RAM authorization - Express Connect - Alibaba Cloud Documentation Center

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. Using RAM helps you avoid sharing your Alibaba Cloud account keys with other users and allows you to grant users the least privilege access. RAM uses permission policies to define authorizations. This topic describes the general structure of a RAM policy, and the policy statement elements (Action, Resource, and Condition) defined by Virtual Private Cloud for RAM permission policies. The RAM code (RamCode) for Virtual Private Cloud is vpc , and the supported authorization granularity is RESOURCE .

General structure of a policy

Permission policies support JSON format with the following general structure:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

The following list describes the fields in the policy:

Version: Specifies the policy version number. It is fixed at 1.
Statement:
- Effect: Specifies the authorization result. Valid values: Allow and Deny.
- Action: Specifies one or more operations that are allowed or denied.
- Resource: Specifies the specific objects affected by the operations. You can use Alibaba Cloud Resource Names (ARNs) to describe specific resources.
- Condition: Specifies the conditions for the authorization to take effect. This field is optional.
  - Condition operator: Specifies the conditional operators. Different types of conditions support different conditional operators.
  - Condition_key: Specifies the condition keys.
  - Condition_value: Specifies the condition values.

Action

The following table lists the actions defined by Virtual Private Cloud. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that support authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding ARN in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys that are applicable across all RAM-integrated services. For more information, see Common condition keys.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action	API	Access level	Resource type	Condition key	Dependent action
vpc:DescribeFlowLogs	DescribeFlowLogs	get	FlowLog `acs:vpc:{#regionId}:{#accountId}:flowlog/`	None	None
vpc:DescribeVpnConnection	DescribeVpnConnection	get	*VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:CreateVbrHa	CreateVbrHa	create	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:OpenFlowLogService	OpenFlowLogService	create	FlowLogService `acs:vpc:{#regionId}:{#accountId}:flowlog/`	None	None
vpc:ModifyNatGatewaySpec	ModifyNatGatewaySpec	update	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:ModifyCommonBandwidthPackageAttribute	ModifyCommonBandwidthPackageAttribute	update	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}`	None	None
vpc:ChangeResourceGroup	ChangeResourceGroup	update	All Resource ``	None	None
vpc:DescribeSnatTableEntries	DescribeSnatTableEntries	get	*SnatTable `acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}`	None	None
vpc:AddIPv6TranslatorAclListEntry	AddIPv6TranslatorAclListEntry	create	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:AllocateVpcIpv6Cidr	AllocateVpcIpv6Cidr	none	All Resource ``	None	None
vpc:ModifyIpv6GatewayAttribute	ModifyIpv6GatewayAttribute	update	*Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}`	None	None
vpc:CreateEnhancedVpnGateway	CreateEnhancedVpnGateway	create	All Resource ``	None	None
vpc:CreateNatGateway	CreateNatGateway	create	NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/`	None	None
vpc:ModifyExpressCloudConnectionAttribute	ModifyExpressCloudConnectionAttribute	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:CreatePublicIpAddressPool	CreatePublicIpAddressPool	create	PublicIpAddressPool `acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/`	None	None
vpc:CreateVpc	CreateVpc	create	VPC `acs:vpc:{#regionId}:{#accountId}:vpc/`	None	None
vpc:ModifyNatGatewayAttribute	ModifyNatGatewayAttribute	update	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:ModifyFullNatEntryAttribute	ModifyFullNatEntryAttribute	update	*FullNat `acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}`	None	None
vpc:EnableVpcIpv4Gateway	EnableVpcIpv4Gateway	update	*Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}`	None	None
vpc:DeleteNatGateway	DeleteNatGateway	delete	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid}`	None	None
vpc:DeletePublicIpAddressPoolCidrBlock	DeletePublicIpAddressPoolCidrBlock	delete	*PublicIpAddressPool `acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}`	None	None
vpc:PublishVpnRouteEntry	PublishVpnRouteEntry	update	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DescribeIpv6Gateways	DescribeIpv6Gateways	get	Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*` Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}`	None	None
vpc:DeleteVpnGateway	DeleteVpnGateway	delete	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DeleteBgpPeer	DeleteBgpPeer	delete	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:ListPublicIpAddressPoolCidrBlocks	ListPublicIpAddressPoolCidrBlocks	get	*PublicIpAddressPool `acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}`	None	None
vpc:ModifyNetworkAclAttributes	ModifyNetworkAclAttributes	update	*NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}`	None	None
vpc:ModifyPhysicalConnectionAttribute	ModifyPhysicalConnectionAttribute	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:SetHighDefinitionMonitorLogStatus	SetHighDefinitionMonitorLogStatus		*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	None	None
vpc:CreateVirtualPhysicalConnection	CreateVirtualPhysicalConnection	create	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}`	None	None
vpc:DescribeRouterInterfaces	DescribeRouterInterfaces	list	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	None	None
vpc:DescribeVpcAttribute	DescribeVpcAttribute	get	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	vpc:tag	None
vpc:GetFlowLogServiceStatus	GetFlowLogServiceStatus	get	FlowLogService `acs:vpc:{#regionId}:{#accountId}:flowlog/`	None	None
vpc:ListTagResourcesForExpressConnect	ListTagResourcesForExpressConnect	list	All Resource ``	None	None
vpc:CreateForwardEntry	CreateForwardEntry	create	*ForwardTable `acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}`	None	None
vpc:ModifyRouteEntry	ModifyRouteEntry	update	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:UpdatePublicIpAddressPoolAttribute	UpdatePublicIpAddressPoolAttribute	update	*PublicIpAddressPool `acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}`	None	None
vpc:DescribeVpnConnections	DescribeVpnConnections	list	VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/*` VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DeleteIpsecServer	DeleteIpsecServer	delete	*IpsecServer `acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}`	None	None
vpc:CreateFailoverTestJob	CreateFailoverTestJob	create	VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}` PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:ListGeographicSubRegions	ListGeographicSubRegions	list	All Resource ``	None	None
vpc:CreatePhysicalConnectionOccupancyOrder	CreatePhysicalConnectionOccupancyOrder	create	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:UnassociateRouteTable	UnassociateRouteTable	update	*VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	None	None
vpc:TransformEipSegmentToPublicIpAddressPool	TransformEipSegmentToPublicIpAddressPool	create	All Resource ``	None	None
vpc:CreateVpnGateway	CreateVpnGateway	create	VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/`	None	None
vpc:ModifyRouteTableAttributes	ModifyRouteTableAttributes	update	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	vpc:VRouter	None
vpc:DeleteEnhancedVpnGateway	DeleteEnhancedVpnGateway	delete	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DeleteRouterInterface	DeleteRouterInterface	delete	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	None	None
vpc:DeleteFailoverTestJob	DeleteFailoverTestJob	delete	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:AddCommonBandwidthPackageIps	AddCommonBandwidthPackageIps	create	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}`	None	None
vpc:CreateTrafficMirrorFilter	CreateTrafficMirrorFilter	create	TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/`	None	None
vpc:CreateVpnPbrRouteEntry	CreateVpnPbrRouteEntry	create	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:CreatePhysicalConnectionSetupOrder	CreatePhysicalConnectionSetupOrder	create	All Resource ``	None	None
vpc:ActiveFlowLog	ActiveFlowLog	update	*FlowLog `acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	None	None
vpc:ModifyIPv6TranslatorEntry	ModifyIPv6TranslatorEntry	update	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:AssociateEipAddress	AssociateEipAddress	update	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}` NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}` Instance `acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}` Association `acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}`	None	None
vpc:DescribeIpv6EgressOnlyRules	DescribeIpv6EgressOnlyRules	get	*Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}`	None	None
vpc:DeactiveFlowLog	DeactiveFlowLog	update	*FlowLog `acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	None	None
vpc:RemoveCommonBandwidthPackageIp	RemoveCommonBandwidthPackageIp	delete	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}`	None	None
vpc:DescribeNatGatewayAssociateNetworkInterfaces	DescribeNatGatewayAssociateNetworkInterfaces	list	NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:ListNatIps	ListNatIps	get	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:CreateDefaultVSwitch	CreateDefaultVSwitch	create	VSwitch `acs:vpc:{#regionid}:{#accountId}:vswitch/`	None	None
vpc:AssociateRouteTablesWithVpcGatewayEndpoint	AssociateRouteTablesWithVpcGatewayEndpoint	create	*GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}`	None	None
vpc:CreateCustomerGateway	CreateCustomerGateway	create	CustomerGateway `acs:vpc:{#regionId}:{#accountId}:customergateway/`	None	None
vpc:DeleteCommonBandwidthPackage	DeleteCommonBandwidthPackage	delete	*CommonBandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}`	vpc:tag	None
vpc:RevokeInstanceFromCen	RevokeInstanceFromCen	update	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:ListVpcPublishedRouteEntries	ListVpcPublishedRouteEntries	list	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:CreateExpressCloudConnection	CreateExpressCloudConnection	create	All Resource ``	None	None
vpc:DissociateRouteTablesFromVpcGatewayEndpoint	DissociateRouteTablesFromVpcGatewayEndpoint	delete	*GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}`	None	None
vpc:UpdateRouteTargetGroup	UpdateRouteTargetGroup	update	*RouteTargetGroup `acs:vpc:{#regionId}:{#accountId}:routetargetgroup/{#RouteTargetGroupId}`	None	None
vpc:ModifyIPv6TranslatorBandwidth	ModifyIPv6TranslatorBandwidth	update	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:UpdateVirtualBorderBandwidth	UpdateVirtualBorderBandwidth	update	VirtualBorderRouter `acs:vpc::{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:TerminatePhysicalConnection	TerminatePhysicalConnection	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:CreateNatIp	CreateNatIp	create	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:GetIpv4GatewayAttribute	GetIpv4GatewayAttribute	get	*Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}`	None	None
vpc:DeletionProtection	DeletionProtection	delete	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	None	None
vpc:GetVpcPrefixListEntries	GetVpcPrefixListEntries	get	*PrefixList `acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	None	None
vpc:DescribeVpnCrossAccountAuthorizations	DescribeVpnCrossAccountAuthorizations	get	*VpnConnections `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:ListPrefixLists	ListPrefixLists	list	PrefixList `acs:vpc:{#regionId}:{#accountId}:prefixlist/*`	None	None
vpc:ListVpcEndpointServicesByEndUser	ListVpcEndpointServicesByEndUser	list	All Resource ``	None	None
vpc:ModifyGlobalAccelerationInstanceAttributes	ModifyGlobalAccelerationInstanceAttributes	update	*GlobalAccelerationInstance `acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}`	None	None
vpc:TagResourcesForExpressConnect	TagResourcesForExpressConnect	update	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}` RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}` TrafficQos `acs:vpc:{#regionId}:{#accountId}:trafficqos/{#QosId}`	None	None
vpc:ConfirmPhysicalConnection	ConfirmPhysicalConnection	get	All Resource ``	None	None
vpc:DescribeNatGateways	DescribeNatGateways	get	NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/*` NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:CreateCommonBandwidthPackage	CreateCommonBandwidthPackage	create	CommonBandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/`	None	None
vpc:AssociateHaVip	AssociateHaVip	create	Instance `acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}` HaVip `acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}`	None	None
vpc:CreateVpcGatewayEndpoint	CreateVpcGatewayEndpoint	create	GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/`	None	None
vpc:ModifySnatEntry	ModifySnatEntry	update	*SnatTable `acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}`	None	None
vpc:CreateIPv6TranslatorEntry	CreateIPv6TranslatorEntry	create	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:CreateSslVpnServer	CreateSslVpnServer	create	SslVpnServer `acs:vpc:{#regionId}:{#accountId}:sslvpnserver/` *VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:ListVirtualPhysicalConnections	ListVirtualPhysicalConnections	list	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:GetVpcRouteEntrySummary	GetVpcRouteEntrySummary	list	RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}` *VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}`	None	None
vpc:DescribeGrantRulesToEcr	DescribeGrantRulesToEcr	list	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:ConnectRouterInterface	ConnectRouterInterface	update	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	None	None
vpc:CreateTrafficMirrorSession	CreateTrafficMirrorSession	create	TrafficMirrorSession `acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/` *TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}`	None	None
vpc:DeleteBgpNetwork	DeleteBgpNetwork	delete	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:DeleteRouteTargetGroup	DeleteRouteTargetGroup	delete	All Resource ``	None	None
vpc:CopyNetworkAclEntries	CopyNetworkAclEntries	update	*NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}`	None	None
vpc:DeleteTrafficMirrorFilterRules	DeleteTrafficMirrorFilterRules	delete	*TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}`	None	None
vpc:DeleteVpcGatewayEndpoint	DeleteVpcGatewayEndpoint	delete	*GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}`	None	None
vpc:CreateTrafficMirrorFilterRules	CreateTrafficMirrorFilterRules	create	*TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}`	None	None
vpc:CreateVcoRouteEntry	CreateVcoRouteEntry	create	*VpnConnections `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DescribeServerRelatedGlobalAccelerationInstances	DescribeServerRelatedGlobalAccelerationInstances	get	All Resource ``	None	None
vpc:DeleteHaVip	DeleteHaVip	delete	*HaVip `acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}`	None	None
vpc:DeleteForwardEntry	DeleteForwardEntry	delete	*ForwardTable `acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}`	None	None
vpc:ModifyCustomerGatewayAttribute	ModifyCustomerGatewayAttribute	update	*CustomerGateway `acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}`	None	None
vpc:UpdateIpv4GatewayAttribute	UpdateIpv4GatewayAttribute	update	*Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}`	None	None
vpc:ListVpcGatewayEndpoints	ListVpcGatewayEndpoints	list	GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*` GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}`	None	None
vpc:DeleteVpnRouteEntry	DeleteVpnRouteEntry	delete	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:ListPhysicalConnectionFeatures	ListPhysicalConnectionFeatures	list	*PhysicalConnection `acs:vpc:{#regionId}:{#AccountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:DescribeVpnGateway	DescribeVpnGateway	get	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:UpdateVirtualPhysicalConnection	UpdateVirtualPhysicalConnection	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}`	None	None
vpc:CreateVpconnFromVbr	CreateVpconnFromVbr	create	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}`	None	None
vpc:CreateIpv4Gateway	CreateIpv4Gateway	create	Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/`	None	None
vpc:AllocateEipAddressPro	AllocateEipAddressPro	create	Address `acs:vpc:{#regionId}:{#accountId}:eip/`	None	None
vpc:GetNatGatewayAttribute	GetNatGatewayAttribute	get	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:AllocateEipSegmentAddress	AllocateEipSegmentAddress	create	SegmentAddress `acs:vpc:{#regionId}:{#accountId}:eip/`	None	None
vpc:CreateNetworkAcl	CreateNetworkAcl	create	NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/` *VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:ListTagResources	ListTagResources	get	BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}` Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}` NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}` RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}` VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}` VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	vpc:tag	None
vpc:ModifyGlobalAccelerationInstanceSpec	ModifyGlobalAccelerationInstanceSpec	update	*GlobalAccelerationInstance `acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}`	None	None
vpc:MoveResourceGroup	MoveResourceGroup	update	BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}` Eip `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}` PrefixList `acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}` GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}` DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}` FlowLog `acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}` HaVip `acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}` Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}` Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}` PublicIpAddressPool `acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}` TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}` TrafficMirrorSession `acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}`	None	None
vpc:ModifyExpressConnectTrafficQosRule	ModifyExpressConnectTrafficQosRule	update	All Resource ``	None	None
vpc:CancelCommonBandwidthPackageIpBandwidth	CancelCommonBandwidthPackageIpBandwidth	update	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}`	None	None
vpc:DescribeSslVpnClientCerts	DescribeSslVpnClientCerts	list	SslVpnClientCert `acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*` SslVpnClientCert `acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}`	None	None
vpc:DescribeCustomerGateways	DescribeCustomerGateways	list	CustomerGateway `acs:vpc:{#regionId}:{#accountId}:customergateway/*` CustomerGateway `acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}`	None	None
vpc:StartFailoverTestJob	StartFailoverTestJob	update	VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}` PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:DeleteRouteEntry	DeleteRouteEntry	delete	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:TagResources	TagResources	update	BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}` Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}` NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}` RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}` VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}` VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	vpc:tag	None
vpc:RemoveSourcesFromTrafficMirrorSession	RemoveSourcesFromTrafficMirrorSession	update	*TrafficMirrorSession `acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}`	None	None
vpc:OpenTrafficMirrorService	OpenTrafficMirrorService	create	All Resource ``	None	None
vpc:UnassociateVpcCidrBlock	UnassociateVpcCidrBlock	delete	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:ListGatewayRouteTableEntries	ListGatewayRouteTableEntries	list	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}`	None	None
vpc:DescribeVpnConnectionLogs	DescribeVpnConnectionLogs	list	*VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DescribeHighDefinitionMonitorLogAttribute	DescribeHighDefinitionMonitorLogAttribute	get	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	None	None
vpc:DescribeEcGrantRelation	DescribeEcGrantRelation	list	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:DeleteNetworkAcl	DeleteNetworkAcl	delete	*NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}`	None	None
vpc:DeletePublicIpAddressPool	DeletePublicIpAddressPool	delete	*PublicIpAddressPool `acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}`	None	None
vpc:RemoveIPv6TranslatorAclListEntry	RemoveIPv6TranslatorAclListEntry	delete	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:ModifyVpcPrefixList	ModifyVpcPrefixList	update	*PrefixList `acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	None	None
vpc:ModifyExpressConnectTrafficQosQueue	ModifyExpressConnectTrafficQosQueue	update	All Resource ``	None	None
vpc:UpdateDhcpOptionsSetAttribute	UpdateDhcpOptionsSetAttribute	update	*DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}`	None	None
vpc:DeleteVcoRouteEntry	DeleteVcoRouteEntry	delete	*VpnConnections `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:ModifyVpnAttachmentAttribute	ModifyVpnAttachmentAttribute	update	*VpnConnections `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DeleteExpressConnectTrafficQosRule	DeleteExpressConnectTrafficQosRule	delete	All Resource ``	None	None
vpc:DescribeIpv6Addresses	DescribeIpv6Addresses	list	Ipv6InternetBandwidth `acs:vpc:{#regionId}:{#accountId}:vpc/`	None	None
vpc:VpcDescribeVpcNatGatewayNetworkInterfaceQuota	VpcDescribeVpcNatGatewayNetworkInterfaceQuota	get	All Resource ``	None	None
vpc:DeleteVpnConnection	DeleteVpnConnection	delete	*VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DeleteIpv6Gateway	DeleteIpv6Gateway	delete	*Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}`	None	None
vpc:AllocateIpv6Address	AllocateIpv6Address	create	Ipv6Address `acs:vpc:{#regionId}:{#accountId}:ipv6address/`	None	None
vpc:ModifyIPv6TranslatorAttribute	ModifyIPv6TranslatorAttribute	update	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:ModifyEipForwardMode	ModifyEipForwardMode	update	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	None	None
vpc:DescribeSslVpnClientCert	DescribeSslVpnClientCert	get	*SslVpnClientCert `acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}`	None	None
vpc:ModifyExpressConnectTrafficQos	ModifyExpressConnectTrafficQos	update	All Resource ``	None	None
vpc:AddPublicIpAddressPoolCidrBlock	AddPublicIpAddressPoolCidrBlock	create	*PublicIpAddressPool `acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}`	None	None
vpc:DescribeVSwitchAttributes	DescribeVSwitchAttributes	get	*VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	None	None
vpc:ModifyVpnPbrRouteEntryAttribute	ModifyVpnPbrRouteEntryAttribute	update	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:UntagResourcesForExpressConnect	UntagResourcesForExpressConnect	update	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}` RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}` TrafficQos `acs:vpc:{#regionId}:{#accountId}:trafficqos/{#QosId}`	None	None
vpc:AssociateVpnGatewayWithCertificate	AssociateVpnGatewayWithCertificate	update	All Resource ``	None	None
vpc:DescribeVSwitches	DescribeVSwitches	list	VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/`	vpc:VPC	None
vpc:GetVpcPrefixListAssociations	GetVpcPrefixListAssociations	get	*PrefixList `acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	None	None
vpc:GetRouteTargetGroup	GetRouteTargetGroup	get	*RouteTargetGroup `acs:vpc:{#regionId}:{#accountId}:routetargetgroup/{#RouteTargetGroupId}`	None	None
vpc:ListTrafficMirrorFilters	ListTrafficMirrorFilters	list	TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/`	None	None
vpc:CreateDefaultVpc	CreateDefaultVpc	create	VPC `acs:vpc:{#regionId}:{#accountId}:vpc/`	None	None
vpc:ListEnhanhcedNatGatewayAvailableZones	ListEnhanhcedNatGatewayAvailableZones	list	All Resource ``	None	None
vpc:UpdateGatewayRouteTableEntryAttribute	UpdateGatewayRouteTableEntryAttribute	update	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:DeleteBgpGroup	DeleteBgpGroup	delete	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:ModifyVirtualBorderRouterAttribute	ModifyVirtualBorderRouterAttribute	update	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:DescribeNetworkAcls	DescribeNetworkAcls	list	NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/`	None	None
vpc:DeleteSslVpnClientCert	DeleteSslVpnClientCert	delete	*SslVpnClientCert `acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}`	None	None
vpc:DeactivateRouterInterface	DeactivateRouterInterface	update	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	None	None
vpc:ModifyTunnelAttribute	ModifyTunnelAttribute	update	*VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DescribeIPv6TranslatorEntries	DescribeIPv6TranslatorEntries	get	All Resource ``	None	None
vpc:DescribeEipAddresses	DescribeEipAddresses	list	Address `acs:vpc:{#regionId}:{#accountId}:eip/`	vpc:tag	None
vpc:Describe95Traffic	Describe95Traffic	get	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}`	None	None
vpc:UpdateNetworkAclEntries	UpdateNetworkAclEntries	update	*NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}`	None	None
vpc:UpdateVpcGatewayEndpointAttribute	UpdateVpcGatewayEndpointAttribute	update	*GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}`	None	None
vpc:ListTrafficMirrorSessions	ListTrafficMirrorSessions	list	TrafficMirrorSession `acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/`	None	None
vpc:AttachVbrToVpconn	AttachVbrToVpconn	update	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}`	None	None
vpc:DescribeVpnRouteEntries	DescribeVpnRouteEntries	get	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:AssociatePhysicalConnectionToVirtualBorderRouter	AssociatePhysicalConnectionToVirtualBorderRouter	update	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:ListVpnCertificateAssociations	ListVpnCertificateAssociations	list	All Resource ``	None	None
vpc:ModifyForwardEntry	ModifyForwardEntry	update	*ForwardTable `acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}`	None	None
vpc:DisableVpcClassicLink	DisableVpcClassicLink	update	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:UpdateFailoverTestJob	UpdateFailoverTestJob	update	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:CancelPhysicalConnection	CancelPhysicalConnection	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:ListFullNatEntries	ListFullNatEntries	get	*FullNat `acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}`	None	None
vpc:GrantInstanceToVbr	GrantInstanceToVbr	update	*VPC `acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}`	None	None
vpc:AllocateIpv6InternetBandwidth	AllocateIpv6InternetBandwidth	create	Ipv6InternetBandwidth `acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/`	None	None
vpc:AssociateVpcCidrBlock	AssociateVpcCidrBlock	create	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:ModifyCommonBandwidthPackageSpec	ModifyCommonBandwidthPackageSpec	update	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}`	None	None
vpc:CreateVpnRouteEntry	CreateVpnRouteEntry	create	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:CreateVpcPrefixList	CreateVpcPrefixList	create	PrefixList `acs:vpc:{#regionId}:{#accountId}:prefixlist/`	None	None
vpc:ListBusinessRegions	ListBusinessRegions	list	All Resource ``	None	None
vpc:ModifyVpnRouteEntryWeight	ModifyVpnRouteEntryWeight	update	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:CompletePhysicalConnectionLOA	CompletePhysicalConnectionLOA	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:DescribeTagKeysForExpressConnect	DescribeTagKeysForExpressConnect	list	All Resource ``	None	None
vpc:DeleteGlobalAccelerationInstance	DeleteGlobalAccelerationInstance	delete	*GlobalAccelerationInstance `acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}`	None	None
vpc:ModifyIpv6InternetBandwidth	ModifyIpv6InternetBandwidth	update	*Ipv6InternetBandwidth `acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}`	None	None
vpc:DeleteRouteTable	DeleteRouteTable	delete	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:ModifyVcoRouteEntryWeight	ModifyVcoRouteEntryWeight	update	*VpnConnections `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DeleteSslVpnServer	DeleteSslVpnServer	delete	*SslVpnServer `acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}`	None	None
vpc:DescribeIPv6Translators	DescribeIPv6Translators	get	All Resource ``	None	None
vpc:AssociateRouteTableWithGateway	AssociateRouteTableWithGateway	create	Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}` RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}`	None	None
vpc:DeleteNatIpCidr	DeleteNatIpCidr	delete	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:WithdrawVpcPublishedRouteEntries	WithdrawVpcPublishedRouteEntries	update	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:DescribeVpnGatewayAvailableZones	DescribeVpnGatewayAvailableZones	list	All Resource ``	None	None
vpc:DeleteSnatEntry	DeleteSnatEntry	delete	*SnatTable `acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}`	None	None
vpc:DeleteTrafficMirrorFilter	DeleteTrafficMirrorFilter	delete	*TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}`	None	None
vpc:DescribeVRouters	DescribeVRouters	list	VRouter `acs:vpc:{#regionId}:{#accountId}:vrouter/`	vpc:VPC	None
vpc:CreateBgpGroup	CreateBgpGroup	create	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:DescribeGrantRulesToCen	DescribeGrantRulesToCen	get	VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}` GrantRuleToCen `acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}`	None	None
vpc:UpdateEnhancedVpnGateway	UpdateEnhancedVpnGateway	update	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DeleteExpressConnectTrafficQos	DeleteExpressConnectTrafficQos	delete	All Resource ``	None	None
vpc:DescribeHaVips	DescribeHaVips	get	HaVip `acs:vpc:{#regionId}:{#accountId}:havip/`	None	None
vpc:DescribeIpv6GatewayAttribute	DescribeIpv6GatewayAttribute	get	*Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}`	None	None
vpc:AddSourcesToTrafficMirrorSession	AddSourcesToTrafficMirrorSession	update	*TrafficMirrorSession `acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}`	None	None
vpc:DescribeCommonBandwidthPackages	DescribeCommonBandwidthPackages	get	CommonBandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/`	None	None
vpc:CreateSslVpnClientCert	CreateSslVpnClientCert	create	SslVpnClientCert `acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/` *SslVpnServer `acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}`	None	None
vpc:GetDhcpOptionsSet	GetDhcpOptionsSet	get	*DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}`	None	None
vpc:ListNatIpCidrs	ListNatIpCidrs	list	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:GetTrafficMirrorServiceStatus	GetTrafficMirrorServiceStatus	get	All Resource ``	None	None
vpc:CreateRouteEntry	CreateRouteEntry	create	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:CreateRouteTargetGroup	CreateRouteTargetGroup	create	RouteTargetGroup `acs:vpc:{#regionId}:{#accountId}:routetargetgroup/`	None	None
vpc:DeleteIpv4Gateway	DeleteIpv4Gateway	delete	*Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}`	None	None
vpc:DescribeVirtualBorderRoutersForPhysicalConnection	DescribeVirtualBorderRoutersForPhysicalConnection	list	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	vpc:PhysicalConnection	None
vpc:DeleteFlowLog	DeleteFlowLog	delete	*FlowLog `acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	None	None
vpc:AssociateNetworkAcl	AssociateNetworkAcl	update	NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}` VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	None	None
vpc:ListDhcpOptionsSets	ListDhcpOptionsSets	get	DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*` DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}`	None	None
vpc:CreateExpressConnectTrafficQos	CreateExpressConnectTrafficQos	create	TrafficQos `acs:vpc:{#regionId}:{#accountId}:TrafficQos/`	None	None
vpc:CreateDhcpOptionsSet	CreateDhcpOptionsSet	create	DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/`	None	None
vpc:ModifyNatIpAttribute	ModifyNatIpAttribute	update	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:ListVSwitchCidrReservations	ListVSwitchCidrReservations	list	VSwitchCidrReservation `acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/`	None	None
vpc:DescribeBgpPeers	DescribeBgpPeers	get	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:DescribeEipGatewayInfo	DescribeEipGatewayInfo	list	GatewayInfo `acs:vpc:{#regionId}:{#accountId}:eip/`	None	None
vpc:CreateFlowLog	CreateFlowLog	create	VSwitch `acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId}` FlowLog `acs:vpc:{#regionId}:{#accountId}:flowlog/` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:ModifyBgpPeerAttribute	ModifyBgpPeerAttribute	update	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:OpenPhysicalConnectionService	OpenPhysicalConnectionService	create	All Resource ``	None	None
vpc:DescribeVpnAttachments	DescribeVpnAttachments	list	*VpnConnections `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DescribeEipSegment	DescribeEipSegment	get	SegmentAddress `acs:vpc:{#regionId}:{#accountId}:eip/`	None	None
vpc:DescribePhysicalConnectionLOA	DescribePhysicalConnectionLOA	get	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:UpdateNatGatewayNatType	UpdateNatGatewayNatType	update	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:SecondApplyPhysicalConnectionLOA	SecondApplyPhysicalConnectionLOA	none	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:CreateSnatEntry	CreateSnatEntry	create	SnatEntry `acs:vpc:{#regionId}:{#accountId}:snattable/`	None	None
vpc:CreateVpnAttachment	CreateVpnAttachment	create	All Resource ``	None	None
vpc:ReleaseEipAddress	ReleaseEipAddress	update	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	vpc:tag	None
vpc:CreateHaVip	CreateHaVip	create	HaVip `acs:vpc:{#regionId}:{#accountId}:havip/` *VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	None	None
vpc:DescribeVpnGateways	DescribeVpnGateways	list	VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/*` VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}`	None	None
vpc:DeleteExpressConnectTrafficQosQueue	DeleteExpressConnectTrafficQosQueue	delete	All Resource ``	None	None
vpc:DeleteTrafficMirrorSession	DeleteTrafficMirrorSession	delete	*TrafficMirrorSession `acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}`	None	None
vpc:UnassociateNetworkAcl	UnassociateNetworkAcl	update	NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}` VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	None	None
vpc:RetryVpcPrefixListAssociation	RetryVpcPrefixListAssociation	update	*PrefixList `acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	None	None
vpc:DescribeFailoverTestJobs	DescribeFailoverTestJobs	list	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:ModifyVSwitchCidrReservationAttribute	ModifyVSwitchCidrReservationAttribute	update	*VSwitchCidrReservation `acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}`	None	None
vpc:UnassociateEipAddress	UnassociateEipAddress	delete	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}` *Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}` HaVip `acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}`	None	None
vpc:ModifyExpressCloudConnectionBandwidth	ModifyExpressCloudConnectionBandwidth	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:DescribeVbrHa	DescribeVbrHa	get	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:CheckCanAllocateVpcPrivateIpAddress	CheckCanAllocateVpcPrivateIpAddress	none	*VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	None	None
vpc:OpenPublicIpAddressPoolService	OpenPublicIpAddressPoolService	create	All Resource ``	None	None
vpc:DeleteVpnPbrRouteEntry	DeleteVpnPbrRouteEntry	delete	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DeleteCustomerGateway	DeleteCustomerGateway	delete	*CustomerGateway `acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}`	None	None
vpc:ModifyFlowLogAttribute	ModifyFlowLogAttribute	update	*FlowLog `acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	None	None
vpc:UpdateTrafficMirrorSessionAttribute	UpdateTrafficMirrorSessionAttribute	update	*TrafficMirrorSession `acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}` TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}`	None	None
vpc:AddGlobalAccelerationInstanceIp	AddGlobalAccelerationInstanceIp	create	All Resource ``	None	None
vpc:DeleteRouteEntries	DeleteRouteEntries	delete	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}`	None	None
vpc:CreateExpressConnectTrafficQosQueue	CreateExpressConnectTrafficQosQueue	create	All Resource ``	None	None
vpc:ModifyRouterInterfaceAttribute	ModifyRouterInterfaceAttribute	update	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	vpc:TargetAccountRDId	None
vpc:ApplyPhysicalConnectionLOA	ApplyPhysicalConnectionLOA	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:ModifyVpnPbrRouteEntryWeight	ModifyVpnPbrRouteEntryWeight	update	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:ModifySslVpnServer	ModifySslVpnServer	update	*SslVpnServer `acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}`	None	None
vpc:RevokeInstanceFromVbr	RevokeInstanceFromVbr	update	*VPC `acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}`	None	None
vpc:DeleteIPv6TranslatorEntry	DeleteIPv6TranslatorEntry	delete	All Resource ``	None	None
vpc:DetachDhcpOptionsSetFromVpc	DetachDhcpOptionsSetFromVpc	update	DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:DeleteDhcpOptionsSet	DeleteDhcpOptionsSet	delete	*DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}`	None	None
vpc:RecoverVirtualBorderRouter	RecoverVirtualBorderRouter	update	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:GrantInstanceToCen	GrantInstanceToCen	update	VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:CreateRouteEntries	CreateRouteEntries	create	*RouteEntry `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:CreateIpv6Gateway	CreateIpv6Gateway	create	Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/`	None	None
vpc:DeleteVpcPrefixList	DeleteVpcPrefixList	delete	*PrefixList `acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	None	None
vpc:UnassociateGlobalAccelerationInstance	UnassociateGlobalAccelerationInstance	delete	All Resource ``	None	None
vpc:ReleaseEipSegmentAddress	ReleaseEipSegmentAddress	delete	*SegmentAddress `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	None	None
vpc:DeleteVirtualBorderRouter	DeleteVirtualBorderRouter	delete	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:ModifyHaVipAttribute	ModifyHaVipAttribute	update	*HaVip `acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}`	None	None
vpc:DescribeForwardTableEntries	DescribeForwardTableEntries	get	*ForwardTable `acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}`	None	None
vpc:CreateIpv6EgressOnlyRule	CreateIpv6EgressOnlyRule	create	*Ipv6EgressRule `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}`	None	None
vpc:ModifyIPv6TranslatorAclAttribute	ModifyIPv6TranslatorAclAttribute	update	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:DescribeEipMonitorData	DescribeEipMonitorData	get	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	None	None
vpc:AddCommonBandwidthPackageIp	AddCommonBandwidthPackageIp	create	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}`	None	None
vpc:DeleteVSwitch	DeleteVSwitch	delete	*VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	None	None
vpc:DissociateRouteTableFromGateway	DissociateRouteTableFromGateway	get	Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}` RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}`	None	None
vpc:DiagnoseVpnConnections	DiagnoseVpnConnections	get	All Resource ``	None	None
vpc:DeleteIPv6Translator	DeleteIPv6Translator	delete	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:DescribeRouteEntryList	DescribeRouteEntryList	get	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:ModifyVpnGatewayAttribute	ModifyVpnGatewayAttribute	update	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DescribeTags	DescribeTags	get	All Resource ``	vpc:tag	None
vpc:DescribeCustomerGateway	DescribeCustomerGateway	get	*CustomerGateway `acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}`	None	None
vpc:DescribeIPv6TranslatorAclLists	DescribeIPv6TranslatorAclLists	get	All Resource ``	None	None
vpc:DescribeExpressConnectTrafficQosRule	DescribeExpressConnectTrafficQosRule	list	All Resource ``	None	None
vpc:DescribeIPv6TranslatorAclListAttributes	DescribeIPv6TranslatorAclListAttributes	get	*IPv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId}`	None	None
vpc:DeleteVpc	DeleteVpc	delete	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	vpc:tag	None
vpc:DescribeVirtualBorderRouters	DescribeVirtualBorderRouters	list	*VirtualBorderRouter `acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:CreateIPv6TranslatorAclList	CreateIPv6TranslatorAclList	create	All Resource ``	None	None
vpc:AddBgpNetwork	AddBgpNetwork	get	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:UpdateTrafficMirrorFilterRuleAttribute	UpdateTrafficMirrorFilterRuleAttribute	update	*TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}`	None	None
vpc:PublishVpcRouteEntries	PublishVpcRouteEntries	update	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	None	None
vpc:DescribeVpnSslServerLogs	DescribeVpnSslServerLogs	get	*SslVpnServer `acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}`	None	None
vpc:ModifyVpcAttribute	ModifyVpcAttribute	update	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	vpc:tag	None
vpc:CreateRouterInterface	CreateRouterInterface	create	VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}` RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/*`	vpc:TargetAccountRDId	None
vpc:UpdateTrafficMirrorFilterAttribute	UpdateTrafficMirrorFilterAttribute	update	*TrafficMirrorFilter `acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}`	None	None
vpc:ModifyRouterInterfaceSpec	ModifyRouterInterfaceSpec	update	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	None	None
vpc:ModifyNatIpCidrAttribute	ModifyNatIpCidrAttribute	update	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:DescribePhysicalConnections	DescribePhysicalConnections	list	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/`	None	None
vpc:DeleteIpv6EgressOnlyRule	DeleteIpv6EgressOnlyRule	delete	*Ipv6Gateway `acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}`	None	None
vpc:CheckVpnBgpEnabled	CheckVpnBgpEnabled	none	All Resource ``	None	None
vpc:EnablePhysicalConnection	EnablePhysicalConnection	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:CreateVSwitchCidrReservation	CreateVSwitchCidrReservation	create	VSwitchCidrReservation `acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/`	None	None
vpc:GetPublicIpAddressPoolServiceStatus	GetPublicIpAddressPoolServiceStatus	get	All Resource ``	None	None
vpc:MoveVpnResourceGroup	MoveVpnResourceGroup	update	All Resource ``	None	None
vpc:DescribeRouteTables	DescribeRouteTables	list	*RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}`	vpc:VBR vpc:VRouter	None
vpc:CreateHighReliablePhysicalConnection	CreateHighReliablePhysicalConnection	create	All Resource ``	None	None
vpc:UnassociatePhysicalConnectionFromVirtualBorderRouter	UnassociatePhysicalConnectionFromVirtualBorderRouter	update	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:DeleteVSwitchCidrReservation	DeleteVSwitchCidrReservation	delete	*VSwitchCidrReservation `acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}`	None	None
vpc:SwitchActiveRouteTarget	SwitchActiveRouteTarget	update	*RouteTargetGroup `acs:vpc:{#regionId}:{#accountId}:routetargetgroup/{#RouteTargetGroupId}`	None	None
vpc:ListIpv4Gateways	ListIpv4Gateways	list	Ipv4Gateway `acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*`	None	None
vpc:DescribeNetworkAclAttributes	DescribeNetworkAclAttributes	get	*NetworkAcl `acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}`	None	None
vpc:DescribeVpcs	DescribeVpcs	list	VPC `acs:vpc:{#regionId}:{#accountId}:vpc/*` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId}`	vpc:tag	None
vpc:AttachDhcpOptionsSetToVpc	AttachDhcpOptionsSetToVpc	update	DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:GetVpnGatewayDiagnoseResult	GetVpnGatewayDiagnoseResult	get	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}`	None	None
vpc:ActivateRouterInterface	ActivateRouterInterface	update	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	None	None
vpc:DescribeSslVpnClients	DescribeSslVpnClients	list	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DescribeVpnPbrRouteEntries	DescribeVpnPbrRouteEntries	get	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DescribeVcoRouteEntries	DescribeVcoRouteEntries	list	*VpnConnections `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DeletePhysicalConnection	DeletePhysicalConnection	delete	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None
vpc:DeleteIPv6TranslatorAclList	DeleteIPv6TranslatorAclList	delete	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:CreateGlobalAccelerationInstance	CreateGlobalAccelerationInstance	create	GlobalAccelerationInstance `acs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/`	None	None
vpc:UnTagResources	UnTagResources	update	Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}` NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}` RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}` VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	vpc:tag	None
vpc:DescribeGlobalAccelerationInstances	DescribeGlobalAccelerationInstances	get	GlobalAccelerationInstance `acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/`	None	None
vpc:ModifyBgpGroupAttribute	ModifyBgpGroupAttribute	update	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:ModifyEipAddressAttribute	ModifyEipAddressAttribute	update	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	None	None
vpc:DissociateVpnGatewayWithCertificate	DissociateVpnGatewayWithCertificate	update	All Resource ``	None	None
vpc:DeleteIpv6InternetBandwidth	DeleteIpv6InternetBandwidth	delete	*Ipv6InternetBandwidth `acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}`	None	None
vpc:CreateExpressConnectTrafficQosRule	CreateExpressConnectTrafficQosRule	create	All Resource ``	None	None
vpc:ModifySslVpnClientCert	ModifySslVpnClientCert	update	*SslVpnClientCert `acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}`	None	None
vpc:ModifyVSwitchAttribute	ModifyVSwitchAttribute	update	*VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}`	None	None
vpc:DeleteFullNatEntry	DeleteFullNatEntry	delete	*FullNat `acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}`	None	None
vpc:DescribeTagKeys	DescribeTagKeys	get	All Resource ``	None	None
vpc:RemoveGlobalAccelerationInstanceIp	RemoveGlobalAccelerationInstanceIp	delete	All Resource ``	None	None
vpc:AssociateEipAddressBatch	AssociateEipAddressBatch	update	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}` Instance `acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}` NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:TerminateVirtualBorderRouter	TerminateVirtualBorderRouter	update	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:ModifyVpnConnectionAttribute	ModifyVpnConnectionAttribute	update	*VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DescribeRouterInterfaceAttribute	DescribeRouterInterfaceAttribute	get	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	None	None
vpc:ListPublicIpAddressPools	ListPublicIpAddressPools	get	PublicIpAddressPool `acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/`	None	None
vpc:CreateVirtualBorderRouter	CreateVirtualBorderRouter	create	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*`	None	None
vpc:RecoverPhysicalConnection	RecoverPhysicalConnection	update	*PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}`	None	None
vpc:UnassociateHaVip	UnassociateHaVip	delete	Instance `acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}` HaVip `acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}`	None	None
vpc:AssociateRouteTable	AssociateRouteTable	update	*VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}`	None	None
vpc:DeleteNatIp	DeleteNatIp	delete	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:CreateBgpPeer	CreateBgpPeer	create	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}`	None	None
vpc:ModifyCommonBandwidthPackageIpBandwidth	ModifyCommonBandwidthPackageIpBandwidth	update	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}`	None	None
vpc:CreateFullNatEntry	CreateFullNatEntry	create	*FullNat `acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}`	None	None
vpc:CreateIpsecServer	CreateIpsecServer	create	All Resource ``	None	None
vpc:DescribeExpressConnectTrafficQosQueue	DescribeExpressConnectTrafficQosQueue	list	All Resource ``	None	None
vpc:ListIpsecServers	ListIpsecServers	list	All Resource ``	None	None
vpc:CreateVpnConnection	CreateVpnConnection	create	CustomerGateway `acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}` VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/` VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:CreateRouteTable	CreateRouteTable	create	RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/`	None	None
vpc:CreateIPv6Translator	CreateIPv6Translator	create	All Resource ``	None	None
vpc:DeleteVbrHa	DeleteVbrHa	delete	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:ReplaceVpcDhcpOptionsSet	ReplaceVpcDhcpOptionsSet	update	DhcpOptionsSet `acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:UpdateIpsecServer	UpdateIpsecServer	update	All Resource ``	None	None
vpc:CreateVSwitch	CreateVSwitch	create	VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}` VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/*`	vpc:tag	None
vpc:CreateNatIpCidr	CreateNatIpCidr	create	*NatGateway `acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}`	None	None
vpc:AllocateEipAddress	AllocateEipAddress	create	Address `acs:vpc:{#regionId}:{#accountId}:eip/`	None	None
vpc:DeleteRouterInterface	DeleteExpressConnect	delete	*RouterInterface `acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}`	None	None
vpc:DescribeRouteTableList	DescribeRouteTableList	list	RouteTable `acs:vpc:{#regionId}:{#accountId}:routetable/`	vpc:VRouter vpc:VBR	None
vpc:DescribeBgpNetworks	DescribeBgpNetworks	get	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:CreatePhysicalConnection	CreatePhysicalConnection	create	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/`	None	None
vpc:ListBusinessAccessPoints	ListBusinessAccessPoints	list	All Resource ``	None	None
vpc:ModifyVpnPbrRouteEntryPriority	ModifyVpnPbrRouteEntryPriority	update	*VpnGateway `acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}`	None	None
vpc:DescribeVpcGrantRulesToEcr	DescribeVpcGrantRulesToEcr	list	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}`	None	None
vpc:ModifyIpv6AddressAttribute	ModifyIpv6AddressAttribute	update	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:DeleteVpnAttachment	DeleteVpnAttachment	delete	*VpnConnections `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:DescribePublicIpAddress	DescribePublicIpAddress	list	All Resource ``	None	None
vpc:DescribeBgpGroups	DescribeBgpGroups	get	*VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:ModifyIPv6TranslatorAclListEntry	ModifyIPv6TranslatorAclListEntry	update	*Ipv6Translator `acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}`	None	None
vpc:DownloadVpnConnectionConfig	DownloadVpnConnectionConfig	get	*VpnConnection `acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}`	None	None
vpc:GetVpcGatewayEndpointAttribute	GetVpcGatewayEndpointAttribute	get	*GatewayEndpoint `acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}`	None	None
vpc:GetVSwitchCidrReservationUsage	GetVSwitchCidrReservationUsage	get	*VSwitchCidrReservation `acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}`	None	None
vpc:ListRouteTargetGroups	ListRouteTargetGroups	list	RouteTargetGroup `acs:vpc:{#regionId}:{#accountId}:routetargetgroup/`	None	None
vpc:DescribeFailoverTestJob	DescribeFailoverTestJob	get	PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}` VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}`	None	None
vpc:ListIpsecServerLogs	ListIpsecServerLogs	list	All Resource ``	None	None
vpc:ModifyVRouterAttribute	ModifyVRouterAttribute	update	*VRouter `acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}`	None	None
vpc:EnableVpcClassicLink	EnableVpcClassicLink	update	*VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}`	None	None
vpc:GetPhysicalConnectionServiceStatus	GetPhysicalConnectionServiceStatus	get	All Resource ``	None	None
vpc:ReleaseIpv6Address	ReleaseIpv6Address	delete	*Ipv6Address `acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}`	None	None
vpc:DiagnoseVpnGateway	DiagnoseVpnGateway	get	All Resource ``	None	None
vpc:DescribeExpressConnectTrafficQos	DescribeExpressConnectTrafficQos	list	TrafficQos `acs:vpc:{#regionId}:{#accountId}:TrafficQos/`	None	None
vpc:DescribeSslVpnServers	DescribeSslVpnServers	list	SslVpnServer `acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*` SslVpnServer `acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}`	None	None
vpc:StopFailoverTestJob	StopFailoverTestJob	update	VirtualBorderRouter `acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}` PhysicalConnection `acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}`	None	None

Resource

The following table lists the resources defined by Virtual Private Cloud. Specify them in the Resource element of RAM policy statements to grant permissions for specific operations. They are uniquely identified by ARNs. Format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: The initialism of Alibaba Cloud service, which indicates the public cloud of Alibaba Cloud.
{#ramcode}: The code used in RAM to indicate an Alibaba Cloud service.
{#regionId}: The region ID. If the resource covers all regions, set it to an asterisk (*).
{#accountId}: The ID of the Alibaba Cloud account. If the resource covers all Alibaba Cloud accounts, set it to an asterisk (*).
{#resourceType}: The service-defined resource identifier. It supports a hierarchical structure, which is similar to a file path. If the statement covers global resources, set it to an asterisk (*).

Resource type	ARN
FlowLog	acs:vpc:{#regionId}:{#accountId}:flowlog/* acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
VpnConnection	acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} acs:vpc:{#regionId}:{#accountId}:vpnconnection/* acs:vpc:{#regionId}:{#accountId}:* acs:vpc:{#Region}:{#AccountId}:vpnconnection/{#VpnConnectionId}
VirtualBorderRouter	acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} acs:vpc::{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId} acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/
FlowLogService	acs:vpc:{#regionId}:{#accountId}:flowlog/*
NatGateway	acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} acs:vpc:{#regionId}:{#accountId}:natgateway/* acs:natgateway:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
BandwidthPackage	acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}
PhysicalConnection	acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
RouterInterface	acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId} acs:vpc:{#regionId}:{#accountId}:routerinterface/*
TrafficQos	acs:vpc:{#regionId}:{#accountId}:trafficqos/{#QosId} acs:vpc:{#regionId}:{#accountId}:TrafficQos/*
SnatTable	acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
Ipv6Translator	acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId} acs:vpc:{#regionId}:{#accountId}:ipv6trans/*
VPC	acs:vpc:{#regionId}:{#accountId}:vpc/* acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
Ipv6Gateway	acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
VpnGateway	acs:vpc:{#regionId}:{#accountId}:vpngateway/* acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId} acs:vpc:{#Region}:{#AccountId}:vpngateway/{#VpnInstanceId} acs:vpc:{#regionId}:{#accountId}:
PublicIpAddressPool	acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/* acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
FullNat	acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}
Ipv4Gateway	acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId} acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
NetworkAcl	acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} acs:vpc:{#regionId}:{#accountId}:networkacl/*
Address	acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} acs:vpc:{#regionId}:{#accountId}:eip/*
ForwardTable	acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
RouteTable	acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable} acs:vpc:{#regionId}:{#accountId}:routetable/*
IpsecServer	acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId} acs:vpc:{#Region}:{#AccountId}: vpnipsecserver/{#IpsecServerId} acs:vpc:{#regionId}:{#accountId}:ipsecserver/* acs:vpc:{#regionId}:{#accountId}: vpnipsecserver/{#IpsecServerId}
VSwitch	acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} acs:vpc:{#regionid}:{#accountId}:vswitch/*
SegmentAddress	acs:eip:{#regionId}:{#accountId}:eipsegment/{#SegmentInstanceId} acs:vpc:{#regionId}:{#accountId}:eip/* acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
TrafficMirrorFilter	acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/* acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
Instance	acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId} acs:ecs:{#regionId}:{#accountId}:instance/{#Instanceid} acs:ecs:{#regionId}:{#accountId}:instance/*
Association	acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
GatewayEndpoint	acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
CustomerGateway	acs:vpc:{#regionId}:{#accountId}:customergateway/* acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId} acs:vpc:{#Region}:{#AccountId}:customergateway/{#CustomerGatewayId}
CommonBandwidthPackage	acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId} acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
RouteTargetGroup	acs:vpc:{#regionId}:{#accountId}:routetargetgroup/{#RouteTargetGroupId} acs:vpc:{#regionId}:{#accountId}:routetargetgroup/*
PrefixList	acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} acs:vpc:{#regionId}:{#accountId}:prefixlist/*
VpnConnections	acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
GlobalAccelerationInstance	acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId} acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/* acs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/*
HaVip	acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} acs:vpc:{#regionId}:{#accountId}:havip/*
SslVpnServer	acs:vpc:{#regionId}:{#accountId}:sslvpnserver/* acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId} acs:vpc:{#Region}:{#AccountId}:sslvpnserver/{#SslVpnServerId}
TrafficMirrorSession	acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/* acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
Eip	acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} acs:vpc:{#regionId}:{#accountId}:eip/{#EipId}
DhcpOptionsSet	acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
SslVpnClientCert	acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/* acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
TrafficMirrorService	acs:vpc:{#regionId}:{#accountId}:trafficmirror/*
Ipv6InternetBandwidth	acs:vpc:{#regionId}:{#accountId}:vpc/* acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/* acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
Ipv6Address	acs:vpc:{#regionId}:{#accountId}:ipv6address/* acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
VpnCertificateAttachment	acs:vpc:{#regionId}:{#accountId}:vpncertificateattachment/{#VpnGatewayId}/{#CertificateType}/{#CertificateId}
IPv6Translator	acs:vpc:{#regionId}:{#accountId}:ipv6trans/* acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId}
VRouter	acs:vpc:{#regionId}:{#accountId}:vrouter/* acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}
GrantRuleToCen	acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
VSwitchCidrReservation	acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/* acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
GatewayInfo	acs:vpc:{#regionId}:{#accountId}:eip/*
SnatEntry	acs:vpc:{#regionId}:{#accountId}:snattable/*
VpnAttachment	acs:vpc:{#Region}:{#AccountId}:vpnattachment/{#VpnConnectionId}
PublicIpAddressPoolService	acs:vpc:{#regionId}:{#accountId}:publicipaddresspoolservice/*
RouteEntry	acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
Ipv6EgressRule	acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
physicalconnection	acs:vpc:{#regionId}:{#accountId}:physicalconnection/*

Condition

The following table lists the product-level condition keys defined by Virtual Private Cloud. You can also use Alibaba Cloud's Common condition keys. Specify these keys in the Condition element of RAM policy statements to define granular authorization rules. In the condition key, specify the condition values in the Condition_value element of the policy.

Each condition key has a specific data type, such as string, number, Boolean, or IP address. The data type determines which conditional operators can be used to compare the request values against policy values. You must specify the conditional operators compatible with the data type of the condition key. Mismatched operators will invalidate the policy. See Condition operator for valid combinations.

Condition key	Description	Data type
vpc:VRouter	Router Information	String
vpc:VPC	VPC Information	String
vpc:tag	Tags of the VPC	String
vpc:TargetAccountRDId	peer user resource directory ID information	String
vpc:PhysicalConnection	Physical Line Information	String
vpc:VBR	Border Router Information	String

How to create custom RAM policies?

You can create custom policies and grant them to RAM users, RAM user groups, or RAM roles. For instructions, see: