AliyunEMRFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunEMRFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunEMRFullAccess policy: Provides full access to E-MapReduce via Management Console.
Policy details
Type: service system policy
Creation time: 10:26:36 on November 25, 2015
Update time: 02:17:40 on October 13, 2022
Current version: v10
Policy content
{
"Version": "1",
"Statement": [
{
"Action": "emr:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"cms:QueryMetricList",
"ram:GetRole",
"ram:ListRoles",
"ram:ListUserBasicInfos",
"ecs:DescribeZones",
"ecs:DescribeInstanceTypes",
"ecs:DescribeKeyPairs",
"ecs:DescribeAvailableResource",
"ecs:DescribeInstances",
"ecs:DescribeSpotPriceHistory",
"ecs:DescribeSpotAdvice",
"ecs:DescribeInstanceStatus",
"ecs:DescribeDeploymentSets",
"vpc:DescribeVpcs",
"vpc:DescribeVSwitches",
"oss:ListBuckets",
"dlf:DescribeRegions",
"dlf:GetRegionStatus",
"dlf:ListCatalogs" ,
"dls:ListNamespaces",
"bss:ModifyAgreementRecord"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:PassRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"acs:Service": "emr.aliyuncs.com"
}
}
},
{
"Action": "quotas:ListProductQuotas",
"Resource": "acs:quotas:*:*:quota/ecs/*",
"Effect": "Allow"
},
{
"Action": "kms:DescribeAccountKmsStatus",
"Resource": "*",
"Effect": "Allow"
}
]
}