This topic describes the custom policies that may be used when you use the FC-API component.
| Resource | Action | Description |
|---|---|---|
| acs:fc:<region>:<account-id>:services/<serviceName> | fc:GetService | The specified service. |
| fc:UpdateService | ||
| fc:DeleteService | ||
| acs:fc:<region>:<account-id>:services/* | fc:CreateService | All services. |
| fc:ListServices | ||
| acs:fc:<region>:<account-id>:services/<serviceName>.<qualifier> | fc:GetService | The service of a specified version. |
| acs:fc:<region>:<account-id>:services/<serviceName>/functions/<functionName> | fc:GetFunction | The specified function in a specified service. |
| fc:UpdateFunction | ||
| fc:DeleteFunction | ||
| fc:InvokeFunction | ||
| acs:fc:<region>:<account-id>:services/<serviceName>/functions/* | fc:CreateFunction | All functions in a specified service. |
| fc:ListFunctions | ||
| acs:fc:<region>:<account-id>:services/<serviceName>.*/functions/<functionName> | fc:GetFunction | All functions in all versions of a specified service. |
| fc:UpdateFunction | ||
| fc:DeleteFunction | ||
| fc:InvokeFunction | ||
| fc:PutProvisionConfig | ||
| fc:GetProvisionConfig | ||
| fc:PutFunctionOnDemandConfig | ||
| fc:DeleteFunctionOnDemandConfig | ||
| fc:PutFunctionAsyncInvokeConfig | ||
| fc:DeleteFunctionAsyncInvokeConfig | ||
| fc:GetFunctionAsyncInvokeConfig | ||
| fc:GetFunctionOnDemandConfig | ||
| acs:fc:<region>:<account-id>:services/<serviceName>/functions/<functionName>/triggers/<triggerName> | fc:GetTrigger | The specified trigger of a specified function in a specified service. |
| fc:UpdateTrigger | ||
| fc:DeleteTrigger | ||
| acs:fc:<region>:<account-id>:services/<serviceName>/functions/<functionName>/triggers/* | fc:CreateTrigger | All triggers of a specified function in a specified service. |
| fc:ListTriggers | ||
| acs:fc:<region>:<account-id>:services/<serviceName>/versions | fc:PublishServiceVersion | All service versions. |
| fc:ListServiceVersions | ||
| acs:fc:<region>:<account-id>:services/<serviceName>/versions/<versionID> | fc:DeleteServiceVersion | The specified service version. |
| acs:fc:<region>:<account-id>:services/<serviceName>/aliases/* | fc:CreateAlias | All service aliases. |
| fc:ListAliases | ||
| acs:fc:<region>:<account-id>:services/<serviceName>/aliases/<aliasName> | fc:GetAlias | The specified service alias. |
| fc:UpdateAlias | ||
| fc:DeleteAlias | ||
| acs:fc:<region>:<account-id>:custom-domains/* | fc:CreateCustomDomain | All custom domain names. |
| fc:ListCustomDomains | ||
| acs:fc:<region>:<account-id>:custom-domains/<domainName> | fc:GetCustomDomain | The specified custom domain name. |
| fc:UpdateCustomDomain | ||
| fc:DeleteCustomDomain | ||
| acs:fc:<region>:<account-id>:tag | fc:TagResource | A single tag. |
| fc:GetResourceTags | ||
| fc:UnTagResource | ||
| acs:fc:<region>:<account-id>:tags/* | fc:ListTaggedResources | All tags. |
| acs:fc:<region>:<account-id>:account-settings/* | fc:GetAccountSettings | The settings of your account. |
| acs:fc:<region>:<account-id>:layerarn/:arn | fc:GetLayerVersionByArn | All layers. |
| acs:fc:<region>:<account-id>:layers/* | fc:ListLayers | |
| acs:fc:<region>:<account-id>:layers/:layerName/versions/:version | fc:PublishLayerAsPublic | |
| acs:fc:<region>:<account-id>:layers/:layerName/versions/* | fc:ListLayerVersions | All layer versions. |
| fc:CreateLayerVersion | ||
| acs:fc:<region>:<account-id>:layers/:layerName/versions/:version | fc:GetLayerVersion | |
| fc:DeleteLayerVersion | ||
| acs:fc:<region>:<account-id>:on-demand-configs/* | fc:ListOnDemandConfigs | The on-demand configurations. |
| acs:fc:<region>:<account-id>:provision-configs/* | fc:ListProvisionConfigs | The provisioned configurations. |
| acs:fc:<region>:<account-id>:services/:serviceName/binding | fc:DeleteVpcBinding | The VPC configuration. |
| acs:fc:<region>:<account-id>:services/:serviceName/binding/* | fc:CreateVpcBinding | |
| fc:ListVpcBindings | ||
| acs:fc:<region>:<account-id>:services/:serviceName/functions/:functionName/async-invoke-configs/* | fc:ListFunctionAsyncInvokeConfigs | The asynchronous invocation configurations. |
| acs:fc:<region>:<account-id>:services/:serviceName/functions/:functionName/code | fc:GetFunctionCode | All function code. |
| acs:fc:<region>:<account-id>:services/:serviceName/functions/:functionName/stateful-async-invocations/* | fc:ListStatefulAsyncInvocations | The stateful asynchronous invocation. |
| acs:fc:<region>:<account-id>:services/:serviceName/functions/:functionName/stateful-async-invocations/:invocationId | fc:GetStatefulAsyncInvocation | |
| fc:StopStatefulAsyncInvocation |
References
For more information, see Policies and sample custom policies.