This topic describes the custom policies that may be used when you use the FC-API component.

Resource Action Description
acs:fc:<region>:<account-id>:services/<serviceName> fc:GetService The specified service.
fc:UpdateService
fc:DeleteService
acs:fc:<region>:<account-id>:services/* fc:CreateService All services.
fc:ListServices
acs:fc:<region>:<account-id>:services/<serviceName>.<qualifier> fc:GetService The service of a specified version.
acs:fc:<region>:<account-id>:services/<serviceName>/functions/<functionName> fc:GetFunction The specified function in a specified service.
fc:UpdateFunction
fc:DeleteFunction
fc:InvokeFunction
acs:fc:<region>:<account-id>:services/<serviceName>/functions/* fc:CreateFunction All functions in a specified service.
fc:ListFunctions
acs:fc:<region>:<account-id>:services/<serviceName>.*/functions/<functionName> fc:GetFunction All functions in all versions of a specified service.
fc:UpdateFunction
fc:DeleteFunction
fc:InvokeFunction
fc:PutProvisionConfig
fc:GetProvisionConfig
fc:PutFunctionOnDemandConfig
fc:DeleteFunctionOnDemandConfig
fc:PutFunctionAsyncInvokeConfig
fc:DeleteFunctionAsyncInvokeConfig
fc:GetFunctionAsyncInvokeConfig
fc:GetFunctionOnDemandConfig
acs:fc:<region>:<account-id>:services/<serviceName>/functions/<functionName>/triggers/<triggerName> fc:GetTrigger The specified trigger of a specified function in a specified service.
fc:UpdateTrigger
fc:DeleteTrigger
acs:fc:<region>:<account-id>:services/<serviceName>/functions/<functionName>/triggers/* fc:CreateTrigger All triggers of a specified function in a specified service.
fc:ListTriggers
acs:fc:<region>:<account-id>:services/<serviceName>/versions fc:PublishServiceVersion All service versions.
fc:ListServiceVersions
acs:fc:<region>:<account-id>:services/<serviceName>/versions/<versionID> fc:DeleteServiceVersion The specified service version.
acs:fc:<region>:<account-id>:services/<serviceName>/aliases/* fc:CreateAlias All service aliases.
fc:ListAliases
acs:fc:<region>:<account-id>:services/<serviceName>/aliases/<aliasName> fc:GetAlias The specified service alias.
fc:UpdateAlias
fc:DeleteAlias
acs:fc:<region>:<account-id>:custom-domains/* fc:CreateCustomDomain All custom domain names.
fc:ListCustomDomains
acs:fc:<region>:<account-id>:custom-domains/<domainName> fc:GetCustomDomain The specified custom domain name.
fc:UpdateCustomDomain
fc:DeleteCustomDomain
acs:fc:<region>:<account-id>:tag fc:TagResource A single tag.
fc:GetResourceTags
fc:UnTagResource
acs:fc:<region>:<account-id>:tags/* fc:ListTaggedResources All tags.
acs:fc:<region>:<account-id>:account-settings/* fc:GetAccountSettings The settings of your account.
acs:fc:<region>:<account-id>:layerarn/:arn fc:GetLayerVersionByArn All layers.
acs:fc:<region>:<account-id>:layers/* fc:ListLayers
acs:fc:<region>:<account-id>:layers/:layerName/versions/:version fc:PublishLayerAsPublic
acs:fc:<region>:<account-id>:layers/:layerName/versions/* fc:ListLayerVersions All layer versions.
fc:CreateLayerVersion
acs:fc:<region>:<account-id>:layers/:layerName/versions/:version fc:GetLayerVersion
fc:DeleteLayerVersion
acs:fc:<region>:<account-id>:on-demand-configs/* fc:ListOnDemandConfigs The on-demand configurations.
acs:fc:<region>:<account-id>:provision-configs/* fc:ListProvisionConfigs The provisioned configurations.
acs:fc:<region>:<account-id>:services/:serviceName/binding fc:DeleteVpcBinding The VPC configuration.
acs:fc:<region>:<account-id>:services/:serviceName/binding/* fc:CreateVpcBinding
fc:ListVpcBindings
acs:fc:<region>:<account-id>:services/:serviceName/functions/:functionName/async-invoke-configs/* fc:ListFunctionAsyncInvokeConfigs The asynchronous invocation configurations.
acs:fc:<region>:<account-id>:services/:serviceName/functions/:functionName/code fc:GetFunctionCode All function code.
acs:fc:<region>:<account-id>:services/:serviceName/functions/:functionName/stateful-async-invocations/* fc:ListStatefulAsyncInvocations The stateful asynchronous invocation.
acs:fc:<region>:<account-id>:services/:serviceName/functions/:functionName/stateful-async-invocations/:invocationId fc:GetStatefulAsyncInvocation
fc:StopStatefulAsyncInvocation

References

For more information, see Policies and sample custom policies.