RAM authorization - Edge Security Acceleration

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. Using RAM helps you avoid sharing your Alibaba Cloud account keys with other users and allows you to grant users the least privilege access. RAM uses permission policies to define authorizations. This topic describes the general structure of a RAM policy, and the policy statement elements (Action, Resource, and Condition) defined by Edge Security Acceleration for RAM permission policies. The RAM code (RamCode) for Edge Security Acceleration is esa , and the supported authorization granularity is RESOURCE .

General structure of a policy

Permission policies support JSON format with the following general structure:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

The following list describes the fields in the policy:

Version: Specifies the policy version number. It is fixed at 1.
Statement:
- Effect: Specifies the authorization result. Valid values: Allow and Deny.
- Action: Specifies one or more operations that are allowed or denied.
- Resource: Specifies the specific objects affected by the operations. You can use Alibaba Cloud Resource Names (ARNs) to describe specific resources.
- Condition: Specifies the conditions for the authorization to take effect. This field is optional.
  - Condition operator: Specifies the conditional operators. Different types of conditions support different conditional operators.
  - Condition_key: Specifies the condition keys.
  - Condition_value: Specifies the condition values.

Action

The following table lists the actions defined by Edge Security Acceleration. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that support authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding ARN in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys that are applicable across all RAM-integrated services. For more information, see Common condition keys.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action	API	Access level	Resource type	Condition key	Dependent action
esa:DeleteVideoProcessing	DeleteVideoProcessing	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:PurchaseCacheReserve	PurchaseCacheReserve	create	All Resource ``	None	None
esa:ListRecords	ListRecords	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetManagedTransform	GetManagedTransform	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateRoutineRelatedRecord	CreateRoutineRelatedRecord	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetTransportLayerApplication	GetTransportLayerApplication	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListLists	ListLists	list	All Resource ``	None	None
esa:UpdateSeoBypass	UpdateSeoBypass	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateHttpsBasicConfiguration	CreateHttpsBasicConfiguration	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateHttpIncomingRequestHeaderModificationRule	UpdateHttpIncomingRequestHeaderModificationRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CheckSiteProjectName	CheckSiteProjectName	none	All Resource ``	None	None
esa:UpdateCrossBorderOptimization	UpdateCrossBorderOptimization	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetUserDeliveryTask	GetUserDeliveryTask	get	All Resource ``	None	None
esa:ListOriginRules	ListOriginRules	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteRewriteUrlRule	DeleteRewriteUrlRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListWafRules	ListWafRules	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateHttpResponseHeaderModificationRule	CreateHttpResponseHeaderModificationRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateUrlObservation	CreateUrlObservation	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeHttpDDoSAttackRules	DescribeHttpDDoSAttackRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeletePage	DeletePage	delete	All Resource ``	None	None
esa:UpdateUserDeliveryTask	UpdateUserDeliveryTask	update	All Resource ``	None	None
esa:SetHttpDDoSAttackProtection	SetHttpDDoSAttackProtection	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListHttpIncomingRequestHeaderModificationRules	ListHttpIncomingRequestHeaderModificationRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetWafRuleset	GetWafRuleset	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetHttpIncomingResponseHeaderModificationRule	GetHttpIncomingResponseHeaderModificationRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:SetHttpDDoSAttackRuleAction	SetHttpDDoSAttackRuleAction	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetRedirectRule	GetRedirectRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteRecord	DeleteRecord	delete	All Resource ``	None	None
esa:ExportRecords	ExportRecords	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListLoadBalancerOriginStatus	ListLoadBalancerOriginStatus	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateCacheReserveSpec	UpdateCacheReserveSpec	create	All Resource ``	None	None
esa:BatchCreateWafRules	BatchCreateWafRules	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetRoutineStagingCodeUploadInfo	GetRoutineStagingCodeUploadInfo	none	All Resource ``	None	None
esa:DeleteSiteDeliveryTask	DeleteSiteDeliveryTask	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateCompressionRule	UpdateCompressionRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetWafQuota	GetWafQuota	get	All Resource ``	None	None
esa:CreateEdgeContainerApp	CreateEdgeContainerApp	none	All Resource ``	None	None
esa:UpdateOriginProtection	UpdateOriginProtection	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetKvAccount	GetKvAccount	get	All Resource ``	None	None
esa:GetPage	GetPage	get	All Resource ``	None	None
esa:ListOriginCaCertificates	ListOriginCaCertificates	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteHttpRequestHeaderModificationRule	DeleteHttpRequestHeaderModificationRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListWafRulesets	ListWafRulesets	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetSiteLogDeliveryQuota	GetSiteLogDeliveryQuota	none	All Resource ``	None	None
esa:GetSiteCurrentNS	GetSiteCurrentNS	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetHttpsApplicationConfiguration	GetHttpsApplicationConfiguration	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:SetOriginClientCertificateHostnames	SetOriginClientCertificateHostnames	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:BatchCreateRecords	BatchCreateRecords	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListEdgeContainerApps	ListEdgeContainerApps	none	All Resource ``	None	None
esa:ListScheduledPreloadExecutions	ListScheduledPreloadExecutions	list	All Resource ``	None	None
esa:CreateEdgeContainerAppVersion	CreateEdgeContainerAppVersion	create	All Resource ``	None	None
esa:DeleteEdgeContainerAppVersion	DeleteEdgeContainerAppVersion	delete	All Resource ``	None	None
esa:DescribeHttpDDoSIntelligentRateLimitRules	DescribeHttpDDoSIntelligentRateLimitRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteEdgeContainerApp	DeleteEdgeContainerApp	delete	All Resource ``	None	None
esa:ListEdgeRoutineRecords	ListEdgeRoutineRecords	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:BatchUpdateWafRules	BatchUpdateWafRules	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateRatePlanSpec	UpdateRatePlanSpec	create	All Resource ``	None	None
esa:UpdatePage	UpdatePage	update	All Resource ``	None	None
esa:UploadOriginClientCertificate	UploadOriginClientCertificate	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListSiteOriginClientCertificates	ListSiteOriginClientCertificates	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListUserDeliveryTasks	ListUserDeliveryTasks	list	All Resource ``	None	None
esa:ListRoutineRoutes	ListRoutineRoutes	none	All Resource ``	None	None
esa:DeleteWafRuleset	DeleteWafRuleset	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetDevelopmentMode	GetDevelopmentMode	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CheckSiteName	CheckSiteName	none	All Resource ``	None	None
esa:UpdateHttpResponseHeaderModificationRule	UpdateHttpResponseHeaderModificationRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:SetDdosMaxBurstGbps	SetDdosMaxBurstGbps	create	All Resource ``	None	None
esa:ListCiphers	ListCiphers	list	All Resource ``	None	None
esa:DeleteHttpDDoSIntelligentRule	DeleteHttpDDoSIntelligentRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateRecord	CreateRecord	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:BatchGetExpressionFields	BatchGetExpressionFields	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetSeoBypass	GetSeoBypass	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteList	DeleteList	delete	All Resource ``	None	None
esa:UpdateList	UpdateList	update	All Resource ``	None	None
esa:GetIPv6	GetIPv6	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateHttpRequestHeaderModificationRule	UpdateHttpRequestHeaderModificationRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetWafBotAppKey	GetWafBotAppKey	get	All Resource ``	None	None
esa:CreateSiteDeliveryTask	CreateSiteDeliveryTask	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteEdgeContainerAppRecord	DeleteEdgeContainerAppRecord	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateClientCertificate	CreateClientCertificate	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateCustomHostname	CreateCustomHostname	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListScheduledPreloadJobs	ListScheduledPreloadJobs	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateSite	CreateSite	create	All Resource ``	None	None
esa:DeleteHttpsBasicConfiguration	DeleteHttpsBasicConfiguration	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListManagedRulesGroups	ListManagedRulesGroups	list	All Resource ``	None	None
esa:DeleteSite	DeleteSite	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateList	CreateList	create	All Resource ``	None	None
esa:CreateRewriteUrlRule	CreateRewriteUrlRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListEdgeContainerRecords	ListEdgeContainerRecords	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteTransportLayerApplication	DeleteTransportLayerApplication	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:PutKv	PutKv	none	All Resource ``	None	None
esa:ListSiteRoutes	ListSiteRoutes	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteClientCertificate	DeleteClientCertificate	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:SetClientCertificateHostnames	SetClientCertificateHostnames	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListWafUsageOfRules	ListWafUsageOfRules	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UploadFile	UploadFile	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CommitRoutineStagingCode	CommitRoutineStagingCode	none	All Resource ``	None	None
esa:DescribePurgeTasks	DescribePurgeTasks	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteOriginProtection	DeleteOriginProtection	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListLoadBalancers	ListLoadBalancers	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListWafTemplateRules	ListWafTemplateRules	list	All Resource ``	None	None
esa:UpdateLoadBalancer	UpdateLoadBalancer	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:BlockObject	BlockObject	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetErService	GetErService	none	All Resource ``	None	None
esa:ActivateVersionManagement	ActivateVersionManagement	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetList	GetList	get	All Resource ``	None	None
esa:ListCertificates	ListCertificates	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:VerifyCustomHostname	VerifyCustomHostname	update	All Resource ``	None	None
esa:PublishEdgeContainerAppVersion	PublishEdgeContainerAppVersion	none	All Resource ``	None	None
esa:RevokeClientCertificate	RevokeClientCertificate	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateRecord	UpdateRecord	update	All Resource ``	None	None
esa:DeleteOriginPool	DeleteOriginPool	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:PutKvWithHighCapacity	PutKvWithHighCapacity	none	All Resource ``	None	None
esa:GetHttpIncomingRequestHeaderModificationRule	GetHttpIncomingRequestHeaderModificationRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetVideoProcessing	GetVideoProcessing	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListEdgeContainerAppVersions	ListEdgeContainerAppVersions	none	All Resource ``	None	None
esa:DeleteScheduledPreloadJob	DeleteScheduledPreloadJob	delete	All Resource ``	None	None
esa:GetSiteCustomLog	GetSiteCustomLog	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListUserRatePlanInstances	ListUserRatePlanInstances	list	All Resource ``	None	None
esa:CreateRoutineRoute	CreateRoutineRoute	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:SetCertificate	SetCertificate	none	All Resource ``	None	None
esa:DescribeDDoSL7QpsList	DescribeDDoSL7QpsList	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetOriginCaCertificate	GetOriginCaCertificate	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UploadSiteOriginClientCertificate	UploadSiteOriginClientCertificate	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListTransportLayerApplications	ListTransportLayerApplications	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListHttpsApplicationConfigurations	ListHttpsApplicationConfigurations	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:RebuildEdgeContainerAppStagingEnv	RebuildEdgeContainerAppStagingEnv	none	All Resource ``	None	None
esa:ListNetworkOptimizations	ListNetworkOptimizations	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateUserWafRuleset	UpdateUserWafRuleset	none	All Resource ``	None	None
esa:GetNetworkOptimization	GetNetworkOptimization	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListImageTransforms	ListImageTransforms	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteNetworkOptimization	DeleteNetworkOptimization	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetSite	GetSite	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateTransportLayerApplication	UpdateTransportLayerApplication	update	All Resource ``	None	None
esa:CreateOriginProtection	CreateOriginProtection	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListInstanceQuotasWithUsage	ListInstanceQuotasWithUsage	none	All Resource ``	None	None
esa:ListCompressionRules	ListCompressionRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteUserWafRuleset	DeleteUserWafRuleset	none	All Resource ``	None	None
esa:ListHttpResponseHeaderModificationRules	ListHttpResponseHeaderModificationRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateDevelopmentMode	UpdateDevelopmentMode	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteOriginCaCertificate	DeleteOriginCaCertificate	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteOriginRule	DeleteOriginRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListLoadBalancerRegions	ListLoadBalancerRegions	none	All Resource ``	None	None
esa:CreateImageTransform	CreateImageTransform	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListCacheRules	ListCacheRules	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateNetworkOptimization	UpdateNetworkOptimization	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:StopScheduledPreloadExecution	StopScheduledPreloadExecution	update	All Resource ``	None	None
esa:GetUserWafRuleset	GetUserWafRuleset	get	All Resource ``	None	None
esa:BatchDeleteKv	BatchDeleteKv	none	All Resource ``	None	None
esa:GetCrossBorderOptimization	GetCrossBorderOptimization	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetCacheReserveSpecification	GetCacheReserveSpecification	get	All Resource ``	None	None
esa:UntagResources	UntagResources	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetLoadBalancer	GetLoadBalancer	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListRoutineCodeVersions	ListRoutineCodeVersions	none	All Resource ``	None	None
esa:GetKv	GetKv	none	All Resource ``	None	None
esa:CreateWaitingRoom	CreateWaitingRoom	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteCacheRule	DeleteCacheRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreatePage	CreatePage	create	All Resource ``	None	None
esa:DeleteCustomHostname	DeleteCustomHostname	delete	All Resource ``	None	None
esa:GetSiteNameExclusive	GetSiteNameExclusive	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeSiteLogs	DescribeSiteLogs	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeHttpDDoSIntelligentAclRules	DescribeHttpDDoSIntelligentAclRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteKvNamespace	DeleteKvNamespace	none	All Resource ``	None	None
esa:DeleteHttpResponseHeaderModificationRule	DeleteHttpResponseHeaderModificationRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListSiteDeliveryTasks	ListSiteDeliveryTasks	list	All Resource ``	None	None
esa:UpdateRedirectRule	UpdateRedirectRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeSiteTimeSeriesData	DescribeSiteTimeSeriesData	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetEdgeContainerTerminal	GetEdgeContainerTerminal	get	All Resource ``	None	None
esa:GetCertificateQuota	GetCertificateQuota	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListRoutineRelatedRecords	ListRoutineRelatedRecords	list	All Resource ``	None	None
esa:UpdateTieredCache	UpdateTieredCache	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeUrlObservationData	DescribeUrlObservationData	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetKvNamespace	GetKvNamespace	get	All Resource ``	None	None
esa:UpdateHttpsApplicationConfiguration	UpdateHttpsApplicationConfiguration	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateScheduledPreloadJob	CreateScheduledPreloadJob	create	All Resource ``	None	None
esa:UploadClientCaCertificate	UploadClientCaCertificate	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:VerifySite	VerifySite	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateSiteCustomLog	UpdateSiteCustomLog	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateNetworkOptimization	CreateNetworkOptimization	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteRoutineRelatedRecord	DeleteRoutineRelatedRecord	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListWafManagedRules	ListWafManagedRules	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetClientCertificate	GetClientCertificate	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:SetHttpDDoSAttackRuleStatus	SetHttpDDoSAttackRuleStatus	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListClientCaCertificates	ListClientCaCertificates	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListCertificatesByRecord	ListCertificatesByRecord	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetTieredCache	GetTieredCache	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribePreloadTasks	DescribePreloadTasks	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetImageTransform	GetImageTransform	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateOriginRule	CreateOriginRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:SetHttpDDoSAttackIntelligentProtection	SetHttpDDoSAttackIntelligentProtection	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListWaitingRoomEvents	ListWaitingRoomEvents	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetEdgeContainerAppResourceStatus	GetEdgeContainerAppResourceStatus	get	All Resource ``	None	None
esa:CreateEdgeContainerAppRecord	CreateEdgeContainerAppRecord	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateHttpsBasicConfiguration	UpdateHttpsBasicConfiguration	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeRatePlanInstanceStatus	DescribeRatePlanInstanceStatus	create	All Resource ``	None	None
esa:GetHttpsBasicConfiguration	GetHttpsBasicConfiguration	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateUrlObservation	UpdateUrlObservation	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetEdgeContainerStagingDeployStatus	GetEdgeContainerStagingDeployStatus	none	All Resource ``	None	None
esa:UpdateCustomScenePolicy	UpdateCustomScenePolicy	get	All Resource ``	None	None
esa:DeleteSiteOriginClientCertificate	DeleteSiteOriginClientCertificate	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DisableCustomScenePolicy	DisableCustomScenePolicy	get	All Resource ``	None	None
esa:DeleteWaitingRoomRule	DeleteWaitingRoomRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateWafRule	UpdateWafRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListClientCertificates	ListClientCertificates	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListSites	ListSites	list	All Resource ``	None	None
esa:GetRoutineRoute	GetRoutineRoute	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateRoutineConfigDescription	UpdateRoutineConfigDescription	none	All Resource ``	None	None
esa:DescribeEdgeContainerAppStats	DescribeEdgeContainerAppStats	none	All Resource ``	None	None
esa:GetWafRule	GetWafRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateHttpIncomingRequestHeaderModificationRule	CreateHttpIncomingRequestHeaderModificationRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteWafRule	DeleteWafRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetOriginProtection	GetOriginProtection	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteRedirectRule	DeleteRedirectRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ApplyCustomHostnameCertificate	ApplyCustomHostnameCertificate	update	All Resource ``	None	None
esa:UpdateScheduledPreloadExecution	UpdateScheduledPreloadExecution	update	All Resource ``	None	None
esa:BatchDeleteKvWithHighCapacity	BatchDeleteKvWithHighCapacity	none	All Resource ``	None	None
esa:CreateRedirectRule	CreateRedirectRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateEdgeContainerAppLogRiver	UpdateEdgeContainerAppLogRiver	update	All Resource ``	None	None
esa:DeleteUrlObservation	DeleteUrlObservation	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:TagResources	TagResources	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListTagResources	ListTagResources	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:PurchaseRatePlan	PurchaseRatePlan	create	All Resource ``	None	None
esa:ListRewriteUrlRules	ListRewriteUrlRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetOriginPool	GetOriginPool	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListKvs	ListKvs	none	All Resource ``	None	None
esa:CreateUserDeliveryTask	CreateUserDeliveryTask	create	All Resource ``	None	None
esa:GetClientCaCertificate	GetClientCaCertificate	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateWaitingRoomRule	CreateWaitingRoomRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateWaitingRoomEvent	CreateWaitingRoomEvent	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateVideoProcessing	UpdateVideoProcessing	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetUserLogDeliveryQuota	GetUserLogDeliveryQuota	none	All Resource ``	None	None
esa:UpdateIPv6	UpdateIPv6	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteCustomScenePolicy	DeleteCustomScenePolicy	delete	All Resource ``	None	None
esa:GetEdgeContainerLogs	GetEdgeContainerLogs	get	All Resource ``	None	None
esa:GetEdgeContainerApp	GetEdgeContainerApp	get	All Resource ``	None	None
esa:DeleteCertificate	DeleteCertificate	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateManagedTransform	UpdateManagedTransform	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListVideoProcessings	ListVideoProcessings	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CheckUserProjectName	CheckUserProjectName	none	All Resource ``	None	None
esa:GetRewriteUrlRule	GetRewriteUrlRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:OpenErService	OpenErService	none	All Resource ``	None	None
esa:UpdateUserDeliveryTaskStatus	UpdateUserDeliveryTaskStatus	update	All Resource ``	None	None
esa:GetSiteWafSettings	GetSiteWafSettings	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteHttpIncomingResponseHeaderModificationRule	DeleteHttpIncomingResponseHeaderModificationRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListUserRoutines	ListUserRoutines	list	All Resource ``	None	None
esa:ListHttpsBasicConfigurations	ListHttpsBasicConfigurations	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListHttpIncomingResponseHeaderModificationRules	ListHttpIncomingResponseHeaderModificationRules	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListEdgeContainerAppImageSecrets	ListEdgeContainerAppImageSecrets	none	All Resource ``	None	None
esa:PurgeCaches	PurgeCaches	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateRoutineRoute	UpdateRoutineRoute	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:EnableCustomScenePolicy	EnableCustomScenePolicy	get	All Resource ``	None	None
esa:CreateHttpRequestHeaderModificationRule	CreateHttpRequestHeaderModificationRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListWaitingRooms	ListWaitingRooms	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeDDoSAllEventList	DescribeDDoSAllEventList	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetCnameFlattening	GetCnameFlattening	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteOriginClientCertificate	DeleteOriginClientCertificate	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetClientCertificateHostnames	GetClientCertificateHostnames	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteLoadBalancer	DeleteLoadBalancer	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetSiteDeliveryTask	GetSiteDeliveryTask	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetOriginClientCertificate	GetOriginClientCertificate	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateSiteAccessType	UpdateSiteAccessType	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateImageTransform	UpdateImageTransform	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetCacheRule	GetCacheRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListUrlObservations	ListUrlObservations	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeHttpDDoSAttackProtection	DescribeHttpDDoSAttackProtection	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListESAIPInfo	ListESAIPInfo	get	All Resource ``	None	None
esa:DeleteUserDeliveryTask	DeleteUserDeliveryTask	delete	All Resource ``	None	None
esa:GetCustomHostname	GetCustomHostname	get	All Resource ``	None	None
esa:GetSiteOriginClientCertificate	GetSiteOriginClientCertificate	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListEdgeRoutinePlans	ListEdgeRoutinePlans	list	All Resource ``	None	None
esa:DescribeCustomScenePolicies	DescribeCustomScenePolicies	get	All Resource ``	None	None
esa:GetRealtimeDeliveryField	GetRealtimeDeliveryField	none	All Resource ``	None	None
esa:UpdateRewriteUrlRule	UpdateRewriteUrlRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateSiteDeliveryTaskStatus	UpdateSiteDeliveryTaskStatus	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteHttpsApplicationConfiguration	DeleteHttpsApplicationConfiguration	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetWafFilter	GetWafFilter	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateHttpIncomingResponseHeaderModificationRule	UpdateHttpIncomingResponseHeaderModificationRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteRoutineCodeVersion	DeleteRoutineCodeVersion	none	All Resource ``	None	None
esa:ListOriginClientCertificates	ListOriginClientCertificates	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeDDoSBpsList	DescribeDDoSBpsList	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetRecord	GetRecord	get	All Resource ``	None	None
esa:DeleteWaitingRoomEvent	DeleteWaitingRoomEvent	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:RollbackEdgeContainerAppVersion	RollbackEdgeContainerAppVersion	none	All Resource ``	None	None
esa:GetCompressionRule	GetCompressionRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListWaitingRoomRules	ListWaitingRoomRules	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateHttpsApplicationConfiguration	CreateHttpsApplicationConfiguration	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteKv	DeleteKv	none	All Resource ``	None	None
esa:CreateUserWafRuleset	CreateUserWafRuleset	none	All Resource ``	None	None
esa:UpdateWaitingRoomEvent	UpdateWaitingRoomEvent	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteRoutineRoute	DeleteRoutineRoute	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateTransportLayerApplication	CreateTransportLayerApplication	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateLoadBalancer	CreateLoadBalancer	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UploadOriginCaCertificate	UploadOriginCaCertificate	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ActivateClientCertificate	ActivateClientCertificate	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetSitePause	GetSitePause	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:StartScheduledPreloadExecution	StartScheduledPreloadExecution	update	All Resource ``	None	None
esa:GetRoutine	GetRoutine	none	All Resource ``	None	None
esa:CreateRoutineCodeDeployment	CreateRoutineCodeDeployment	none	All Resource ``	None	None
esa:EditSiteWafSettings	EditSiteWafSettings	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetEdgeContainerAppLogRiver	GetEdgeContainerAppLogRiver	get	All Resource ``	None	None
esa:GetEdgeContainerAppStatus	GetEdgeContainerAppStatus	none	All Resource ``	None	None
esa:UpdateCacheTag	UpdateCacheTag	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ResetScheduledPreloadJob	ResetScheduledPreloadJob	update	All Resource ``	None	None
esa:ApplyCertificate	ApplyCertificate	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteClientCaCertificate	DeleteClientCaCertificate	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetKvDetail	GetKvDetail	none	All Resource ``	None	None
esa:GetHttpResponseHeaderModificationRule	GetHttpResponseHeaderModificationRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateSiteCoverage	UpdateSiteCoverage	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListUserWafRulesets	ListUserWafRulesets	none	All Resource ``	None	None
esa:CreateWafRule	CreateWafRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateWaitingRoom	UpdateWaitingRoom	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeDdosMaxBurstGbps	DescribeDdosMaxBurstGbps	get	All Resource ``	None	None
esa:GetUploadTask	GetUploadTask	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListEdgeContainerAppRecords	ListEdgeContainerAppRecords	list	All Resource ``	None	None
esa:UpdateOriginProtectionIpWhiteList	UpdateOriginProtectionIpWhiteList	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateHttpIncomingResponseHeaderModificationRule	CreateHttpIncomingResponseHeaderModificationRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:BatchPutKv	BatchPutKv	none	All Resource ``	None	None
esa:ListCacheReserveInstances	ListCacheReserveInstances	list	All Resource ``	None	None
esa:CreateOriginPool	CreateOriginPool	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetApiSchemaUsage	GetApiSchemaUsage	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateScheduledPreloadExecutions	CreateScheduledPreloadExecutions	create	All Resource ``	None	None
esa:UpdateOriginRule	UpdateOriginRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteWaitingRoom	DeleteWaitingRoom	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateWafRuleset	UpdateWafRuleset	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateSiteVanityNS	UpdateSiteVanityNS	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteImageTransform	DeleteImageTransform	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetHttpRequestHeaderModificationRule	GetHttpRequestHeaderModificationRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:BatchPutKvWithHighCapacity	BatchPutKvWithHighCapacity	none	All Resource ``	None	None
esa:ListInstanceQuotas	ListInstanceQuotas	list	All Resource ``	None	None
esa:GetOriginClientCertificateHostnames	GetOriginClientCertificateHostnames	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateRoutine	CreateRoutine	create	All Resource ``	None	None
esa:CreateCustomScenePolicy	CreateCustomScenePolicy	create	All Resource ``	None	None
esa:PreloadCaches	PreloadCaches	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeHttpDDoSAttackIntelligentProtection	DescribeHttpDDoSAttackIntelligentProtection	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateOriginPool	UpdateOriginPool	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListRedirectRules	ListRedirectRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteHttpIncomingRequestHeaderModificationRule	DeleteHttpIncomingRequestHeaderModificationRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateSiteDeliveryTask	UpdateSiteDeliveryTask	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeactivateVersionManagement	DeactivateVersionManagement	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeKvAccountStatus	DescribeKvAccountStatus	none	All Resource ``	None	None
esa:ListOriginPools	ListOriginPools	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetEdgeContainerDeployRegions	GetEdgeContainerDeployRegions	get	All Resource ``	None	None
esa:ListPages	ListPages	list	All Resource ``	None	None
esa:CreateKvNamespace	CreateKvNamespace	none	All Resource ``	None	None
esa:UpdateSiteNameExclusive	UpdateSiteNameExclusive	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetEdgeContainerAppResourceReserve	GetEdgeContainerAppResourceReserve	get	All Resource ``	None	None
esa:ListWafPhases	ListWafPhases	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateVideoProcessing	CreateVideoProcessing	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DescribeSiteTopData	DescribeSiteTopData	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateCacheRule	UpdateCacheRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateSitePause	UpdateSitePause	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListHttpRequestHeaderModificationRules	ListHttpRequestHeaderModificationRules	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetRoutineCodeVersion	GetRoutineCodeVersion	none	All Resource ``	None	None
esa:ListUploadTasks	ListUploadTasks	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateCacheRule	CreateCacheRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetOriginRule	GetOriginRule	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteScheduledPreloadExecution	DeleteScheduledPreloadExecution	update	All Resource ``	None	None
esa:GetPurgeQuota	GetPurgeQuota	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetCacheTag	GetCacheTag	get	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:CreateWafRuleset	CreateWafRuleset	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:DeleteRoutine	DeleteRoutine	delete	All Resource ``	None	None
esa:CreateSiteCustomLog	CreateSiteCustomLog	none	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetScheduledPreloadJob	GetScheduledPreloadJob	get	All Resource ``	None	None
esa:DeleteCompressionRule	DeleteCompressionRule	delete	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateCnameFlattening	UpdateCnameFlattening	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateEdgeContainerAppResourceReserve	UpdateEdgeContainerAppResourceReserve	update	All Resource ``	None	None
esa:CreateCompressionRule	CreateCompressionRule	create	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:ListCustomHostnames	ListCustomHostnames	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetCertificate	GetCertificate	list	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:UpdateWaitingRoomRule	UpdateWaitingRoomRule	update	*Site `acs:esa:{#regionId}:{#accountId}:site/{#SiteId}`	None	None
esa:GetEdgeContainerAppVersion	GetEdgeContainerAppVersion	get	All Resource ``	None	None

Resource

The following table lists the resources defined by Edge Security Acceleration. Specify them in the Resource element of RAM policy statements to grant permissions for specific operations. They are uniquely identified by ARNs. Format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: The initialism of Alibaba Cloud service, which indicates the public cloud of Alibaba Cloud.
{#ramcode}: The code used in RAM to indicate an Alibaba Cloud service.
{#regionId}: The region ID. If the resource covers all regions, set it to an asterisk (*).
{#accountId}: The ID of the Alibaba Cloud account. If the resource covers all Alibaba Cloud accounts, set it to an asterisk (*).
{#resourceType}: The service-defined resource identifier. It supports a hierarchical structure, which is similar to a file path. If the statement covers global resources, set it to an asterisk (*).

Resource type	ARN
Site	acs:esa:{#regionId}:{#accountId}:site/{#SiteId} acs:esa:{#regionId}:{#accountId}: acs:esa:{#regionId}:{#accountId}:site/*
Page	acs:esa:{#regionId}:{#accountId}:
List	acs:esa:{#regionId}:{#accountId}:

Condition

Edge Security Acceleration does not define product-level condition keys. However, you can use Alibaba Cloud common condition keys for access control. For more information, see Common condition keys.

How to create custom RAM policies?

You can create custom policies and grant them to RAM users, RAM user groups, or RAM roles. For instructions, see: