AliyunASMFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunASMFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunASMFullAccess policy: Provides full access to AliyunServiceMesh(ASM) via Management Console.
Policy details
Type: service system policy
Creation time: 08:04:33 on November 22, 2021
Update time: 03:26:14 on July 20, 2023
Current version: v3
Policy content
{
"Statement": [
{
"Effect": "Allow",
"Action": "servicemesh:*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "ims:ListUserBasicInfos",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"log:ListLogStores",
"log:ListDashboard",
"log:GetDashboard",
"log:ListSavedSearch"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "log:GetLogStoreLogs",
"Resource": "acs:log:*:*:project/*/logstore/audit-*"
},
{
"Effect": "Allow",
"Action": "bssapi:GetPayAsYouGoPrice",
"Resource": "*",
"Condition": {
"StringEquals": {
"bssapi:ProductCode": [
"servicemesh",
"eip",
"slb"
]
}
}
},
{
"Effect": "Allow",
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Condition": {
"StringEquals": {
"ram:ServiceName": "servicemesh.aliyuncs.com"
}
}
}
],
"Version": "1"
}