AliyunServiceRolePolicyForRdsMyBaseProprietary is the authorization policy dedicated to a service-linked role. The policy is automatically attached to a service role when the service role is created. Then, the service-linked role is authorized to access other cloud services. This policy is updated by the relevant Alibaba Cloud service. Do not attach this policy to a RAM identity other than a service-linked role.
Policy details
Type: service system policy
Creation time: 11:34:32 on February 24, 2022
Update time: 11:34:32 on February 24, 2022
Current version: v1
Policy content
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:CreateInstance",
"ecs:CreateOrder",
"ecs:RunInstances",
"ecs:RenewInstance",
"ecs:DescribeRegions",
"ecs:DescribeZones",
"ecs:DescribeImages",
"ecs:StartInstance",
"ecs:DescribeInstances",
"ecs:DescribeDisks",
"ecs:DescribeInstanceHistoryEvents",
"ecs:DescribeInstancesFullStatus",
"ecs:DescribeDisksFullStatus",
"ecs:ModifyInstanceChargeType",
"ecs:ModifyPrepayInstanceSpec",
"ecs:DescribeResourcesModification",
"ecs:DescribeAvailableResource",
"ecs:DescribeBandwidthLimitation",
"ecs:DescribeKeyPairs",
"ecs:DescribePrice",
"ecs:DescribeInstanceHistoryEvents",
"ecs:AcceptInquiredSystemEvent",
"ecs:DescribeTasks",
"ecs:JoinResourceGroup",
"ecs:ReportInstancesStatus",
"ecs:ModifyInstanceAttribute",
"ecs:StartInstances",
"ecs:DescribeLocalDiskRepairActivities"
],
"Resource": "*"
},
{
"Effect":"Allow",
"Action":[
"ecs:DeleteInstances",
"ecs:RebootInstances",
"ecs:StopInstances",
"ecs:RedeployInstance",
"ecs:RebootInstance",
"ecs:DeleteInstance",
"ecs:StopInstance",
"ecs:InstallCloudAssistant",
"ecs:DescribeCloudAssistantStatus",
"ecs:RunCommand",
"ecs:DescribeInvocationResults"
],
"Resource": [
"acs:ecs:*:*:*"
],
"Condition": {
"StringLike": {
"ecs:tag/acs:rds:mybaseHost": "mybase-*"
}
}
},
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVSwitches",
"vpc:DescribeVpcs"
],
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "mybase-proprietary.rds.aliyuncs.com"
}
}
}
]
}