全部产品
Search
文档中心

访问控制:AliyunYundunBastionHostOperateOnlyAccess

更新时间:Dec 16, 2024

AliyunYundunBastionHostOperateOnlyAccess 是阿里云管理的产品系统策略,您可以将 AliyunYundunBastionHostOperateOnlyAccess 授权给 RAM 身份(RAM 用户、RAM 用户组和 RAM 角色),本策略定义了管理云盾堡垒机(BastionHost)的运维员权限。

策略详情

  • 类型:系统策略

  • 创建时间:2018-09-27 09:31:31

  • 更新时间:2024-12-16 11:13:30

  • 当前版本:v5

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "yundun-bastionhost:GetInstance*",
        "yundun-bastionhost:DescribeInstance*",
        "yundun-bastionhost:QueryInstance*",
        "yundun-bastionhost:ListInstance*",
        "yundun-bastionhost:*Operation*"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "pam:GetInstanceDetail",
      "Resource": "*",
      "Effect": "Allow"
    },
        {
            "Action": "ram:CheckServiceLinkedRoleExistence",
            "Resource": "*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": "bastionhost.aliyuncs.com"
                }
            }
        }
  ]
}

相关文档