AliyunCSManagedEdgeRolePolicy es la política de autorización diseñada para un service role. En la mayoría de los casos, cuando se crea un service role, esta política se adjunta a dicho rol. De este modo, el service role obtiene autorización para acceder a otros servicios en la nube. El servicio correspondiente de Alibaba Cloud actualice esta política. No adjunte esta política a ninguna identidad de RAM que no sea un service role.
Detalles de la política
Tipo: política de sistema de servicio
Fecha de creación: 23 de octubre de 2024 a las 15:51:45
Fecha de actualización: 26 de junio de 2026 a las 11:43:36
Versión actual: v7
Contenido de la política
{
"Version": "1",
"Statement": [
{
"Action": [
"vpc:DescribeVpcs",
"vpc:ModifyRouteEntry",
"vpc:DescribeRouteEntryList"
],
"Resource": [
"*"
],
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": [
"vpc:DescribeEipAddresses",
"vpc:AllocateEipAddress",
"vpc:ReleaseEipAddress"
],
"Resource": "acs:vpc:*:*:eip/*"
},
{
"Effect": "Allow",
"Action": [
"vpc:DescribeRouteTableList",
"vpc:CreateRouteEntry",
"vpc:DeleteRouteEntry"
],
"Resource": [
"acs:vpc:*:*:routetable/*"
]
},
{
"Effect": "Allow",
"Action": [
"slb:DescribeLoadBalancers",
"slb:DescribeLoadBalancerAttribute",
"slb:DescribeAccessControlLists",
"slb:DescribeAccessControlListAttribute",
"slb:AddAccessControlListEntry",
"slb:RemoveAccessControlListEntry",
"slb:CreateLoadBalancer",
"slb:DeleteLoadBalancer",
"slb:CreateAccessControlList",
"slb:DeleteAccessControlList",
"slb:ListTagResources",
"slb:TagResources"
],
"Resource": [
"acs:slb:*:*:acl/*",
"acs:slb:*:*:loadbalancer/*"
]
},
{
"Effect": "Allow",
"Action": [
"vpc:ListTagResources",
"vpc:TagResources",
"vpc:AssociateEipAddress",
"vpc:UnassociateEipAddress"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ens:DescribeNetworks",
"ens:DescribeInstances",
"ens:DescribeLoadBalancers",
"ens:DescribeLoadBalancerAttribute",
"ens:DescribeLoadBalancerUDPListenerAttribute",
"ens:DescribeLoadBalancerTCPListenerAttribute",
"ens:DescribeLoadBalancerHTTPListenerAttribute",
"ens:DescribeLoadBalancerHTTPSListenerAttribute",
"ens:DescribeEnsEipAddresses",
"ens:CreateLoadBalancer",
"ens:ReleaseInstance",
"ens:SetLoadBalancerStatus",
"ens:ModifyLoadBalancerAttribute",
"ens:SetBackendServers",
"ens:AddBackendServers",
"ens:RemoveBackendServers",
"ens:CreateLoadBalancerUDPListener",
"ens:SetLoadBalancerUDPListenerAttribute",
"ens:CreateLoadBalancerTCPListener",
"ens:SetLoadBalancerTCPListenerAttribute",
"ens:StartLoadBalancerListener",
"ens:StopLoadBalancerListener",
"ens:DeleteLoadBalancerListener",
"ens:CreateLoadBalancerHTTPListener",
"ens:SetLoadBalancerHTTPListenerAttribute",
"ens:CreateLoadBalancerHTTPSListener",
"ens:SetLoadBalancerHTTPSListenerAttribute",
"ens:CreateEipInstance",
"ens:ModifyEnsEipAddressAttribute",
"ens:AssociateEnsEipAddress",
"ens:DescribeNetworkInterfaces",
"ens:DescribeVSwitches",
"ens:AssignPrivateIpAddresses",
"ens:UnassignPrivateIpAddresses",
"ens:UnAssociateEnsEipAddress"
],
"Resource": "*"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "eipaccess.slb.aliyuncs.com"
}
}
}
]
}