AttachControlPolicy - Resource Management - Alibaba Cloud Documentation Center

Attaches an access control policy.

Operation description

After you attach a custom access control policy, the operations performed on resources by using members are limited by the policy. Make sure that the attached policy meets your expectations. Otherwise, your business may be affected.

By default, the system access control policy FullAliyunAccess is attached to each folder and member.

The access control policy that is attached to a folder also applies to all its subfolders and all members in the subfolders.

A maximum of 10 access control policies can be attached to a folder or member.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Debug

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

Parameter	Type	Required	Description	Example
PolicyId	string	Yes	The ID of the access control policy.	cp-jExXAqIYkwHN****
TargetId	string	Yes	The ID of the object to which you want to attach the access control policy. Access control policies can be attached to the following objects: Root folder Subfolders of the Root folder Members	fd-ZDNPiT****

Response parameters

Parameter	Type	Description	Example
	object	The returned result.
RequestId	string	The ID of the request.	95060F1D-6990-4645-8920-A81D1BBFE992

Examples

Sample success responses

JSONformat

{
  "RequestId": "95060F1D-6990-4645-8920-A81D1BBFE992"
}

Error codes

HTTP status code	Error code	Error message	Description
404	EntityNotExists.Target	The specified target does not exist in the resource directory.	The specified object does not exist in the resource directory.

For a list of error codes, visit the Service error codes.

Change history

Change time	Summary of changes	Operation

No change history