All Products
Search
Document Center

Resource Access Management:AliyunKMSCryptoUserAccess

Last Updated:Dec 28, 2023

AliyunKMSCryptoUserAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunKMSCryptoUserAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunKMSCryptoUserAccess policy: Provides access to the cryptographic APIs of KMS.

Policy details

  • Type: service system policy

  • Creation time: 14:42:20 on March 04, 2020

  • Update time: 14:42:20 on March 04, 2020

  • Current version: v1

Policy content

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "kms:Encrypt",
        "kms:Decrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "kms:AsymmetricDecrypt",
        "kms:AsymmetricEncrypt",
        "kms:AsymmetricSign",
        "kms:AsymmetricVerify",
        "kms:GetPublicKey"
      ],
      "Resource": "*"
    }
  ]
}

References