AliyunServiceRolePolicyForNlbClone 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForNlbClone 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2024-02-27 10:32:40
更新时间：2024-02-27 10:32:40
当前版本：v1
策略内容
{
"Version": "1",
"Statement": [
{
"Action": [
"ros:CreateTemplateScratch",
"ros:GetTemplateScratch",
"ros:GenerateTemplateByScratch",
"ros:DeleteTemplateScratch",
"ros:PreviewStack",
"ros:CreateStack",
"ros:DeleteStack",
"ros:GetStack",
"ros:ListStacks",
"ros:ListStackResources",
"ros:GetStackResource",
"ros:ListStackEvents"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"nlb:CreateLoadBalancer",
"nlb:DeleteLoadBalancer",
"nlb:UpdateLoadBalancerAttribute",
"nlb:GetLoadBalancerAttribute",
"nlb:ListLoadBalancers",
"nlb:AttachCommonBandwidthPackageToLoadBalancer",
"nlb:DetachCommonBandwidthPackageFromLoadBalancer",
"nlb:EnableLoadBalancerIpv6Internet",
"nlb:DisableLoadBalancerIpv6Internet",
"nlb:UpdateLoadBalancerProtection",
"nlb:CreateListener",
"nlb:DeleteListener",
"nlb:GetListenerAttribute",
"nlb:ListListeners",
"nlb:GetListenerHealthStatus",
"nlb:UpdateListenerAttribute",
"nlb:StartListener",
"nlb:StopListener",
"nlb:ListServerGroupServers",
"nlb:ListServerGroups",
"nlb:CreateServerGroup",
"nlb:DeleteServerGroup",
"nlb:UpdateServerGroupAttribute",
"nlb:UpdateServerGroupServersAttribute",
"nlb:AddServersToServerGroup",
"nlb:RemoveServersFromServerGroup",
"nlb:ListTagResources",
"nlb:UntagResources",
"nlb:TagResources",
"nlb:DescribeZones",
"nlb:GetJobStatus"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"slb:CreateAccessControlList",
"slb:AddAccessControlListEntry",
"slb:AddTags",
"slb:TagResources",
"slb:AddBackendServers",
"slb:AddVServerGroupBackendServers",
"slb:UploadServerCertificate",
"slb:CreateDomainExtension",
"slb:CreateLoadBalancerHTTPListener",
"slb:CreateLoadBalancerHTTPSListener",
"slb:CreateLoadBalancerTCPListener",
"slb:CreateLoadBalancerUDPListener",
"slb:StartLoadBalancerListener",
"slb:CreateLoadBalancer",
"slb:CreateMasterSlaveServerGroup",
"slb:CreateRules",
"slb:SetRule",
"slb:CreateTLSCipherPolicy",
"slb:ListTLSCipherPolicies",
"slb:CreateVServerGroup",
"slb:AddVServerGroupBackendServers",
"slb:Describe*",
"slb:DeleteAccessControlList",
"slb:RemoveBackendServers",
"slb:RemoveVServerGroupBackendServers",
"slb:DeleteServerCertificate",
"slb:DeleteDomainExtension",
"slb:DeleteLoadBalancerListener",
"slb:CancelOrder",
"slb:DeleteLoadBalancer",
"slb:DeleteMasterSlaveServerGroup",
"slb:DeleteRules",
"slb:DeleteTLSCipherPolicy",
"slb:DeleteVServerGroup",
"slb:ListTagResources"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"vpc:DescribeVpcs",
"vpc:DescribeVSwitches"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ecs:Describe*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"tag:TagResources",
"tag:UntagResources"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "clone.nlb.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "nlb.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "eipaccess.slb.aliyuncs.com"
}
}
}
]
}