AliyunCloudOpsMCPAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunCloudOpsMCPAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunCloudOpsMCPAccess policy: Authorization policy for AliyunCloudOpsMCPAccess.
Policy details
Type: service system policy
Creation time: 09:37:39 on May 28, 2025
Update time: 02:46:43 on October 14, 2025
Current version: v2
Policy content
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:RunCommand",
"ecs:StartInstances",
"ecs:StopInstances",
"ecs:RebootInstances",
"ecs:DescribeInstances",
"ecs:DescribeRegions",
"ecs:DescribeZones",
"ecs:DescribeAvailableResource",
"ecs:DescribeImages",
"ecs:DescribeSecurityGroups",
"ecs:RunInstances",
"ecs:DeleteInstances",
"ecs:ResetPassword",
"ecs:ReplaceSystemDisk",
"ecs:DescribeInvocationResults",
"ecs:DescribeInvocations",
"ecs:DescribeManagedInstances",
"ecs:ModifyInstanceAttribute",
"ecs:DescribeDisks"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVpcs",
"vpc:DescribeVSwitches"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"rds:DescribeDBInstances",
"rds:StartDBInstance",
"rds:StopDBInstance",
"rds:RestartDBInstance"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"oss:ListBuckets",
"oss:PutBucket",
"oss:DeleteBucket",
"oss:ListObjects"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"cms:DescribeMetricLast",
"cms:QueryMetricLast"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"oos:StartExecution",
"oos:ListExecutions"
],
"Resource": "*"
}
]
}