You can attach custom access control policies to folders or members.
Background information
By default, the system access control policy FullAliyunAccess is attached to each folder and member.
The access control policy that is attached to a folder also applies to all its subfolders and all members in the subfolders.
Procedure
Log on to the Resource Management console.
In the left-side navigation pane, choose .
On the Control Policy page, click the Attachments tab. In the navigation tree of the Attachments tab, find the folder or member to which you want to attach an access control policy. Then, select the check box to the left of the name of the folder or member.
In the section that appears, click Attach Policy.
In the Attach Policy dialog box, select the access control policy that you want to attach to the folder or member and click OK.
In the Confirm Control Policy Attachment dialog box, read and understand the attachment impact and click Confirm and Continue.
After an access control policy is attached to a folder, the operations performed on resources by using members in the folder and members in its subfolders are limited by the policy. Make sure that the attached policy meets your expectations. Otherwise, your business may be affected.