	All Resources *	None	None
vpc:CreateHaVip	CreateHaVip	create	HaVip acs:vpc:{#regionId}:{#accountId}:havip/* VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	None	None
vpc:UnTagResources	UnTagResources	update	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	vpc:tag	None
vpc:CreateFailoverTestJob	CreateFailoverTestJob	create	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:UnassociateHaVip	UnassociateHaVip	delete	Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId} HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}	None	None
vpc:UnassociateRouteTable	UnassociateRouteTable	update	VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	None	None
vpc:AssociateEipAddressBatch	AssociateEipAddressBatch	update	Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId} NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:CreateVpnRouteEntry	CreateVpnRouteEntry	create	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:GetIpv4GatewayAttribute	GetIpv4GatewayAttribute	get	Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}	None	None
vpc:CreateIpv6Gateway	CreateIpv6Gateway	create	Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*	None	None
vpc:ListGeographicSubRegions	ListGeographicSubRegions	list	All Resources *	None	None
vpc:CreateRouterInterface	CreateRouterInterface	create	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/*	vpc:TargetAccountRDId	None
vpc:CreateVSwitch	CreateVSwitch	create	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/*	vpc:tag	None
vpc:GetNatGatewayAttribute	GetNatGatewayAttribute	get	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:DeleteIPv6Translator	DeleteIPv6Translator	delete	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:GetVpcPrefixListEntries	GetVpcPrefixListEntries	get	PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}	None	None
vpc:ListEnhanhcedNatGatewayAvailableZones	ListEnhanhcedNatGatewayAvailableZones	list	All Resources *	None	None
vpc:EnableVpcIpv4Gateway	EnableVpcIpv4Gateway	update	Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}	None	None
vpc:AttachVbrToVpconn	AttachVbrToVpconn	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}	None	None
vpc:ReleaseEipSegmentAddress	ReleaseEipSegmentAddress	delete	SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}	None	None
vpc:GetFlowLogServiceStatus	GetFlowLogServiceStatus	get	FlowLogService acs:vpc:{#regionId}:{#accountId}:flowlog/*	None	None
vpc:AssociateRouteTablesWithVpcGatewayEndpoint	AssociateRouteTablesWithVpcGatewayEndpoint	create	GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}	None	None
vpc:DeleteVpcPrefixList	DeleteVpcPrefixList	delete	PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}	None	None
vpc:RemoveGlobalAccelerationInstanceIp	RemoveGlobalAccelerationInstanceIp	delete	All Resources *	None	None
vpc:AllocateEipAddress	AllocateEipAddress	create	Address acs:vpc:{#regionId}:{#accountId}:eip/*	None	None
vpc:CreateDefaultVSwitch	CreateDefaultVSwitch	Write	VSwitch acs:vpc:{#regionid}:{#accountId}:vswitch/*	None	None
vpc:DeleteRouterInterface	DeleteRouterInterface	delete	RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}	None	None
vpc:StopFailoverTestJob	StopFailoverTestJob	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:UnassociateEipAddress	UnassociateEipAddress	delete	Instance acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId} Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}	None	None
vpc:DeleteVSwitch	DeleteVSwitch	delete	VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}	None	None
vpc:ListVpcPublishedRouteEntries	ListVpcPublishedRouteEntries	list	RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}	None	None
vpc:CreateVbrHa	CreateVbrHa	create	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}	None	None
vpc:AssociateRouteTable	AssociateRouteTable	update	VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}	None	None
vpc:DeleteVpcGatewayEndpoint	DeleteVpcGatewayEndpoint	delete	GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}	None	None
vpc:DescribeIpv6Addresses	DescribeIpv6Addresses	list	Ipv6InternetBandwidth acs:vpc:{#regionId}:{#accountId}:vpc/*	None	None
vpc:DescribeEipSegment	DescribeEipSegment	get	SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/*	None	None
vpc:ConfirmPhysicalConnection	ConfirmPhysicalConnection	get	All Resources *	None	None
vpc:DescribeForwardTableEntries	DescribeForwardTableEntries	get	ForwardTable acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}	None	None
vpc:CreateVpcGatewayEndpoint	CreateVpcGatewayEndpoint	create	GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*	None	None
vpc:DeleteGlobalAccelerationInstance	DeleteGlobalAccelerationInstance	delete	GlobalAccelerationInstance acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}	None	None
vpc:DescribeVirtualBorderRoutersForPhysicalConnection	DescribeVirtualBorderRoutersForPhysicalConnection	list	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	vpc:PhysicalConnection	None
vpc:DescribeSslVpnClients	DescribeSslVpnClients	list	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:DeleteIPv6TranslatorEntry	DeleteIPv6TranslatorEntry	delete	All Resources *	None	None
vpc:DisableVpcClassicLink	DisableVpcClassicLink	update	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:CreateTrafficMirrorFilter	CreateTrafficMirrorFilter	create	TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*	None	None
vpc:CreateForwardEntry	CreateForwardEntry	create	ForwardTable acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}	None	None
vpc:DeleteNatGateway	DeleteNatGateway	delete	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid}	None	None
vpc:ModifyVpcAttribute	ModifyVpcAttribute	update	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	vpc:tag	None
vpc:CreatePhysicalConnectionOccupancyOrder	CreatePhysicalConnectionOccupancyOrder	create	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:DeleteVpnGateway	DeleteVpnGateway	delete	VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}	None	None
vpc:RevokeInstanceFromCen	RevokeInstanceFromCen	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:DeleteBgpNetwork	DeleteBgpNetwork	delete	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:DeleteTrafficMirrorSession	DeleteTrafficMirrorSession	delete	TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}	None	None
vpc:AssociateVpcCidrBlock	AssociateVpcCidrBlock	create	VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}	None	None
vpc:OpenPublicIpAddressPoolService	OpenPublicIpAddressPoolService	create	All Resources *	None	None
vpc:ListVirtualPhysicalConnections	ListVirtualPhysicalConnections	list	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}	None	None
vpc:AddGlobalAccelerationInstanceIp	AddGlobalAccelerationInstanceIp	create	All Resources *	None	None
vpc:DescribeIPv6TranslatorAclListAttributes	DescribeIPv6TranslatorAclListAttributes	get	IPv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId}	None	None
vpc:DescribeCommonBandwidthPackages	DescribeCommonBandwidthPackages	get	CommonBandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*	None	None
vpc:AllocateEipSegmentAddress	AllocateEipSegmentAddress	create	SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/*	None	None
vpc:DescribeNatGatewayAssociateNetworkInterfaces	DescribeNatGatewayAssociateNetworkInterfaces	list	NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}	None	None
vpc:ModifyBgpGroupAttribute	ModifyBgpGroupAttribute	update	VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:DescribeNetworkAcls	DescribeNetworkAcls	list	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/*	None	None
vpc:DescribeNetworkAclAttributes	DescribeNetworkAclAttributes	get	NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}	None	None
vpc:DescribeSslVpnServers	DescribeSslVpnServers	list	SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/* SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}	None	None
vpc:DescribeExpressConnectTrafficQosRule	DescribeExpressConnectTrafficQosRule	list	All Resources *	None	None
vpc:AssociatePhysicalConnectionToVirtualBorderRouter	AssociatePhysicalConnectionToVirtualBorderRouter	update	PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}	None	None
vpc:ModifyIPv6TranslatorEntry	ModifyIPv6TranslatorEntry	update	Ipv6Translator acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}	None	None
vpc:DescribeTags	DescribeTags	get	All Resources *	vpc:tag	None
vpc:UpdatePublicIpAddressPoolAttribute	UpdatePublicIpAddressPoolAttribute	Write	PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}	None	None
vpc:GetVSwitchCidrReservationUsage	GetVSwitchCidrReservationUsage	get	VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}	None	None
vpc:GetTrafficMirrorServiceStatus	GetTrafficMirrorServiceStatus	get	All Resources *	None	None
vpc:ModifyGlobalAccelerationInstanceAttributes	ModifyGlobalAccelerationInstanceAttributes	update	GlobalAccelerationInstance acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}	None	None
vpc:GetPhysicalConnectionServiceStatus	GetPhysicalConnectionServiceStatus	get	All Resources *	None	None

Resource

VPC defines the values that you can use in the Resource. You can attach the policy to a RAM user or a RAM role so that the RAM user or the RAM role can perform a specific operation on a specific resource. The ARN is the unique identifier of the resource on Alibaba Cloud. Take note of the following items:

{#}indicates a variable. {#} must be replaced with an actual value. For example, {#ramcode} must be replaced with the actual code of an Alibaba Cloud service in RAM.
An asterisk (*) is used as a wildcard. Examples:
- {#resourceType} is set to *, all resources are specified.
- {#regionId} is set to *, all regions are specified.
- {#accountId} is set to *, all Alibaba Cloud accounts are specified.

Resource type	ARN
CustomerGateway	acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
VpnGateway	acs:vpc:{#regionId}:{#accountId}:vpngateway/*
VpnAttachment	acs:vpc:{#Region}:{#AccountId}:vpnattachment/{#VpnConnectionId}
Address	acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
FullNat	acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}
PhysicalConnection	acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VpnGateway	acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
NatGateway	acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
Instance	acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
Association	acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
GatewayEndpoint	acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
GatewayEndpoint	acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
VirtualBorderRouter	acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface	acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
Ipv6Translator	acs:vpc:{#regionId}:{#accountId}:ipv6trans/*
BandwidthPackage	acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}
GlobalAccelerationInstance	acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}
VpnConnection	acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
GlobalAccelerationInstance	acs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/*
BandwidthPackage	acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
RouteTable	acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
Instance	acs:ecs:{#regionId}:{#accountId}:instance/*
TrafficQos	acs:vpc:{#regionId}:{#accountId}:TrafficQos/*
ForwardTable	acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
HaVip	acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
DhcpOptionsSet	acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
Eip	acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
VPC	acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
PrefixList	acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
FlowLog	acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
Ipv4Gateway	acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}
Ipv6Gateway	acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
PublicIpAddressPool	acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
TrafficMirrorFilter	acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
TrafficMirrorSession	acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
NetworkAcl	acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
Ipv6InternetBandwidth	acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
VirtualBorderRouter	acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
SnatTable	acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
PrefixList	acs:vpc:{#regionId}:{#accountId}:prefixlist/*
IpsecServer	acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}
VPC	acs:vpc:{#regionId}:{#accountId}:vpc/*
SslVpnServer	acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
Ipv4Gateway	acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
VirtualBorderRouter	acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/*
Ipv6Translator	acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}
VSwitch	acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId}
FlowLog	acs:vpc:{#regionId}:{#accountId}:flowlog/*
Ipv6InternetBandwidth	acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*
NetworkAcl	acs:vpc:{#regionId}:{#accountId}:networkacl/*
VpnConnections	acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
VirtualBorderRouter	acs:expressconnect:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
BandwidthPackage	acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/*
Address	acs:vpc:{#regionId}:{#accountId}:eip/*
SslVpnClientCert	acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
SslVpnClientCert	acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
PhysicalConnection	acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
VSwitchCidrReservation	acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
VpnConnection	acs:vpc:{#regionId}:{#accountId}:vpnconnection/*
VirtualBorderRouter	acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
GatewayInfo	acs:vpc:{#regionId}:{#accountId}:eip/*
CustomerGateway	acs:vpc:{#regionId}:{#accountId}:customergateway/*
VSwitch	acs:vpc:{#regionId}:{#accountId}:vswitch/*
GlobalAccelerationInstance	acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/*
CommonBandwidthPackage	acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}
RouteTable	acs:vpc:{#regionId}:{#accountId}:routetable/*
DhcpOptionsSet	acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
VPC	acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
RouterInterface	acs:expressconnect:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
RouteTable	acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable}
NatGateway	acs:vpc:{#regionId}:{#accountId}:natgateway/*
SslVpnServer	acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
VRouter	acs:vpc:{#regionId}:{#accountId}:vrouter/*
PhysicalConnection	acs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter	acs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterface	acs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId}
NatIpCidr	acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
VpnConnection	acs:vpc:{#regionId}:{#accountId}:*
VpnGateway	acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}
PublicIpAddressPoolService	acs:vpc:{#regionId}:{#accountId}:publicipaddresspoolservice/*
IPv6Translator	acs:vpc:{#regionId}:{#accountId}:ipv6trans/*
IPv6Translator	acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId}
TrafficMirrorFilter	acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
IpsecServer	acs:vpc:{#Region}:{#AccountId}: vpnipsecserver/{#IpsecServerId}
VpnGateway	acs:vpc:{#regionId}:{#accountId}:
VpnGateway	acs:vpc:{#Region}:{#AccountId}:vpngateway/{#VpnInstanceId}
physicalconnection	acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
TrafficMirrorSession	acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
IpsecServer	acs:vpc:{#regionId}:{#accountId}:ipsecserver/*
HaVip	acs:vpc:{#regionId}:{#accountId}:havip/*
Ipv6EgressRule	acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
Instance	acs:ecs:{#regionId}:{#accountId}:instance/{#Instanceid}
VSwitchCidrReservation	acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
CustomerGateway	acs:vpc:{#Region}:{#AccountId}:customergateway/{#CustomerGatewayId}
VpnConnection	acs:vpc:{#Region}:{#AccountId}:vpnconnection/{#VpnConnectionId}
SslVpnServer	acs:vpc:{#Region}:{#AccountId}:sslvpnserver/{#SslVpnServerId}
VRouter	acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}
FlowLogService	acs:vpc:{#regionId}:{#accountId}:flowlog/*
SnatEntry	acs:vpc:{#regionId}:{#accountId}:snattable/*
CommonBandwidthPackage	acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
Ipv6Gateway	acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
Instance	acs:ecs:{#regionId}:{#accountId}:instance/{#BackendServerId}
RouteEntry	acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
TrafficMirrorService	acs:vpc:{#regionId}:{#accountId}:trafficmirror/*
VirtualBorderRouter	acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}
GrantRuleToCen	acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
Ipv6Address	acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
Ipv6Address	acs:vpc:{#regionId}:{#accountId}:ipv6address/*
PublicIpAddressPool	acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
BandwidthPackage	acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
NatIp	acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouterInterface	acs:vpc:{#regionId}:{#accountId}:routerinterface/*
SegmentAddress	acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
Ipv6InternetBandwidth	acs:vpc:{#regionId}:{#accountId}:vpc/*
SegmentAddress	acs:vpc:{#regionId}:{#accountId}:eip/*
Eip	acs:vpc:{#regionId}:{#accountId}:eip/{#EipId}

Condition

VPC defines the values that you can use in the Condition element of a policy statement. The following table describes the values. The following table describes the service-specific condition keys. The common condition keys that are defined by Alibaba Cloud also apply to VPC. For more information about the common condition keys, see Generic Condition Keyword.

The data type determines the conditional operators that you can use to compare the value in a request with the value in a policy statement. You must use conditional operators that are supported by the data type. Otherwise, you cannot compare the value in the request with the value in the policy statement. In this case, the authorization is invalid. For more information about the conditional operators that are supported by each data type, see Policy elements.

Condition key	Description	Data type
vpc:PhysicalConnection	Physical Line Information	String
vpc:VBR	Border Router Information	String
vpc:VPC	VPC Information	String
vpc:VRouter	Router Information	String
vpc:tag	Tags of the VPC	String
vpc:TargetAccountRDId	peer user resource directory ID information	String

What to do next

You can create a custom policy and attach the policy to a RAM user, RAM user group, or RAM role. For more information, see the following topics: