Security Center：RAM authorization

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. You can use RAM to prevent RAM users from sharing the AccessKey pairs of your Alibaba Cloud account. You can also use RAM to grant minimum permissions to RAM users. RAM uses policies to define permissions.

This topic describes the elements, such as Action, Resource, and Condition, which are defined by ThreatDetection. You can use the elements to create policies in RAM. The code (RamCode) in RAM that is used to indicate ThreatDetection is [{"popCode":"Sas","ramCodes":["yundun-sas","yundun-aegis"]},{"popCode":"cloud-siem","ramCodes":["yundun-sas"]},{"popCode":"sophonsoar","ramCodes":["yundun-sas"]}]. You can grant permissions on ThreatDetection at the OPERATION.

Policies can be stored as JSON files. The following code provides an example on the general structure of a policy:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}