edit-icon download-icon

RAM

Last Updated: Jun 10, 2018

Function Compute supports RAM based resource access management. You can access Function Compute using RAM user or STS token. The RAM permissions of each operations are defined as follows:

Note: In RAM, theResource format is acs:fc:${region}:${account-id}:${resource}. The following table lists only the content of ${resource}. For example, you can specify the following authorization policies for CreateService:

  1. {
  2. "Version": "1",
  3. "Statement": [
  4. {
  5. "Action": [
  6. "fc:CreateService"
  7. ],
  8. "Resource": "acs:fc:*:*:services/*",
  9. "Effect": "Allow"
  10. }
  11. ]
  12. }
API Action Resource
CreateService fc:CreateService services/*
ListServices fc:ListServices services/*
GetService fc:GetService services/${serviceName}
UpdateService fc:UpdateService services/${serviceName}
DeleteService fc:DeleteService services/${serviceName}
CreateFunction fc:CreateFunction services/${serviceName}/functions/*
ListFunctions fc:ListFunctions services/${serviceName}/functions/*
GetFunction fc:GetFunction services/${serviceName}/functions/${functionName}
UpdateFunction fc:UpdateFunction services/${serviceName}/functions/${functionName}
DeleteFunction fc:DeleteFunction services/${serviceName}/functions/${functionName}
InvokeFunction fc:InvokeFunction services/${serviceName}/functions/${functionName}
CreateTrigger fc:CreateTrigger services/${serviceName}/functions/${functionName}/triggers/*
ListTriggers fc:ListTriggers services/${serviceName}/functions/${functionName}/triggers/*
GetTrigger fc:GetTrigger services/${serviceName}/functions/${functionName}/triggers/${triggerName}
UpdateTrigger fc:UpdateTrigger services/${serviceName}/functions/${functionName}/triggers/${triggerName}
DeleteTrigger fc:DeleteTrigger services/${serviceName}/functions/${functionName}/triggers/${triggerName}
Thank you! We've received your feedback.