AliyunRDSDedicatedHostGroupRolePolicy 是专用于服务角色的授权策略，通常会在创建对应的服务角色时同步完成授权，以允许服务角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2020-01-21 11:09:39
更新时间：2020-01-21 11:09:39
当前版本：v1
策略内容
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:CreateNetworkInterface",
"ecs:DeleteNetworkInterface",
"ecs:AttachNetworkInterface",
"ecs:DetachNetworkInterface",
"ecs:DescribeNetworkInterfaces",
"ecs:CreateNetworkInterfacePermission",
"ecs:DescribeNetworkInterfacePermissions",
"ecs:CreateSecurityGroup",
"ecs:DeleteSecurityGroup",
"ecs:DescribeSecurityGroupAttribute",
"ecs:DescribeSecurityGroups",
"ecs:ModifySecurityGroupAttribute",
"ecs:AuthorizeSecurityGroup",
"ecs:AuthorizeSecurityGroupEgress",
"ecs:RevokeSecurityGroup",
"ecs:RevokeSecurityGroupEgress",
"ecs:AssignIpv6Addresses",
"ecs:UnAssignIpv6Addresses",
"ecs:ModifyNetworkInterfaceAttribute",
"ecs:CreateInstance",
"ecs:CreateOrder",
"ecs:RunInstances",
"ecs:DescribeRegions",
"ecs:DescribeZones",
"ecs:DescribeImages",
"ecs:DescribeInstances",
"ecs:DescribeDisks",
"ecs:DescribeInstanceHistoryEvents",
"ecs:DescribeInstancesFullStatus",
"ecs:DescribeDisksFullStatus",
"ecs:DescribeResourcesModification",
"ecs:DescribeAvailableResource",
"ecs:DescribeBandwidthLimitation",
"ecs:DescribeKeyPairs",
"ecs:DescribePrice",
"ecs:DescribeInstanceHistoryEvents",
"ecs:DescribeTasks",
"ecs:ListTagResources",
"ecs:TagResources",
"ecs:AddTags"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"yundun-bastionhost:Describe*",
"yundun-bastionhost:AttachHostsToUser*",
"yundun-bastionhost:CreateHost*",
"yundun-bastionhost:DeleteHost*",
"yundun-bastionhost:ListHost*",
"yundun-bastionhost:ListUsers*",
"yundun-bastionhost:ModifyHostAccountsForUser*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ecs:RenewInstance",
"ecs:StartInstance",
"ecs:StartInstances",
"ecs:RebootInstances",
"ecs:StopInstance",
"ecs:StopInstances",
"ecs:RedeployInstance",
"ecs:RebootInstance",
"ecs:DeleteInstance",
"ecs:DeleteInstances",
"ecs:ModifyInstanceChargeType",
"ecs:ModifyPrepayInstanceSpec",
"ecs:JoinResourceGroup",
"ecs:AcceptInquiredSystemEvent",
"ecs:ReportInstancesStatus",
"ecs:ModifyInstanceAttribute",
"ecs:UntagResources",
"ecs:InstallCloudAssistant",
"ecs:DescribeCloudAssistantStatus",
"ecs:RunCommand",
"ecs:DescribeInvocationResults"
],
"Resource": "acs:ecs:*:*:*",
"Condition": {
"StringLike": {
"ecs:tag/acs:rds:mybaseOnEcs": [
"mybase-onEcs*"
]
}
}
},
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVSwitches",
"vpc:DescribeVpcs"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"cs:DescribeClusters",
"cs:DescribeClusterNodePools",
"cs:DescribeClusterNodePoolDetail",
"cs:DescribeAddons",
"cs:DescribeAddon",
"cs:DescribeClusterEvents",
"cs:GetClusters",
"cs:GetUserPermissions",
"cs:ListTagResources",
"cs:DescribeClusterResources",
"cs:ListClusterAddonInstances",
"cs:ListAddons",
"cs:DescribeClusterInnerServiceKubeconfig"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"slb:DescribeLoadBalancerAttribute",
"slb:DescribeLoadBalancerListeners",
"slb:DescribeLoadBalancers",
"slb:DescribeLoadBalancerHTTPSListenerAttribute"
],
"Resource": "*"
}
]
}