Otorisasi RAM - Alibaba Cloud DNS - Alibaba Cloud Documentation Center

Resource Access Management (RAM) adalah layanan Alibaba Cloud yang dirancang untuk manajemen identitas pengguna dan kontrol izin akses resource. Melalui RAM, Anda dapat menerapkan prinsip least privilege tanpa perlu membagikan kunci akun Alibaba Cloud Anda kepada pengguna lain. RAM menggunakan kebijakan izin untuk menentukan otorisasi. Topik ini menjelaskan struktur umum kebijakan RAM, serta elemen pernyataan kebijakan (Action, Resource, dan Condition) yang didefinisikan oleh Alibaba Cloud DNS untuk kebijakan izin RAM. Kode RAM (RamCode) untuk Alibaba Cloud DNS adalah alidns,pubdns,pvtz , dan granularitas otorisasi yang didukung adalah RESOURCE .

Struktur umum kebijakan

Kebijakan izin menggunakan format JSON dengan struktur umum berikut:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

Berikut adalah penjelasan untuk setiap field dalam kebijakan

Version: Menentukan nomor versi kebijakan. Nilainya tetap 1.
Statement:
- Effect: Menentukan hasil otorisasi. Nilai yang valid: Allow dan Deny.
- Action: Menentukan satu atau beberapa operasi yang diizinkan atau ditolak.
- Resource: Menentukan objek spesifik yang terpengaruh oleh operasi tersebut. Anda dapat menggunakan Alibaba Cloud Resource Names (ARNs) untuk mengidentifikasi resource tertentu.
- Condition: Menentukan kondisi agar otorisasi berlaku. Field ini bersifat opsional.
  - Condition operator: Menentukan operator kondisional. Setiap jenis kondisi mendukung operator kondisional yang berbeda.
  - Condition_key: Menentukan condition key.
  - Condition_value: Menentukan nilai kondisi.

Action

Tabel berikut mencantumkan action yang didefinisikan oleh Alibaba Cloud DNS. Setiap kolom dalam tabel dijelaskan sebagai berikut:

Action: Dapat digunakan dalam elemen Action pada pernyataan kebijakan RAM untuk memberikan izin guna melakukan operasi tersebut.
API: API yang dipanggil untuk melakukan action tersebut.
Access level: Tingkat akses yang telah ditentukan untuk setiap API. Nilai yang valid: create, list, get, update, dan delete.
Resource type: Jenis resource yang mendukung otorisasi untuk melakukan action tersebut. Ini menunjukkan apakah action tersebut mendukung izin tingkat resource. Resource yang ditentukan harus kompatibel dengan action tersebut; jika tidak, kebijakan tidak akan berlaku.
- Untuk API dengan izin tingkat resource, jenis resource yang diperlukan ditandai dengan tanda bintang (*). Tentukan ARN yang sesuai dalam elemen Resource pada kebijakan.
- Untuk API tanpa izin tingkat resource, ini ditampilkan sebagai All Resources. Gunakan tanda bintang (*) dalam elemen Resource kebijakan.
Condition key: Ditentukan oleh layanan. Kunci ini memungkinkan kontrol yang lebih terperinci, yang berlaku baik untuk action saja maupun untuk action yang terkait dengan resource tertentu. Selain condition key spesifik layanan, Alibaba Cloud menyediakan serangkaian condition key umum yang berlaku di seluruh layanan yang terintegrasi dengan RAM. Untuk informasi lebih lanjut, lihat Common condition keys.
Dependent action: Action dependen yang diperlukan untuk menjalankan action tersebut. Agar action dapat dieksekusi dengan sukses, RAM user atau RAM role harus memiliki izin atas semua action dependen tersebut.

Action	API	Level akses	Tipe resource	Condition key	Action dependen
alidns:UpdateGtmAccessStrategy	UpdateGtmAccessStrategy	update	*gtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeDnsGtmAvailableAlertGroup	DescribeDnsGtmAvailableAlertGroup	get	All Resource ``	None	None
alidns:DescribeDnsGtmInstanceSystemCname	DescribeDnsGtmInstanceSystemCname	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:AddDnsGtmAddressPool	AddDnsGtmAddressPool	create	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:DescribeDomainStatistics	DescribeDomainStatistics	get	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:AddDomain	AddDomain	create	All Resource ``	None	None
alidns:UpdateCloudGtmInstanceConfigRemark	UpdateCloudGtmInstanceConfigRemark	update	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:AddDomainGroup	AddDomainGroup	create	All Resource ``	None	None
alidns:DescribeGtmMonitorConfig	DescribeGtmMonitorConfig	get	*gtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:PreviewGtmRecoveryPlan	PreviewGtmRecoveryPlan	get	All Resource ``	None	None
alidns:DescribeCloudGtmAddressPool	DescribeCloudGtmAddressPool	get	All Resource ``	None	None
alidns:DeleteDnsCacheDomain	DeleteDnsCacheDomain	delete	*CacheDomain `acs:alidns::{#accountId}:dnscache/{#DomainName}`	None	None
alidns:UpdateDnsGtmInstanceGlobalConfig	UpdateDnsGtmInstanceGlobalConfig	update	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:DescribeGtmRecoveryPlan	DescribeGtmRecoveryPlan	get	All Resource ``	None	None
alidns:AddDnsGtmAccessStrategy	AddDnsGtmAccessStrategy	create	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:SearchCloudGtmInstances	SearchCloudGtmInstances	get	All Resource ``	None	None
alidns:UpdateCloudGtmInstanceName	UpdateCloudGtmInstanceName	update	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeGtmInstanceAddressPools	DescribeGtmInstanceAddressPools	get	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:ExecuteGtmRecoveryPlan	ExecuteGtmRecoveryPlan		All Resource ``	None	None
alidns:RollbackGtmRecoveryPlan	RollbackGtmRecoveryPlan		All Resource ``	None	None
alidns:UpdateCloudGtmAddress	UpdateCloudGtmAddress	update	All Resource ``	None	None
alidns:DescribeDnsCacheDomains	DescribeDnsCacheDomains	get	CacheDomain `acs:alidns::{#accountId}:dnscache/`	None	None
alidns:DescribeGtmRecoveryPlanAvailableConfig	DescribeGtmRecoveryPlanAvailableConfig	get	All Resource ``	None	None
alidns:AddDnsCacheDomain	AddDnsCacheDomain	create	CacheDomain `acs:alidns::{#accountId}:dnscache/`	None	None
alidns:UpdateCloudGtmAddressPoolEnableStatus	UpdateCloudGtmAddressPoolEnableStatus	update	All Resource ``	None	None
alidns:DeleteDomainRecord	DeleteDomainRecord	delete	*domain `acs:alidns::{#accountId}:domain/{#domainName}`	None	None
alidns:DescribeDnsGtmAddressPoolAvailableConfig	DescribeDnsGtmAddressPoolAvailableConfig	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:UpdateCloudGtmMonitorTemplateRemark	UpdateCloudGtmMonitorTemplateRemark	update	All Resource ``	None	None
alidns:DescribeCloudGtmSystemLines	DescribeCloudGtmSystemLines	list	All Resource ``	None	None
alidns:DescribeDNSSLBSubDomains	DescribeDNSSLBSubDomains	get	*domain `acs:alidns::{#accountId}:domain/{#domainId}`	None	None
alidns:DeleteGtmRecoveryPlan	DeleteGtmRecoveryPlan	delete	All Resource ``	None	None
alidns:DescribeDohDomainStatistics	DescribeDohDomainStatistics	get	All Resource ``	alidns:test	None
alidns:DescribeCloudGtmAddressPoolReference	DescribeCloudGtmAddressPoolReference	get	All Resource ``	None	None
alidns:DeleteCloudGtmAddressPool	DeleteCloudGtmAddressPool	delete	All Resource ``	None	None
alidns:DescribeGtmInstanceStatus	DescribeGtmInstanceStatus	get	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:UpdateCloudGtmAddressRemark	UpdateCloudGtmAddressRemark	update	All Resource ``	None	None
alidns:AddCustomLine	AddCustomLine	create	*domain `acs:alidns::{#accountId}:domain/{#domainId}`	None	None
alidns:AddGtmRecoveryPlan	AddGtmRecoveryPlan	create	All Resource ``	None	None
alidns:ModifyHichinaDomainDNS	ModifyHichinaDomainDNS	update	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:CreateCloudGtmAddressPool	CreateCloudGtmAddressPool	create	All Resource ``	None	None
alidns:ChangeDomainOfDnsProduct	ChangeDomainOfDnsProduct	update	All Resource ``	None	None
alidns:DescribeInterAuthStatisticsGlobalOverview	DescribeInterAuthStatisticsGlobalOverview	get	All Resource ``	None	None
alidns:UpdateDomainRecord	UpdateDomainRecord	update	*domain `acs:alidns::{#accountId}:domain/{#domainId}`	None	None
alidns:DescribeCloudGtmAddressReference	DescribeCloudGtmAddressReference	get	All Resource ``	None	None
alidns:AddGtmAddressPool	AddGtmAddressPool	create	*gtminstance `acs:alidns::{#accountId}:gtminstance/{#gtminstanceId}`	None	None
alidns:DescribeDnsGtmInstances	DescribeDnsGtmInstances	get	All Resource ``	None	None
alidns:ListCloudGtmInstances	ListCloudGtmInstances	list	All Resource ``	None	None
alidns:DescribeCustomLines	DescribeCustomLines	get	*domain `acs:alidns::{#accountId}:domain/{#domainName}`	None	None
alidns:UpdateDnsCacheDomainRemark	UpdateDnsCacheDomainRemark	update	*CacheDomain `acs:alidns::{#accountId}:dnscache/{#DomainName}`	None	None
alidns:BindInstanceDomains	BindInstanceDomains	update	All Resource ``	None	None
alidns:SetGtmMonitorStatus	SetGtmMonitorStatus	update	*gtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:UpdateCloudGtmGlobalAlert	UpdateCloudGtmGlobalAlert	update	All Resource ``	None	None
alidns:DescribeGtmAccessStrategy	DescribeGtmAccessStrategy	get	All Resource ``	None	None
alidns:DescribeInterAuthStatisticsHistory	DescribeInterAuthStatisticsHistory	get	All Resource ``	None	None
alidns:DescribeGtmAccessStrategyAvailableConfig	DescribeGtmAccessStrategyAvailableConfig	get	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:GetTxtRecordForVerify	GetTxtRecordForVerify	get	All Resource ``	None	None
alidns:DescribeDomainResolveStatisticsSummary	DescribeDomainResolveStatisticsSummary	list	All Resource ``	None	None
alidns:UpdateDomainGroup	UpdateDomainGroup	update	*group `acs:alidns::{#accountId}:group/{#groupId}`	None	None
alidns:MoveGtmResourceGroup	MoveGtmResourceGroup		*gtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DeleteCloudGtmAddress	DeleteCloudGtmAddress	delete	All Resource ``	None	None
alidns:DeleteDomain	DeleteDomain	delete	*domain `acs:alidns::{#accountId}:domain/{#domainName}`	None	None
alidns:ListCloudGtmAvailableAlertGroups	ListCloudGtmAvailableAlertGroups	list	All Resource ``	None	None
alidns:DescribeDnsGtmMonitorAvailableConfig	DescribeDnsGtmMonitorAvailableConfig	get	All Resource ``	None	None
alidns:DescribeDnsProductInstance	DescribeDnsProductInstance	get	*instance `acs:alidns::{#accountId}:instance/{#instanceId}`	None	None
alidns:ListCloudGtmAlertLogs	ListCloudGtmAlertLogs	list	All Resource ``	None	None
alidns:CreateCloudGtmAddress	CreateCloudGtmAddress	create	All Resource ``	None	None
alidns:DescribeDomains	DescribeDomains	get	All Resource ``	None	None
alidns:MoveDomainResourceGroup	MoveDomainResourceGroup	update	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeDnsGtmInstanceStatus	DescribeDnsGtmInstanceStatus	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:GetMainDomainName	GetMainDomainName	get	All Resource ``	None	None
alidns:UpdateCloudGtmInstanceConfigAlert	UpdateCloudGtmInstanceConfigAlert	update	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeGtmLogs	DescribeGtmLogs	get	All Resource ``	None	None
alidns:CreateCloudGtmMonitorTemplate	CreateCloudGtmMonitorTemplate	create	All Resource ``	None	None
alidns:SetCloudGtmInstanceConfigLogSwitch	SetCloudGtmInstanceConfigLogSwitch	update	*Domain `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:SetDomainDnssecStatus	SetDomainDnssecStatus	update	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeDomainInfo	DescribeDomainInfo	get	All Resource ``	None	None
alidns:DescribeRecordResolveStatisticsSummary	DescribeRecordResolveStatisticsSummary	list	Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeDnsProductInstances	DescribeDnsProductInstances	get	Instance `acs:alidns::{#accountId}:instance/*`	None	None
alidns:SetDnsGtmMonitorStatus	SetDnsGtmMonitorStatus	update	MonitorConfig `acs:alidns::{#accountId}:gtminstance/{#InstanceId}`	None	None
alidns:DescribeGtmInstanceSystemCname	DescribeGtmInstanceSystemCname	get	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:UpdateCloudGtmAddressPoolLbStrategy	UpdateCloudGtmAddressPoolLbStrategy	update	All Resource ``	None	None
alidns:DescribeCloudGtmAddress	DescribeCloudGtmAddress	get	All Resource ``	None	None
alidns:DescribeDomainStatisticsSummary	DescribeDomainStatisticsSummary	get	All Resource ``	None	None
alidns:RemoveRspDomainServerHoldStatusForGatewayOte	RemoveRspDomainServerHoldStatusForGatewayOte	update	All Resource ``	None	None
alidns:UpdateDNSSLBWeight	UpdateDNSSLBWeight	update	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeDnsGtmInstanceAddressPools	DescribeDnsGtmInstanceAddressPools	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:DescribeTags	DescribeTags	get	All Resource ``	None	None
alidns:AddGtmAccessStrategy	AddGtmAccessStrategy	create	*gtminstance `acs:alidns::{#accountId}:gtminstance/{#gtminstanceId}`	None	None
alidns:UpdateRspDomainServerProhibitStatusForGatewayOte	UpdateRspDomainServerProhibitStatusForGatewayOte	update	All Resource ``	None	None
alidns:DescribeCloudGtmInstanceConfigFullInfo	DescribeCloudGtmInstanceConfigFullInfo	get	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DeleteCustomLines	DeleteCustomLines	delete	*domain `acs:alidns::{#accountId}:domain/{#domainName}`	None	None
alidns:DescribeCloudGtmSummary	DescribeCloudGtmSummary	get	All Resource ``	None	None
alidns:DescribeBatchResultCount	DescribeBatchResultCount	get	All Resource ``	None	None
alidns:ChangeDomainGroup	ChangeDomainGroup	update	domain `acs:alidns::{#accountId}:domain/{#domainName}` group `acs:alidns::{#accountId}:group/{#groupId}`	None	None
alidns:DescribeDnsGtmAccessStrategies	DescribeDnsGtmAccessStrategies	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:SetDnsGtmAccessMode	SetDnsGtmAccessMode	update	AccessStrategy `acs:alidns::{#accountId}:gtminstance/{#InstanceId}`	None	None
alidns:DeleteDnsGtmAccessStrategy	DeleteDnsGtmAccessStrategy	delete	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:AddDnsGtmMonitor	AddDnsGtmMonitor	create	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:DescribeGtmInstanceAddressPool	DescribeGtmInstanceAddressPool	get	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:UpdateCustomLine	UpdateCustomLine	update	Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:UpdateCloudGtmAddressPoolBasicConfig	UpdateCloudGtmAddressPoolBasicConfig	update	All Resource ``	None	None
alidns:AddRspDomainServerHoldStatusForGatewayOte	AddRspDomainServerHoldStatusForGatewayOte	update	All Resource ``	None	None
alidns:DescribeDomainDnssecInfo	DescribeDomainDnssecInfo	get	*domain `acs:alidns::{#accountId}:domain/{#domainName}`	None	None
alidns:UpdateDomainRemark	UpdateDomainRemark	update	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeDnsGtmAccessStrategy	DescribeDnsGtmAccessStrategy	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:DescribeGtmRecoveryPlans	DescribeGtmRecoveryPlans	get	All Resource ``	None	None
alidns:DeleteDnsGtmAddressPool	DeleteDnsGtmAddressPool	delete	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:ReplaceCloudGtmInstanceConfigAddressPool	ReplaceCloudGtmInstanceConfigAddressPool	update	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:UpdateCloudGtmInstanceConfigBasic	UpdateCloudGtmInstanceConfigBasic	update	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeRecordLogs	DescribeRecordLogs	get	Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:UpdateGtmAddressPool	UpdateGtmAddressPool	update	*gtminstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeDnsGtmAddrAttributeInfo	DescribeDnsGtmAddrAttributeInfo	get	All Resource ``	None	None
alidns:ListCloudGtmMonitorTemplates	ListCloudGtmMonitorTemplates	list	All Resource ``	None	None
alidns:UpdateGtmMonitor	UpdateGtmMonitor	update	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:DescribeDomainNs	DescribeDomainNs	get	*domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeCloudGtmGlobalAlert	DescribeCloudGtmGlobalAlert	get	All Resource ``	None	None
alidns:DescribeDnsGtmInstance	DescribeDnsGtmInstance	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:AddDomainRecord	AddDomainRecord	create	*domain `acs:alidns::{#accountId}:domain/{#domainName}`	None	None
alidns:DescribeDnsGtmMonitorConfig	DescribeDnsGtmMonitorConfig	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:UpdateGtmInstanceGlobalConfig	UpdateGtmInstanceGlobalConfig	update	*gtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:UpdateDomainRecordRemark	UpdateDomainRecordRemark	update	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeCloudGtmMonitorTemplate	DescribeCloudGtmMonitorTemplate	get	All Resource ``	None	None
alidns:UpdateGtmRecoveryPlan	UpdateGtmRecoveryPlan	update	All Resource ``	None	None
alidns:RemoveRspDomainServerHoldStatusForGateway	RemoveRspDomainServerHoldStatusForGateway	update	All Resource ``	None	None
alidns:UpdateCloudGtmInstanceConfigEnableStatus	UpdateCloudGtmInstanceConfigEnableStatus	update	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeDnsGtmAccessStrategyAvailableConfig	DescribeDnsGtmAccessStrategyAvailableConfig	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:UpdateCloudGtmMonitorTemplate	UpdateCloudGtmMonitorTemplate	update	All Resource ``	None	None
alidns:DescribeInterAuthStatisticsZoneOverview	DescribeInterAuthStatisticsZoneOverview	get	All Resource ``	None	None
alidns:DescribeDohSubDomainStatistics	DescribeDohSubDomainStatistics	get	All Resource ``	None	None
alidns:DescribeDomainLogs	DescribeDomainLogs	get	All Resource ``	None	None
alidns:DeleteSubDomainRecords	DeleteSubDomainRecords	delete	*domain `acs:alidns::{#accountId}:domain/{#domainName}`	None	None
alidns:DescribeCustomLine	DescribeCustomLine	get	Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:OperateBatchDomain	OperateBatchDomain	create	All Resource ``	None	None
alidns:DescribeDomainRecordInfo	DescribeDomainRecordInfo	get	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:UnbindInstanceDomains	UnbindInstanceDomains	update	Instance `acs:alidns::{#accountId}:instance/{#InstanceId}` Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:TagResources	TagResources	update	All Resource ``	None	None
alidns:UpdateCloudGtmAddressPoolRemark	UpdateCloudGtmAddressPoolRemark	update	All Resource ``	None	None
alidns:DescribeSubDomainRecords	DescribeSubDomainRecords	get	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:UntagResources	UntagResources	update	All Resource ``	None	None
alidns:ListCloudGtmInstanceConfigs	ListCloudGtmInstanceConfigs	list	All Resource ``	None	None
alidns:DescribeDohSubDomainStatisticsSummary	DescribeDohSubDomainStatisticsSummary	get	All Resource ``	None	None
alidns:DescribeGtmInstance	DescribeGtmInstance	get	*gtminstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeGtmMonitorAvailableConfig	DescribeGtmMonitorAvailableConfig	get	All Resource ``	None	None
alidns:ListTagResources	ListTagResources	get	All Resource ``	None	None
alidns:UpdateDnsGtmAddressPool	UpdateDnsGtmAddressPool	update	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:SetDomainRecordStatus	SetDomainRecordStatus	update	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeRecordStatisticsSummary	DescribeRecordStatisticsSummary	get	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeSupportLines	DescribeSupportLines	get	All Resource ``	None	None
alidns:UpdateCloudGtmAddressManualAvailableStatus	UpdateCloudGtmAddressManualAvailableStatus	update	All Resource ``	None	None
alidns:DeleteCloudGtmMonitorTemplate	DeleteCloudGtmMonitorTemplate	delete	All Resource ``	None	None
alidns:CopyGtmConfig	CopyGtmConfig		All Resource ``	None	None
alidns:ListCloudGtmMonitorNodes	ListCloudGtmMonitorNodes	list	All Resource ``	None	None
alidns:DescribeDohUserInfo	DescribeDohUserInfo	get	All Resource ``	None	None
alidns:SearchCloudGtmAddresses	SearchCloudGtmAddresses	list	All Resource ``	None	None
alidns:ListCloudGtmAddressPools	ListCloudGtmAddressPools	list	All Resource ``	None	None
alidns:DescribeGtmAvailableAlertGroup	DescribeGtmAvailableAlertGroup	get	All Resource ``	None	None
alidns:DescribeBatchResultDetail	DescribeBatchResultDetail	get	All Resource ``	None	None
alidns:UpdateDnsCacheDomain	UpdateDnsCacheDomain	update	*CacheDomain `acs:alidns::{#accountId}:dnscache/{#DomainName}`	None	None
alidns:DescribeGtmInstances	DescribeGtmInstances	get	All Resource ``	None	None
alidns:DescribeTransferDomains	DescribeTransferDomains	get	All Resource ``	None	None
alidns:TransferDomain	TransferDomain	update	All Resource ``	None	None
alidns:AddDomainBackup	AddDomainBackup	create	*domain `acs:alidns::{#accountId}:domain/{#domainId}`	None	None
alidns:AddRspDomainServerHoldStatusForGateway	AddRspDomainServerHoldStatusForGateway	update	All Resource ``	None	None
alidns:DescribeRecordStatistics	DescribeRecordStatistics	get	Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DeleteCloudGtmInstanceConfig	DeleteCloudGtmInstanceConfig	delete	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DeleteGtmAddressPool	DeleteGtmAddressPool	delete	*gtminstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeDomainGroups	DescribeDomainGroups	get	All Resource ``	None	None
alidns:DescribeDnsGtmInstanceAddressPool	DescribeDnsGtmInstanceAddressPool	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:AddGtmMonitor	AddGtmMonitor	create	*gtminstance `acs:alidns::{#accountId}:gtminstance/{#gtminstanceId}`	None	None
alidns:SwitchDnsGtmInstanceStrategyMode	SwitchDnsGtmInstanceStrategyMode		*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:SetGtmAccessMode	SetGtmAccessMode	update	*gtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeDohDomainStatisticsSummary	DescribeDohDomainStatisticsSummary	get	All Resource ``	None	None
alidns:CreateCloudGtmInstanceConfig	CreateCloudGtmInstanceConfig	create	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:DescribeDnsGtmLogs	DescribeDnsGtmLogs	get	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:DescribeInstanceDomains	DescribeInstanceDomains	get	*instance `acs:alidns::{#accountId}:instance/{#instanceId}`	None	None
alidns:DescribeGtmAccessStrategies	DescribeGtmAccessStrategies	get	*gtminstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:SetDNSSLBStatus	SetDNSSLBStatus	update	*domain `acs:alidns::{#accountId}:domain/{#domainId}`	None	None
alidns:DescribeDomainRecords	DescribeDomainRecords	get	*Domain `acs:alidns::{#accountId}:domain/{#DomainName}`	None	None
alidns:DescribeDohAccountStatistics	DescribeDohAccountStatistics	get	All Resource ``	None	None
alidns:ReplaceCloudGtmAddressPoolAddress	ReplaceCloudGtmAddressPoolAddress	update	All Resource ``	None	None
alidns:DescribeInternetDnsLogs	DescribeInternetDnsLogs	get	All Resource ``	None	None
alidns:UpdateCloudGtmAddressEnableStatus	UpdateCloudGtmAddressEnableStatus	update	All Resource ``	None	None
alidns:UpdateDnsGtmAccessStrategy	UpdateDnsGtmAccessStrategy	update	*gtmInstance `acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}`	None	None
alidns:UpdateCloudGtmInstanceConfigLbStrategy	UpdateCloudGtmInstanceConfigLbStrategy	update	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:ListCloudGtmAddresses	ListCloudGtmAddresses	list	All Resource ``	None	None
alidns:DeleteGtmAccessStrategy	DeleteGtmAccessStrategy	delete	*GtmInstance `acs:alidns::{#accountId}:gtminstance/{#instanceId}`	None	None
alidns:RetrieveDomain	RetrieveDomain	none	All Resource ``	None	None
alidns:SearchCloudGtmAddressPools	SearchCloudGtmAddressPools	list	All Resource ``	None	None
alidns:UpdateDnsGtmMonitor	UpdateDnsGtmMonitor	update	MonitorConfig `acs:alidns::{#accountId}:gtminstance/{#InstanceId}`	None	None
alidns:SearchCloudGtmMonitorTemplates	SearchCloudGtmMonitorTemplates	list	All Resource ``	None	None
alidns:DescribeCloudGtmInstanceConfigAlert	DescribeCloudGtmInstanceConfigAlert	get	All Resource ``	None	None
alidns:SearchCloudGtmInstanceConfigs	SearchCloudGtmInstanceConfigs	list	All Resource ``	None	None
alidns:DeleteDomainGroup	DeleteDomainGroup	delete	*group `acs:alidns::{#accountId}:group/{#groupId}`	None	None
alidns:UpdateRspDomainServerProhibitStatusForGateway	UpdateRspDomainServerProhibitStatusForGateway	update	All Resource ``	None	None
pubdns:SearchRecursionRecords	SearchRecursionRecords	list	*recursion `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:DescribePdnsRequestStatistics	DescribePdnsRequestStatistics	get	All Resource ``	None	None
pubdns:DescribePdnsRequestStatistic	DescribePdnsRequestStatistic	get	All Resource ``	None	None
pubdns:ValidatePdnsUdpIpSegment	ValidatePdnsUdpIpSegment	none	All Resource ``	None	None
pubdns:AddRecursionRecord	AddRecursionRecord	create	*recursionZone `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:DescribeRecursionRecord	DescribeRecursionRecord	get	*recursionRecord `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:UpdateRecursionRecordRemark	UpdateRecursionRecordRemark	update	*recursionRecord `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:UpdateRecursionZoneEffectiveScope	UpdateRecursionZoneEffectiveScope	update	*recursionRecord `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:DescribePdnsUserInfo	DescribePdnsUserInfo	get	All Resource ``	None	None
pubdns:DescribeRecursionZone	DescribeRecursionZone	get	*recursionZone `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:UpdateRecursionRecordWeight	UpdateRecursionRecordWeight	update	*recursionRecord `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:UpdateRecursionZoneRemark	UpdateRecursionZoneRemark	update	*recursionZone `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:SearchRecursionZones	SearchRecursionZones	list	All Resource ``	None	None
pubdns:ListRecursionRecords	ListRecursionRecords	list	*recursion `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:DeleteRecursionRecord	DeleteRecursionRecord	delete	*recursionRecord `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:ListRecursionZones	ListRecursionZones	list	All Resource ``	None	None
pubdns:AddRecursionZone	AddRecursionZone	create	All Resource ``	None	None
pubdns:DeleteRecursionZone	DeleteRecursionZone	delete	*recursionZone `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:UpdateRecursionRecordEnableStatus	UpdateRecursionRecordEnableStatus	update	*recursionRecord `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:UpdateRecursionRecordWeightEnableStatus	UpdateRecursionRecordWeightEnableStatus	update	*recursionRecord `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:UpdateRecursionZoneProxyPattern	UpdateRecursionZoneProxyPattern	update	*recursionZone `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None
pubdns:UpdateRecursionRecord	UpdateRecursionRecord	update	*recursionRecord `acs:pubdns::{#accountId}:recursionZone/{#zoneId}`	None	None

Resource

Tabel berikut mencantumkan resource yang ditentukan oleh Alibaba Cloud DNS. Tentukan resource tersebut dalam elemen Resource pada pernyataan kebijakan RAM untuk memberikan izin terhadap operasi tertentu. Resource tersebut diidentifikasi secara unik menggunakan ARN dengan format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: Singkatan dari Alibaba Cloud service, yang menunjukkan cloud publik Alibaba Cloud.
{#ramcode}: Kode yang digunakan dalam RAM untuk menunjukkan layanan Alibaba Cloud.
{#regionId}: region ID. Jika resource mencakup semua wilayah, atur nilainya menjadi tanda bintang (*).
{#accountId}: ID akun Alibaba Cloud. Jika resource mencakup semua akun Alibaba Cloud, atur nilainya menjadi tanda bintang (*).
{#resourceType}: Identifier resource yang ditentukan oleh layanan. Mendukung struktur hierarkis, mirip dengan path file. Jika pernyataan mencakup resource global, atur nilainya menjadi tanda bintang (*).

Tipe resource	ARN
gtmInstance	acs:alidns::{#accountId}:gtminstance/{#instanceId} acs:alidns::{#accountId}:gtmInstance/* acs:alidns::{#accountId}:gtmInstance/{#gtmInstanceId}
Domain	acs:alidns::{#accountId}:domain/{#DomainName} acs:alidns::{#accountId}:zone/* acs:alidns::{#accountId}:flushcache/ acs:alidns::{#accountId}:domain/ acs:alidns::{#accountId}:gtminstance/{#instanceId} acs:alidns::{#accountId}:domain/{#DomainName} acs:alidns::{#accountId}:domain/ acs:eiam:{#regionId}:{#accountId}:flushcache/*
domain	acs:alidns::{#accountId}:domain/* acs:alidns::{#accountId}:domain/{#domainName} acs:alidns::{#accountId}:domain/{#domainId} acs:alidns::{#accountId}:domain/{#$domainName}
GtmInstance	acs:alidns::{#accountId}:gtminstance/{#instanceId} acs:alidns::{#accountId}:gtminstance/* acs:alidns:*:{#accountId}:gtminstance/{#InstanceId}
group	acs:alidns::{#accountId}:group/* acs:alidns::{#accountId}:group/{#groupId} acs:alidns::{#accountId}:group/
gtminstance	acs:alidns::{#accountId}:gtminstance/* acs:alidns::{#accountId}:gtminstance/{#gtminstanceId} acs:alidns::{#accountId}:gtminstance/{#instanceId}
cloudGtmAddressPool	acs:alidns::{#accountId}:cloudGtmAddressPool/{#addressPoolId} acs:alidns::{#accountId}:cloudGtmAddressPool/{#addressId}
CacheDomain	acs:alidns::{#accountId}:dnscache/{#DomainName} acs:alidns::{#accountId}:dnscache/*
cloudGtmAddress	acs:alidns::{#accountId}:cloudGtmAddress/{#addressId} acs:alidns::{#accountId}:cloudGtmAddress/*
cloudGtmMonitorTemplate	acs:alidns::{#accountId}:cloudGtmMonitorTemplate/{#templateId} acs:alidns::{#accountId}:cloudGtmMonitorTemplate/*
instance	acs:alidns::{#accountId}:instance/{#instanceId}
Instance	acs:alidns::{#accountId}:instance/ acs:alidns:*:{#accountId}:instance/{#InstanceId}
MonitorConfig	acs:alidns:*:{#accountId}:gtminstance/{#InstanceId}
AccessStrategy	acs:alidns:*:{#accountId}:gtminstance/{#InstanceId}
doh	acs:alidns::{#accountId}:doh/*
gtmInstnace	acs:alidns::{#accountId}:gtmInstnace/
recursion	acs:pubdns::{#accountId}:recursionZone/{#zoneId} acs:pubdns::{#accountId}:recursionZone/*
recursionZone	acs:pubdns::{#accountId}:recursionZone/{#zoneId} acs:pubdns::{#accountId}:recursionZone/*
recursionRecord	acs:pubdns::{#accountId}:recursionZone/{#zoneId}

Condition

Alibaba Cloud DNS tidak mendefinisikan condition key tingkat produk. Namun, Anda dapat menggunakan condition key umum Alibaba Cloud untuk kontrol akses. Untuk informasi lebih lanjut, lihat Common condition keys.

Cara membuat kebijakan RAM kustom?

Anda dapat membuat kebijakan kustom dan memberikannya kepada RAM user, RAM user group, atau RAM role. Untuk caranya, lihat: