Otorisasi RAM - ENS - Alibaba Cloud Documentation Center

Resource Access Management (RAM) adalah layanan Alibaba Cloud yang dirancang untuk manajemen identitas pengguna dan kontrol izin akses resource. Melalui RAM, Anda dapat menerapkan prinsip least privilege tanpa perlu membagikan kunci akun Alibaba Cloud Anda kepada pengguna lain. RAM menggunakan kebijakan izin untuk menentukan otorisasi. Topik ini menjelaskan struktur umum kebijakan RAM, serta elemen pernyataan kebijakan (Action, Resource, dan Condition) yang didefinisikan oleh 边缘节点服务 ENS untuk kebijakan izin RAM. Kode RAM (RamCode) untuk 边缘节点服务 ENS adalah ens , dan granularitas otorisasi yang didukung adalah 资源级 .

Struktur umum kebijakan

Kebijakan izin menggunakan format JSON dengan struktur umum berikut:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

Berikut adalah penjelasan untuk setiap field dalam kebijakan

Version: Menentukan nomor versi kebijakan. Nilainya tetap 1.
Statement:
- Effect: Menentukan hasil otorisasi. Nilai yang valid: Allow dan Deny.
- Action: Menentukan satu atau beberapa operasi yang diizinkan atau ditolak.
- Resource: Menentukan objek spesifik yang terpengaruh oleh operasi tersebut. Anda dapat menggunakan Alibaba Cloud Resource Names (ARNs) untuk mengidentifikasi resource tertentu.
- Condition: Menentukan kondisi agar otorisasi berlaku. Field ini bersifat opsional.
  - Condition operator: Menentukan operator kondisional. Setiap jenis kondisi mendukung operator kondisional yang berbeda.
  - Condition_key: Menentukan condition key.
  - Condition_value: Menentukan nilai kondisi.

Action

Tabel berikut mencantumkan action yang didefinisikan oleh 边缘节点服务 ENS. Setiap kolom dalam tabel dijelaskan sebagai berikut:

Action: Dapat digunakan dalam elemen Action pada pernyataan kebijakan RAM untuk memberikan izin guna melakukan operasi tersebut.
API: API yang dipanggil untuk melakukan action tersebut.
Access level: Tingkat akses yang telah ditentukan untuk setiap API. Nilai yang valid: create, list, get, update, dan delete.
Resource type: Jenis resource yang mendukung otorisasi untuk melakukan action tersebut. Ini menunjukkan apakah action tersebut mendukung izin tingkat resource. Resource yang ditentukan harus kompatibel dengan action tersebut; jika tidak, kebijakan tidak akan berlaku.
- Untuk API dengan izin tingkat resource, jenis resource yang diperlukan ditandai dengan tanda bintang (*). Tentukan ARN yang sesuai dalam elemen Resource pada kebijakan.
- Untuk API tanpa izin tingkat resource, ini ditampilkan sebagai All Resources. Gunakan tanda bintang (*) dalam elemen Resource kebijakan.
Condition key: Ditentukan oleh layanan. Kunci ini memungkinkan kontrol yang lebih terperinci, yang berlaku baik untuk action saja maupun untuk action yang terkait dengan resource tertentu. Selain condition key spesifik layanan, Alibaba Cloud menyediakan serangkaian condition key umum yang berlaku di seluruh layanan yang terintegrasi dengan RAM. Untuk informasi lebih lanjut, lihat Common condition keys.
Dependent action: Action dependen yang diperlukan untuk menjalankan action tersebut. Agar action dapat dieksekusi dengan sukses, RAM user atau RAM role harus memiliki izin atas semua action dependen tersebut.

Action	API	Level akses	Tipe resource	Condition key	Action dependen
ens:CreateNetworkInterface	CreateNetworkInterface	create	全部资源 ``	None	None
ens:DeleteCluster	DeleteCluster	delete	全部资源 ``	None	None
ens:DescribeClusterNodes	DescribeClusterNodes	list	全部资源 ``	None	None
ens:UnloadRegionSDG	UnloadRegionSDG	none	全部资源 ``	None	None
ens:DeleteSnatIpForSnatEntry	DeleteSnatIpForSnatEntry	delete	全部资源 ``	None	None
ens:JoinSecurityGroup	JoinSecurityGroup	update	全部资源 ``	None	None
ens:DescribeMeasurementData	DescribeMeasurementData	get	全部资源 ``	None	None
ens:ReInitDisk	ReInitDisk	create	*Disk `acs:ens::{#accountId}:disk/{#DiskId}`	None	None
ens:DeleteEnsRouteEntry	DeleteEnsRouteEntry	delete	全部资源 ``	None	None
ens:SetLoadBalancerStatus	SetLoadBalancerStatus	update	全部资源 ``	None	None
ens:DescribeEnsNetLevel	DescribeEnsNetLevel		全部资源 ``	None	None
ens:DetachDisk	DetachDisk	update	全部资源 ``	None	None
ens:DescribeSnatTableEntries	DescribeSnatTableEntries	list	全部资源 ``	None	None
ens:AddNetworkInterfaceToInstance	AddNetworkInterfaceToInstance	create	全部资源 ``	None	None
ens:DescribeLoadBalancerHTTPSListenerAttribute	DescribeLoadBalancerHTTPSListenerAttribute	get	全部资源 ``	None	None
ens:DeleteEip	DeleteEip	delete	全部资源 ``	None	None
ens:ModifyInstanceChargeType	ModifyInstanceChargeType	update	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:ExportBillDetailData	ExportBillDetailData	get	全部资源 ``	None	None
ens:DescribeAvailableResource	DescribeAvailableResource	get	全部资源 ``	None	None
ens:RevokeSecurityGroup	RevokeSecurityGroup	update	全部资源 ``	None	None
ens:DistApplicationData	DistApplicationData	update	全部资源 ``	None	None
ens:DescribeVSwitchAttributes	DescribeVSwitchAttributes	get	全部资源 ``	None	None
ens:JoinPublicIpsToEpnInstance	JoinPublicIpsToEpnInstance	update	全部资源 ``	None	None
ens:CreateSecurityGroup	CreateSecurityGroup	create	全部资源 ``	None	None
ens:DescribeEpnBandWidthData	DescribeEpnBandWidthData	get	全部资源 ``	None	None
ens:DescribeNetworkPeerConnections	DescribeNetworkPeerConnections	list	全部资源 ``	None	None
ens:DescribeDiskIopsList	DescribeDiskIopsList	none	*disk `acs:ens::{#accountId}:disk/{#DiskId}`	None	None
ens:RemoveInstanceSDG	RemoveInstanceSDG	update	全部资源 ``	None	None
ens:DescribeInstanceSpec	DescribeInstanceSpec	get	全部资源 ``	None	None
ens:CreateEipInstance	CreateEipInstance	create	全部资源 ``	None	None
ens:ModifySnatEntry	ModifySnatEntry	update	*NatGatewaySnatEntry `acs:ens::{#accountId}:natgatewaysnatentry/{#SnatEntryId}`	None	None
ens:StartEpnInstance	StartEpnInstance	update	全部资源 ``	None	None
ens:RemoveSDGs	RemoveSDGs	none	全部资源 ``	None	None
ens:StopInstance	StopInstance	update	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:ResizeDisk	ResizeDisk	update	全部资源 ``	None	None
ens:ListTagResources	ListTagResources	list	全部资源 ``	None	None
ens:DeleteKeyPairs	DeleteKeyPairs	delete	全部资源 ``	None	None
ens:DescribeHistoryEvents	DescribeHistoryEvents	none	全部资源 ``	None	None
ens:CreateLoadBalancer	CreateLoadBalancer	create	全部资源 ``	None	None
ens:DescribeEnsResourceUsage	DescribeEnsResourceUsage	get	全部资源 ``	None	None
ens:DescribeExportImageInfo	DescribeExportImageInfo	get	全部资源 ``	None	None
ens:ScaleClusterNodePool	ScaleClusterNodePool	update	全部资源 ``	None	None
ens:DescribeSDGSharedDisks	DescribeSDGSharedDisks	none	全部资源 ``	None	None
ens:DescribeEnsRegionIdResource	DescribeEnsRegionIdResource	get	全部资源 ``	None	None
ens:RevokeSecurityGroupEgress	RevokeSecurityGroupEgress	update	全部资源 ``	None	None
ens:DescribeUserBandWidthData	DescribeUserBandWidthData	get	全部资源 ``	None	None
ens:DescribeAICImages	DescribeAICImages	none	全部资源 ``	None	None
ens:DeleteClusterNodePool	DeleteClusterNodePool	delete	全部资源 ``	None	None
ens:DescribeAvailableResourceInfo	DescribeAvailableResourceInfo	get	全部资源 ``	None	None
ens:DescribeKeyPairs	DescribeKeyPairs	get	全部资源 ``	None	None
ens:BatchEventRebootInstance	BatchEventRebootInstance	none	全部资源 ``	None	None
ens:CreateClusterNodePool	CreateClusterNodePool	create	全部资源 ``	None	None
ens:DescribeCloudDiskAvailableResourceInfo	DescribeCloudDiskAvailableResourceInfo	get	全部资源 ``	None	None
ens:DescribeInstanceSDGStatus	DescribeInstanceSDGStatus	list	全部资源 ``	None	None
ens:ModifyImageSharePermission	ModifyImageSharePermission	update	*Image `acs:ens::{#accountId}:image/{#ImageId}`	None	None
ens:AssociateHaVip	AssociateHaVip	update	*HaVip `acs:ens::{#accountId}:havip/{#HaVipId}`	None	None
ens:DeleteVSwitch	DeleteVSwitch	delete	全部资源 ``	None	None
ens:ModifyEnsRouteEntry	ModifyEnsRouteEntry	update	全部资源 ``	None	None
ens:SetLoadBalancerHTTPSListenerAttribute	SetLoadBalancerHTTPSListenerAttribute	update	全部资源 ``	None	None
ens:DescribeForwardTableEntries	DescribeForwardTableEntries	list	全部资源 ``	None	None
ens:UnAssociateEnsEipAddress	UnAssociateEnsEipAddress	update	全部资源 ``	None	None
ens:ExportImage	ExportImage	get	全部资源 ``	None	None
ens:DeleteImage	DeleteImage	delete	*Image `acs:ens::{#accountId}:image/{#ImageId}`	None	None
ens:ListApplications	ListApplications	get	全部资源 ``	None	None
ens:ModifyForwardEntry	ModifyForwardEntry	update	全部资源 ``	None	None
ens:DescribeSecurityGroups	DescribeSecurityGroups	list	全部资源 ``	None	None
ens:DeleteNetworkAclEntry	DeleteNetworkAclEntry		全部资源 ``	None	None
ens:ModifyHaVipAttribute	ModifyHaVipAttribute	update	全部资源 ``	None	None
ens:ModifyPrepayInstanceSpec	ModifyPrepayInstanceSpec	update	全部资源 ``	None	None
ens:CreateVSwitch	CreateVSwitch	create	全部资源 ``	None	None
ens:DescribeSDGDeploymentStatus	DescribeSDGDeploymentStatus	none	全部资源 ``	None	None
ens:DescribeInstanceAutoRenewAttribute	DescribeInstanceAutoRenewAttribute	get	全部资源 ``	None	None
ens:ModifyInstanceAutoRenewAttribute	ModifyInstanceAutoRenewAttribute	update	全部资源 ``	None	None
ens:DeleteBucket	DeleteBucket	delete	全部资源 ``	None	None
ens:DescribePrePaidInstanceStock	DescribePrePaidInstanceStock	get	全部资源 ``	None	None
ens:DescribeMountTargets	DescribeMountTargets		全部资源 ``	None	None
ens:DescribeForwardEntryAttribute	DescribeForwardEntryAttribute	get	*NatGatewayForwardEntry `acs:ens::{#accountId}:natgatewayforwardentry/{#ForwardEntryId}`	None	None
ens:DescribeInstanceBootConfiguration	DescribeInstanceBootConfiguration	get	全部资源 ``	None	None
ens:CreateSDG	CreateSDG	none	全部资源 ``	None	None
ens:DeleteSDG	DeleteSDG	none	全部资源 ``	None	None
ens:DescribeServcieSchedule	DescribeServcieSchedule		全部资源 ``	None	None
ens:DeleteNetwork	DeleteNetwork	delete	全部资源 ``	None	None
ens:CreateImage	CreateImage	create	全部资源 ``	None	None
ens:JoinVSwitchesToEpnInstance	JoinVSwitchesToEpnInstance	update	全部资源 ``	None	None
ens:UnInstallClusterAddons	UnInstallClusterAddons	create	全部资源 ``	None	None
ens:DescribeNetworkAcls	DescribeNetworkAcls	list	全部资源 ``	None	None
ens:CreateNatGateway	CreateNatGateway	create	全部资源 ``	None	None
ens:DescribeInstanceMonitorData	DescribeInstanceMonitorData	get	全部资源 ``	None	None
ens:AuthorizeSecurityGroup	AuthorizeSecurityGroup	update	全部资源 ``	None	None
ens:DescribePrice	DescribePrice	get	全部资源 ``	None	None
ens:ManageAICLogin	ManageAICLogin	none	全部资源 ``	None	None
ens:DeleteNatGateway	DeleteNatGateway	delete	全部资源 ``	None	None
ens:DescribeFileSystems	DescribeFileSystems	list	全部资源 ``	None	None
ens:DescribeEnsNetSaleDistrict	DescribeEnsNetSaleDistrict		全部资源 ``	None	None
ens:DeleteNetworkAcl	DeleteNetworkAcl	create	全部资源 ``	None	None
ens:StartSnatIpForSnatEntry	StartSnatIpForSnatEntry		全部资源 ``	None	None
ens:StartInstance	StartInstance	update	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:DescribeExportImageStatus	DescribeExportImageStatus	get	全部资源 ``	None	None
ens:EventMigrateInstance	EventMigrateInstance	none	全部资源 ``	None	None
ens:DescribeDisks	DescribeDisks	get	*Disk `acs:ens::{#accountId}:disk/{#DiskId}`	None	None
ens:CreateLoadBalancerUDPListener	CreateLoadBalancerUDPListener	create	全部资源 ``	None	None
ens:DescribeStorageGateway	DescribeStorageGateway	list	全部资源 ``	None	None
ens:UpgradeAICInstanceImage	UpgradeAICInstanceImage	update	全部资源 ``	None	None
ens:CreateKeyPair	CreateKeyPair	create	全部资源 ``	None	None
ens:CopySDG	CopySDG	none	全部资源 ``	None	None
ens:ModifyImageAttribute	ModifyImageAttribute	update	全部资源 ``	None	None
ens:AttachNetworkInterface	AttachNetworkInterface	update	全部资源 ``	None	None
ens:RebootAICInstance	RebootAICInstance	update	全部资源 ``	None	None
ens:PutBucketAcl	PutBucketAcl	none	全部资源 ``	None	None
ens:AttachInstanceSDG	AttachInstanceSDG	none	全部资源 ``	None	None
ens:UnmountInstanceSDG	UnmountInstanceSDG	none	全部资源 ``	None	None
ens:DescribeLoadBalancerHTTPListenerAttribute	DescribeLoadBalancerHTTPListenerAttribute	get	全部资源 ``	None	None
ens:SaveSDG	SaveSDG	none	全部资源 ``	None	None
ens:DeleteFileSystem	DeleteFileSystem		全部资源 ``	None	None
ens:DescribeCluster	DescribeCluster	get	全部资源 ``	None	None
ens:CreateLoadBalancerHTTPListener	CreateLoadBalancerHTTPListener	create	全部资源 ``	None	None
ens:CreateSnapshot	CreateSnapshot	create	全部资源 ``	None	None
ens:CreateForwardEntry	CreateForwardEntry	create	全部资源 ``	None	None
ens:DeploySDG	DeploySDG	create	全部资源 ``	None	None
ens:ModifyNetworkInterfaceAttribute	ModifyNetworkInterfaceAttribute	update	全部资源 ``	None	None
ens:RunServiceSchedule	RunServiceSchedule	update	全部资源 ``	None	None
ens:UnassignPrivateIpAddresses	UnassignPrivateIpAddresses	update	全部资源 ``	None	None
ens:DeleteSnapshot	DeleteSnapshot	delete	全部资源 ``	None	None
ens:CreateARMServerInstances	CreateARMServerInstances	create	全部资源 ``	None	None
ens:DescribeInstanceVncUrl	DescribeInstanceVncUrl	get	全部资源 ``	None	None
ens:ModifySnapshotAttribute	ModifySnapshotAttribute		全部资源 ``	None	None
ens:DescribeInstanceTypes	DescribeInstanceTypes	get	全部资源 ``	None	None
ens:GetOssStorageAndAccByBuckets	GetOssStorageAndAccByBuckets		全部资源 ``	None	None
ens:SetLoadBalancerHTTPListenerAttribute	SetLoadBalancerHTTPListenerAttribute	update	全部资源 ``	None	None
ens:CreateEnsService	CreateEnsService	create	全部资源 ``	None	None
ens:DeleteStorageGateway	DeleteStorageGateway	delete	全部资源 ``	None	None
ens:RemoveBackendServers	RemoveBackendServers	update	全部资源 ``	None	None
ens:UnassociateNetworkAcl	UnassociateNetworkAcl	update	全部资源 ``	None	None
ens:DescribeVSwitches	DescribeVSwitches	list	全部资源 ``	None	None
ens:DescribeNetworkInterfaces	DescribeNetworkInterfaces	list	全部资源 ``	None	None
ens:CreateFileSystem	CreateFileSystem	create	全部资源 ``	None	None
ens:SetBackendServers	SetBackendServers	update	全部资源 ``	None	None
ens:CreateNetworkAclEntry	CreateNetworkAclEntry	create	全部资源 ``	None	None
ens:AddBackendServers	AddBackendServers	create	全部资源 ``	None	None
ens:DescribeSecondaryPublicIpAddresses	DescribeSecondaryPublicIpAddresses	list	全部资源 ``	None	None
ens:ModifyEnsEipAddressAttribute	ModifyEnsEipAddressAttribute	update	全部资源 ``	None	None
ens:DeleteEpnInstance	DeleteEpnInstance	delete	全部资源 ``	None	None
ens:DeleteSecurityGroupPermissions	DeleteSecurityGroupPermissions	delete	全部资源 ``	None	None
ens:ModifyInstanceBootConfiguration	ModifyInstanceBootConfiguration	update	全部资源 ``	None	None
ens:AssociateEnsEipAddress	AssociateEnsEipAddress	update	全部资源 ``	None	None
ens:PrepareUpload	PrepareUpload	get	全部资源 ``	None	None
ens:CreateLoadBalancerHTTPSListener	CreateLoadBalancerHTTPSListener	create	全部资源 ``	None	None
ens:AuthorizeSecurityGroupEgress	AuthorizeSecurityGroupEgress	update	全部资源 ``	None	None
ens:DescribeLoadBalancers	DescribeLoadBalancers	list	全部资源 ``	None	None
ens:ModifyClusterNodePool	ModifyClusterNodePool	update	全部资源 ``	None	None
ens:DescribeBandWithdChargeType	DescribeBandWithdChargeType	get	全部资源 ``	None	None
ens:RemoveSDG	RemoveSDG	update	全部资源 ``	None	None
ens:StopLoadBalancerListener	StopLoadBalancerListener	update	全部资源 ``	None	None
ens:DescribeCloudDiskTypes	DescribeCloudDiskTypes	list	全部资源 ``	None	None
ens:DescribeInstanceBandwidthDetail	DescribeInstanceBandwidthDetail	list	全部资源 ``	None	None
ens:BatchEventRedeployInstance	BatchEventRedeployInstance	none	全部资源 ``	None	None
ens:ModifyVSwitchAttribute	ModifyVSwitchAttribute	update	全部资源 ``	None	None
ens:DescribeSnatAttribute	DescribeSnatAttribute	get	全部资源 ``	None	None
ens:BatchEventMigrateInstance	BatchEventMigrateInstance	none	全部资源 ``	None	None
ens:ModifySecurityGroupAttribute	ModifySecurityGroupAttribute	update	全部资源 ``	None	None
ens:DeployInstanceSDG	DeployInstanceSDG	none	全部资源 ``	None	None
ens:DescribeApplication	DescribeApplication	get	全部资源 ``	None	None
ens:DescribeElbAvailableResourceInfo	DescribeElbAvailableResourceInfo	get	全部资源 ``	None	None
ens:PushApplicationData	PushApplicationData	update	全部资源 ``	None	None
ens:ReleaseARMServerInstance	ReleaseARMServerInstance	delete	全部资源 ``	None	None
ens:ModifyEpnInstance	ModifyEpnInstance	update	全部资源 ``	None	None
ens:EventRedeployInstance	EventRedeployInstance	none	全部资源 ``	None	None
ens:MountInstanceSDG	MountInstanceSDG	none	全部资源 ``	None	None
ens:DescribeSDG	DescribeSDG	none	全部资源 ``	None	None
ens:DescribeEnsRouteEntryList	DescribeEnsRouteEntryList	list	全部资源 ``	None	None
ens:DescribeLoadBalancerTCPListenerAttribute	DescribeLoadBalancerTCPListenerAttribute	get	全部资源 ``	None	None
ens:CreateMountTarget	CreateMountTarget	create	全部资源 ``	None	None
ens:DescribeARMServerInstances	DescribeARMServerInstances	list	全部资源 ``	None	None
ens:ReleaseAICInstance	ReleaseAICInstance	delete	全部资源 ``	None	None
ens:DescribeHaVips	DescribeHaVips	list	全部资源 ``	None	None
ens:DeleteSnatEntry	DeleteSnatEntry	delete	全部资源 ``	None	None
ens:DescribeLoadBalancerListeners	DescribeLoadBalancerListeners	list	全部资源 ``	None	None
ens:DescribeLoadBalancerUDPListenerAttribute	DescribeLoadBalancerUDPListenerAttribute	get	全部资源 ``	None	None
ens:CreateClassicNetwork	CreateClassicNetwork		全部资源 ``	None	None
ens:DescribeStorageVolume	DescribeStorageVolume	list	全部资源 ``	None	None
ens:CreateSecurityGroupPermissions	CreateSecurityGroupPermissions	create	全部资源 ``	None	None
ens:ModifyInstanceAttribute	ModifyInstanceAttribute	update	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:DeleteClusterNodes	DeleteClusterNodes	delete	全部资源 ``	None	None
ens:CopySnapshot	CopySnapshot	create	全部资源 ``	None	None
ens:EventRebootInstance	EventRebootInstance	none	全部资源 ``	None	None
ens:DescribeEnsRouteTables	DescribeEnsRouteTables	list	全部资源 ``	None	None
ens:DescribeCreatePrePaidInstanceResult	DescribeCreatePrePaidInstanceResult	get	全部资源 ``	None	None
ens:ResetDisk	ResetDisk	update	全部资源 ``	None	None
ens:ExportMeasurementData	ExportMeasurementData	get	全部资源 ``	None	None
ens:TagResources	TagResources	create	全部资源 ``	None	None
ens:DeleteHaVips	DeleteHaVips	delete	*HaVip `acs:ens::{#accountId}:havip/{#HaVipIds}`	None	None
ens:ListObjects	ListObjects	list	全部资源 ``	None	None
ens:DescribeEnsRegionIdIpv6Info	DescribeEnsRegionIdIpv6Info		全部资源 ``	None	None
ens:ReinitInstance	ReinitInstance	update	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:GetBucketLifecycle	GetBucketLifecycle	get	全部资源 ``	None	None
ens:CreateNetworkAcl	CreateNetworkAcl	create	全部资源 ``	None	None
ens:DetachNetworkInterface	DetachNetworkInterface	update	全部资源 ``	None	None
ens:DescribeDeviceService	DescribeDeviceService	get	全部资源 ``	None	None
ens:ListAICPublicKeys	ListAICPublicKeys	none	全部资源 ``	None	None
ens:ShareAICImage	ShareAICImage	none	全部资源 ``	None	None
ens:DescribeServerLoadBalancerMonitor	DescribeServerLoadBalancerMonitor	list	全部资源 ``	None	None
ens:DescribeNatGateways	DescribeNatGateways	list	全部资源 ``	None	None
ens:DescribeEpnBandwitdhByInternetChargeType	DescribeEpnBandwitdhByInternetChargeType	get	全部资源 ``	None	None
ens:DescribeLoadBalancerSpec	DescribeLoadBalancerSpec	get	全部资源 ``	None	None
ens:SetLoadBalancerTCPListenerAttribute	SetLoadBalancerTCPListenerAttribute	update	全部资源 ``	None	None
ens:RunInstances	RunInstances	create	Instance `acs:ens::{#accountId}:instance/*`	None	None
ens:DescribeClustersV1	DescribeClustersV1	create	全部资源 ``	None	None
ens:UpdateClusterCertificate	UpdateClusterCertificate	update	全部资源 ``	None	None
ens:DescribeDataPushResult	DescribeDataPushResult	get	全部资源 ``	None	None
ens:DescribeBandwitdhByInternetChargeType	DescribeBandwitdhByInternetChargeType	get	全部资源 ``	None	None
ens:CreateStorageVolume	CreateStorageVolume	create	全部资源 ``	None	None
ens:ListBuckets	ListBuckets	list	全部资源 ``	None	None
ens:DescribeLoadBalancerListenMonitor	DescribeLoadBalancerListenMonitor	none	全部资源 ``	None	None
ens:DescribeDataDownloadURL	DescribeDataDownloadURL	get	全部资源 ``	None	None
ens:DescribeEnsEipAddresses	DescribeEnsEipAddresses	list	全部资源 ``	None	None
ens:DeleteForwardEntry	DeleteForwardEntry	delete	全部资源 ``	None	None
ens:DescribeClusterDetail	DescribeClusterDetail	get	全部资源 ``	None	None
ens:AttachDisk	AttachDisk	update	全部资源 ``	None	None
ens:ModifyNetworkAttribute	ModifyNetworkAttribute	update	全部资源 ``	None	None
ens:ListAddons	ListAddons	create	全部资源 ``	None	None
ens:DescribeLoadBalancerAttribute	DescribeLoadBalancerAttribute	get	全部资源 ``	None	None
ens:GetBucketAcl	GetBucketAcl	get	全部资源 ``	None	None
ens:ReleasePrePaidInstance	ReleasePrePaidInstance	delete	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:StartLoadBalancerListener	StartLoadBalancerListener	update	全部资源 ``	None	None
ens:CreateEnsRouteEntry	CreateEnsRouteEntry	create	全部资源 ``	None	None
ens:ImportKeyPair	ImportKeyPair	create	全部资源 ``	None	None
ens:PutBucketLifecycle	PutBucketLifecycle	none	全部资源 ``	None	None
ens:CreateHaVips	CreateHaVip	create	全部资源 ``	None	None
ens:DescribeNetworkAttribute	DescribeNetworkAttribute	get	全部资源 ``	None	None
ens:DescribeClusterUserKubeconfig	DescribeClusterUserKubeconfig	get	全部资源 ``	None	None
ens:DeleteMountTarget	DeleteMountTarget		全部资源 ``	None	None
ens:RollbackApplication	RollbackApplication	update	全部资源 ``	None	None
ens:CreateStorageGateway	CreateStorageGateway	create	全部资源 ``	None	None
ens:DeleteDisk	DeleteDisk	delete	全部资源 ``	None	None
ens:CreateLoadBalancerTCPListener	CreateLoadBalancerTCPListener	create	全部资源 ``	None	None
ens:DescribeSelfImages	DescribeSelfImages	list	全部资源 ``	None	None
ens:DeleteNetworkInterfaces	DeleteNetworkInterfaces	none	全部资源 ``	None	None
ens:DescribeNASAvailableResourceInfo	DescribeNASAvailableResourceInfo	get	全部资源 ``	None	None
ens:DeleteSecurityGroup	DeleteSecurityGroup	delete	全部资源 ``	None	None
ens:DescribeImages	DescribeImages	list	全部资源 ``	None	None
ens:CreateInstance	CreateInstance	create	Instance `acs:ens::{#accountId}:instance/*`	None	None
ens:LeaveSecurityGroup	LeaveSecurityGroup	update	全部资源 ``	None	None
ens:AssignPrivateIpAddresses	AssignPrivateIpAddresses	create	全部资源 ``	None	None
ens:ReleaseInstance	ReleaseInstance	delete	全部资源 ``	None	None
ens:DescribeEnsRegions	DescribeEnsRegions	list	全部资源 ``	None	None
ens:DescribeSDGs	DescribeSDGs	none	全部资源 ``	None	None
ens:DeleteApplication	DeleteApplication	delete	全部资源 ``	None	None
ens:ImportImage	ImportImage	create	全部资源 ``	None	None
ens:InitializeENSECKServiceRole	InitializeENSECKServiceRole	create	全部资源 ``	None	None
ens:DescribeEpnInstanceAttribute	DescribeEpnInstanceAttribute	get	全部资源 ``	None	None
ens:UpgradeClusterAddons	UpgradeClusterAddons	create	全部资源 ``	None	None
ens:PutBucket	PutBucket	create	全部资源 ``	None	None
ens:ModifyClusterAddon	ModifyClusterAddon	create	全部资源 ``	None	None
ens:InstallClusterAddons	InstallClusterAddons	create	全部资源 ``	None	None
ens:ListAICPublicKeyDeliveries	ListAICPublicKeyDeliveries	none	全部资源 ``	None	None
ens:DeleteBucketLifecycle	DeleteBucketLifecycle	delete	全部资源 ``	None	None
ens:ListClusterAddonInstances	ListClusterAddonInstances	get	全部资源 ``	None	None
ens:DescribeReservedResource	DescribeReservedResource	get	全部资源 ``	None	None
ens:CreateApplication	CreateApplication	create	全部资源 ``	None	None
ens:UnassociateHaVip	UnassociateHaVip	update	全部资源 ``	None	None
ens:GetClusterAddonInstance	GetClusterAddonInstance	create	全部资源 ``	None	None
ens:DescribeEpnInstances	DescribeEpnInstances	get	全部资源 ``	None	None
ens:CreateEpnInstance	CreateEpnInstance	create	全部资源 ``	None	None
ens:DescribeImageSharePermission	DescribeImageSharePermission	get	全部资源 ``	None	None
ens:GetOssUsageData	GetOssUsageData		全部资源 ``	None	None
ens:DescribeClusterAttachScripts	DescribeClusterAttachScripts	get	全部资源 ``	None	None
ens:DescribeEnsNetDistrict	DescribeEnsNetDistrict	get	全部资源 ``	None	None
ens:AttachInstancesToNodePool	AttachInstancesToNodePool	get	全部资源 ``	None	None
ens:RescaleDeviceService	RescaleDeviceService	update	全部资源 ``	None	None
ens:DescribeImageInfos	DescribeImageInfos	get	全部资源 ``	None	None
ens:ModifyAICInstanceType	ModifyAICInstanceType	update	全部资源 ``	None	None
ens:DetachInstanceSDG	DetachInstanceSDG	none	全部资源 ``	None	None
ens:DeleteStorageVolume	DeleteStorageVolume	delete	全部资源 ``	None	None
ens:ModifyInstanceNetworkAttribute	ModifyInstanceNetworkAttribute	update	全部资源 ``	None	None
ens:DescribeSnapshots	DescribeSnapshots	list	全部资源 ``	None	None
ens:DescribeClusterNodePools	DescribeClusterNodePools	list	全部资源 ``	None	None
ens:ResetAICInstance	ResetAICInstance	update	全部资源 ``	None	None
ens:UploadAICPublicKey	UploadAICPublicKey	create	全部资源 ``	None	None
ens:CreateDisk	CreateDisk	create	全部资源 ``	None	None
ens:RenewInstance	RenewInstance	none	全部资源 ``	None	None
ens: DetachKeyPair	DetachKeyPair	update	* KeyPair `acs:ens::{#accountId}:keyPair/{#KeyPairId}` * Instance `acs:ens::{#accountId}:instance/{#InstanceIds}` * KeyPair `acs:ens::{#accountId}:keyPair/{#KeyPairName}`	None	None
ens:DeleteNetworkPeerConnection	DeleteNetworkPeerConnection	delete	全部资源 ``	None	None
ens:DeleteObject	DeleteObject	delete	全部资源 ``	None	None
ens:DescribeNetworks	DescribeNetworks	list	全部资源 ``	None	None
ens:PreloadRegionSDG	PreloadRegionSDG	none	全部资源 ``	None	None
ens:DescribeServerLoadBalancerListenMonitor	DescribeServerLoadBalancerListenMonitor	list	全部资源 ``	None	None
ens:CreateCluster	CreateCluster	create	全部资源 ``	None	None
ens:DescribeAddon	DescribeAddon	get	全部资源 ``	None	None
ens:AttachEnsInstances	AttachEnsInstances	update	全部资源 ``	None	None
ens: AttachKeyPair	AttachKeyPair	update	* KeyPair `acs:ens::{#accountId}:keyPair/{#KeyPairId}` * Instance `acs:ens::{#accountId}:instance/{#InstanceIds}` * KeyPair `acs:ens::{#accountId}:keyPair/{#KeyPairName}`	None	None
ens:ListProductAbilities	ListProductAbilities	list	全部资源 ``	None	None
ens:SetLoadBalancerUDPListenerAttribute	SetLoadBalancerUDPListenerAttribute	update	全部资源 ``	None	None
ens:DeleteAICPublicKey	DeleteAICPublicKey	none	全部资源 ``	None	None
ens:RenewARMServerInstance	RenewARMServerInstance	update	全部资源 ``	None	None
ens:RebootARMServerInstance	RebootARMServerInstance	get	全部资源 ``	None	None
ens:DescribeSecurityGroupAttribute	DescribeSecurityGroupAttribute	get	全部资源 ``	None	None
ens:StopEpnInstance	StopEpnInstance	update	全部资源 ``	None	None
ens:RemoveVSwitchesFromEpnInstance	RemoveVSwitchesFromEpnInstance	update	全部资源 ``	None	None
ens:RescaleApplication	RescaleApplication	update	全部资源 ``	None	None
ens:ModifyLoadBalancerAttribute	ModifyLoadBalancerAttribute	update	全部资源 ``	None	None
ens:AddSnatIpForSnatEntry	AddSnatIpForSnatEntry		全部资源 ``	None	None
ens:GetBucketInfo	GetBucketInfo	get	全部资源 ``	None	None
ens:DeleteLoadBalancerListener	DeleteLoadBalancerListener	delete	全部资源 ``	None	None
ens:RebootInstance	RebootInstance	update	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:CreateSnatEntry	CreateSnatEntry	create	全部资源 ``	None	None
ens:DescribeInstances	DescribeInstances	list	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:RemovePublicIpsFromEpnInstance	RemovePublicIpsFromEpnInstance	update	全部资源 ``	None	None
ens:DescribeClusterKubeConfig	DescribeClusterKubeConfig	get	全部资源 ``	None	None
ens:StopSnatIpForSnatEntry	StopSnatIpForSnatEntry		全部资源 ``	None	None
ens:ReleasePostPaidInstance	ReleasePostPaidInstance	delete	Instance `acs:ens::{#accountId}:instance/{#InstanceId}`	None	None
ens:UntagResources	UntagResources	update	全部资源 ``	None	None
ens:CreateNetwork	CreateNetwork	create	全部资源 ``	None	None
ens:DescribeEpnMeasurementData	DescribeEpnMeasurementData	get	全部资源 ``	None	None
ens:AccosicateNetworkAcl	AccosicateNetworkAcl	update	全部资源 ``	None	None
ens:RecoverAICInstance	RecoverAICInstance	update	全部资源 ``	None	None
ens:DescribeDataDistResult	DescribeDataDistResult	get	全部资源 ``	None	None
ens:UpgradeApplication	UpgradeApplication	update	全部资源 ``	None	None
ens:DescribeRegionIsps	DescribeRegionIsps	list	全部资源 ``	None	None
ens:ModifyFileSystem	ModifyFileSystem	create	全部资源 ``	None	None

Resource

Tabel berikut mencantumkan resource yang ditentukan oleh 边缘节点服务 ENS. Tentukan resource tersebut dalam elemen Resource pada pernyataan kebijakan RAM untuk memberikan izin terhadap operasi tertentu. Resource tersebut diidentifikasi secara unik menggunakan ARN dengan format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: Singkatan dari Alibaba Cloud service, yang menunjukkan cloud publik Alibaba Cloud.
{#ramcode}: Kode yang digunakan dalam RAM untuk menunjukkan layanan Alibaba Cloud.
{#regionId}: region ID. Jika resource mencakup semua wilayah, atur nilainya menjadi tanda bintang (*).
{#accountId}: ID akun Alibaba Cloud. Jika resource mencakup semua akun Alibaba Cloud, atur nilainya menjadi tanda bintang (*).
{#resourceType}: Identifier resource yang ditentukan oleh layanan. Mendukung struktur hierarkis, mirip dengan path file. Jika pernyataan mencakup resource global, atur nilainya menjadi tanda bintang (*).

Tipe resource	ARN
Disk	acs:ens::{#accountId}:disk/{#DiskId}
Instance	acs:ens::{#accountId}:instance/{#InstanceId} acs:ens::{#accountId}:instance/*
disk	acs:ens::{#accountId}:disk/{#DiskId}
NatGatewaySnatEntry	acs:ens::{#accountId}:natgatewaysnatentry/{#SnatEntryId}
Image	acs:ens::{#accountId}:image/{#ImageId}
HaVip	acs:ens::{#accountId}:havip/{#HaVipId} acs:ens::{#accountId}:havip/{#HaVipIds}
NatGatewayForwardEntry	acs:ens::{#accountId}:natgatewayforwardentry/{#ForwardEntryId}
KeyPair	acs:ens::{#accountId}:keyPair/{#KeyPairId} acs:ens::{#accountId}:keyPair/{#KeyPairName}
Instance	acs:ens::{#accountId}:instance/{#InstanceIds}

Condition

边缘节点服务 ENS tidak mendefinisikan condition key tingkat produk. Namun, Anda dapat menggunakan condition key umum Alibaba Cloud untuk kontrol akses. Untuk informasi lebih lanjut, lihat Common condition keys.

Cara membuat kebijakan RAM kustom?

Anda dapat membuat kebijakan kustom dan memberikannya kepada RAM user, RAM user group, atau RAM role. Untuk caranya, lihat: