AliyunDLAFullAccess 是阿里云管理的产品系统策略，您可以将 AliyunDLAFullAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理Data Lake Analytics的权限。
策略详情
类型：系统策略
创建时间：2018-10-12 05:05:13
更新时间：2021-08-18 08:29:52
当前版本：v6
策略内容
{
"Version": "1",
"Statement": [
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "openanalytics.aliyuncs.com"
}
}
},
{
"Action": "openanalytics:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:ListRoles",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "dms:LoginDatabase",
"Resource": "acs:openanalytics:*:*:*",
"Effect": "Allow"
},
{
"Action": "ram:PassRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"acs:Service": "openanalytics.aliyuncs.com"
}
}
},
{
"Action": [
"dts:DescribeSubscriptionInstances",
"dts:DescribeConsumerGroup",
"dts:DescribeDtsJobDetail"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ecs:DescribeSecurityGroups"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"alikafka:ListInstance",
"alikafka:ListTopic",
"alikafka:QueryMessage"
],
"Resource": "acs:alikafka:*:*:*",
"Effect": "Allow"
},
{
"Action": [
"lindorm:GetSpecifiedLindormInstanceList",
"lindorm:GetLdfsDirectories",
"lindorm:CreateLdfsDirectory",
"lindorm:CheckLdfsUserPermission",
"lindorm:GetLtsStreams",
"lindorm:GetLtsStreamDetails"
],
"Resource": "*",
"Effect": "Allow"
}
]
}