AliyunKMSCryptoUserAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunKMSCryptoUserAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunKMSCryptoUserAccess policy: Provides access to the cryptographic APIs of KMS.
Policy details
Type: service system policy
Creation time: 14:42:20 on March 04, 2020
Update time: 14:42:20 on March 04, 2020
Current version: v1
Policy content
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"kms:Encrypt",
"kms:Decrypt",
"kms:GenerateDataKey",
"kms:GenerateDataKeyWithoutPlaintext",
"kms:AsymmetricDecrypt",
"kms:AsymmetricEncrypt",
"kms:AsymmetricSign",
"kms:AsymmetricVerify",
"kms:GetPublicKey"
],
"Resource": "*"
}
]
}