RAM Authorization Policies Explained for Secure Access Control - Security Center - Alibaba Cloud - Security Center

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. Using RAM helps you avoid sharing your Alibaba Cloud account keys with other users and allows you to grant users the least privilege access. RAM uses permission policies to define authorizations. This topic describes the general structure of a RAM policy, and the policy statement elements (Action, Resource, and Condition) defined by Security Center for RAM permission policies. The RAM code (RamCode) for Security Center is threatdetection,yundun-aegis,yundun-sas , and the supported authorization granularity is RESOURCE .

General structure of a policy

Permission policies support JSON format with the following general structure:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

The following list describes the fields in the policy:

Version: Specifies the policy version number. It is fixed at 1.
Statement:
- Effect: Specifies the authorization result. Valid values: Allow and Deny.
- Action: Specifies one or more operations that are allowed or denied.
- Resource: Specifies the specific objects affected by the operations. You can use Alibaba Cloud Resource Names (ARNs) to describe specific resources.
- Condition: Specifies the conditions for the authorization to take effect. This field is optional.
  - Condition operator: Specifies the conditional operators. Different types of conditions support different conditional operators.
  - Condition_key: Specifies the condition keys.
  - Condition_value: Specifies the condition values.

Action

The following table lists the actions defined by Security Center. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that support authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding ARN in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys that are applicable across all RAM-integrated services. For more information, see Common condition keys.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action	API	Access level	Resource type	Condition key	Dependent action
yundun-aegis:DescribeReportExport	DescribeReportExport	get	All Resource ``	None	None
yundun-aegis:GenerateOnceTask	GenerateOnceTask	none	All Resource ``	None	None
yundun-aegis:DescribeNoticeConfig	DescribeNoticeConfig	get	All Resource ``	None	None
yundun-aegis:GetOnceTaskResultInfo	GetOnceTaskResultInfo	get	All Resource ``	None	None
yundun-aegis:CopyCustomizeReportConfig	CopyCustomizeReportConfig	get	All Resource ``	None	None
yundun-aegis:DescribeVulNumStatistics	DescribeVulNumStatistics	get	All Resource ``	None	None
yundun-aegis:ModifyStartVulScan	ModifyStartVulScan	update	All Resource ``	None	None
yundun-aegis:DescribeCustomizeReportConfigDetail	DescribeCustomizeReportConfigDetail	get	All Resource ``	None	None
yundun-aegis:GetLastOnceTaskInfo	GetLastOnceTaskInfo	get	All Resource ``	None	None
yundun-aegis:DescribeAccesskeyLeakList	DescribeAccesskeyLeakList	get	All Resource ``	None	None
yundun-aegis:OperateVuls	OperateVuls	none	All Resource ``	None	None
yundun-sas:DescribeCloudCenterInstances	DescribeCloudCenterInstances	get	Asset `acs:yundun-sas:{#regionId}:{#accountId}:asset/`	None	None
yundun-sas:ListVulAutoRepairConfig	ListVulAutoRepairConfig	get	All Resource ``	None	None
yundun-sas:DescribeImageListBySensitiveFile	DescribeImageListBySensitiveFile	get	All Resource ``	None	None
yundun-sas:ListCheckPolicies	ListCheckPolicies	list	CustomCheckStandardPolicy `acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/`	None	None
yundun-sas:ModifyAppVulScanCycle	ModifyAppVulScanCycle	update	All Resource ``	None	None
yundun-sas:GetCheckProcess	GetCheckProcess	get	All Resource ``	None	None
yundun-sas:ModifyWebLockDeleteConfig	ModifyWebLockDeleteConfig	update	*WebLockConfig `acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}`	None	None
yundun-sas:CreateDynamicDict	CreateDynamicDict	create	All Resource ``	None	None
yundun-sas:GetClusterRuleSummary	GetClusterRuleSummary	get	All Resource ``	None	None
yundun-sas:GetCheckConfig	GetCheckConfig	get	All Resource ``	None	None
yundun-sas:DescribeGroupStruct	DescribeGroupStruct	none	All Resource ``	None	None
yundun-sas:DescribeImageGroupedVulList	DescribeImageGroupedVulList	get	All Resource ``	None	None
yundun-sas:ModifyCustomBlockRecord	ModifyCustomBlockRecord	update	All Resource ``	None	None
yundun-sas:ModifyWebLockStart	ModifyWebLockStart	update	*WebLockBind `acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}`	None	None
yundun-sas:DescribeCheckWarningMachines	DescribeCheckWarningMachines	get	All Resource ``	None	None
yundun-sas:DescribeVulListPage	DescribeVulListPage	get	All Resource ``	None	None
yundun-sas:VerifyCheckResult	VerifyCheckResult	none	All Resource ``	None	None
yundun-sas:StartHoneypot	StartHoneypot	update	All Resource ``	None	None
yundun-sas:ListClusterCheckResult	ListClusterCheckResult	get	All Resource ``	None	None
yundun-sas:DeleteSuspEventNode	DeleteSuspEventNode	delete	All Resource ``	None	None
yundun-sas:CreateHoneypotProbe	CreateHoneypotProbe	create	HoneypotProbe `acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/`	None	None
yundun-sas:UpdateBaselineCheckWhiteRecord	UpdateBaselineCheckWhiteRecord	update	All Resource ``	None	None
yundun-sas:DeleteHoneypotNode	DeleteHoneypotNode	delete	*HoneypotNode `acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}`	None	None
yundun-sas:GenerateDynamicDict	GenerateDynamicDict	list	All Resource ``	None	None
yundun-sas:GetHoneypotPreset	GetHoneypotPreset	get	*HoneypotPreset `acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/{#HoneypotPresetId}`	None	None
yundun-sas:ModifyVulConfig	ModifyVulConfig	update	All Resource ``	None	None
yundun-sas:OperateImageVul	OperateImageVul	none	All Resource ``	None	None
yundun-sas:CreateBackupPolicy	CreateBackupPolicy	create	BackupPolicy `acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/`	None	None
yundun-sas:ModifyWebLockStatus	ModifyWebLockStatus	update	*WebLockBind `acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}`	None	None
yundun-sas:GetCheckDetail	GetCheckDetail	get	All Resource ``	None	None
yundun-sas:SasInstallCode	SasInstallCode	none	All Resource ``	None	None
yundun-sas:UpdateAttackPathSensitiveAssetConfig	UpdateAttackPathSensitiveAssetConfig	update	*AttackPathSensitiveAssetConfig `acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/{#AttackPathSensitiveAssetConfigId}`	None	None
yundun-sas:ListHoneypotAttackerSource	ListHoneypotAttackerSource	get	All Resource ``	None	None
yundun-sas:DeleteContainerPluginRule	DeleteContainerPluginRule	delete	All Resource ``	None	None
yundun-sas:DescribeExportInfo	DescribeExportInfo	get	All Resource ``	None	None
yundun-sas:DescribeTarget	DescribeTarget	get	All Resource ``	None	None
yundun-sas:DescribeBackupRestoreCount	DescribeBackupRestoreCount	get	All Resource ``	None	None
yundun-sas:UpdateUnknownThreatDetectProcess	UpdateUnknownThreatDetectProcess	update	All Resource ``	None	None
yundun-sas:DescribeBackupClients	DescribeBackupClients	get	All Resource ``	None	None
yundun-sas:OperateSuspiciousOverallConfig	OperateSuspiciousOverallConfig	none	All Resource ``	None	None
yundun-sas:DescribePropertyProcItem	DescribePropertyProcItem	get	All Resource ``	None	None
yundun-sas:DescribeSecurityEventOperationStatus	DescribeSecurityEventOperationStatus	get	All Resource ``	None	None
yundun-sas:ChangeAssetRefreshTaskConfig	ChangeAssetRefreshTaskConfig	none	All Resource ``	None	None
yundun-sas:ListBackupRecord	ListBackupRecord	list	All Resource ``	None	None
yundun-sas:GetAttackTypeList	GetAttackTypeList	get	All Resource ``	None	None
yundun-sas:UpdateFileProtectClientEvent	UpdateFileProtectClientEvent	update	All Resource ``	None	None
yundun-sas:AdvanceSecurityEventOperations	AdvanceSecurityEventOperations	none	All Resource ``	None	None
yundun-sas:CreateServiceLinkedRole	CreateServiceLinkedRole	create	All Resource ``	None	None
yundun-sas:DescribeContainerFieldStatistics	DescribeContainerFieldStatistics	get	All Resource ``	None	None
yundun-sas:DescribeBackupFiles	DescribeBackupFiles	get	All Resource ``	None	None
yundun-sas:GetSuspiciousStatistics	GetSuspiciousStatistics	get	All Resource ``	None	None
yundun-sas:ListPodRisk	ListPodRisk	list	All Resource ``	None	None
yundun-sas:ListAutoTagRules	ListAutoTagRules	list	All Resource ``	None	None
yundun-sas:CreateOpaStrategyNew	CreateOpaStrategyNew	create	All Resource ``	None	None
yundun-sas:DeleteCloudVendorAccountAK	DeleteCloudVendorAccountAK	delete	All Resource ``	None	None
yundun-sas:DescribeWebLockProcessBlockStatistics	DescribeWebLockProcessBlockStatistics	get	All Resource ``	None	None
yundun-sas:DescribeEmgUserAgreement	DescribeEmgUserAgreement	get	All Resource ``	None	None
yundun-sas:DescribeCountNotScannedImage	DescribeCountNotScannedImage	get	All Resource ``	None	None
yundun-sas:GetConsoleFuncGrayStatus	GetConsoleFuncGrayStatus	none	All Resource ``	None	None
yundun-sas:ListClusterCnnfStatusDetail	ListClusterCnnfStatusDetail	get	All Resource ``	None	None
yundun-sas:DescribeHybridProxyPolicy	DescribeHybridProxyPolicy	get	All Resource ``	None	None
yundun-sas:StartIdcProbeScan	StartIdcProbeScan	none	All Resource ``	None	None
yundun-sas:DeleteCycleTask	DeleteCycleTask	delete	*CycleTask `acs:yundun-sas:{#regionId}:{#accountId}:cycletask/{#ConfigId}`	None	None
yundun-sas:HandleMaliciousFiles	HandleMaliciousFiles	none	All Resource ``	None	None
yundun-sas:GetCloudAssetDetail	GetCloudAssetDetail	get	All Resource ``	None	None
yundun-sas:DescribeRisks	DescribeRisks	get	All Resource ``	None	None
yundun-sas:ListCloudAssetMatchOperators	ListCloudAssetMatchOperators	list	All Resource ``	None	None
yundun-sas:DeleteAttackPathWhitelist	DeleteAttackPathWhitelist	delete	*AttackPathWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#attackpathwhitelistId}`	None	None
yundun-sas:ModifyPushAllTask	ModifyPushAllTask	update	All Resource ``	None	None
yundun-sas:DescribeIdcAssetCriteria	DescribeIdcAssetCriteria	get	All Resource ``	None	None
yundun-sas:StartPreCheckDatabase	StartPreCheckDatabase	update	All Resource ``	None	None
yundun-sas:GetCloudAssetSummary	GetCloudAssetSummary	get	All Resource ``	None	None
yundun-sas:ListAgentlessRegion	ListAgentlessRegion	list	All Resource ``	None	None
yundun-sas:GetCheckCountStatistic	GetCheckTimeDimensionStatistic	get	All Resource ``	None	None
yundun-sas:DeleteBaselineCheckWhiteRecord	DeleteBaselineCheckWhiteRecord	delete	All Resource ``	None	None
yundun-sas:DescribeClusterHostSecuritySummary	DescribeClusterHostSecuritySummary	get	All Resource ``	None	None
yundun-sas:DescribeUniRecoverableList	DescribeUniRecoverableList	get	All Resource ``	None	None
yundun-sas:ModifyCheckRule	ModifyCheckRule	update	All Resource ``	None	None
yundun-sas:DeleteSearchCondition	DeleteSearchCondition	delete	All Resource ``	None	None
yundun-sas:DescribeHybridProxyClusterList	DescribeHybridProxyClusterList	get	All Resource ``	None	None
yundun-sas:DescribeAIAssetSummary	DescribeAIAssetSummary	none	All Resource ``	None	None
yundun-sas:DescribeHybridProxyLinkedClientList	DescribeHybridProxyLinkedClientList	get	All Resource ``	None	None
yundun-sas:ListK8sAccessInfo	ListK8sAccessInfo	list	All Resource ``	None	None
yundun-sas:CreateOssBucketScanTask	CreateOssBucketScanTask	create	All Resource ``	None	None
yundun-sas:updateStrictEventName	UpdateStrictEventName	none	All Resource ``	None	None
yundun-sas:DescribeCriteria	DescribeCriteria	get	All Resource ``	None	None
yundun-sas:DescribeVpcList	DescribeVpcList	get	All Resource ``	None	None
yundun-sas:DescribeCheckEcsWarnings	DescribeCheckEcsWarnings	get	All Resource ``	None	None
yundun-sas:ListObjectScanEvent	ListObjectScanEvent	get	All Resource ``	None	None
yundun-sas:DeleteFileProtectClientRule	DeleteFileProtectClientRule	delete	All Resource ``	None	None
yundun-sas:DeleteHoneypotProbeBind	DeleteHoneypotProbeBind	delete	All Resource ``	None	None
yundun-sas:GetSasContainerWebDefenseRule	GetSasContainerWebDefenseRule	get	All Resource ``	None	None
yundun-sas:ListAvailableHoneypot	ListAvailableHoneypot	get	All Resource ``	None	None
yundun-sas:GetCheckSale	GetCheckSale	get	All Resource ``	None	None
yundun-sas:PageImageRegistry	PageImageRegistry	get	All Resource ``	None	None
yundun-sas:DescribeScanTaskProgress	DescribeScanTaskProgress	get	All Resource ``	None	None
yundun-sas:CreateAntiBruteForceRule	CreateAntiBruteForceRule	create	AntiBruteForceRule `acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/`	None	None
yundun-sas:UpdateOpaStrategyNew	UpdateOpaStrategyNew	update	All Resource ``	None	None
yundun-sas:AddPublishBatch	AddPublishBatch	create	All Resource ``	None	None
yundun-sas:GetAssetsPropertyItem	GetAssetsPropertyItem	get	All Resource ``	None	None
yundun-sas:ListSasContainerWebDefenseRule	ListSasContainerWebDefenseRule	list	All Resource ``	None	None
yundun-sas:DescribeMatchedMaliciousNames	DescribeMatchedMaliciousNames	get	All Resource ``	None	None
yundun-sas:UpdateHoneypotProbe	UpdateHoneypotProbe	update	*HoneypotProbe `acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/{#HoneypotProbeId}`	None	None
yundun-sas:ListMaliciousFileWhitelistConfigs	ListMaliciousFileWhitelistConfigs	list	MaliciousFileWhitelistConfig `acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/`	None	None
yundun-sas:GetSasContainerWebDefenseRuleApplication	GetSasContainerWebDefenseRuleApplication	get	All Resource ``	None	None
yundun-sas:ListHoneypotEventFlows	ListHoneypotEventFlows	list	All Resource ``	None	None
yundun-sas:GetAssetsPropertyDetail	GetAssetsPropertyDetail	get	All Resource ``	None	None
yundun-sas:GetFileProtectClientEvent	GetFileProtectClientEvent	get	All Resource ``	None	None
yundun-sas:GetFileDetectReport	GetFileDetectReport	get	All Resource ``	None	None
yundun-sas:ReceiveFunctionTrialRewardByAliUid	ReceiveFunctionTrialRewardByAliUid	get	All Resource ``	None	None
yundun-sas:CreateBatchUploadURL	CreateBatchUploadUrl	none	All Resource ``	None	None
yundun-sas:OperateSwitchStatus	OperateSwitchStatus	update	All Resource ``	None	None
yundun-sas:DescribeInstanceVulStatistics	DescribeInstanceVulStatistics	get	All Resource ``	None	None
yundun-sas:DeleteServiceTrail	DeleteServiceTrail	delete	SasTrail `acs:yundun-sas:{#regionId}:{#accountId}:sastrail/`	None	None
yundun-sas:AddPrivateRegistry	AddPrivateRegistry	create	All Resource ``	None	None
yundun-sas:DescribePropertyCount	DescribePropertyCount	get	All Resource ``	None	None
yundun-sas:GetPropertyScheduleConfig	GetPropertyScheduleConfig	get	All Resource ``	None	None
yundun-sas:ListCheckInstanceResult	ListCheckInstanceResult	get	All Resource ``	None	None
yundun-sas:AddIdcProbe	AddIdcProbe	create	All Resource ``	None	None
yundun-sas:CreateJenkinsImageScanTask	CreateJenkinsImageScanTask	create	All Resource ``	None	None
yundun-sas:AddImageVulWhiteList	AddImageVulWhiteList	create	All Resource ``	None	None
yundun-sas:GetSasContainerWebDefenseRuleCriteria	GetSasContainerWebDefenseRuleCriteria	get	All Resource ``	None	None
yundun-sas:DescribePropertyUserDetail	DescribePropertyUserDetail	get	All Resource ``	None	None
yundun-sas:QueryAttackCount	QueryAttackCount	get	All Resource ``	None	None
yundun-sas:DescribeEventOnStage	DescribeEventOnStage	get	All Resource ``	None	None
yundun-sas:DescribeAppNetworkFromSnapshot	GetAppNetwork	get	All Resource ``	None	None
yundun-sas:GetHoneypotStatistics	GetHoneypotStatistics	get	All Resource ``	None	None
yundun-sas:DescribeIdcProbeScanResultList	DescribeIdcProbeScanResultList	get	All Resource ``	None	None
yundun-sas:ListVulGlobalConfig	ListVulGlobalConfig	list	All Resource ``	None	None
yundun-sas:EnableCustomInstanceBlockRecord	EnableCustomInstanceBlockRecord	update	All Resource ``	None	None
yundun-sas:ListInstanceCatalog	ListInstanceCatalog	get	All Resource ``	None	None
yundun-sas:DescribeExposedInstanceList	DescribeExposedInstanceList	get	All Resource ``	None	None
yundun-sas:DescribeSecurityEventMarkMissList	DescribeSecurityEventMarkMissList	get	All Resource ``	None	None
yundun-sas:GetCanTrySas	GetCanTrySas	get	All Resource ``	None	None
yundun-sas:DescribeVulTargetStatistics	DescribeVulTargetStatistics	get	All Resource ``	None	None
yundun-sas:DeleteUniBackupPolicy	DeleteUniBackupPolicy	delete	All Resource ``	None	None
yundun-sas:ListGroups	ListGroups	list	All Resource ``	None	None
yundun-sas:GetUserLang	GetUserLang	get	All Resource ``	None	None
yundun-sas:ListCloudVendorRegions	ListCloudVendorRegions	list	All Resource ``	None	None
yundun-sas:DescribeSuspiciousUUIDConfig	DescribeSuspiciousUUIDConfig	get	All Resource ``	None	None
yundun-sas:DescribePropertyScaItem	DescribePropertyScaItem	get	All Resource ``	None	None
yundun-sas:RefreshOssBucketScanInfo	RefreshOssBucketScanInfo	none	All Resource ``	None	None
yundun-sas:QueryGroupIdByGroupName	QueryGroupIdByGroupName	get	All Resource ``	None	None
yundun-sas:DescribeAssetDetailByUuids	DescribeAssetDetailByUuids	get	All Resource ``	None	None
yundun-sas:DescribeInstanceAntiBruteForceRules	DescribeInstanceAntiBruteForceRules	get	All Resource ``	None	None
yundun-sas:DeleteFileProtectRule	DeleteFileProtectRule	delete	*ClientFileProtect `acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/{#RuleId}`	None	None
yundun-sas:DescribeWebLockFileChangeStatistics	DescribeWebLockFileChangeStatistics	get	All Resource ``	None	None
yundun-sas:SendCustomizeReport	SendCustomizeReport	none	All Resource ``	None	None
yundun-sas:ListAgentlessAsset	ListAgentlessAsset	list	All Resource ``	None	None
yundun-sas:GetVirusScanConfig	GetVirusScanConfig	get	All Resource ``	None	None
yundun-sas:RefreshAssets	RefreshAssets	none	All Resource ``	None	None
yundun-sas:DescribeVolDingdingMessage	DescribeVolDingdingMessage	get	All Resource ``	None	None
yundun-sas:StopHoneypot	StopHoneypot	update	All Resource ``	None	None
yundun-sas:DescribeWebLockInclusiveFileType	DescribeWebLockInclusiveFileType	get	All Resource ``	None	None
yundun-sas:GetOpaClusterLabelList	GetOpaClusterLabelList	get	All Resource ``	None	None
yundun-sas:DescribeLogShipperStatus	DescribeLogShipperStatus	get	LogShipper `acs:yundun-sas:{#regionId}:{#accountId}:logshipper/`	None	None
yundun-sas:DescribeUuidsByAppId	ListUuidsByAppId	list	All Resource ``	None	None
yundun-sas:SaveWhiteListStrategy	SaveWhiteListStrategy	create	All Resource ``	None	None
yundun-sas:ModifyInstanceAntiBruteForceRule	ModifyInstanceAntiBruteForceRule	update	*AntiBruteForceRule `acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}`	None	None
yundun-sas:ModifyProcessWhiteList	ModifyProcessWhiteList	create	All Resource ``	None	None
yundun-sas:ListSupportAttackPathAsset	ListSupportAttackPathAsset	list	All Resource ``	None	None
yundun-sas:DescribeClientProblemType	DescribeClientProblemType	get	All Resource ``	None	None
yundun-sas:DescribeSuspEventExportInfo	DescribeSuspEventExportInfo	get	All Resource ``	None	None
yundun-sas:ListOssScanConfig	ListOssScanConfig	list	OssScanConfig `acs:yundun-sas::{#accountId}:ossscanconfig/*`	None	None
yundun-sas:ExportWarning	ExportWarning	none	All Resource ``	None	None
yundun-sas:DescribeContainerScanConfig	DescribeContainerScanConfig	get	All Resource ``	None	None
yundun-sas:QueryDiscoverDatabase	QueryDiscoverDatabase	get	All Resource ``	None	None
yundun-sas:OperateCommonOverallConfig	OperateCommonOverallConfig	update	All Resource ``	None	None
yundun-sas:DescribeUserBackupMachines	DescribeUserBackupMachines	get	All Resource ``	None	None
yundun-sas:ListAttackEventInfo	ListAttackEventInfo	get	All Resource ``	None	None
yundun-sas:ListSystemAggregationRules	ListSystemAggregationRules	get	All Resource ``	None	None
yundun-sas:ListOperatedCheck	ListOperationCheck	list	All Resource ``	None	None
yundun-sas:CreateAgentlessScanTask	CreateAgentlessScanTask	create	All Resource ``	None	None
yundun-sas:DescribeRiskCheckResult	DescribeRiskCheckResult	get	All Resource ``	None	None
yundun-sas:DescribeCustomizedDictUploadInfo	DescribeCustomizedDictUploadInfo	get	All Resource ``	None	None
yundun-sas:DescribeCheckWarningSummary	DescribeCheckWarningSummary	get	All Resource ``	None	None
yundun-sas:DescribeEventLevelCount	DescribeEventLevelCount	get	All Resource ``	None	None
yundun-sas:StartDiscoverDatabaseTask	StartDiscoverDatabaseTask	update	All Resource ``	None	None
yundun-sas:DescribeCommonOverallConfig	DescribeCommonOverallConfig	get	All Resource ``	None	None
yundun-sas:DescribeCheckResult	DescribeCheckResult	get	All Resource ``	None	None
yundun-sas:GetOpaClusterNamespaceList	GetOpaClusterNamespaceList	list	All Resource ``	None	None
yundun-sas:DescribeDomainSecureStatistics	DescribeDomainSecureStatistics	get	All Resource ``	None	None
yundun-sas:ListAssetInfoPublish	ListAssetInfoPublish	list	All Resource ``	None	None
yundun-sas:UpdateCustomizeReportStatus	UpdateCustomizeReportStatus	get	All Resource ``	None	None
yundun-sas:DescribeDomainSecureRiskList	DescribeDomainSecureRiskList	list	All Resource ``	None	None
yundun-sas:UpdateAlarmEvent	UpdateAlarmEvent	update	All Resource ``	None	None
yundun-sas:GetBuildRiskDefineRuleConfig	GetBuildRiskDefineRuleConfig	get	All Resource ``	None	None
yundun-sas:DescribeRiskCheckSummary	DescribeRiskCheckSummary	get	All Resource ``	None	None
yundun-sas:DescribeAutoDelConfig	DescribeAutoDelConfig	get	All Resource ``	None	None
yundun-sas:DescribeCommonTargetResultList	DescribeCommonTargetResultList	get	All Resource ``	None	None
yundun-sas:ValidateHcWarnings	ValidateHcWarnings	none	All Resource ``	None	None
yundun-sas:DescribeClientConfStrategy	DescribeClientConfStrategy	get	All Resource ``	None	None
yundun-sas:GetModuleConfigStatus	GetModuleConfigStatus	get	All Resource ``	None	None
yundun-sas:DescribeStrategy	DescribeStrategy	get	BaselineStrategy `acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/`	None	None
yundun-sas:DescribeCheckWarningDetail	DescribeCheckWarningDetail	get	All Resource ``	None	None
yundun-sas:DescribeImage	DescribeImage	get	All Resource ``	None	None
yundun-sas:CancelOnceTask	CancelOnceTask	none	All Resource ``	None	None
yundun-sas:DescribeReportRecipientStatus	DescribeReportRecipientStatus	get	All Resource ``	None	None
yundun-sas:GetAgentlessTaskCount	GetAgentlessTaskCount	get	All Resource ``	None	None
yundun-sas:DescribeAccessKeyLeakDetail	DescribeAccessKeyLeakDetail	get	All Resource ``	None	None
yundun-sas:BatchOperateCommonOverallConfig	BatchOperateCommonOverallConfig	update	All Resource ``	None	None
yundun-sas:DescribePluginSummary	DescribePluginSummary	get	All Resource ``	None	None
yundun-sas:OperationCustomizeReportChart	OperationCustomizeReportChart	update	All Resource ``	None	None
yundun-sas:DescribeWebLockTotalFileChangeCount	DescribeWebLockTotalFileChangeCount	get	All Resource ``	None	None
yundun-sas:ListContainerDefenseRule	ListContainerDefenseRule	get	ContainerDefenseRule `acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/`	None	None
yundun-sas:DescribeTotalStatistics	DescribeTotalStatistics	get	All Resource ``	None	None
yundun-sas:ListAttackPathWhitelist	ListAttackPathWhitelist	list	AttackPathWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/`	None	None
yundun-sas:ListAttackPathEvent	ListAttackPathEvent	list	All Resource ``	None	None
yundun-sas:DescribeBackupMachineStatus	DescribeBackupMachineStatus	get	All Resource ``	None	None
yundun-sas:CreateBinarySecurityPolicy	CreateBinarySecurityPolicy	create	All Resource ``	None	None
yundun-sas:HandleUnknownThreatDetectEvent	HandleUnknownThreatDetectEvent	update	All Resource ``	None	None
yundun-sas:DescribeWhiteListAsset	DescribeWhiteListAsset	get	All Resource ``	None	None
yundun-sas:ListAgentlessMaliciousFiles	ListAgentlessMaliciousFiles	get	All Resource ``	None	None
yundun-sas:OperationCancelIgnoreSuspEvent	OperationCancelIgnoreSuspEvent	none	All Resource ``	None	None
yundun-sas:DescribeSoarStrategyParam	DescribeSoarStrategyParam	get	All Resource ``	None	None
yundun-sas:DescribeMachineAppPage	ListMachineApps	list	All Resource ``	None	None
yundun-sas:CreateFileUploadLimit	CreateFileUploadLimit	create	FileUploadLimit `acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit/`	None	None
yundun-sas:DescribeCommonOverallConfigList	DescribeCommonOverallConfigList	get	All Resource ``	None	None
yundun-sas:UpdatePostPaidBindRel	UpdatePostPaidBindRel	update	*AssetBind `acs:yundun-sas:{#regionId}:{#accountId}:assetbind/{#Uuid}`	None	None
yundun-sas:ListClientAlertMode	ListClientAlertMode	list	All Resource ``	None	None
yundun-sas:ModifyClientConfSetup	ModifyClientConfSetup	update	All Resource ``	None	None
yundun-sas:DescribeSupervisonInfo	DescribeSupervisonInfo	none	All Resource ``	None	None
yundun-sas:HandleSimilarMaliciousFiles	HandleSimilarMaliciousFiles	update	All Resource ``	None	None
yundun-sas:ChangeSecurityScoreRule	ChangeSecurityScoreRule	update	All Resource ``	None	None
yundun-sas:DescribeUniBackupPolicyDetail	DescribeUniBackupPolicyDetail	get	All Resource ``	None	None
yundun-sas:ModifyTagWithUuid	ModifyTagWithUuid	update	All Resource ``	None	None
yundun-sas:GetOpaClusterImageList	GetOpaClusterImageList	list	All Resource ``	None	None
yundun-sas:addCloudVendorTrialConfig	AddCloudVendorTrialConfig	create	All Resource ``	None	None
yundun-sas:DeleteClientUserDefineRule	DeleteClientUserDefineRule	delete	All Resource ``	None	None
yundun-sas:GetClientRatioStatistic	GetClientRatioStatistic	get	All Resource ``	None	None
yundun-sas:GetRdTree	GetRdTree	get	All Resource ``	None	None
yundun-sas:CreateHoneypot	CreateHoneypot	create	HoneyPot `acs:yundun-sas:{#regionId}:{#accountId}:honeypot/`	None	None
yundun-sas:DescribeContainerStatistics	DescribeContainerStatistics	get	All Resource ``	None	None
yundun-sas:GetFileProtectDashboard	GetFileProtectDashboard	get	All Resource ``	None	None
yundun-sas:SetSyncRefreshRegion	SetSyncRefreshRegion	update	All Resource ``	None	None
yundun-sas:GetAttackPathEventDetail	GetAttackPathEventDetail	get	All Resource ``	None	None
yundun-sas:DescribeWebLockStatus	DescribeWebLockStatus	get	All Resource ``	None	None
yundun-sas:DescribeCycleTaskList	DescribeCycleTaskList	get	*CycleTask `acs:yundun-sas:{#regionId}:{#accountId}:cycletask/{#ConfigId}`	None	None
yundun-sas:TriggerCheck	TriggerCheck	create	All Resource ``	None	None
yundun-sas:CreateHoneypotPreset	CreateHoneypotPreset	create	HoneypotPreset `acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/`	None	None
yundun-sas:VerityCheckCustomConfig	VerifyCheckCustomConfig	get	All Resource ``	None	None
yundun-sas:ListSupportObjectSuffix	ListSupportObjectSuffix	get	All Resource ``	None	None
yundun-sas:GetClusterCheckItemWarningStatistics	GetClusterCheckItemWarningStatistics	get	All Resource ``	None	None
yundun-sas:DescribeHoneyPotSuspStatistics	DescribeHoneyPotSuspStatistics	get	All Resource ``	None	None
yundun-sas:DescribeEmgVulItem	DescribeEmgVulItem	get	All Resource ``	None	None
yundun-sas:DescribeChartData	DescribeChartData	none	All Resource ``	None	None
yundun-sas:DescribeMonitorAccounts	DescribeMonitorAccounts	get	All Resource ``	None	None
yundun-sas:DescribeSuspEvents	DescribeSuspEvents	get	All Resource ``	None	None
yundun-sas:GetModuleConfig	GetModuleConfig	get	All Resource ``	None	None
yundun-sas:UpdateFileUploadLimit	UpdateFileUploadLimit	update	*FileUploadLimit `acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit`	None	None
yundun-sas:ModifyWebLockRefresh	ModifyWebLockRefresh	update	*WebLockBind `acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}`	None	None
yundun-sas:DescribePropertyUsageTop	DescribePropertyUsageTop	get	All Resource ``	None	None
yundun-sas:GetFileProtectClientDashboard	GetFileProtectClientRuleDashboard	list	All Resource ``	None	None
yundun-sas:UpgradeHoneypotNode	UpgradeHoneypotNode	get	All Resource ``	None	None
yundun-sas:DescribeImageSensitiveFileByKey	DescribeImageSensitiveFileByKey	get	All Resource ``	None	None
yundun-sas:DescribeNsasSuspEventType	DescribeNsasSuspEventType	get	All Resource ``	None	None
yundun-sas:DescribeSimilarEventScenarios	DescribeSimilarEventScenarios	get	All Resource ``	None	None
yundun-sas:DescribeTraceInfoDetail	DescribeTraceInfoDetail	get	All Resource ``	None	None
yundun-sas:AddCheckResultWhiteList	AddCheckResultWhiteList	create	All Resource ``	None	None
yundun-sas:DescribeWhiteListStrategyUuidCount	DescribeWhiteListStrategyUuidCount	get	All Resource ``	None	None
yundun-sas:AddAssetSelectionCriteria	AddAssetSelectionCriteria	create	All Resource ``	None	None
yundun-sas:ListHoneypotAttackerPortrait	ListHoneypotAttackerPortrait	get	All Resource ``	None	None
yundun-sas:DescribeSummaryInfo	DescribeSummaryInfo	get	All Resource ``	None	None
yundun-sas:DeleteHybridProxyCluster	DeleteHybridProxyCluster	delete	All Resource ``	None	None
yundun-sas:DeleteSasContainerWebDefenseRule	DeleteSasContainerWebDefenseRule	delete	All Resource ``	None	None
yundun-sas:DescribeCheckWarnings	DescribeCheckWarnings	get	All Resource ``	None	None
yundun-sas:CreateJenkinsImageRegistry	CreateJenkinsImageRegistry	create	All Resource ``	None	None
yundun-sas:ListVirusScanMachineEvent	ListVirusScanMachineEvent	get	All Resource ``	None	None
yundun-sas:DisableBruteForceRecord	DisableBruteForceRecord	update	All Resource ``	None	None
yundun-sas:ConfirmVirusEvents	ConfirmVirusEvents	update	All Resource ``	None	None
yundun-sas:UpdateOssScanConfig	UpdateOssScanConfig	update	OssScanConfig `acs:yundun-sas::{#accountId}:ossscanconfig/{#ConfigId}`	None	None
yundun-sas:ModifyAutoDelConfig	ModifyAutoDelConfig	update	All Resource ``	None	None
yundun-sas:ListUniBackupRecord	ListUniBackupRecord	list	All Resource ``	None	None
yundun-sas:DescribeAlarmEventStackInfo	DescribeAlarmEventStackInfo	get	All Resource ``	None	None
yundun-sas:ModifyContainerDefenseRule	ModifyContainerDefenseRule	update	*ContainerDefenseRule `acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}`	None	None
yundun-sas:ModifySecurityCheckScheduleConfig	ModifySecurityCheckScheduleConfig	update	All Resource ``	None	None
yundun-sas:ListTargetByBatch	ListTargetByBatch	list	All Resource ``	None	None
yundun-sas:CreateMonitorAccount	CreateMonitorAccount	create	All Resource ``	None	None
yundun-sas:DeleteOpaStrategyNew	DeleteOpaStrategyNew	delete	All Resource ``	None	None
yundun-sas:UpdateCheckPolicy	UpdateCheckPolicy	update	*CustomCheckStandardPolicy `acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/{#customcheckstandardpolicyId}`	None	None
yundun-sas:DescribeAssetsSecurityEventSummary	DescribeAssetsSecurityEventSummary	get	All Resource ``	None	None
yundun-sas:ListContainerDefenseRuleClusters	ListContainerDefenseRuleClusters	get	All Resource ``	None	None
yundun-sas:ModifyBackupPolicy	ModifyBackupPolicy	update	*BackupPolicy `acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}`	None	None
yundun-sas:GetAccountLabel	GetAccountLabel	get	All Resource ``	None	None
yundun-sas:GetContainerDefenseRuleDetail	GetContainerDefenseRuleDetail	get	*ContainerDefenseRule `acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}`	None	None
yundun-sas:ListBaselineCheckWhiteRecord	ListBaselineCheckWhiteRecord	list	All Resource ``	None	None
yundun-sas:ListImageRegistryRegion	ListImageRegistryRegion	get	All Resource ``	None	None
yundun-sas:AddProtectVpcList	AddProtectVpcList	create	All Resource ``	None	None
yundun-sas:DescribeContainerGroupedFieldDetail	DescribeContainerGroupedFieldDetail	get	All Resource ``	None	None
yundun-sas:GetInstanceAlarmStatistics	GetInstanceAlarmStatistics	get	All Resource ``	None	None
yundun-sas:ModifyConcernNecessity	ModifyConcernNecessity	update	All Resource ``	None	None
yundun-sas:GetAttackPathSensitiveAssetConfig	GetAttackPathSensitiveAssetConfig	list	*AttackPathSensitiveAssetConfig `acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/{#AttackPathSensitiveAssetConfigId}`	None	None
yundun-sas:DeleteHybridProxy	DeleteHybridProxy	delete	All Resource ``	None	None
yundun-sas:CreateUniRestorePlan	CreateUniRestorePlan	create	All Resource ``	None	None
yundun-sas:ListHoneypotEvents	ListHoneypotEvents	list	All Resource ``	None	None
yundun-sas:CheckUserHasEcs	CheckUserHasEcs	none	All Resource ``	None	None
yundun-sas:DescribeCustomBlockInstances	DescribeCustomBlockInstances	get	All Resource ``	None	None
yundun-sas:ProcessSoarStrategyTask	ProcessSoarStrategyTask	update	All Resource ``	None	None
yundun-sas:DescribeImageFixTask	DescribeImageFixTask	get	All Resource ``	None	None
yundun-sas:ListInterceptionTargetPage	ListInterceptionTargetPage	get	All Resource ``	None	None
yundun-sas:GetHoneypotNode	GetHoneypotNode	get	*HoneypotNode `acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}`	None	None
yundun-sas:ListCheckItem	ListCheckItem	list	All Resource ``	None	None
yundun-sas:DescribeUniBackupStatistics	DescribeUniBackupStatistics	get	All Resource ``	None	None
yundun-sas:DescribeBackUpExportInfo	DescribeBackUpExportInfo	get	All Resource ``	None	None
yundun-sas:GenerateClusterScannerWebhookYaml	GenerateClusterScannerWebhookYaml	create	ClusterScannerYaml `acs:yundun-sas:{#regionId}:{#accountId}:clusterscanneryaml/`	None	None
yundun-sas:DescribeSoarStrategyTaskResult	DescribeSoarStrategyTaskResult	get	All Resource ``	None	None
yundun-sas:CreateContainerScanTask	CreateContainerScanTask	create	All Resource ``	None	None
yundun-sas:ListPrivateK8s	ListPrivateK8s	list	All Resource ``	None	None
yundun-sas:DescribePropertyScaProcessDetail	DescribePropertyScaProcessDetail	none	All Resource ``	None	None
yundun-sas:ExportSuspEvents	ExportSuspEvents	none	All Resource ``	None	None
yundun-sas:GenerateK8sAccessInfo	GenerateK8sAccessInfo	create	All Resource ``	None	None
yundun-sas:ModifyEmgVulSubmit	ModifyEmgVulSubmit	update	All Resource ``	None	None
yundun-sas:ListAccountsInResourceDirectory	ListAccountsInResourceDirectory	list	All Resource ``	None	None
yundun-sas:DescribeExposedCheckWarning	DescribeExposedCheckWarning	get	All Resource ``	None	None
yundun-sas:ModifyStrategyTarget	ModifyStrategyTarget	update	All Resource ``	None	None
yundun-sas:GetFileProtectClientEventDashboard	GetFileProtectClientEventDashboard	list	All Resource ``	None	None
yundun-sas:ListSystemClientRules	ListSystemClientRules	get	All Resource ``	None	None
yundun-sas:DescribeSoarStrategyTaskParams	DescribeSoarStrategyTaskParams	get	All Resource ``	None	None
yundun-sas:CreateVulAutoRepairConfig	CreateVulAutoRepairConfig	create	All Resource ``	None	None
yundun-sas:DescribeWhiteListProcess	DescribeWhiteListProcess	get	All Resource ``	None	None
yundun-sas:InstallPmAgent	InstallPmAgent	update	All Resource ``	None	None
yundun-sas:GetOpaPluginStatus	GetOpaPluginStatus	get	All Resource ``	None	None
yundun-sas:UpgradeBackupPolicyVersion	UpgradeBackupPolicyVersion	none	*BackupPolicy `acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}`	None	None
yundun-sas:SetClusterInterceptionConfig	SetClusterInterceptionConfig	update	All Resource ``	None	None
yundun-sas:DescribeHybridProxyList	DescribeHybridProxyList	get	All Resource ``	None	None
yundun-sas:DeleteCustomBlockRecord	DeleteCustomBlockRecord	delete	All Resource ``	None	None
yundun-sas:EnableServiceAccessResourceDirectory	EnableServiceAccessResourceDirectory	create	All Resource ``	None	None
yundun-sas:DescribeVulConfig	DescribeVulConfig	get	All Resource ``	None	None
yundun-sas:DescribeSoarStrategyTasks	DescribeSoarStrategyTasks	get	All Resource ``	None	None
yundun-sas:UpdateHoneypot	UpdateHoneypot	update	*HoneyPot `acs:yundun-sas:{#regionId}:{#accountId}:honeypot/{#HoneypotId}`	None	None
yundun-sas:UpdateSelectionKeyByType	UpdateSelectionKeyByType	update	All Resource ``	None	None
yundun-sas:DescribeVulTargetConfig	DescribeVulTargetConfig	get	All Resource ``	None	None
yundun-sas:ListCheckStandard	ListCheckStandard	get	All Resource ``	None	None
yundun-sas:DescribeRiskItemType	DescribeRiskItemType	get	All Resource ``	None	None
yundun-sas:DeleteMaliciousNote	DeleteMaliciousNote	delete	All Resource ``	None	None
yundun-sas:GetUnknownThreatDetectStatistic	GetUnknownThreatDetectStatistic	get	All Resource ``	None	None
yundun-sas:ExecStrategy	ExecStrategy	none	All Resource ``	None	None
yundun-sas:DeleteIdcProbe	DeleteIdcProbe	delete	All Resource ``	None	None
yundun-sas:ModifyClusterCnnfStatusUserConfirm	ModifyClusterCnnfStatusUserConfirm	update	All Resource ``	None	None
yundun-sas:GetFileProtectRule	GetFileProtectRule	get	*ClientFileProtect `acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/{#RuleId}`	None	None
yundun-sas:DescribeSuspEventQuaraFiles	DescribeSuspEventQuaraFiles	get	All Resource ``	None	None
yundun-sas:DeleteHoneypotProbe	DeleteHoneypotProbe	delete	*HoneypotProbe `acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/{#HoneypotProbeId}`	None	None
yundun-sas:GetHoneypotNodeMetricList	GetHoneypotNodeMetricList	list	All Resource ``	None	None
yundun-sas:RollbackSuspEventQuaraFile	RollbackSuspEventQuaraFile	none	All Resource ``	None	None
yundun-sas:DescribeWebLockConfigList	DescribeWebLockConfigList	get	*WebLockConfig `acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}`	None	None
yundun-sas:GetCheckCountStatistic	GetCheckCountStatistic	get	All Resource ``	None	None
yundun-sas:DescribeCanFixVulList	DescribeCanFixVulList	get	All Resource ``	None	None
yundun-sas:UpgradeVersionByUuids	UpgradeVersionByUuids	update	All Resource ``	None	None
yundun-sas:ExportRecord	ExportRecord	none	All Resource ``	None	None
yundun-sas:DescribeSecurityStatInfo	DescribeSecurityStatInfo	get	All Resource ``	None	None
yundun-sas:ListInterceptionHistory	ListInterceptionHistory	get	All Resource ``	None	None
yundun-sas:ListSystemClientRuleTypes	ListSystemClientRuleTypes	get	All Resource ``	None	None
yundun-sas:DeleteDingTalk	DeleteDingTalk	delete	All Resource ``	None	None
yundun-sas:ModifyContainerScanConfig	ModifyContainerScanConfig	update	All Resource ``	None	None
yundun-sas:DescribeUuidsByVulNames	DescribeUuidsByVulNames	get	All Resource ``	None	None
yundun-sas:ModifySecurityEventMarkMissIndividually	ModifySecurityEventMarkMissIndividually	update	All Resource ``	None	None
yundun-sas:ListImageRegistryExtra	ListImageRegistryExtra	list	All Resource ``	None	None
yundun-sas:GetHoneypotAttackStatistics	GetHoneypotAttackStatistics	get	All Resource ``	None	None
yundun-sas:DescribeInstallCaptcha	DescribeInstallCaptcha	get	All Resource ``	None	None
yundun-sas:ModifyNoticeConfig	ModifyNoticeConfig	update	All Resource ``	None	None
yundun-sas:GetClusterCheckSummary	GetClusterCheckSummary	get	All Resource ``	None	None
yundun-sas:DescribeCloudVendorAccountAKList	DescribeCloudVendorAccountAKList	list	All Resource ``	None	None
yundun-sas:DescribeVpcHoneyPotCriteria	DescribeVpcHoneyPotCriteria	get	HoneyPot `acs:yundun-sas:{#regionId}:{#accountId}:honeypot/`	None	None
yundun-sas:DescribeOnceTask	DescribeOnceTask	get	All Resource ``	None	None
yundun-sas:CreateFileDetect	CreateFileDetect	create	All Resource ``	None	None
yundun-sas:DescribeHcExportInfo	DescribeHcExportInfo	get	All Resource ``	None	None
yundun-sas:DescribeContainerApps	DescribeContainerApps	list	All Resource ``	None	None
yundun-sas:DescribeAllImageBaseline	DescribeAllImageBaseline	get	All Resource ``	None	None
yundun-sas:DescribeUniSupportRegion	DescribeUniSupportRegion	get	All Resource ``	None	None
yundun-sas:DescribeInstanceStatistics	DescribeInstanceStatistics	get	All Resource ``	None	None
yundun-sas:ModifyVpcHoneyPot	ModifyVpcHoneyPot	update	All Resource ``	None	None
yundun-sas:AddInstallCode	AddInstallCode	create	All Resource ``	None	None
yundun-sas:GetCloudAssetCriteria	GetCloudAssetCriteria	get	All Resource ``	None	None
yundun-sas:GetAttackEventDashboard	GetAttackEventDashboard	get	All Resource ``	None	None
yundun-sas:GetInterceptionSummary	GetInterceptionSummary	get	All Resource ``	None	None
yundun-sas:DescribeBruteForceRecords	DescribeBruteForceRecords	list	All Resource ``	None	None
yundun-sas:DescribeContainerServiceK8sClusterKritisStatus	DescribeContainerServiceK8sClusterKritisStatus	get	All Resource ``	None	None
yundun-sas:DescribeRiskCheckItemResult	DescribeRiskCheckItemResult	get	All Resource ``	None	None
yundun-sas:CreateInterceptionRule	CreateInterceptionRule	create	All Resource ``	None	None
yundun-sas:DescribeCustomizedStrategyTargets	DescribeCustomizedStrategyTargets	get	All Resource ``	None	None
yundun-sas:ListPublishBatch	ListPublishBatch	list	All Resource ``	None	None
yundun-sas:ListHoneypotPreset	ListHoneypotPreset	get	HoneypotPreset `acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/`	None	None
yundun-sas:ModifyHybridProxyPolicy	ModifyHybridProxyPolicy	update	All Resource ``	None	None
yundun-sas:ModifyBackupPolicyStatus	ModifyBackupPolicyStatus	update	*BackupPolicy `acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}`	None	None
yundun-sas:CreateCycleTask	CreateCycleTask	create	CycleTask `acs:yundun-sas:{#regionId}:{#accountId}:cycletask/`	None	None
yundun-sas:DescribeDynamicDictUploadInfo	DescribeDynamicDictUploadInfo	get	All Resource ``	None	None
yundun-sas:ListMultiUserInstances	ListMultiUserInstances	list	All Resource ``	None	None
yundun-sas:DescribeIdcProbeList	DescribeIdcProbeList	get	All Resource ``	None	None
yundun-sas:DescribeSuspiciousOverallConfig	DescribeSuspiciousOverallConfig	get	All Resource ``	None	None
yundun-sas:UpdatePublishCron	UpdatePublishCron	update	All Resource ``	None	None
yundun-sas:GetFileDetectResult	GetFileDetectResult	get	All Resource ``	None	None
yundun-sas:DescribeSecureSuggestion	DescribeSecureSuggestion	get	All Resource ``	None	None
yundun-sas:MarkMonitorAccounts	MarkMonitorAccounts	update	All Resource ``	None	None
yundun-sas:CreateOrUpdateAssetGroup	CreateOrUpdateAssetGroup	create	Group `acs:yundun-sas:{#regionId}:{#accountId}:group/`	None	None
yundun-sas:DescribeSecurityEventOperations	DescribeSecurityEventOperations	get	All Resource ``	None	None
yundun-sas:UpdateFileProtectRemark	UpdateFileProtectRemark	update	All Resource ``	None	None
yundun-sas:DescribeSyncAssetTaskList	DescribeSyncAssetTaskList	list	All Resource ``	None	None
yundun-sas:ModifyWebLockUnbind	ModifyWebLockUnbind	update	*WebLockBind `acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}`	None	None
yundun-sas:CreateSimilarSecurityEventsQueryTask	CreateSimilarSecurityEventsQueryTask	create	All Resource ``	None	None
yundun-sas:DescribeSoarStrategyTaskDetail	DescribeSoarStrategyTaskDetail	get	All Resource ``	None	None
yundun-sas:DescribeStrategyTarget	DescribeStrategyTarget	get	All Resource ``	None	None
yundun-sas:DescribeVulFixStatistics	DescribeVulFixStatistics	get	All Resource ``	None	None
yundun-sas:AddCheckInstanceResultWhiteList	AddCheckInstanceResultWhiteList	create	All Resource ``	None	None
yundun-sas:DescribeWhiteListEffectiveAssets	DescribeWhiteListEffectiveAssets	get	All Resource ``	None	None
yundun-sas:UpdateClientAlertMode	UpdateClientAlertMode	update	All Resource ``	None	None
yundun-sas:GetMaliciousFileWhitelistConfig	GetMaliciousFileWhitelistConfig	get	*MaliciousFileWhitelistConfig `acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/{#ConfigId}`	None	None
yundun-sas:CreateUniBackupPolicy	CreateUniBackupPolicy	create	All Resource ``	None	None
yundun-sas:DescribeUserBaselineAuthorization	DescribeUserBaselineAuthorization	get	All Resource ``	None	None
yundun-sas:CreateInterceptionTarget	CreateInterceptionTarget	create	All Resource ``	None	None
yundun-sas:ExportCustomizeReport	ExportCustomizeReport	get	All Resource ``	None	None
yundun-sas:ListOperationProcessDetail	ListOperationProcessDetail	list	All Resource ``	None	None
yundun-sas:DeleteMaliciousFileWhitelistConfig	DeleteMaliciousFileWhitelistConfig	delete	*MaliciousFileWhitelistConfig `acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/{#ConfigId}`	None	None
yundun-sas:DescribeAttackAnalysisData	DescribeAttackAnalysisData	get	All Resource ``	None	None
yundun-sas:GetServerlessAuthSummary	GetServerlessAuthSummary	get	All Resource ``	None	None
yundun-sas:DescribeBackupPolicy	DescribeBackupPolicy	get	*BackupPolicy `acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}`	None	None
yundun-sas:GetRulesCount	GetRulesCount	get	All Resource ``	None	None
yundun-sas:DeletePrivateRegistry	DeletePrivateRegistry	delete	All Resource ``	None	None
yundun-sas:JoinWebLockProcessWhiteList	JoinWebLockProcessWhiteList	update	All Resource ``	None	None
yundun-sas:GetValidDeductInstances	GetValidDeductInstances	none	All Resource ``	None	None
yundun-sas:GetAegisContainerPluginRule	GetAegisContainerPluginRule	get	All Resource ``	None	None
yundun-sas:DescribeImageRepoList	DescribeImageRepoList	get	All Resource ``	None	None
yundun-sas:ListCheckRuleInstances	ListCheckRuleInstance	list	All Resource ``	None	None
yundun-sas:GetAssetSelectionConfig	GetAssetSelectionConfig	get	*AssetSelectionConfig `acs:yundun-sas:{#regionId}:{#accountId}:assetselectionconfig/{#BusinessType}`	None	None
yundun-sas:IgnoreCheckItems	IgnoreCheckItems	none	All Resource ``	None	None
yundun-sas:DescribeClusterImageSecuritySummary	DescribeClusterImageSecuritySummary	get	All Resource ``	None	None
yundun-sas:DeleteInterceptionTarget	DeleteInterceptionTarget	delete	All Resource ``	None	None
yundun-sas:StartVirusScanTask	StartVirusScanTask	update	All Resource ``	None	None
yundun-sas:SaveSuspEventUserSetting	SaveSuspEventUserSetting	create	All Resource ``	None	None
yundun-sas:GetAttackPathWhitelist	GetAttackPathWhitelist	get	*AttackPathWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#AttackPathWhitelist}`	None	None
yundun-sas:ListUnknownThreatDetectMachine	ListUnknownThreatDetectMachine	list	All Resource ``	None	None
yundun-sas:DescribeCustomizeReportList	DescribeCustomizeReportList	list	All Resource ``	None	None
yundun-sas:DeleteVulWhitelist	DeleteVulWhitelist	delete	*VulWhitelist `acs:threatdetection:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}`	None	None
yundun-sas:GetImageEventOperation	GetImageEventOperation	get	*ImageEventOperation `acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/{#ImageEventOperationId}`	None	None
yundun-sas:QueryGuidTaskList	QueryGuidTaskList	list	All Resource ``	None	None
yundun-sas:ModifyContainerDefenseRuleSwitch	ModifyContainerDefenseRuleSwitch	update	*ContainerDefenseRule `acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}`	None	None
yundun-sas:ModifyImageRegistry	ModifyImageRegistry	update	All Resource ``	None	None
yundun-sas:ListFileProtectBindMachine	ListFileProtectBindMachine	list	All Resource ``	None	None
yundun-sas:CreateMaliciousFileWhitelistConfig	CreateMaliciousFileWhitelistConfig	create	MaliciousFileWhitelistConfig `acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/`	None	None
yundun-sas:UninstallUniBackupAgent	UninstallUniBackupAgent	none	All Resource ``	None	None
yundun-sas:DescribeDynamicDict	DescribeDynamicDict	get	All Resource ``	None	None
yundun-sas:DescribeVulMetaCountStatistics	DescribeVulMetaCountStatistics	get	All Resource ``	None	None
yundun-sas:DeleteHoneypotPreset	DeleteHoneypotPreset	delete	*HoneypotPreset `acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/{#HoneypotPresetId}`	None	None
yundun-sas:CreateContainerScanTaskByAppName	CreateContainerScanTaskByAppName	create	All Resource ``	None	None
yundun-sas:OperateAgentClientInstall	OperateAgentClientInstall	none	All Resource ``	None	None
yundun-sas:ModifyStrategy	ModifyStrategy	update	*BaselineStrategy `acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/{#BaselineStrategyId}`	None	None
yundun-sas:ListLogShipperRegions	ListLogShipperRegions	list	All Resource ``	None	None
yundun-sas:GetOpaStrategyTemplateSummary	GetOpaStrategyTemplateSummary	get	All Resource ``	None	None
yundun-sas:DescribeDomainDetail	DescribeDomainDetail	get	All Resource ``	None	None
yundun-sas:ListPrivateRegistryType	ListPrivateRegistryType	get	All Resource ``	None	None
yundun-sas:DescribeVulDetails	DescribeVulDetails	get	All Resource ``	None	None
yundun-sas:DescribePropertyUserItem	DescribePropertyUserItem	get	All Resource ``	None	None
yundun-sas:DescribeSupportRegion	DescribeSupportRegion	get	All Resource ``	None	None
yundun-sas:DescribeDingTalk	DescribeDingTalk	get	All Resource ``	None	None
yundun-sas:DescribeClusterBasicInfo	DescribeClusterBasicInfo	get	All Resource ``	None	None
yundun-sas:AddUninstallClientsByUuids	AddUninstallClientsByUuids	create	All Resource ``	None	None
yundun-sas:DescribeFrontVulPatchList	DescribeFrontVulPatchList	get	All Resource ``	None	None
yundun-sas:DescribeVulWhitelist	DescribeVulWhitelist	get	VulWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/`	None	None
yundun-sas:DescribeVendorList	DescribeVendorList	get	All Resource ``	None	None
yundun-sas:ListCheckResult	ListCheckResult	get	All Resource ``	None	None
yundun-sas:DescribeImageBaselineDetail	DescribeImageBaselineDetail	get	All Resource ``	None	None
yundun-sas:CreateServiceTrail	CreateServiceTrail	create	SasTrail `acs:yundun-sas:{#regionId}:{#accountId}:sastrail/`	None	None
yundun-sas:DescribeImageStatistics	DescribeImageStatistics	get	All Resource ``	None	None
yundun-sas:ResetLogShipper	ResetLogShipper	update	All Resource ``	None	None
yundun-sas:CheckStsTokenAuth	CheckStsTokenAuth	none	All Resource ``	None	None
yundun-sas:DeleteAutoTagRules	DeleteAutoTagRules	delete	All Resource ``	None	None
yundun-sas:DescribeStrategyExecDetail	DescribeStrategyExecDetail	get	All Resource ``	None	None
yundun-sas:DeleteStrategy	DeleteStrategy	delete	*BaselineStrategy `acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/{#BaselineStrategyId}`	None	None
yundun-sas:DescribeVulList	DescribeVulList	get	All Resource ``	acs:ResourceGroupId	None
yundun-sas:ListInterceptionRulePage	ListInterceptionRulePage	get	All Resource ``	None	None
yundun-sas:InstallHybridProxy	InstallHybridProxy	create	All Resource ``	None	None
yundun-sas:DescribePropertyCronDetail	DescribePropertyCronDetail	get	All Resource ``	None	None
yundun-sas:DeleteGroup	DeleteGroup	delete	*Group `acs:yundun-sas:{#regionId}:{#accountId}:group/{#GroupId}`	None	None
yundun-sas:GetRegistryScanDayNum	GetRegistryScanDayNum	get	All Resource ``	None	None
yundun-sas:DescribeClientConfSetup	DescribeClientConfSetup	get	All Resource ``	None	None
yundun-sas:GetDefenceCount	GetDefenceCount	none	All Resource ``	None	None
yundun-sas:DescribeServiceLinkedRoleStatus	DescribeServiceLinkedRoleStatus	get	All Resource ``	None	None
yundun-sas:DescribeAffectedMaliciousFileImages	DescribeAffectedMaliciousFileImages	get	All Resource ``	None	None
yundun-sas:ListCheckItems	ListCheckItems	get	*CustomCheckItem `acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#CheckId}`	None	None
yundun-sas:DescribeAssetsScaProcessNum	DescribeAssetsScaProcessNum	get	All Resource ``	None	None
yundun-sas:DescribeScanTaskStatistics	DescribeScanTaskStatistics	get	All Resource ``	None	None
yundun-sas:DescribeAlarmEventDetail	DescribeAlarmEventDetail	get	All Resource ``	None	None
yundun-sas:DeleteHoneypot	DeleteHoneypot	delete	*HoneyPot `acs:yundun-sas:{#regionId}:{#accountId}:honeypot/{#HoneypotId}`	None	None
yundun-sas:AddFileProtectBindMachine	AddFileProtectBindMachine	none	All Resource ``	None	None
yundun-sas:DescribeGroupedContainerInstances	DescribeGroupedContainerInstances	get	All Resource ``	None	None
yundun-sas:ListOssBucketScanInfo	ListOssBucketScanInfo	get	All Resource ``	None	None
yundun-sas:CreateOrUpdateAutoTagRule	CreateOrUpdateAutoTagRule	create	All Resource ``	None	None
yundun-sas:ListImageRisk	ListImageRisk	list	All Resource ``	None	None
yundun-sas:ListHoneypotProbe	ListHoneypotProbe	get	HoneypotProbe `acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/`	None	None
yundun-sas:DescribeClusterInfoList	DescribeClusterInfoList	get	All Resource ``	None	None
yundun-sas:ModifyInterceptionTarget	ModifyInterceptionTarget	update	All Resource ``	None	None
yundun-sas:ModifyPostPayModuleSwitch	ModifyPostPayModuleSwitch	update	All Resource ``	None	None
yundun-sas:DeleteCustomizedDict	DeleteCustomizedDict	delete	All Resource ``	None	None
yundun-sas:GetCurrentVersionPublish	GetCurrentVersionPublish	get	All Resource ``	None	None
yundun-sas:FixCheckWarnings	FixCheckWarnings	none	All Resource ``	None	None
yundun-sas:DescribeUniBackupDatabase	DescribeUniBackupDatabase	get	All Resource ``	None	None
yundun-sas:UpdatePublishBatch	UpdatePublishBatch	update	All Resource ``	None	None
yundun-sas:DescribeVulCheckTaskStatusDetail	DescribeVulCheckTaskStatusDetail	get	All Resource ``	None	None
yundun-sas:ChangeCheckCustomConfig	ChangeCheckCustomConfig	none	All Resource ``	None	None
yundun-sas:ListUnknownThreatDetectEvent	ListUnknownThreatDetectEvent	list	All Resource ``	None	None
yundun-sas:DeleteOssScanConfig	DeleteOssScanConfig	delete	OssScanConfig `acs:yundun-sas::{#accountId}:ossscanconfig/{#ConfigId}`	None	None
yundun-sas:ChangeUserLang	ChangeUserLang	update	All Resource ``	None	None
yundun-sas:GetHoneyPotUploadPolicyInfo	GetHoneyPotUploadPolicyInfo	get	All Resource ``	None	None
yundun-sas:SetImageSensitiveFileStatus	SetImageSensitiveFileStatus	none	All Resource ``	None	None
yundun-sas:DescribePropertyScaDetail	DescribePropertyScaDetail	get	All Resource ``	None	None
yundun-sas:CreateCheckItem	CreateCheckItem	create	CustomCheckItem `acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/`	None	None
yundun-sas:ModifySasContainerWebDefenseRule	ModifySasContainerWebDefenseRule	update	All Resource ``	None	None
yundun-sas:ModifyAntiBruteForceRule	ModifyAntiBruteForceRule	update	*AntiBruteForceRule `acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}`	None	None
yundun-sas:GetLocalDefaultRegion	GetLocalDefaultRegion	get	All Resource ``	None	None
yundun-sas:SetSensitiveDefineRuleConfig	SetSensitiveDefineRuleConfig	update	All Resource ``	None	None
yundun-sas:BindHybridProxy	BindHybridProxy	none	All Resource ``	None	None
yundun-sas:CreateHoneypotProbeBind	CreateHoneypotProbeBind	create	All Resource ``	None	None
yundun-sas:GetClusterStrategyCount	GetClusterStrategyCount	list	All Resource ``	None	None
yundun-sas:ListAegisForLingjunStatus	ListAegisForLingjunStatus	none	All Resource ``	None	None
yundun-sas:CreateVirusScanOnceTask	CreateVirusScanOnceTask	create	All Resource ``	None	None
yundun-sas:CreateOpaClusterPlugin	CreateOpaClusterPlugin	create	All Resource ``	None	None
yundun-sas:DescribeCommonTargetConfig	DescribeCommonTargetConfig	get	All Resource ``	None	None
yundun-sas:GetInterceptionRuleDetail	GetInterceptionRuleDetail	get	All Resource ``	None	None
yundun-sas:UpdateJenkinsImageRegistryName	UpdateJenkinsImageRegistryName	update	All Resource ``	None	None
yundun-sas:DescribeCheckFixDetails	DescribeCheckFixDetails	get	All Resource ``	None	None
yundun-sas:GetHoneypotProbe	GetHoneypotProbe	get	*HoneypotProbe `acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/{#HoneypotProbeId}`	None	None
yundun-sas:UpdateCommonSwitchConfig	UpdateCommonSwitchConfig	update	All Resource ``	None	None
yundun-sas:GetOssScanConfig	GetOssScanConfig	get	OssScanConfig `acs:yundun-sas::{#accountId}:ossscanconfig/{#ConfigId}`	None	None
yundun-sas:CreateFileDetectUploadUrl	CreateFileDetectUploadUrl	create	All Resource ``	None	None
yundun-sas:GetFileProtectEvent	GetFileProtectEvent	get	All Resource ``	None	None
yundun-sas:GetOpaClusterBaseLineList	GetOpaClusterBaseLineList	get	All Resource ``	None	None
yundun-sas:DescribeContainerInstances	DescribeContainerInstances	get	All Resource ``	None	None
yundun-sas:ListClientUserDefineRuleTypes	ListClientUserDefineRuleTypes	get	All Resource ``	None	None
yundun-sas:DescribeStrictEventName	DescribeStrictEventName	none	All Resource ``	None	None
yundun-sas:ListInstanceRiskLevels	ListInstanceRiskLevels	list	All Resource ``	None	None
yundun-sas:UpdateHoneypotPreset	UpdateHoneypotPreset	update	*HoneypotPreset `acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/{#HoneypotPresetId}`	None	None
yundun-sas:UnBindHybridProxy	UnBindHybridProxy	update	All Resource ``	None	None
yundun-sas:ModifyAccessKeyLeakDeal	ModifyAccessKeyLeakDeal	update	All Resource ``	None	None
yundun-sas:DeleteUnknownThreatDetectStrategy	DeleteUnknownThreatDetectStrategy	delete	All Resource ``	None	None
yundun-sas:CreateFileProtectClientRule	CreateFileProtectClientRule	create	FileProtectClientRule `acs:yundun-sas:{#regionId}:{#accountId}:fileprotectclientrule/`	None	None
yundun-sas:GetAuthVersionStatistic	GetAuthVersionStatistic	get	All Resource ``	None	None
yundun-sas:modifyCloudVendorTrialConfig	ModifyCloudVendorTrialConfig	update	All Resource ``	None	None
yundun-sas:DescribeSuspiciousSecurityEventyStatistics	DescribeSuspiciousSecurityEventyStatistics	get	All Resource ``	None	None
yundun-sas:DeleteBackupPolicy	DeleteBackupPolicy	delete	*BackupPolicy `acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}`	None	None
yundun-sas:CreateUserSetting	CreateUserSetting	create	All Resource ``	None	None
yundun-sas:GetVulWhitelist	GetVulWhitelist	get	*VulWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}`	None	None
yundun-sas:ListUuidsByWebPath	ListUuidsByWebPath	get	All Resource ``	None	None
yundun-sas:ModifyVulTargetConfig	ModifyVulTargetConfig	update	All Resource ``	None	None
yundun-sas:DescribeWhiteListStrategyList	DescribeWhiteListStrategyList	list	All Resource ``	None	None
yundun-sas:ListAssetRefreshTaskConfig	ListAssetRefreshTaskConfig	get	All Resource ``	None	None
yundun-sas:GetOssBucketScanStatistic	GetOssBucketScanStatistic	get	All Resource ``	None	None
yundun-sas:UpdateAttackPathWhitelist	UpdateAttackPathWhitelist	update	*AttackPathWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#AttackPathWhitelistId}`	None	None
yundun-sas:OperateApplication	OperateApplication	update	All Resource ``	None	None
yundun-sas:DeleteSecurityEventMarkMissList	DeleteSecurityEventMarkMissList	delete	All Resource ``	None	None
yundun-sas:SetRegistryScanDayNum	SetRegistryScanDayNum	update	All Resource ``	None	None
yundun-sas:ListOperatedTask	ListOperationTask	list	All Resource ``	None	None
yundun-sas:GetFunctionTrialStatus	GetFunctionTrialStatus	get	All Resource ``	None	None
yundun-sas:ListAgentlessRiskUuid	ListAgentlessRiskUuid	list	All Resource ``	None	None
yundun-sas:ListOssBucket	ListOssBucket	get	All Resource ``	None	None
yundun-sas:UpdatePublishGraySwitch	UpdatePublishGraySwitch	update	All Resource ``	None	None
yundun-sas:CreateHybridProxyCluster	CreateHybridProxyCluster	create	All Resource ``	None	None
yundun-sas:ListOperationProcess	ListOperationProcess	list	*OperationProcess `acs:yundun-sas:{#regionId}:{#accountId}:operationprocess/{#TaskId}`	None	None
yundun-sas:DescribeConcernNecessity	DescribeConcernNecessity	get	All Resource ``	None	None
yundun-sas:ListOpaClusterStrategyNew	ListOpaClusterStrategyNew	list	All Resource ``	None	None
yundun-sas:ModifyOperateVul	ModifyOperateVul	update	All Resource ``	None	None
yundun-sas:DescribeDefaultProxyInstallVersion	DescribeDefaultProxyInstallVersion	get	All Resource ``	None	None
yundun-sas:ListKspmInstances	ListKspmInstances	get	All Resource ``	None	None
yundun-sas:GetInterceptionTargetDetail	GetInterceptionTargetDetail	get	All Resource ``	None	None
yundun-sas:BatchCreateMaliciousNote	BatchCreateMaliciousNote	create	All Resource ``	None	None
yundun-sas:DescribeAppVulScanCycle	DescribeAppVulScanCycle	get	All Resource ``	None	None
yundun-sas:AddSasModuleTrial	AddSasModuleTrial	create	All Resource ``	None	None
yundun-sas:ListRuleTargetAll	ListRuleTargetAll	get	All Resource ``	None	None
yundun-sas:ListClientUserDefineRules	ListClientUserDefineRules	get	All Resource ``	None	None
yundun-sas:DescribeImageRepoCriteria	DescribeImageRepoCriteria	get	All Resource ``	None	None
yundun-sas:ListClusterPluginInfo	ListClusterPluginInfo	list	All Resource ``	None	None
yundun-sas:ListUnfinishedOnceTask	ListUnfinishedOnceTask	list	All Resource ``	None	None
yundun-sas:UpdateCheckItem	UpdateCheckItem	create	*CustomCheckItem `acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#customcheckitemId}`	None	None
yundun-sas:DescribeSuspEventUserSetting	DescribeSuspEventUserSetting	get	All Resource ``	None	None
yundun-sas:IgnoreIdcProbeScanResult	IgnoreIdcProbeScanResult	none	All Resource ``	None	None
yundun-sas:ModifyWebPath	ModifyWebPath	update	All Resource ``	None	None
yundun-sas:CreateCheckPolicy	CreateCheckPolicy	create	CustomCheckStandardPolicy `acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/`	None	None
yundun-sas:ListUnknownThreatDetectStrategy	ListUnknownThreatDetectStrategy	list	All Resource ``	None	None
yundun-sas:UpdateMultiUserInstances	UpdateMultiUserInstances	update	All Resource ``	None	None
yundun-sas:BindAuthToMachine	BindAuthToMachine	update	All Resource ``	None	None
yundun-sas:DescribeScreenScoreThread	DescribeScreenScoreThread	get	All Resource ``	None	None
yundun-sas:DescribeSecurityCheckScheduleConfig	DescribeSecurityCheckScheduleConfig	get	All Resource ``	None	None
yundun-sas:UpdateUnknownThreatDetectStrategy	UpdateUnknownThreatDetectStrategy	update	All Resource ``	None	None
yundun-sas:CreateUnknownThreatDetectStrategy	CreateUnknownThreatDetectStrategy	create	All Resource ``	None	None
yundun-sas:DescribeExposedInstanceCriteria	DescribeExposedInstanceCriteria	get	All Resource ``	None	None
yundun-sas:DescribeWarningMachines	DescribeWarningMachines	get	All Resource ``	None	None
yundun-sas:DescribeWebLockBindList	DescribeWebLockBindList	get	*WebLockBind `acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}`	None	None
yundun-sas:CreateSoarStrategyTask	CreateSoarStrategyTask	create	All Resource ``	None	None
yundun-sas:GetFileDetectApiInvokeInfo	GetFileDetectApiInvokeInfo	get	All Resource ``	None	None
yundun-sas:CheckSecurityEventId	CheckSecurityEventId	none	All Resource ``	None	None
yundun-sas:DescribeImageBaselineCheckSummary	DescribeImageBaselineCheckSummary	get	All Resource ``	None	None
yundun-sas:CreateAttackPathSensitiveAssetConfig	CreateAttackPathSensitiveAssetConfig	create	AttackPathSensitiveAssetConfig `acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/`	None	None
yundun-sas:DescribeSoarPlaybookTaskDetail	DescribeSoarPlaybookTaskDetail	get	All Resource ``	None	None
yundun-sas:SaveImageBaselineStrategy	SaveImageBaselineStrategy	create	All Resource ``	None	None
yundun-sas:DeleteInstallCode	DeleteInstallCode	delete	All Resource ``	None	None
yundun-sas:ModifyContainerPluginRule	ModifyContainerPluginRule	update	All Resource ``	None	None
yundun-sas:DescribeWhiteListAuthorize	DescribeWhiteListAuthorize	get	All Resource ``	None	None
yundun-sas:DescribeAffectedAssets	DescribeAffectedAssets	get	All Resource ``	None	None
yundun-sas:DescribeImageVulList	DescribeImageVulList	get	All Resource ``	None	None
yundun-sas:UpdateImageEventOperation	UpdateImageEventOperation	update	*ImageEventOperation `acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/{#ImageEventOperationId}`	None	None
yundun-sas:GetBackupAutoConfigStatus	GetBackupAutoConfigStatus	get	All Resource ``	None	None
yundun-sas:ListPluginForUuid	ListPluginForUuid	get	All Resource ``	None	None
yundun-sas:DescribeModuleConfig	DescribeModuleConfig	get	All Resource ``	None	None
yundun-sas:DescribeImageRepoDetailList	DescribeImageRepoDetailList	get	All Resource ``	None	None
yundun-sas:ModifyPropertyScheduleConfig	ModifyPropertyScheduleConfig	update	All Resource ``	None	None
yundun-sas:AddTagWithUuid	AddTagWithUuid	create	All Resource ``	None	None
yundun-sas:DescribeImageEventOperationPage	DescribeImageEventOperationPage	list	ImageEventOperation `acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/`	None	None
yundun-sas:DescribeImageEvenOperationCondition	DescribeImageEventOperationCondition	list	All Resource ``	None	None
yundun-sas:DescribeAgentlessSensitiveFileByKey	DescribeAgentlessSensitiveFileByKey	get	All Resource ``	None	None
yundun-sas:QueryJenkinsImageRegistryPersistenceDay	QueryJenkinsImageRegistryPersistenceDay	get	All Resource ``	None	None
yundun-sas:DescribeImageBuildRiskByKey	DescribeImageBuildRiskByKey	list	All Resource ``	None	None
yundun-sas:DeleteImageVulWhitelist	DeleteImageVulWhitelist	delete	All Resource ``	None	None
yundun-sas:DescribeImageCriteria	DescribeImageCriteria	get	All Resource ``	None	None
yundun-sas:GetAttackPathEventStatistics	GetAttackPathEventStatistics	get	All Resource ``	None	None
yundun-sas:DescribeImageInfoList	DescribeImageInfoList	get	All Resource ``	None	None
yundun-sas:QueryGroupedSecurityEventMarkMissList	QueryGroupedSecurityEventMarkMissList	get	All Resource ``	None	None
yundun-sas:ModifyIdcProbe	ModifyIdcProbe	update	All Resource ``	None	None
yundun-sas:ListFileProtectRule	ListFileProtectRule	list	ClientFileProtect `acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/`	None	None
yundun-sas:SubmitTenantCheck	SubmitTenantCheck	create	All Resource ``	None	None
yundun-sas:DescribeVpcHoneyPotList	DescribeVpcHoneyPotList	get	All Resource ``	None	None
yundun-sas:DescribeAssetSummary	DescribeAssetSummary	get	All Resource ``	None	None
yundun-sas:DescribeDomainSecureScore	DescribeDomainSecureScore	get	All Resource ``	None	None
yundun-sas:DescribePropertyScheduleConfig	DescribePropertyScheduleConfig	get	All Resource ``	None	None
yundun-sas:ModifyClientUserDefineRule	ModifyClientUserDefineRule	update	All Resource ``	None	None
yundun-sas:HandleSecurityEvents	HandleSecurityEvents	none	All Resource ``	None	None
yundun-sas:DescribeCheckWarningCount	DescribeCheckWarningCount	get	All Resource ``	None	None
yundun-sas:DescribeDataSource	DescribeDataSource	get	All Resource ``	None	None
yundun-sas:DescribeContainerTags	DescribeContainerTags	get	All Resource ``	None	None
yundun-sas:ModifyClientConfStrategy	ModifyClientConfStrategy	update	All Resource ``	None	None
yundun-sas:GetPublishCron	GetPublishCron	get	All Resource ``	None	None
yundun-sas:ListSystemRuleAggregationTypes	ListSystemRuleAggregationTypes	get	All Resource ``	None	None
yundun-sas:ListCheckRule	ListCheckRule	list	All Resource ``	None	None
yundun-sas:DescribeWebPath	DescribeWebPath	get	All Resource ``	None	None
yundun-sas:ListCompressFileDetectResult	ListCompressFileDetectResult	list	All Resource ``	None	None
yundun-sas:DescribeSoarSubscribedStrategy	DescribeSoarSubscribedStrategy	get	All Resource ``	None	None
yundun-sas:DescribeFieldStatistics	DescribeFieldStatistics	get	All Resource ``	None	None
yundun-sas:OperateWebLockFileEvents	OperateWebLockFileEvents	none	All Resource ``	None	None
yundun-sas:RefreshRegistryToken	RefreshRegistryToken	update	All Resource ``	None	None
yundun-sas:GetSwitchRegionDetail	GetSwitchRegionDetail	get	All Resource ``	None	None
yundun-sas:ListContainerNetworkConnect	FindContainerNetworkConnect	none	All Resource ``	None	None
yundun-sas:ModifyLoginBaseConfig	ModifyLoginBaseConfig	update	All Resource ``	None	None
yundun-sas:CreateOrUpdateDingTalk	CreateOrUpdateDingTalk	create	All Resource ``	None	None
yundun-sas:ModifyWebLockCreateConfig	ModifyWebLockCreateConfig	update	*WebLockConfig `acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}`	None	None
yundun-sas:ListAgentlessTask	ListAgentlessTask	list	All Resource ``	None	None
yundun-sas:UnMarkMonitorAccounts	UnMarkMonitorAccounts	update	All Resource ``	None	None
yundun-sas:EnableCustomBlockRecord	EnableCustomBlockRecord	update	All Resource ``	None	None
yundun-sas:DescribeTraceInfoNode	DescribeTraceInfoNode	get	All Resource ``	None	None
yundun-sas:DescribeGroupedInstances	DescribeGroupedInstances	get	All Resource ``	None	None
yundun-sas:DescribeWhiteListStrategyStatistics	DescribeWhiteListStrategyStatistics	get	All Resource ``	None	None
yundun-sas:ModifyClearLogstoreStorage	ModifyClearLogstoreStorage	update	All Resource ``	None	None
yundun-sas:DescribeLatestScanTask	DescribeLatestScanTask	get	All Resource ``	None	None
yundun-sas:ListImageBuildRiskItem	ListImageBuildRiskItem	list	All Resource ``	None	None
yundun-sas:DingTalkOnlineTest	DingTalkOnlineTest	get	All Resource ``	None	None
yundun-sas:PublicCreateImageScanTask	PublicCreateImageScanTask	none	All Resource ``	None	None
yundun-sas:DescribeAllGroups	DescribeAllGroups	get	Group `acs:yundun-sas:{#regionId}:{#accountId}:group/`	None	None
yundun-sas:OperateImageBaselineWhitelist	OperateImageBaselineWhitelist	none	All Resource ``	None	None
yundun-sas:GetVirusScanLatestTaskStatistic	GetVirusScanLatestTaskStatistic	get	All Resource ``	None	None
yundun-sas:AddContainerDefenseRule	AddContainerDefenseRule	create	ContainerDefenseRule `acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/`	None	None
yundun-sas:UpdateFileProtectRule	UpdateFileProtectRule	update	*ClientFileProtect `acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/{#RuleId}`	None	None
yundun-sas:DescribeGroupedVul	DescribeGroupedVul	get	All Resource ``	acs:ResourceGroupId	None
yundun-sas:ModifyWebLockUpdateConfig	ModifyWebLockUpdateConfig	update	*WebLockConfig `acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}`	None	None
yundun-sas:DescribePropertyTypeScaItem	DescribePropertyTypeScaItem	get	All Resource ``	None	None
yundun-sas:InstallAegisForLingjun	InstallAegisForLingjun	none	All Resource ``	None	None
yundun-sas:DescribeWarningExportInfo	DescribeWarningExportInfo	get	All Resource ``	None	None
yundun-sas:InstallBackupClient	InstallBackupClient	none	All Resource ``	None	None
yundun-sas:GetDataTrend	GetDataTrend	get	All Resource ``	None	None
yundun-sas:UpdateTargetListByBatch	UpdateTargetListByBatch	update	All Resource ``	None	None
yundun-sas:DescribeAssetDetailByUuid	DescribeAssetDetailByUuid	get	All Resource ``	None	None
yundun-sas:AddContainerPluginRule	AddContainerPluginRule	create	All Resource ``	None	None
yundun-sas:ListClusterInterceptionConfig	ListClusterInterceptionConfig	get	All Resource ``	None	None
yundun-sas:DescribeGraph4InvestigationOnline	DescribeGraph4InvestigationOnline	get	All Resource ``	None	None
yundun-sas:DescribeCloudProductFieldStatistics	DescribeCloudProductFieldStatistics	get	All Resource ``	None	None
yundun-sas:ModifyAssetGroup	ModifyAssetGroup	update	All Resource ``	None	None
yundun-sas:DescribeUniBackupPolicies	DescribeUniBackupPolicies	get	All Resource ``	None	None
yundun-sas:DescribeSuspEventDetail	DescribeSuspEventDetail	get	All Resource ``	None	None
yundun-sas:UpdateHoneypotNode	UpdateHoneypotNode	update	*HoneypotNode `acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}`	None	None
yundun-sas:ModifySearchCondition	ModifySearchCondition	update	All Resource ``	None	None
yundun-sas:DescribeImageSecurityScanCount	DescribeImageSecurityScanCount	get	All Resource ``	None	None
yundun-sas:ListUserVpc	ListUserVpc	list	All Resource ``	None	None
yundun-sas:DescribeExposedInstanceDetail	DescribeExposedInstanceDetail	get	All Resource ``	None	None
yundun-sas:UpdatePublishAutoUpgrade	UpdatePublishAutoUpgrade	update	All Resource ``	None	None
yundun-sas:DescribeContainerCriteria	DescribeContainerCriteria	get	All Resource ``	None	None
yundun-sas:DescribeMachineCanReboot	DescribeMachineCanReboot	get	All Resource ``	None	None
yundun-sas:ModifyCloudVendorAccountAK	ModifyCloudVendorAccountAK	update	All Resource ``	None	None
yundun-sas:DescribeGroupedMaliciousFiles	DescribeGroupedMaliciousFiles	get	All Resource ``	None	None
yundun-sas:DeleteK8sAccessInfo	DeleteK8sAccessInfo	delete	All Resource ``	None	None
yundun-sas:DescribeWebLockExclusiveFileType	DescribeWebLockExclusiveFileType	get	All Resource ``	None	None
yundun-sas:DescribeCustomizedDict	DescribeCustomizedDict	get	All Resource ``	None	None
yundun-sas:DeleteAntiBruteForceRule	DeleteAntiBruteForceRule	delete	*AntiBruteForceRule `acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}`	None	None
yundun-sas:DescribeOnceTaskLeafRecordPage	DescribeOnceTaskLeafRecordPage	get	All Resource ``	None	None
yundun-sas:ModifyHybridProxyCluster	ModifyHybridProxyCluster	update	All Resource ``	None	None
yundun-sas:DescribeStrategyDetail	DescribeStrategyDetail	get	*BaselineStrategy `acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/{#BaselineStrategyId}`	None	None
yundun-sas:ListCloudAssetInstances	ListCloudAssetInstances	get	All Resource ``	None	None
yundun-sas:GetDockerhubImageRiskRankInfo	GetDockerhubImageRiskRankInfo	get	All Resource ``	None	None
yundun-sas:PublicPreCheckImageScanTask	PublicPreCheckImageScanTask	none	All Resource ``	None	None
yundun-sas:DescribeImageRiskLevelStatistic	DescribeImageRiskLevelStatistic	get	All Resource ``	None	None
yundun-sas:DescribeAllEntity	DescribeAllEntity	get	All Resource ``	None	None
yundun-sas:GetAuthSummary	GetAuthSummary	get	All Resource ``	None	None
yundun-sas:DeleteVpcHoneyPot	DeleteVpcHoneyPot	delete	All Resource ``	None	None
yundun-sas:DescribeDomainSecureSuggests	DescribeDomainSecureSuggests	get	All Resource ``	None	None
yundun-sas:DescribeSyncAssetTaskLogDetail	DescribeSyncAssetTaskLogDetail	get	All Resource ``	None	None
yundun-sas:ListAegisContainerPluginRule	ListAegisContainerPluginRule	list	All Resource ``	None	None
yundun-sas:GetCheckSummary	GetCheckSummary	get	All Resource ``	None	None
yundun-sas:ModifyAttestor	ModifyAttestor	update	All Resource ``	None	None
yundun-sas:ListCloudAssetSchemas	ListCloudAssetSchemas	list	All Resource ``	None	None
yundun-sas:DescribeWebLockProcessList	DescribeWebLockProcessList	get	WebLockBind `acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/`	None	None
yundun-sas:GetCommonSwitchConfig	GetCommonSwitchConfig	get	All Resource ``	None	None
yundun-sas:DescribeTaskErrorLog	DescribeTaskErrorLog	get	All Resource ``	None	None
yundun-sas:CreateFileProtectRule	CreateFileProtectRule	create	ClientFileProtect `acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/`	None	None
yundun-sas:ModifyAssetImportant	ModifyAssetImportant	update	All Resource ``	None	None
yundun-sas:ModifyCycleTask	ModifyCycleTask	update	*CycleTask `acs:yundun-sas:{#regionId}:{#accountId}:cycletask/{#ConfigId}`	None	None
yundun-sas:DescribeImageScanAuthCount	DescribeImageScanAuthCount	get	All Resource ``	None	None
yundun-sas:ListFileProtectClientRule	ListFileProtectClientRule	list	FileProtectClientRule `acs:yundun-sas:{#regionId}:{#accountId}:fileprotectclientrule/`	None	None
yundun-sas:ListInstanceRiskNum	ListInstanceRiskNum	list	All Resource ``	None	None
yundun-sas:GetImageScanNumInPeriod	GetImageScanNumInPeriod	get	All Resource ``	None	None
yundun-sas:ListFileProtectPluginStatus	ListFileProtectPluginStatus	list	All Resource ``	None	None
yundun-sas:DeleteAttackPathSensitiveAssetConfig	DeleteAttackPathSensitiveAssetConfig	delete	*AttackPathSensitiveAssetConfig `acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/{#attackpathsensitiveassetconfigId}`	None	None
yundun-sas:ModifyBinarySecurityPolicy	ModifyBinarySecurityPolicy	update	All Resource ``	None	None
yundun-sas:DescribeSnapshots	DescribeSnapshots	get	All Resource ``	None	None
yundun-sas:DescribeLogMeta	DescribeLogMeta	get	All Resource ``	None	None
yundun-sas:ModifyDingTalkStatus	ModifyDingTalkStatus	update	All Resource ``	None	None
yundun-sas:DescribeInstallCodes	DescribeInstallCodes	get	All Resource ``	None	None
yundun-sas:OperateVirusEvents	OperateVirusEvents	update	All Resource ``	None	None
yundun-sas:InstallUniBackupAgent	InstallUniBackupAgent	none	All Resource ``	None	None
yundun-sas:ChangeCheckConfig	ChangeCheckConfig	update	All Resource ``	None	None
yundun-sas:GetModuleTrialAuthInfo	GetModuleTrialAuthInfo	get	All Resource ``	None	None
yundun-sas:ListAssetSelectionSelectedTarget	ListAssetSelectionSelectedTarget	list	All Resource ``	None	None
yundun-sas:ModifyLoginSwitchConfig	ModifyLoginSwitchConfig	update	All Resource ``	None	None
yundun-sas:DescribeWebLockFileEvents	DescribeWebLockFileEvents	get	WebLockBind `acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/`	None	None
yundun-sas:DescribeAntiBruteForceRules	DescribeAntiBruteForceRules	get	*AntiBruteForceRule `acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}`	None	None
yundun-sas:RefreshContainerAssets	RefreshContainerAssets	none	All Resource ``	None	None
yundun-sas:DescribeDomainSecureAlarmList	DescribeDomainSecureAlarmList	list	All Resource ``	None	None
yundun-sas:GetSecurityScoreRule	GetSecurityScoreRule	get	All Resource ``	None	None
yundun-sas:UnbindAegis	UnbindAegis	none	All Resource ``	None	None
yundun-sas:CreateSasTrial	CreateSasTrial	create	All Resource ``	None	None
yundun-sas:CreateRdDefaultSyncList	CreateRdDefaultSyncList	update	All Resource ``	None	None
yundun-sas:DescribePropertySoftwareItem	DescribePropertySoftwareItem	get	All Resource ``	None	None
yundun-sas:DescribeFixUsedCount	DescribeFixUsedCount	get	All Resource ``	None	None
yundun-sas:GetSupportedModules	GetSupportedModules	list	All Resource ``	None	None
yundun-sas:DescribeHoneyPotAuth	DescribeHoneyPotAuth	get	HoneyPot `acs:yundun-sas:{#regionId}:{#accountId}:honeypot/`	None	None
yundun-sas:SetImageBuildRiskStatus	SetImageBuildRiskStatus	none	All Resource ``	None	None
yundun-sas:DescribeRiskListCheckResult	DescribeRiskListCheckResult	get	All Resource ``	None	None
yundun-sas:DescribeExposedStatistics	DescribeExposedStatistics	get	All Resource ``	None	None
yundun-sas:DescribeImageListByBuildRisk	DescribeImageListByBuildRisk	list	All Resource ``	None	None
yundun-sas:DescribeInstanceRebootStatus	DescribeInstanceRebootStatus	get	All Resource ``	None	None
yundun-sas:SaveCustomizeReportConfig	SaveCustomizeReportConfig	create	All Resource ``	None	None
yundun-sas:ListHoneypotAlarmEvents	ListHoneypotAlarmEvents	get	All Resource ``	None	None
yundun-sas:DescribeImageLatestScanTask	DescribeImageLatestScanTask	get	All Resource ``	None	None
yundun-sas:GetLogMeta	GetLogMeta	get	*LogMeta `acs:yundun-sas:{#regionId}:{#accountId}:logmeta/{#LogMetaName}`	None	None
yundun-sas:DescribeRestorePlans	DescribeRestorePlans	get	All Resource ``	None	None
yundun-sas:DescribeSimilarSecurityEvents	DescribeSimilarSecurityEvents	get	All Resource ``	None	None
yundun-sas:AddClientUserDefineRule	AddClientUserDefineRule	create	All Resource ``	None	None
yundun-sas:GetCheckStructure	GetCheckStructure	list	All Resource ``	None	None
yundun-sas:DescribeVulDefendCountStatistics	DescribeVulDefendCountStatistics	get	All Resource ``	None	None
yundun-sas:RemoveCheckInstanceResultWhiteList	RemoveCheckInstanceResultWhiteList	delete	All Resource ``	None	None
yundun-sas:ModifyGroupProperty	ModifyGroupProperty	update	All Resource ``	None	None
yundun-sas:UpdateJenkinsImageRegistryPersistenceDay	UpdateJenkinsImageRegistryPersistenceDay	update	All Resource ``	None	None
yundun-sas:DescribeImageBaselineStrategy	DescribeImageBaselineStrategy	get	All Resource ``	None	None
yundun-sas:DeleteLoginBaseConfig	DeleteLoginBaseConfig	delete	All Resource ``	None	None
yundun-sas:GetObjectScanEvent	GetObjectScanEvent	get	All Resource ``	None	None
yundun-sas:DescribeVersionConfig	DescribeVersionConfig	get	All Resource ``	None	None
yundun-sas:GetOpaStrategyDetailNew	GetOpaStrategyDetailNew	get	All Resource ``	None	None
yundun-sas:ListHoneypot	ListHoneypot	get	HoneyPot `acs:yundun-sas:{#regionId}:{#accountId}:honeypot/`	None	None
yundun-sas:ListFileProtectClientRuleFileType	ListFileProtectClientRuleFileType	list	All Resource ``	None	None
yundun-sas:DeleteCheckPolicy	DeleteCheckPolicy	delete	*CustomCheckStandardPolicy `acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/{#customcheckstandardpolicyId}`	None	None
yundun-sas:OperateSuspiciousTargetConfig	OperateSuspiciousTargetConfig	none	All Resource ``	None	None
yundun-sas:DescribePropertySoftwareDetail	DescribePropertySoftwareDetail	get	All Resource ``	None	None
yundun-sas:BatchUpdateMaliciousFileWhitelistConfig	BatchUpdateMaliciousFileWhitelistConfig	update	All Resource ``	None	None
yundun-sas:GetClusterSuspEventStatistics	GetClusterSuspEventStatistics	get	All Resource ``	None	None
yundun-sas:AddCloudVendorAccountAK	AddCloudVendorAccountAK	create	All Resource ``	None	None
yundun-sas:EnableBruteForceRecord	EnableBruteForceRecord	update	All Resource ``	None	None
yundun-sas:DescribeUserSetting	DescribeUserSetting	get	All Resource ``	None	None
yundun-sas:DescribeCountScannedImage	DescribeCountScannedImage	get	All Resource ``	None	None
yundun-sas:ListVirusScanTask	ListVirusScanTask	get	All Resource ``	None	None
yundun-sas:AddBaselineCheckWhiteRecord	AddBaselineCheckWhiteRecord	create	All Resource ``	None	None
yundun-sas:UpdateFileProtectEventStatus	UpdateFileProtectEventStatus	update	All Resource ``	None	None
yundun-sas:ModifyInterceptionRule	ModifyInterceptionRule	update	All Resource ``	None	None
yundun-sas:ResetHoneypot	ResetHoneypot	update	All Resource ``	None	None
yundun-sas:DeleteBackupPolicyMachine	DeleteBackupPolicyMachine	delete	All Resource ``	None	None
yundun-sas:DescribeImageBaselineItemList	DescribeImageBaselineItemList	get	All Resource ``	None	None
yundun-sas:DescribeDomainList	DescribeDomainList	get	All Resource ``	None	None
yundun-sas:ListCriteriaStrategy	ListCriteriaStrategy	list	All Resource ``	None	None
yundun-sas:DescribeClusterVulStatistics	DescribeClusterVulStatistics	get	All Resource ``	None	None
yundun-sas:OperateCheck	SubmitOperationTask	create	All Resource ``	None	None
yundun-sas:OpenBackupAutoConfig	OpenBackupAutoConfig	create	All Resource ``	None	None
yundun-sas:DescribeExcludeSystemPath	DescribeExcludeSystemPath	get	All Resource ``	None	None
yundun-sas:DeleteSoarStrategyTask	DeleteSoarStrategyTask	delete	All Resource ``	None	None
yundun-sas:CreateMaliciousNote	CreateMaliciousNote	get	All Resource ``	None	None
yundun-sas:UploadedHoneyPotFile	UploadedHoneyPotFile	update	All Resource ``	None	None
yundun-sas:DescribeVulExportInfo	DescribeVulExportInfo	get	All Resource ``	None	None
yundun-sas:UpdateFileProtectClientRuleStatus	UpdateFileProtectClientRuleStatus	update	All Resource ``	None	None
yundun-sas:RebootMachine	RebootMachine	none	All Resource ``	None	None
yundun-sas:GetAssetDetailByUuid	GetAssetDetailByUuid	get	All Resource ``	None	None
yundun-sas:GetServiceTrail	GetServiceTrail	get	*SasTrail `acs:yundun-sas:{#regionId}:{#accountId}:sastrail`	None	None
yundun-sas:GetBackupStorageCount	GetBackupStorageCount	get	All Resource ``	None	None
yundun-sas:DescribeGroupedTags	DescribeGroupedTags	get	All Resource ``	None	None
yundun-sas:DescribeBinarySecurityPolicies	DescribeBinarySecurityPolicies	get	All Resource ``	None	None
yundun-sas:GetFileUploadLimit	GetFileUploadLimit	get	*FileUploadLimit `acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit`	None	None
yundun-sas:DeleteMonitorAccount	DeleteMonitorAccount	delete	All Resource ``	None	None
yundun-sas:DescribePropertyPortItem	DescribePropertyPortItem	get	All Resource ``	None	None
yundun-sas:ListAgentlessRelateMalicious	ListAgentlessRelateMalicious	list	All Resource ``	None	None
yundun-sas:PublicSyncAndCreateImageScanTask	PublicSyncAndCreateImageScanTask	none	All Resource ``	None	None
yundun-sas:ListUninstallAegisMachines	ListUninstallAegisMachines	get	All Resource ``	None	None
yundun-sas:HandleObjectScanEvent	HandleObjectScanEvent	update	All Resource ``	None	None
yundun-sas:BatchDeleteMaliciousFileWhitelistConfig	BatchDeleteMaliciousFileWhitelistConfig	delete	All Resource ``	None	None
yundun-sas:DescribeImageVulWhiteList	DescribeImageVulWhiteList	list	All Resource ``	None	None
yundun-sas:CreateCustomBlockRecord	CreateCustomBlockRecord	create	All Resource ``	None	None
yundun-sas:RetryAgentlessTask	RetryAgentlessTask	none	All Resource ``	None	None
yundun-sas:DescribeSearchCondition	DescribeSearchCondition	get	All Resource ``	None	None
yundun-sas:AddVpcHoneyPot	AddVpcHoneyPot	create	All Resource ``	None	None
yundun-sas:AddImageEventOperation	AddImageEventOperation	create	ImageEventOperation `acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/`	None	None
yundun-sas:DescribeAgentInstallStatus	DescribeAgentInstallStatus	get	All Resource ``	None	None
yundun-sas:DescribeLoginSwitchConfigs	DescribeLoginSwitchConfigs	get	All Resource ``	None	None
yundun-sas:ModifyServerlessAuthToMachine	ModifyServerlessAuthToMachine	update	All Resource ``	None	None
yundun-sas:ListCheckItemWarningSummary	ListCheckItemWarningSummary	list	All Resource ``	None	None
yundun-sas:CreateCustomizedDict	CreateCustomizedDict	create	All Resource ``	None	None
yundun-sas:DescribeImageSensitiveFileList	DescribeImageSensitiveFileList	get	All Resource ``	None	None
yundun-sas:UpdateHybridProxy	UpdateHybridProxy	update	All Resource ``	None	None
yundun-sas:VerifyCheckInstanceResult	VerifyCheckInstanceResult	update	All Resource ``	None	None
yundun-sas:UpdateImageVulWhitelistTarget	UpdateImageVulWhitelistTarget	update	All Resource ``	None	None
yundun-sas:DescribeSasPmAgentList	DescribeSasPmAgentList	get	All Resource ``	None	None
yundun-sas:DescribePropertyCronItem	DescribePropertyCronItem	get	All Resource ``	None	None
yundun-sas:ModifyLogMetaStatus	ModifyLogMetaStatus	update	All Resource ``	None	None
yundun-sas:GetStrategyTemplateDetail	GetStrategyTemplateDetail	get	All Resource ``	None	None
yundun-sas:GetTenantCheckAvailable	GetTenantCheckAvailable	get	All Resource ``	None	None
yundun-sas:DescribeChartList	DescribeChartList	list	All Resource ``	None	None
yundun-sas:ListAssetSelectionTarget	ListAssetSelectionTarget	list	AssetSelectionTargetAttachment `acs:yundun-sas:{#regionId}:{#accountId}:assetselectiontargetattachment/`	None	None
yundun-sas:ModifyWebLockProcessStatus	ModifyWebLockProcessStatus	update	*WebLockBind `acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}`	None	None
yundun-sas:DescribeContainerServiceK8sClusterNamespaces	DescribeContainerServiceK8sClusterNamespaces	get	All Resource ``	None	None
yundun-sas:ModifyOpenLogShipper	ModifyOpenLogShipper	update	*LogShipper `acs:yundun-sas:{#regionId}:{#accountId}:logshipper`	None	None
yundun-sas:DescribeAttestors	DescribeAttestors	get	All Resource ``	None	None
yundun-sas:DescribeImageInstances	DescribeImageInstances	get	All Resource ``	None	None
yundun-sas:RetryInstallProbe	RetryInstallProbe	none	All Resource ``	None	None
yundun-sas:DescribeLoginBaseConfigs	DescribeLoginBaseConfigs	get	All Resource ``	None	None
yundun-sas:DescribeCanAccessVpcSale	DescribeCanAccessVpcSale	get	All Resource ``	None	None
yundun-sas:OperateCommonTargetConfig	OperateCommonTargetConfig	update	All Resource ``	None	None
yundun-sas:SetBuildRiskDefineRuleConfig	SetBuildRiskDefineRuleConfig	update	All Resource ``	None	None
yundun-sas:ListCheckTypes	ListCheckTypes	get	All Resource ``	None	None
yundun-sas:ModifySoarStrategySubscribe	ModifySoarStrategySubscribe	update	All Resource ``	None	None
yundun-sas:DescribeBackupPolicies	DescribeBackupPolicies	list	All Resource ``	None	None
yundun-sas:DescribeInstallCode	DescribeInstallCode	get	All Resource ``	None	None
yundun-sas:DescribeOfflineMachines	DescribeOfflineMachines	get	All Resource ``	None	None
yundun-sas:DeleteVulAutoRepairConfig	DeleteVulAutoRepairConfig	delete	All Resource ``	None	None
yundun-sas:DescribeRiskType	DescribeRiskType	get	All Resource ``	None	None
yundun-sas:DescribeDomainCount	DescribeDomainCount	get	All Resource ``	None	None
yundun-sas:CreateOssScanConfig	CreateOssScanConfig	create	OssScanConfig `acs:yundun-sas::{#accountId}:ossscanconfig/*`	None	None
yundun-sas:OperationSuspEvents	OperationSuspEvents	none	All Resource ``	None	None
yundun-sas:DescribeContainerServiceK8sClusters	DescribeContainerServiceK8sClusters	get	All Resource ``	None	None
yundun-sas:DescribeCanTrySas	DescribeCanTrySas	get	All Resource ``	None	None
yundun-sas:AddUnknownThreatDetectProcess	AddUnknownThreatDetectProcess	create	All Resource ``	None	None
yundun-sas:ModifyInterceptionRuleSwitch	ModifyInterceptionRuleSwitch	update	All Resource ``	None	None
yundun-sas:GetAlarmMachineCount	GetAlarmMachineCount	get	All Resource ``	None	None
yundun-sas:GetDockerhubImageRiskStatistic	GetDockerhubImageRiskStatistic	get	All Resource ``	None	None
yundun-sas:DescribeExposedStatisticsDetail	DescribeExposedStatisticsDetail	list	All Resource ``	None	None
yundun-sas:DescribeImageBaselineCheckResult	DescribeImageBaselineCheckResult	get	All Resource ``	None	None
yundun-sas:GetAegisContainerPluginRuleCriteria	GetAegisContainerPluginRuleCriteria	get	All Resource ``	None	None
yundun-sas:ListFileProtectEvent	ListFileProtectEvent	list	All Resource ``	None	None
yundun-sas:DeleteUnknownThreatDetectProcess	DeleteUnknownThreatDetectProcess	delete	All Resource ``	None	None
yundun-sas:SubmitCheck	SubmitCheck	none	All Resource ``	None	None
yundun-sas:DeleteBackupSnapshot	DeleteBackupSnapshot	delete	All Resource ``	None	None
yundun-sas:DescribeCustomBlockRecords	DescribeCustomBlockRecords	get	All Resource ``	None	None
yundun-sas:GetVulStatistics	GetVulStatistics	get	All Resource ``	None	None
yundun-sas:DescribeImageListWithBaselineName	DescribeImageListWithBaselineName	get	All Resource ``	None	None
yundun-sas:GetFileProtectEventCount	GetFileProtectEventCount	get	All Resource ``	None	None
yundun-sas:DescribeQuaraFileDownloadInfo	DescribeQuaraFileDownloadInfo	get	All Resource ``	None	None
yundun-sas:ListHoneypotProbeUuid	ListHoneypotProbeUuid	list	All Resource ``	None	None
yundun-sas:ListRdDefaultSyncList	ListRdDefaultSyncList	list	All Resource ``	None	None
yundun-sas:ModifyVulWhitelistTarget	ModifyVulWhitelistTarget	update	*VulWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}`	None	None
yundun-sas:PauseClient	PauseClient	update	All Resource ``	None	None
yundun-sas:DescribeAllRegionsStatistics	DescribeAllRegionsStatistics	get	All Resource ``	None	None
yundun-sas:DescribeClusterScannerList	DescribeClusterScannerList	get	All Resource ``	None	None
yundun-sas:GetInstallCodeForUuid	GetInstallCodeForUuid	get	All Resource ``	None	None
yundun-sas:DescribePropertyPortDetail	DescribePropertyPortDetail	get	All Resource ``	None	None
yundun-sas:UpdateWhiteListStrategyStatus	UpdateWhiteListStrategyStatus	update	All Resource ``	None	None
yundun-sas:InstallCloudMonitor	InstallCloudMonitor	none	All Resource ``	None	None
yundun-sas:DescribeSoarStrategies	DescribeSoarStrategies	get	All Resource ``	None	None
yundun-sas:CreateAttackPathWhitelist	CreateAttackPathWhitelist	create	AttackPathWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/`	None	None
yundun-sas:GetCheckRiskStatistics	GetCheckRiskStatistics	get	All Resource ``	None	None
yundun-sas:DeleteCheckItem	DeleteCheckItem	delete	*CustomCheckItem `acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#customcheckitemId}`	None	None
yundun-sas:UninstallBackupClient	UninstallBackupClient	none	All Resource ``	None	None
yundun-sas:FinishGuidTask	FinishGuidTask	none	All Resource ``	None	None
yundun-sas:GetServerlessAppAuthDetail	GetServerlessAppAuthDetail	get	All Resource ``	None	None
yundun-sas:DescribeNeedAsyncQuery	DescribeNeedAsyncQuery	get	All Resource ``	None	None
yundun-sas:ModifyRefreshProcessInfo	ModifyRefreshProcessInfo	get	All Resource ``	None	None
yundun-sas:CreateHoneypotNode	CreateHoneypotNode	create	HoneypotNode `acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/`	None	None
yundun-sas:ModifyAssetCleanConfig	ModifyAssetCleanConfig	update	All Resource ``	None	None
yundun-sas:HandleSimilarSecurityEvents	HandleSimilarSecurityEvents	none	All Resource ``	None	None
yundun-sas:RemoveCheckResultWhiteList	RemoveCheckResultWhiteList	delete	All Resource ``	None	None
yundun-sas:UpdateHoneypotProbeBind	UpdateHoneypotProbeBind	update	All Resource ``	None	None
yundun-sas:DescribeDefaultKeyInfo	DescribeDefaultKeyInfo	get	All Resource ``	None	None
yundun-sas:UpdateMaliciousFileWhitelistConfig	UpdateMaliciousFileWhitelistConfig	update	*MaliciousFileWhitelistConfig `acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/{#ConfigId}`	None	None
yundun-sas:GetHoneypotEventTrend	GetHoneypotEventTrend	get	All Resource ``	None	None
yundun-sas:ListHoneypotNode	ListHoneypotNode	get	*HoneypotNode `acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}`	None	None
yundun-sas:CreateSuspEventNote	CreateSuspEventNote	create	All Resource ``	None	None
yundun-sas:ModifyImageFixCycleConfig	ModifyImageFixCycleConfig	update	All Resource ``	None	None
yundun-sas:DescribeCloudVendorProductTemplateConfig	DescribeCloudVendorProductTemplateConfig	get	All Resource ``	None	None
yundun-sas:DeleteContainerDefenseRule	DeleteContainerDefenseRule	delete	*ContainerDefenseRule `acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}`	None	None
yundun-sas:UpdateWhiteList	UpdateWhiteList	update	All Resource ``	None	None
yundun-sas:DeleteCustomizeReport	DeleteCustomizeReport	delete	All Resource ``	None	None
yundun-sas:ModifyVulTarget	ModifyVulTarget	update	All Resource ``	None	None
yundun-sas:DescribeBruteForceSummary	DescribeBruteForceSummary	get	All Resource ``	None	None
yundun-sas:ExportVul	ExportVul	none	All Resource ``	None	None
yundun-sas:DescribeClusterNetwork	DescribeClusterNetwork	get	All Resource ``	None	None
yundun-sas:ListAssetCleanConfig	ListAssetCleanConfig	list	All Resource ``	None	None
yundun-sas:DescribeDomainSecureVulList	DescribeDomainSecureVulList	get	All Resource ``	None	None
yundun-sas:ListCheckItemWarningMachine	ListCheckItemWarningMachine	list	All Resource ``	None	None
yundun-sas:CreateAttestor	CreateAttestor	create	All Resource ``	None	None
yundun-sas:DescribeLogstoreStorage	DescribeLogstoreStorage	get	All Resource ``	None	None
yundun-sas:OpenSensitiveFileScan	OpenSensitiveFileScan	none	All Resource ``	None	None
yundun-sas:CreateRestoreJob	CreateRestoreJob	create	All Resource ``	None	None
yundun-sas:DescribePropertyProcDetail	DescribePropertyProcDetail	get	All Resource ``	None	None
yundun-sas:DescribeImageFixCycleConfig	DescribeImageFixCycleConfig	get	All Resource ``	None	None
yundun-sas:DescribeRestoreJobs	DescribeRestoreJobs	get	All Resource ``	None	None
yundun-sas:CreateAssetSelectionConfig	CreateAssetSelectionConfig	create	AssetSelectionConfig `acs:yundun-sas:{#regionId}:{#accountId}:assetselectionconfig/`	None	None
yundun-sas:OperateUnknownThreatDetectMachine	OperateUnknownThreatDetectMachine	update	All Resource ``	None	None
yundun-sas:ListDockerhubImage	ListDockerhubImage	list	All Resource ``	None	None
yundun-sas:OperateBucketScanTask	OperateBucketScanTask	update	All Resource ``	None	None
yundun-sas:ModifyCreateVulWhitelist	ModifyCreateVulWhitelist	update	VulWhitelist `acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/`	None	None
yundun-sas:describeCloudVendorTrialConfig	DescribeCloudVendorTrialConfig	get	All Resource ``	None	None
yundun-sas:QueryPreCheckDatabase	QueryPreCheckDatabase	get	All Resource ``	None	None
yundun-sas:ListAvailableAttackPath	ListAvailableAttackPath	get	All Resource ``	None	None
yundun-sas:GetFileProtectClientRule	GetFileProtectClientRule	get	All Resource ``	None	None
yundun-sas:StartBaselineSecurityCheck	StartBaselineSecurityCheck	update	All Resource ``	None	None
yundun-sas:DisableCustomBlockRecord	DisableCustomBlockRecord	update	All Resource ``	None	None
yundun-sas:DescribeImageBuildRiskList	DescribeImageBuildRiskList	list	All Resource ``	None	None
yundun-sas:GetClientUserDefineRule	GetClientUserDefineRule	get	All Resource ``	None	None
yundun-sas:IgnoreHcCheckWarnings	IgnoreHcCheckWarnings	none	All Resource ``	None	None
yundun-sas:GetClusterScannerYaml	GetClusterScannerYaml	get	*ClusterScannerYaml `acs:yundun-sas:{#regionId}:{#accountId}:clusterscanneryaml/${#ClusterId}`	None	None
yundun-sas:ListPrivateRegistryList	ListPrivateRegistryList	get	All Resource ``	None	None
yundun-sas:CheckTrialFixCount	CheckTrialFixCount	get	All Resource ``	None	None
yundun-sas:GetAgentlessTaskUsedSizeEstimate	GetAgentlessTaskUsedSizeEstimate	get	All Resource ``	None	None
yundun-sas:ModifyUniBackupPolicy	ModifyUniBackupPolicy	update	All Resource ``	None	None
yundun-sas:DeleteAttestor	DeleteAttestor	delete	All Resource ``	None	None
yundun-sas:SaveWhiteListStrategyAssets	SaveWhiteListStrategyAssets	create	All Resource ``	None	None
yundun-sas:DeleteBinarySecurityPolicy	DeleteBinarySecurityPolicy	delete	All Resource ``	None	None
yundun-sas:GetInstanceAuthRange	GetInstanceAuthRange	get	All Resource ``	None	None
yundun-sas:DeleteInterceptionRule	DeleteInterceptionRule	delete	All Resource ``	None	None
yundun-sas:ListFileProtectClientEvent	ListFileProtectClientEvent	list	All Resource ``	None	None
yundun-sas:DeleteTagWithUuid	DeleteTagWithUuid	delete	All Resource ``	None	None
yundun-sas:ListVirusScanMachine	ListVirusScanMachine	get	All Resource ``	None	None
yundun-sas:GetAttackEventDetail	GetAttackEventDetail	get	All Resource ``	None	None
yundun-sas:UpdateFileProtectClientRule	UpdateFileProtectClientRule	update	All Resource ``	None	None
yundun-sas:GrantSwitchAgreement	GrantSwitchAgreement	none	All Resource ``	None	None
yundun-sas:ListUnknownThreatDetectProcess	ListUnknownThreatDetectProcess	list	All Resource ``	None	None
yundun-sas:GetSensitiveDefineRuleConfig	GetSensitiveDefineRuleConfig	get	All Resource ``	None	None
yundun-sas:AddSasContainerWebDefenseRule	AddSasContainerWebDefenseRule	create	All Resource ``	None	None
yundun-sas:DescribeWebLockFileTypeSummary	DescribeWebLockFileTypeSummary	get	All Resource ``	None	None
yundun-sas:DeleteImageEventOperation	DeleteImageEventOperation	delete	*ImageEventOperation `acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/{#ImageEventOperationId}`	None	None

Resource

The following table lists the resources defined by Security Center. Specify them in the Resource element of RAM policy statements to grant permissions for specific operations. They are uniquely identified by ARNs. Format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: The initialism of Alibaba Cloud service, which indicates the public cloud of Alibaba Cloud.
{#ramcode}: The code used in RAM to indicate an Alibaba Cloud service.
{#regionId}: The region ID. If the resource covers all regions, set it to an asterisk (*).
{#accountId}: The ID of the Alibaba Cloud account. If the resource covers all Alibaba Cloud accounts, set it to an asterisk (*).
{#resourceType}: The service-defined resource identifier. It supports a hierarchical structure, which is similar to a file path. If the statement covers global resources, set it to an asterisk (*).

Resource type	ARN
Asset	acs:yundun-sas:{#regionId}:{#accountId}:asset/*
CustomCheckStandardPolicy	acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/* acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/{#customcheckstandardpolicyId}
WebLockConfig	acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}
WebLockBind	acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid} acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/*
HoneypotProbe	acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/* acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/{#HoneypotProbeId}
HoneypotNode	acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId} acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/*
HoneypotPreset	acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/{#HoneypotPresetId} acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/*
BackupPolicy	acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/* acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}
AttackPathSensitiveAssetConfig	acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/{#AttackPathSensitiveAssetConfigId} acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/*
FileProtectClientEvent	acs:yundun-sas:{#regionId}:{#accountId}:fileprotectclientevent/*
CycleTask	acs:yundun-sas:{#regionId}:{#accountId}:cycletask/{#ConfigId} acs:yundun-sas:{#regionId}:{#accountId}:cycletask/*
AttackPathWhitelist	acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#attackpathwhitelistId} acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/* acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#AttackPathWhitelist}
FileProtectClientRule	acs:yundun-sas:{#regionId}:{#accountId}:fileprotectclientrule/*
AntiBruteForceRule	acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/* acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}
MaliciousFileWhitelistConfig	acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/* acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/{#ConfigId}
SasTrail	acs:yundun-sas:{#regionId}:{#accountId}:sastrail/* acs:yundun-sas:{#regionId}:{#accountId}:sastrail
ClientFileProtect	acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/{#RuleId} acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/*
LogShipper	acs:yundun-sas:{#regionId}:{#accountId}:logshipper/* acs:yundun-sas:{#regionId}:{#accountId}:logshipper
OssScanConfig	acs:yundun-sas::{#accountId}:ossscanconfig/ acs:yundun-sas:*:{#accountId}:ossscanconfig/{#ConfigId}
BaselineStrategy	acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/* acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/{#BaselineStrategyId}
ContainerDefenseRule	acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/* acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}
FileUploadLimit	acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit/* acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit
AssetBind	acs:yundun-sas:{#regionId}:{#accountId}:assetbind/{#Uuid}
HoneyPot	acs:yundun-sas:{#regionId}:{#accountId}:honeypot/* acs:yundun-sas:{#regionId}:{#accountId}:honeypot/{#HoneypotId}
ClusterScannerYaml	acs:yundun-sas:{#regionId}:{#accountId}:clusterscanneryaml/* acs:yundun-sas:{#regionId}:{#accountId}:clusterscanneryaml/${#ClusterId}
Group	acs:yundun-sas:{#regionId}:{#accountId}:group/* acs:yundun-sas:{#regionId}:{#accountId}:group/{#GroupId}
AssetSelectionConfig	acs:yundun-sas:{#regionId}:{#accountId}:assetselectionconfig/{#BusinessType} acs:yundun-sas:{#regionId}:{#accountId}:assetselectionconfig/*
VulWhitelist	acs:threatdetection:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId} acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/* acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}
ImageEventOperation	acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/{#ImageEventOperationId} acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/*
CustomCheckItem	acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#CheckId} acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/* acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#customcheckitemId}
OperationProcess	acs:yundun-sas:{#regionId}:{#accountId}:operationprocess/{#TaskId}
LogMeta	acs:yundun-sas:{#regionId}:{#accountId}:logmeta/{#LogMetaName}
AssetSelectionTargetAttachment	acs:yundun-sas:{#regionId}:{#accountId}:assetselectiontargetattachment/*

Condition

The following table lists the product-level condition keys defined by Security Center. You can also use Alibaba Cloud's Common condition keys. Specify these keys in the Condition element of RAM policy statements to define granular authorization rules. In the condition key, specify the condition values in the Condition_value element of the policy.

Each condition key has a specific data type, such as string, number, Boolean, or IP address. The data type determines which conditional operators can be used to compare the request values against policy values. You must specify the conditional operators compatible with the data type of the condition key. Mismatched operators will invalidate the policy. See Condition operator for valid combinations.

Condition key	Description	Data type
acs:ResourceGroupId	The resource group ID.	String

How to create custom RAM policies?

You can create custom policies and grant them to RAM users, RAM user groups, or RAM roles. For instructions, see: