Avant d'appeler les API Smart Access Gateway avec un compte RAM, accordez-lui les autorisations nécessaires depuis le compte principal en créant une politique d'autorisation. Cette politique utilise un Alibaba Cloud Resource Name (ARN) comme identifiant unique de la ressource à autoriser. Le tableau suivant liste les noms de ressource des API Smart Access Gateway.
| Ressources VPC | Description de la ressource dans la règle d'autorisation |
| CreateSmartAccessGateway | acs:smartag:${region-id}:${resource-owner-id}:smartag/* |
| UpdateSmartAccessGatewayVersion | acs:smartag:${region-id}:${resource-owner-id}:smartag/${smartag-id} |
| DescribeSmartAccessGateways | acs:smartag:${region-id}:${resource-owner-id}:smartag/* |
| ModifySmartAccessGateway | acs:smartag:${region-id}:${resource-owner-id}:smartag/${smartag-id} |
| GetSmartAccessGatewayUseLimit | acs:smartag:${region-id}:${resource-owner-id}:smartag/* |
| GetCloudConnectNetworkUseLimit | acs:smartag:${region-id}:${resource-owner-id}:ccn/* |
| CreateCloudConnectNetwork | acs:smartag:${region-id}:${resource-owner-id}:ccn/* |
| DeleteCloudConnectNetwork | acs:smartag:${region-id}:${resource-owner-id}:ccn/${ccnid} |
| ModifyCloudConnectNetwork | acs:smartag:${region-id}:${resource-owner-id}:ccn/${ccnid} |
| DescribeCloudConnectNetworks | acs:smartag:${region-id}:${resource-owner-id}:ccn/* |
| BindSmartAccessGateway |
acs:smartag:${region-id}:${resource-owner-id}:ccn/${ccnid} acs:smartag:${region-id}:${resource-owner-id}:smartag/${smartag-id} |
| UnbindSmartAccessGateway |
acs:smartag:${region-id}:${resource-owner-id}:ccn/${ccnid} acs:smartag:${region-id}:${resource-owner-id}:smartag/${smartag-id} |
| ActivateSmartAccessGateway | acs:smartag:${region-id}:${resource-owner-id}:smartag/${smartag-id} |