Chat App Message Service:リソースグループによるきめ細かなアクセス制御

仕組み

リソースグループは、プロジェクトや環境ごとにリソースを整理します。リソースをグループ化したら、そのグループにのみ権限を限定する RAM ポリシーをアイデンティティ (RAM ユーザー、ユーザーグループ、ロールなど) にアタッチできます。詳細については、「リソースのグループ化と権限付与」をご参照ください。

このアプローチには、主に 2 つのメリットがあります。

• きめ細かなアクセス制御：アカウント全体の権限を付与する代わりに、アイデンティティのアクセスを特定のグループ内のリソースのみに制限できます。これにより、プロジェクト固有のワークロードを分離し、意図しないアクセスのリスクを軽減できます。

• 管理の簡素化：新しいリソースがリソースグループに追加されると、そのグループに限定された権限を持つ RAM アイデンティティは自動的にアクセスできます。新しいリソースが作成されるたびに RAM ポリシーを更新する必要はありません。

RAM ユーザーへのリソースグループレベルの権限付与

このセクションでは、特定のリソースグループ内のChat App Message Serviceリソースにのみアクセス権限を RAM ユーザーに付与する方法について説明します。

サポート対象リソース

以下のChat App Message Serviceリソースは、リソースグループレベルの権限付与をサポートしています。

サポート対象外アクション

以下のChat App Message Serviceアクションは、リソースグループレベルの権限付与をサポートしていません。

上記のアクションについては、 [Resource Scope] を [Account] に設定し、カスタムポリシーを作成する必要があります。

以下のポリシー例は、必要に応じてカスタマイズ可能です。

• 読み取り専用アクセスの許可

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "cams:GetAuditRequestByTypeUnAudit",
          "cams:GetBillMonthDownloadTaskResult",
          "cams:GetBillUpgradeLayerInfo",
          "cams:GetBillViewDescription",
          "cams:GetBillingDetailDownloadTaskResult",
          "cams:GetBindAgentAttribute",
          "cams:GetChatFlowMetric",
          "cams:GetChatFlowMetricAnalyze",
          "cams:GetChatFlowTemplate",
          "cams:GetChatGroupInfo",
          "cams:GetChatOptionInfo",
          "cams:GetChatappConversationMetric",
          "cams:GetChatappOpenStatus",
          "cams:GetChatappPhoneNumberMetric",
          "cams:GetChatappPhoneNumberSetting",
          "cams:GetChatappTemplateDetail",
          "cams:GetChatappTemplateMetric",
          "cams:GetChatappUploadAuthorization",
          "cams:GetChatappVerifyCode",
          "cams:GetCommerceSetting",
          "cams:GetContactsByGroupId",
          "cams:GetContactsExcelTemplate",
          "cams:GetContactsList",
          "cams:GetConversationalAutomation",
          "cams:GetCountByPartner",
          "cams:GetCountryList",
          "cams:GetCurrentRole",
          "cams:GetCustAuditLog",
          "cams:GetCustByCode",
          "cams:GetCustomTask",
          "cams:GetCustomerSite",
          "cams:GetDefaultLanguage",
          "cams:GetDownloadApplicationMaterials",
          "cams:GetDownloadExcelList",
          "cams:GetFbInstagramPages",
          "cams:GetFbMessengerAdInfo",
          "cams:GetFbMessengerPages",
          "cams:GetFileStringByFileName",
          "cams:GetFlow",
          "cams:GetFlowJSONAssest",
          "cams:GetFlowPreviewUrl",
          "cams:GetGroupExist",
          "cams:GetHrefInfo",
          "cams:GetMessageCampaignInsights",
          "cams:GetMigrationVerifyCode",
          "cams:GetNLGenChatFlow",
          "cams:GetNLGenChatFlowPromptExpansion",
          "cams:GetNLGenChatFlowPromptOptimization",
          "cams:GetOSSInfoForUploadFile",
          "cams:GetOssConfig",
          "cams:GetOssInfoForUploadFile",
          "cams:GetPermissionByCode",
          "cams:GetPersonalizedBillConfig",
          "cams:GetPersonalizedBillMonthDownloadTaskResult",
          "cams:GetPhoneEncryptionPublicKey",
          "cams:GetPhoneNumberVerificationStatus",
          "cams:GetPledgeTemplateAddress",
          "cams:GetPreValidatePhoneId",
          "cams:GetSearchTreeData",
          "cams:GetUserBill",
          "cams:GetUserBillLadderSegmentDetail",
          "cams:GetUserInstanceBillLadderSegmentDetail",
          "cams:GetUserStatus",
          "cams:GetViberByRequestNo",
          "cams:GetViberPauseTimes",
          "cams:GetWhatsappConnectionCatalog",
          "cams:GetWhatsappConversionApi",
          "cams:GetWhatsappHealthStatus",
          "cams:GetWhatsappInsights",
          "cams:GetWhiteList",
          "cams:ListAdvert",
          "cams:ListAllAudit",
          "cams:ListAllGroups",
          "cams:ListAuditAndFailByType",
          "cams:ListBaseTemplate",
          "cams:ListBindDmAccount",
          "cams:ListBindingRelationsForFlowVersion",
          "cams:ListBlockUsers",
          "cams:ListChatFlow",
          "cams:ListChatFlowTemplate",
          "cams:ListChatGroup",
          "cams:ListChatGroupParticipants",
          "cams:ListChatappMessage",
          "cams:ListChatappTemplate",
          "cams:ListCountByBar",
          "cams:ListCountByLine",
          "cams:ListCountry",
          "cams:ListCust",
          "cams:ListCustomAudience",
          "cams:ListCustomBillTab",
          "cams:ListCustomTask",
          "cams:ListDayUseDetail",
          "cams:ListDict",
          "cams:ListDmAccount",
          "cams:ListDmTag",
          "cams:ListFacebookPosts",
          "cams:ListFlow",
          "cams:ListFlowNodeGroup",
          "cams:ListFlowNodePrototypeV2",
          "cams:ListFlowVersion",
          "cams:ListHref",
          "cams:ListInstagramPage",
          "cams:ListInstagramPosts",
          "cams:ListIntent",
          "cams:ListLanguage",
          "cams:ListMarketingFlow",
          "cams:ListMessageCampaign",
          "cams:ListMessageType",
          "cams:ListMessengerPage",
          "cams:ListMessengerSubscriptionToken",
          "cams:ListMixMessage",
          "cams:ListOwnViberAudit",
          "cams:ListOwnViberChangeDest",
          "cams:ListPageAdAccount",
          "cams:ListPhoneMessageQrdl",
          "cams:ListProduct",
          "cams:ListProductCatalog",
          "cams:ListReleaseRecords",
          "cams:ListSenderIdReport",
          "cams:ListSwitchVariable",
          "cams:ListTemplateLanguage",
          "cams:ListTemplateParam",
          "cams:ListUserBillDetail",
          "cams:ListUserBillingInstanceBillDetail",
          "cams:ListVariableType",
          "cams:ListViberServiceMessage",
          "cams:ListWabaIdByInputToken"
        ],
        "Resource": "*"
      }
    ]
  }
  

• フルアクセスの許可

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "cams:AddAddressRecoverSuspend",
          "cams:AddAuditViberOpen",
          "cams:AddChatGroup",
          "cams:AddChatGroupInviteLink",
          "cams:AddChatappPhoneNumber",
          "cams:AddContacts",
          "cams:AddCust",
          "cams:AddCustomAudienceUser",
          "cams:AddFacebookSource",
          "cams:AddGroup",
          "cams:AddHref",
          "cams:AddInstagramContainer",
          "cams:AddMarketingFlow",
          "cams:AddTemplate",
          "cams:AssociateContact",
          "cams:AssociateContactWithGroup",
          "cams:BatchDeleteTemplate",
          "cams:BindAgent",
          "cams:BindDmAccount",
          "cams:BindInstagramPage",
          "cams:BindMessengerPage",
          "cams:ChatAppWebPost",
          "cams:ChatappBindWaba",
          "cams:ChatappEmbedSignUp",
          "cams:ChatappMigrationRegister",
          "cams:ChatappMigrationVerified",
          "cams:ChatappPhoneNumberDeregister",
          "cams:ChatappPhoneNumberRegister",
          "cams:ChatappSyncPhoneNumber",
          "cams:ChatappVerifyAndRegister",
          "cams:CheckCust",
          "cams:ConsoleQueryChatbotInfo",
          "cams:CopyTemplate",
          "cams:CpassGetInstagramPages",
          "cams:CpassGetMessengerPages",
          "cams:CpassInstagramBindPage",
          "cams:CpassMessengerBindPage",
          "cams:CpassModifyWebhook",
          "cams:CreateChatFlow",
          "cams:CreateChatFlowByImport",
          "cams:CreateChatFlowLogSetting",
          "cams:CreateChatappMigrationInitiate",
          "cams:CreateChatappTemplate",
          "cams:CreateCustomAudience",
          "cams:CreateFlow",
          "cams:CreateFlowVersion",
          "cams:CreateMassPlanning",
          "cams:CreateMessageCampaign",
          "cams:CreateMessengerPage",
          "cams:CreateMixTemplateAuditOrder",
          "cams:CreatePhoneMessageQrdl",
          "cams:CreateWhatsappConversionApi",
          "cams:DeleteAgent",
          "cams:DeleteChatFlow",
          "cams:DeleteChatGroup",
          "cams:DeleteChatGroupInviteLink",
          "cams:DeleteChatGroupParticipants",
          "cams:DeleteChatParticipants",
          "cams:DeleteChatappTemplate",
          "cams:DeleteContacts",
          "cams:DeleteContactsByIds",
          "cams:DeleteFlow",
          "cams:DeleteFlowVersion",
          "cams:DeleteGroupById",
          "cams:DeleteInstagramPage",
          "cams:DeleteMarketingFlow",
          "cams:DeleteMessageCampaign",
          "cams:DeleteMessengerPage",
          "cams:DeleteMixMessage",
          "cams:DeletePhoneMessageQrdl",
          "cams:DeprecateFlow",
          "cams:EnableScheduling",
          "cams:EnableWhatsappROIMetric",
          "cams:ExportBlockUsers",
          "cams:FacebookDelete",
          "cams:FacebookFeed",
          "cams:FlowBindPhone",
          "cams:FlowRebindPhone",
          "cams:FlowUnbindPhone",
          "cams:GenerateBillMonthDownloadTask",
          "cams:GeneratePersonalizedBillMonthDownloadTask",
          "cams:GeneratePresignedUrl",
          "cams:GetAuditRequestByTypeUnAudit",
          "cams:GetBillMonthDownloadTaskResult",
          "cams:GetBillUpgradeLayerInfo",
          "cams:GetBillViewDescription",
          "cams:GetBillingDetailDownloadTaskResult",
          "cams:GetBindAgentAttribute",
          "cams:GetChatFlowMetric",
          "cams:GetChatFlowMetricAnalyze",
          "cams:GetChatFlowTemplate",
          "cams:GetChatGroupInfo",
          "cams:GetChatOptionInfo",
          "cams:GetChatappConversationMetric",
          "cams:GetChatappOpenStatus",
          "cams:GetChatappPhoneNumberMetric",
          "cams:GetChatappPhoneNumberSetting",
          "cams:GetChatappTemplateDetail",
          "cams:GetChatappTemplateMetric",
          "cams:GetChatappUploadAuthorization",
          "cams:GetChatappVerifyCode",
          "cams:GetCommerceSetting",
          "cams:GetContactsByGroupId",
          "cams:GetContactsExcelTemplate",
          "cams:GetContactsList",
          "cams:GetConversationalAutomation",
          "cams:GetCountByPartner",
          "cams:GetCountryList",
          "cams:GetCurrentRole",
          "cams:GetCustAuditLog",
          "cams:GetCustByCode",
          "cams:GetCustomTask",
          "cams:GetCustomerSite",
          "cams:GetDefaultLanguage",
          "cams:GetDownloadApplicationMaterials",
          "cams:GetDownloadExcelList",
          "cams:GetFbInstagramPages",
          "cams:GetFbMessengerAdInfo",
          "cams:GetFbMessengerPages",
          "cams:GetFileStringByFileName",
          "cams:GetFlow",
          "cams:GetFlowJSONAssest",
          "cams:GetFlowPreviewUrl",
          "cams:GetGroupExist",
          "cams:GetHrefInfo",
          "cams:GetMessageCampaignInsights",
          "cams:GetMigrationVerifyCode",
          "cams:GetNLGenChatFlow",
          "cams:GetNLGenChatFlowPromptExpansion",
          "cams:GetNLGenChatFlowPromptOptimization",
          "cams:GetOSSInfoForUploadFile",
          "cams:GetOssConfig",
          "cams:GetOssInfoForUploadFile",
          "cams:GetPermissionByCode",
          "cams:GetPersonalizedBillConfig",
          "cams:GetPersonalizedBillMonthDownloadTaskResult",
          "cams:GetPhoneEncryptionPublicKey",
          "cams:GetPhoneNumberVerificationStatus",
          "cams:GetPledgeTemplateAddress",
          "cams:GetPreValidatePhoneId",
          "cams:GetSearchTreeData",
          "cams:GetUserBill",
          "cams:GetUserBillLadderSegmentDetail",
          "cams:GetUserInstanceBillLadderSegmentDetail",
          "cams:GetUserStatus",
          "cams:GetViberByRequestNo",
          "cams:GetViberPauseTimes",
          "cams:GetWhatsappConnectionCatalog",
          "cams:GetWhatsappConversionApi",
          "cams:GetWhatsappHealthStatus",
          "cams:GetWhatsappInsights",
          "cams:GetWhiteList",
          "cams:InstagramFeed",
          "cams:IsPostPaidCustomer",
          "cams:IsvGetAppId",
          "cams:ListAdvert",
          "cams:ListAllAudit",
          "cams:ListAllGroups",
          "cams:ListAuditAndFailByType",
          "cams:ListBaseTemplate",
          "cams:ListBindDmAccount",
          "cams:ListBindingRelationsForFlowVersion",
          "cams:ListBlockUsers",
          "cams:ListChatFlow",
          "cams:ListChatFlowTemplate",
          "cams:ListChatGroup",
          "cams:ListChatGroupParticipants",
          "cams:ListChatappMessage",
          "cams:ListChatappTemplate",
          "cams:ListCountByBar",
          "cams:ListCountByLine",
          "cams:ListCountry",
          "cams:ListCust",
          "cams:ListCustomAudience",
          "cams:ListCustomBillTab",
          "cams:ListCustomTask",
          "cams:ListDayUseDetail",
          "cams:ListDict",
          "cams:ListDmAccount",
          "cams:ListDmTag",
          "cams:ListFacebookPosts",
          "cams:ListFlow",
          "cams:ListFlowNodeGroup",
          "cams:ListFlowNodePrototypeV2",
          "cams:ListFlowVersion",
          "cams:ListHref",
          "cams:ListInstagramPage",
          "cams:ListInstagramPosts",
          "cams:ListIntent",
          "cams:ListLanguage",
          "cams:ListMarketingFlow",
          "cams:ListMessageCampaign",
          "cams:ListMessageType",
          "cams:ListMessengerPage",
          "cams:ListMessengerSubscriptionToken",
          "cams:ListMixMessage",
          "cams:ListOwnViberAudit",
          "cams:ListOwnViberChangeDest",
          "cams:ListPageAdAccount",
          "cams:ListPhoneMessageQrdl",
          "cams:ListProduct",
          "cams:ListProductCatalog",
          "cams:ListReleaseRecords",
          "cams:ListSenderIdReport",
          "cams:ListSwitchVariable",
          "cams:ListTemplateLanguage",
          "cams:ListTemplateParam",
          "cams:ListUserBillDetail",
          "cams:ListUserBillingInstanceBillDetail",
          "cams:ListVariableType",
          "cams:ListViberServiceMessage",
          "cams:ListWabaIdByInputToken",
          "cams:ModifyBlockUsers",
          "cams:ModifyChatappPhoneNumber",
          "cams:ModifyChatappTemplate",
          "cams:ModifyChatappTemplateProperties",
          "cams:ModifyFlow",
          "cams:ModifyPhoneBusinessProfile",
          "cams:ModifyWebhook",
          "cams:MoveContactToGroup",
          "cams:OfflineFlowVersion",
          "cams:OnlineFlowVersion",
          "cams:OpenChatappService",
          "cams:OpenProduct",
          "cams:PagePersonalizedBill",
          "cams:PauseMarketingFLow",
          "cams:PublishFlow",
          "cams:QueryChatappBindWaba",
          "cams:QueryChatappPhoneNumbers",
          "cams:QueryMMLActive",
          "cams:QueryPackageDetail",
          "cams:QueryPackageSummary",
          "cams:QueryPackageType",
          "cams:QueryPhoneBusinessProfile",
          "cams:QueryProductOpenStatus",
          "cams:QueryThreshold",
          "cams:QueryTokenForMnsQueue",
          "cams:QueryWabaBusinessInfo",
          "cams:QueryWabaByEmbedSignUp",
          "cams:RamUserIsOpen",
          "cams:RamUserOpen",
          "cams:ReadChatFlow",
          "cams:ReadChatFlowLogSetting",
          "cams:ReadFlowVersion",
          "cams:RemoveContactById",
          "cams:RemoveContacts",
          "cams:RequestWhatsappConversionApi",
          "cams:SendChatappMassMessage",
          "cams:SendChatappMessage",
          "cams:SubmitIsvCustomerTerms",
          "cams:SyncBusinessAppHistory",
          "cams:SyncMessageCampaign",
          "cams:SyncMessengerSubscriptionToken",
          "cams:TranslateCustToIsv",
          "cams:TriggerChatFlow",
          "cams:UnbindDmAccount",
          "cams:UpdateAccountWebhook",
          "cams:UpdateAuditRequest",
          "cams:UpdateChatFlow",
          "cams:UpdateChatFlowLogSetting",
          "cams:UpdateChatGroup",
          "cams:UpdateChatappPhoneNumberSetting",
          "cams:UpdateCheckCode",
          "cams:UpdateCommerceSetting",
          "cams:UpdateContactById",
          "cams:UpdateConversationalAutomation",
          "cams:UpdateCust",
          "cams:UpdateFlowJSONAsset",
          "cams:UpdateFlowVersion",
          "cams:UpdateGroupName",
          "cams:UpdateHref",
          "cams:UpdateMarketingFLow",
          "cams:UpdatePackageRemainAlarmThreshold",
          "cams:UpdatePackgeRemainAlarmThreshold",
          "cams:UpdatePersonalizedBillConfig",
          "cams:UpdatePhoneEncryptionPublicKey",
          "cams:UpdatePhoneMessageQrdl",
          "cams:UpdatePhoneWebhook",
          "cams:UpdateViberWebhook",
          "cams:UpdateWabaMmlStatus"
        ],
        "Resource": "*"
      }
    ]
  }
  

よくある質問