AliyunMyBasePrinsDefaultRolePolicy 是专用于服务角色的授权策略，通常会在创建对应的服务角色时同步完成授权，以允许服务角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2024-11-27 10:54:42
更新时间：2024-12-13 03:37:16
当前版本：v3
策略内容
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:DescribeSecurityGroups",
"ecs:ModifySecurityGroupAttribute",
"ecs:AuthorizeSecurityGroup",
"ecs:AuthorizeSecurityGroupEgress",
"ecs:RevokeSecurityGroup",
"ecs:RevokeSecurityGroupEgress",
"ecs:DescribeInstances",
"ecs:DescribeDisks",
"ecs:ListTagResources",
"ecs:TagResources",
"ecs:AddTags"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ecs:RunCommand",
"ecs:DescribeInvocationResults"
],
"Resource": "acs:ecs:*:*:*",
"Condition": {
"StringLike": {
"ecs:tag/acs:rds:mybasePrins": [
"mybase-prins*"
]
}
}
},
{
"Effect": "Allow",
"Action": [
"cms:DescribeMetricList",
"cms:QueryMetricList",
"cms:DescribeSystemEventCount",
"cms:DescribeSystemEventAttribute",
"cms:DescribeSystemEventMetaList"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"dms:AddInstance",
"dms:DeleteInstance",
"dms:ListInstances",
"dms:ListDatabases",
"dms:ExecuteScript",
"dms:ModifyInstance"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"hdm:AccessAliyunECSDBInstance",
"hdm:GetAccessConfigByEngine",
"hdm:DeleteInstanceByInstanceId",
"hdm:GetHDMInstanceMetricsList",
"hdm:GetHDMLogicInstances",
"hdm:UpdateAliyunECSSecurityGroup"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"dbs:CreateAndStartBackupPlan",
"dbs:ConfigureBackupPlan",
"dbs:DescribeBackupPlanList"
],
"Resource": "*"
}
]
}