All Products
Search
Document Center

Key Management Service:DescribePolicy

Last Updated:Jun 10, 2026

Mengambil detail kebijakan izin.

Deskripsi operasi

For more information about the access policy required by a RAM user or RAM role to call this API, see Resource Access Management.

Coba sekarang

Coba API ini di OpenAPI Explorer tanpa perlu penandatanganan manual. Panggilan yang berhasil akan secara otomatis menghasilkan contoh kode SDK sesuai dengan parameter Anda. Unduh kode tersebut dengan kredensial bawaan yang aman untuk penggunaan lokal.

Test

RAM authorization

Tidak ada otorisasi untuk operasi ini. Jika Anda mengalami masalah saat menjalankan operasi ini, hubungi dukungan teknis.

Parameter permintaan

Parameter

Type

Required

Description

Example

Name

string

Yes

Nama kebijakan izin yang ingin Anda kueri.

policy_test

Elemen respons

Element

Type

Description

Example

object

RequestId

string

The request ID.

f455324b-e229-4066-9f58-9c1cf3fe83a9

Arn

string

The Alibaba Cloud Resource Name (ARN) of the permission policy.

acs:kms:cn-hangzhou:119285303511****:policy/policy_test

Name

string

The name of the permission policy.

policy_test

Description

string

The description.

policy description

KmsInstance

string

The scope of the permission policy.

kst-hzz634e67d126u9p9****

Permissions

array

A list of operations that can be performed.

["RbacPermission/Template/CryptoServiceKeyUser", "RbacPermission/Template/CryptoServiceSecretUser"]

string

The operations that can be performed.

["RbacPermission/Template/CryptoServiceKeyUser", "RbacPermission/Template/CryptoServiceSecretUser"]

Resources

array

A list of keys and secrets that are allowed to access.

["secret/acs/ram/user/ram-secret", "secret/acs/ram/user/acr-master", "key/key-hzz63d9c8d3dfv8cv****"]

string

The keys and secrets that are allowed to access.

["secret/acs/ram/user/ram-secret", "secret/acs/ram/user/acr-master", "key/key-hzz63d9c8d3dfv8cv****"]

AccessControlRules

string

The network access rule that is associated with the permission policy.

{"NetworkRules":["kst-hzz62ee817bvyyr5x****.efkd","kst-hzz62ee817bvyyr5x****.eyyp"]}

Contoh

Respons sukses

JSONformat

{
  "RequestId": "f455324b-e229-4066-9f58-9c1cf3fe83a9",
  "Arn": "acs:kms:cn-hangzhou:119285303511****:policy/policy_test",
  "Name": "policy_test",
  "Description": "policy  description",
  "KmsInstance": "kst-hzz634e67d126u9p9****",
  "Permissions": [
    "[\"RbacPermission/Template/CryptoServiceKeyUser\", \"RbacPermission/Template/CryptoServiceSecretUser\"]"
  ],
  "Resources": [
    "[\"secret/acs/ram/user/ram-secret\", \"secret/acs/ram/user/acr-master\", \"key/key-hzz63d9c8d3dfv8cv****\"]"
  ],
  "AccessControlRules": "{\"NetworkRules\":[\"kst-hzz62ee817bvyyr5x****.efkd\",\"kst-hzz62ee817bvyyr5x****.eyyp\"]}"
}

Kode kesalahan

Lihat Error Codes untuk daftar lengkap.

Catatan rilis

Lihat Release Notes untuk daftar lengkap.