This topic lists the cloud services that support resource group-level authorization and their resource types. It also identifies unsupported operations and provides custom policy examples to help you achieve fine-grained resource control. - Resource Management

Este tema enumera los servicios en la nube y los tipos de recursos compatibles con la autorización a nivel de resource group, e identifica las operaciones que no se admiten.

Descripción general

Los resource groups permiten gestionar los recursos de su cuenta de Alibaba Cloud agrupándolos. Por ejemplo, puede crear un resource group para cada proyecto y mover los recursos correspondientes a sus respectivos grupos para una gestión centralizada. Para obtener más información, consulte What is a resource group?.

Una vez agrupados los recursos, puede otorgar permisos sobre un resource group específico a distintos principales de RAM (como usuarios de RAM, grupos de usuarios de RAM o roles de RAM). Esto restringe la gestión únicamente a los recursos dentro de dicho grupo. Para obtener más información, consulte Resource grouping and authorization.

A continuación se listan los servicios en la nube compatibles con la autorización a nivel de resource group. Las columnas se describen de la siguiente manera:

Cloud service: Nombre del servicio en la nube.
Service code: Código correspondiente al servicio en la nube.
Supported resource types: Tipos de recursos compatibles con esta autorización.
Unsupported operations and custom policy examples: Acciones que no admiten autorización a nivel de resource group y ejemplos de políticas personalizadas.

Importante
Si otorga permisos para una operación no admitida a nivel de Resource group, la solicitud se denegará por permisos insuficientes.

Solución: Cree una política de permisos personalizada que incluya las acciones necesarias. Consulte los ejemplos proporcionados como guía. Al otorgar permisos, establezca el alcance del recurso a nivel de cuenta.

Cloud service	Service code	Supported resource types	Unsupported actions
Alibaba Cloud Distributed Cloud Container Platform	ackone	Resource types that support resource groups	Operations that do not support resource group-level authorization
AnalyticDB for MySQL	adb	Resource types that support resource groups	Operations that do not support resource group-level authorization
Application Load Balancer	alb	Resource types that support resource groups	Operations that do not support resource group-level authorization
Alibaba Cloud DNS	alidns	Resource types that support resource groups	Operations that do not support resource group-level authorization
ApsaraMQ for Kafka	alikafka	Resource types that support resource groups	Operations that do not support resource group-level authorization
API Gateway	apig	Resource types that support resource groups	Operations that do not support resource group-level authorization
Application Real-Time Monitoring Service (ARMS)	arms	Resource types that support resource groups	Operations that do not support resource group-level authorization
Shared Bandwidth Plan	bandwidthpackage	Resource types that support resource groups	Operations that do not support resource group-level authorization
Cloud Architect Design Tool (CADT)	bpstudio	Resource types that support resource groups	Operations that do not support resource group-level authorization
ChatApp Message Service	cams	Resource types that support resource groups	Operations that do not support resource group-level authorization
Alibaba Cloud CDN	cdn	Resource types that support resource groups	Operations that do not support resource group-level authorization
Cloud Enterprise Network (CEN)	cen	Resource types that support resource groups	Operations that do not support resource group-level authorization
Logical Composer	composer	Resource types that support resource groups	Operations that do not support resource group-level authorization
Compute Nest	computenest	Resource types that support resource groups	Operations that do not support resource group-level authorization
Container Registry (ACR)	cr	Resource types that support resource groups	Operations that do not support resource group-level authorization
Container Service for Kubernetes (ACK)	cs	Resource types that support resource groups	Operations that do not support resource group-level authorization
Database Backup (DBS)	dbs	Resource types that support resource groups	Operations that do not support resource group-level authorization
Dynamic Route for CDN (DCDN)	dcdn	Resource types that support resource groups	Operations that do not support resource group-level authorization
ApsaraDB for MongoDB	dds	Resource types that support resource groups	Operations that do not support resource group-level authorization
DataWorks	dide	Resource types that support resource groups	Operations that do not support resource group-level authorization
Domains	domain	Resource types that support resource groups	Operations that do not support resource group-level authorization
Data Transmission Service (DTS)	dts	Resource types that support resource groups	Operations that do not support resource group-level authorization
Elastic Block Storage	ebs	Resource types that support resource groups	Operations that do not support resource group-level authorization
Elastic Container Instance (ECI)	eci	Resource types that support resource groups	Operations that do not support resource group-level authorization
Elastic Compute Service (ECS)	ecs	Resource types that support resource groups	Operations that do not support resource group-level authorization
Elastic IP Address (EIP)	eip	Resource types that support resource groups	Operations that do not support resource group-level authorization
Anycast EIP	eipanycast	Resource types that support resource groups	Operations that do not support resource group-level authorization
Alibaba Cloud Elasticsearch	elasticsearch	Resource types that support resource groups	Operations that do not support resource group-level authorization
E-MapReduce	emr	Resource types that support resource groups	Operations that do not support resource group-level authorization
Auto Scaling	ess	Resource types that support resource groups	Operations that do not support resource group-level authorization
Express Connect	expressconnect	Resource types that support resource groups	Operations that do not support resource group-level authorization
Realtime Compute for Apache Flink	flinkasi	Resource types that support resource groups	Operations that do not support resource group-level authorization
Global Accelerator (GA)	ga	Resource types that support resource groups	Operations that do not support resource group-level authorization
AnalyticDB for PostgreSQL	gpdb	Resource types that support resource groups	Operations that do not support resource group-level authorization
Gateway Load Balancer (GWLB)	gwlb	Resource types that support resource groups	Operations that do not support resource group-level authorization
Hybrid Backup Recovery (HBR)	hbr	Resource types that support resource groups	Operations that do not support resource group-level authorization
Tair (Redis^®-compatible)	kvstore	Resource types that support resource groups	Operations that do not support resource group-level authorization
Log Service (SLS)	log	Resource types that support resource groups	Operations that do not support resource group-level authorization
Microservices Engine (MSE)	mse	Resource types that support resource groups	Operations that do not support resource group-level authorization
ApsaraDB for HBase	multimod	Resource types that support resource groups	Operations that do not support resource group-level authorization
Apsara File Storage NAS	nas	Resource types that support resource groups	Operations that do not support resource group-level authorization
Network Intelligence	netana	Resource types that support resource groups	Operations that do not support resource group-level authorization
Network Load Balancer (NLB)	nlb	Resource types that support resource groups	Operations that do not support resource group-level authorization
Operation Orchestration Service (OOS)	oos	Resource types that support resource groups	Operations that do not support resource group-level authorization
Object Storage Service (OSS)	oss	Resource types that support resource groups	Operations that do not support resource group-level authorization
Tablestore	ots	Resource types that support resource groups	Operations that do not support resource group-level authorization
Platform for AI (PAI)	paiworkspace	Resource types that support resource groups	Operations that do not support resource group-level authorization
PrivateLink	privatelink	Resource types that support resource groups	Operations that do not support resource group-level authorization
ApsaraDB RDS	rds	Resource types that support resource groups	Operations that do not support resource group-level authorization
ApsaraMQ for RocketMQ	rocketmq	Resource types that support resource groups	Operations that do not support resource group-level authorization
Resource Orchestration Service (ROS)	ros	Resource types that support resource groups	Operations that do not support resource group-level authorization
ApsaraDB for SelectDB	selectdb	Resource types that support resource groups	Operations that do not support resource group-level authorization
Server Load Balancer (SLB)	slb	Resource types that support resource groups	Operations that do not support resource group-level authorization
Smart Access Gateway (SAG)	smartag	Resource types that support resource groups	Operations that do not support resource group-level authorization
Server Migration Center (SMC)	smc	Resource types that support resource groups	Operations that do not support resource group-level authorization
EMR Serverless StarRocks	starrocks	Resource types that support resource groups	Operations that do not support resource group-level authorization
ApsaraVideo VOD	vod	Resource types that support resource groups	Operations that do not support resource group-level authorization
Virtual Private Cloud (VPC)	vpc	Resource types that support resource groups	Operations that do not support resource group-level authorization

Enviar comentarios

Si requiere compatibilidad con tipos de recursos u operaciones no listados aquí, envíe sus comentarios en la Resource Group console.

En Issue Type, seleccione Unsupported product or resource type. En el campo de descripción, introduzca el producto o tipo de recurso no admitido y luego haga clic en Submit.