すべてのプロダクト
Search

このプロダクト

    Alibaba Cloud DNS:リソースグループによるきめ細かなアクセス制御

    ドキュメントセンター

    Alibaba Cloud DNS:リソースグループによるきめ細かなアクセス制御

    最終更新日:Apr 23, 2026

    リソースグループを活用することで、Alibaba Cloud DNS (DNS)リソースの一元管理が可能になり、RAM (Resource Access Management) ポリシーを用いたグループ単位でのきめ細かなアクセス制御を実現できます。これにより、Alibaba Cloud アカウントで最小権限の原則 (PoLP) を徹底できます。

    説明

    リソースグループレベルの権限設定は、サポート対象リソースタイプとアクションに限られます。サポート対象外アクションの場合、リソースグループに対するポリシーを指定しても無視されます。アクセス制御のため、アカウントに対するポリシーを設定する必要があります。

    仕組み

    リソースグループは、プロジェクトや環境ごとにリソースを整理します。リソースをグループ化したら、そのグループにのみ権限を限定する RAM ポリシーをアイデンティティ (RAM ユーザー、ユーザーグループ、ロールなど) にアタッチできます。詳細については、「リソースのグループ化と権限付与」をご参照ください。

    このアプローチには、主に 2 つのメリットがあります。

    • きめ細かなアクセス制御：アカウント全体の権限を付与する代わりに、アイデンティティのアクセスを特定のグループ内のリソースのみに制限できます。これにより、プロジェクト固有のワークロードを分離し、意図しないアクセスのリスクを軽減できます。

    • 管理の簡素化：新しいリソースがリソースグループに追加されると、そのグループに限定された権限を持つ RAM アイデンティティは自動的にアクセスできます。新しいリソースが作成されるたびに RAM ポリシーを更新する必要はありません。

    RAM ユーザーへのリソースグループレベルの権限付与

    このセクションでは、特定のリソースグループ内のAlibaba Cloud DNS (DNS)リソースにのみアクセス権限を RAM ユーザーに付与する方法について説明します。

    1. 前提条件

    2. 権限付与

    リソースグループレベルの権限は、Resource Management コンソールまたは RAM コンソールのいずれかから付与できます。

    Resource Management コンソール

    • Resource Management コンソールにログインします。

    • [Resource Group] ページで、対象のリソースグループを見つけ、[Actions] 列の [Manage Permission] をクリックします。

    • [Permissions] タブで、[Grant Permission] をクリックします。

    • [Grant Permission] パネルで、プリンシパルとアクセスポリシーを設定します。

      • Principal：RAM ユーザーを選択します。

      • Policy：[System Policy] または [Custom Policy] を選択します。詳細については、「カスタム権限ポリシーの作成」をご参照ください。

    • [Grant Permissions] をクリックします。

    詳細については、「リソースグループに対する RAM アイデンティティへの権限付与」をご参照ください。

    RAM コンソール

    • Alibaba Cloud アカウント (root ユーザー)または RAM 管理者アカウントを使用して、RAM コンソールにログインします。

    • 左側のメニューで、[Identities] > [Users]を選択します。[Users] ページで、対象の RAM ユーザーを見つけ、[Actions] 列の [Add Permissions] をクリックします。

    • [Grant Permission] パネルで、RAM ユーザーに権限を追加します。

      • Resource Scope：[Resource Group] を選択します。

      • Principal：既存の RAM ユーザーまたは前のステップで作成した RAM ユーザーを選択します。

      • Access Policy：[System Policy] または [Custom Policy] を選択します。詳細については、「カスタム権限ポリシーの作成」をご参照ください。

    • [OK] をクリックします。

    詳細については、「RAM ユーザーへの権限付与」をご参照ください。

    サポート対象リソース

    以下のAlibaba Cloud DNS (DNS)リソースは、リソースグループレベルの権限付与をサポートしています。

    Alibaba Cloud サービス

    サービスコード

    リソースタイプ

    Alibaba Cloud DNS (DNS)

    alidns

    domain : ドメイン名
    説明

    上表に記載されていないリソースタイプのサポートをリクエストするには、Resource Management コンソールでフィードバックを送信してください。

    image

    サポート対象外アクション

    以下のAlibaba Cloud DNS (DNS)アクションは、リソースグループレベルの権限付与をサポートしていません。

    アクション

    説明

    alidns:AddBatchDomain

    -

    alidns:AddBatchDomainFromFile

    -

    alidns:AddBatchRr

    -

    alidns:AddBatchTempDomains

    -

    alidns:AddDnsCacheDomain

    -

    alidns:AddDnsMonitor

    -

    alidns:AddDnsTemplate

    -

    alidns:AddDnsTemplateRecord

    -

    alidns:AddDohUser

    -

    alidns:AddDomainGroup

    -

    alidns:AddGateway

    -

    alidns:AddGtmRecoveryPlan

    -

    alidns:AddRegistrar

    -

    alidns:AddRegistrarContact

    -

    alidns:AddRspDomainServerHoldStatusForGateway

    -

    alidns:AddRspDomainServerHoldStatusForGatewayOte

    -

    alidns:AddRspEppClient

    -

    alidns:AddSensitiveName

    -

    alidns:AddUserProductFeedback

    -

    alidns:BatchDomainRecordOperate

    -

    alidns:BindInstanceDomains

    -

    alidns:CancelJob

    -

    alidns:CancelOrder

    -

    alidns:ChangeBatchDomainGroup

    -

    alidns:ChangeDomainOfDnsProduct

    -

    alidns:ChatAssistantMessage

    -

    alidns:CheckDomainRecord

    -

    alidns:CheckEdgeDnsClusterConnection

    -

    alidns:CheckEdgeDnsClusterDeploymentAppVersion

    -

    alidns:CheckEdgeDnsDeploymentAppVersion

    -

    alidns:CheckFusionClientAvailable

    -

    alidns:CheckGtmInstanceExistence

    -

    alidns:CheckInstanceAllowSystemAssign

    -

    alidns:CheckSubDomainRecord4Add

    -

    alidns:CompleteCommodity

    -

    alidns:CompleteCommodityWithoutTraffic

    -

    alidns:CopyGtmConfig

    -

    alidns:CreateCloudMonitorTask

    -

    alidns:CreateEdgeDnsCluster

    -

    alidns:CreateInstance

    -

    alidns:CreateMultiCommodityOrder

    -

    alidns:CreatePtrRecordSet

    -

    alidns:CreateRenewOrder

    -

    alidns:CreateRspDomainSuperProhibited

    -

    alidns:CreateRspDomainSuperProhibitedOte

    -

    alidns:CreateRspEppClient

    -

    alidns:CreateRspEppClientOte

    -

    alidns:CreateRspGateway

    -

    alidns:CreateRspGatewayClientAuthorizedIp

    -

    alidns:CreateRspGatewayClientAuthorizedIpOte

    -

    alidns:CreateRspGatewayOte

    -

    alidns:CreateRspRegistrar

    -

    alidns:CreateRspRegistrarContact

    -

    alidns:CreateRspRegistrarContactOte

    -

    alidns:CreateRspRegistrarOte

    -

    alidns:CreateRspReservedName

    -

    alidns:CreateRspReservedNameOte

    -

    alidns:CreateRspSensitiveName

    -

    alidns:CreateRspSensitiveNameOte

    -

    alidns:CreateRspTldGatewayConfig

    -

    alidns:CreateRspTldGatewayConfigOte

    -

    alidns:CreateRspTldMeta

    -

    alidns:CreateRspTldMetaOte

    -

    alidns:CreateRspTldSuperProhibited

    -

    alidns:CreateRspTldSuperProhibitedOte

    -

    alidns:DeleteAssistantChat

    -

    alidns:DeleteBatchDomain

    -

    alidns:DeleteBatchRr

    -

    alidns:DeleteCloudGtmAddress

    -

    alidns:DeleteCloudGtmAddressPool

    -

    alidns:DeleteCloudGtmInstanceConfig

    -

    alidns:DeleteCloudGtmMonitorTemplate

    -

    alidns:DeleteCloudMonitorTask

    -

    alidns:DeleteCloudMonitorTasksJob

    -

    alidns:DeleteDnsMonitor

    -

    alidns:DeleteDnsTemplate

    -

    alidns:DeleteDnsTemplateRecord

    -

    alidns:DeleteDomainGroup

    -

    alidns:DeleteEdgeDnsCluster

    -

    alidns:DeleteFusionClientConfig

    -

    alidns:DeleteGtmRecoveryPlan

    -

    alidns:DeletePtrRecord

    -

    alidns:DeleteRspDomainSuperProhibited

    -

    alidns:DeleteRspDomainSuperProhibitedOte

    -

    alidns:DeleteRspEppClient

    -

    alidns:DeleteRspEppClientOte

    -

    alidns:DeleteRspGatewayClientAuthorizedIp

    -

    alidns:DeleteRspGatewayClientAuthorizedIpOte

    -

    alidns:DeleteRspRegistrar

    -

    alidns:DeleteRspRegistrarContact

    -

    alidns:DeleteRspRegistrarContactOte

    -

    alidns:DeleteRspRegistrarOte

    -

    alidns:DeleteRspReservedName

    -

    alidns:DeleteRspReservedNameOte

    -

    alidns:DeleteRspSensitiveName

    -

    alidns:DeleteRspSensitiveNameOte

    -

    alidns:DeleteRspTldGatewayConfig

    -

    alidns:DeleteRspTldGatewayConfigOte

    -

    alidns:DeleteRspTldSuperProhibited

    -

    alidns:DeleteRspTldSuperProhibitedOte

    -

    alidns:DescribeAccount

    -

    alidns:DescribeAlidnsGlobalAlert

    -

    alidns:DescribeAlidnsInstances

    -

    alidns:DescribeAlidnsPostBusinessStatus

    -

    alidns:DescribeAlidnsResolveAnalysisConfig

    -

    alidns:DescribeBatchLogs

    -

    alidns:DescribeBatchResultCount

    -

    alidns:DescribeBatchResultDetail

    -

    alidns:DescribeBundleRecordTaskResult

    -

    alidns:DescribeBundleTempDomains

    -

    alidns:DescribeCanAddMonitorDomainRrs

    -

    alidns:DescribeCanAddMonitorSubDomainInfo

    -

    alidns:DescribeChangeLogs

    -

    alidns:DescribeCloudGtmAddress

    -

    alidns:DescribeCloudGtmAddressPool

    -

    alidns:DescribeCloudGtmAddressPoolReference

    -

    alidns:DescribeCloudGtmAddressReference

    -

    alidns:DescribeCloudGtmGlobalAlert

    -

    alidns:DescribeCloudGtmInstanceConfigAlert

    -

    alidns:DescribeCloudGtmInstanceConfigFullInfo

    -

    alidns:DescribeCloudGtmMonitorTemplate

    -

    alidns:DescribeCloudGtmResolveAnalysisConfig

    -

    alidns:DescribeCloudGtmSummary

    -

    alidns:DescribeCloudGtmSystemLines

    -

    alidns:DescribeCloudMonitorDetectCountOverview

    -

    alidns:DescribeCloudMonitorDetectCountSummary

    -

    alidns:DescribeCloudMonitorDetectLogs

    -

    alidns:DescribeCloudMonitorGlobalAlertConfig

    -

    alidns:DescribeCloudMonitorLatestDetectLogOverview

    -

    alidns:DescribeCloudMonitorLatestDetectLogs

    -

    alidns:DescribeCloudMonitorTask

    -

    alidns:DescribeCloudMonitorTaskAlertConfig

    -

    alidns:DescribeCloudMonitorTaskDetectSummary

    -

    alidns:DescribeCloudMonitorTaskOverview

    -

    alidns:DescribeDnsCacheDomains

    -

    alidns:DescribeDnsGtmAddrAttributeInfo

    -

    alidns:DescribeDnsGtmAvailableAlertGroup

    -

    alidns:DescribeDnsGtmMonitorAvailableConfig

    -

    alidns:DescribeDnsMonitor

    -

    alidns:DescribeDnsMonitorAvailableNodes

    -

    alidns:DescribeDnsMonitorTaskConfig

    -

    alidns:DescribeDnsMonitors

    -

    alidns:DescribeDnsProductInstance

    -

    alidns:DescribeDnsProductInstanceSummary

    -

    alidns:DescribeDnsProductInstances

    -

    alidns:DescribeDnsTemplateInfo

    -

    alidns:DescribeDnsTemplates

    -

    alidns:DescribeDnsUserInstancesInfo

    -

    alidns:DescribeDohAccountStatistics

    -

    alidns:DescribeDohDomainStatistics

    -

    alidns:DescribeDohDomainStatisticsSummary

    -

    alidns:DescribeDohSdkList

    -

    alidns:DescribeDohSubDomainStatistics

    -

    alidns:DescribeDohSubDomainStatisticsSummary

    -

    alidns:DescribeDohUserInfo

    -

    alidns:DescribeDomainBackups

    -

    alidns:DescribeDomainGroups

    -

    alidns:DescribeDomainLogs

    -

    alidns:DescribeDomainResolveStatisticsSummary

    -

    alidns:DescribeDomainStatisticsSummary

    -

    alidns:DescribeEdgeDnsAppAgentInfo

    -

    alidns:DescribeEdgeDnsAppLatestVersion

    -

    alidns:DescribeEdgeDnsClusterFullInfo

    -

    alidns:DescribeEdgeDnsClusterNodeContainers

    -

    alidns:DescribeEdgeDnsClusterNodeServiceStatus

    -

    alidns:DescribeEdgeDnsClusterResource

    -

    alidns:DescribeEdgeDnsClusterResourceOverview

    -

    alidns:DescribeEdgeDnsDeployNotFinalStatusTask

    -

    alidns:DescribeEdgeDnsDeployOptionalIp

    -

    alidns:DescribeEdgeDnsDeployOptionalVersion

    -

    alidns:DescribeEdgeDnsDeployTask

    -

    alidns:DescribeEdgeDnsDeploymentInfo

    -

    alidns:DescribeEdgeDnsDeploymentStatistics

    -

    alidns:DescribeEdgeDnsNodeConnectionToken

    -

    alidns:DescribeEdgeDnsNodeFullInfo

    -

    alidns:DescribeFusionOnPremisesInstances

    -

    alidns:DescribeFusionResources

    -

    alidns:DescribeGtmAvailableAlertGroup

    -

    alidns:DescribeGtmMonitorAvailableConfig

    -

    alidns:DescribeGtmRecoveryPlan

    -

    alidns:DescribeGtmRecoveryPlanAvailableConfig

    -

    alidns:DescribeGtmRecoveryPlans

    -

    alidns:DescribeImportDomainRecordsResult

    -

    alidns:DescribeImportDomainsResult

    -

    alidns:DescribeInstanceDomains

    -

    alidns:DescribeInstanceExtendStatus

    -

    alidns:DescribeInternetDnsLogs

    -

    alidns:DescribeIntranetFirewallProtectionDetail

    -

    alidns:DescribeIntranetFirewallProtectionDetails

    -

    alidns:DescribeIntranetFirewallProtectionHistory

    -

    alidns:DescribeIntranetFirewallProtectionLogs

    -

    alidns:DescribeIntranetFirewallProtectionOverview

    -

    alidns:DescribeIntranetFirewallProtectionRankings

    -

    alidns:DescribeInvalidDomains

    -

    alidns:DescribeIspFlushCacheInstances

    -

    alidns:DescribeIspFlushCacheRemainQuota

    -

    alidns:DescribeIspFlushCacheTask

    -

    alidns:DescribeIspFlushCacheTasks

    -

    alidns:DescribeJobOverview

    -

    alidns:DescribeJobs

    -

    alidns:DescribePostBusinessServiceStatus

    -

    alidns:DescribePtrRecordSet

    -

    alidns:DescribePtrRecords

    -

    alidns:DescribeRecommendCommodities

    -

    alidns:DescribeRecursionFirewallProtectionDetail

    -

    alidns:DescribeRecursionFirewallProtectionDetails

    -

    alidns:DescribeRecursionFirewallProtectionHistory

    -

    alidns:DescribeRecursionFirewallProtectionLogs

    -

    alidns:DescribeRecursionFirewallProtectionOverview

    -

    alidns:DescribeRecursionFirewallProtectionRankings

    -

    alidns:DescribeResolveAndOperatorClusterAssociationOverview

    -

    alidns:DescribeResolveSummary

    -

    alidns:DescribeRestoreDomainResults

    -

    alidns:DescribeRestoringDomainTasks

    -

    alidns:DescribeRspDomainStatus

    -

    alidns:DescribeRspDomainStatusOte

    -

    alidns:DescribeRspGateway

    -

    alidns:DescribeRspGatewayOte

    -

    alidns:DescribeRspRegistrarForRegistrar

    -

    alidns:DescribeRspRegistrarForRegistrarOte

    -

    alidns:DescribeRspRegistrarForRegistry

    -

    alidns:DescribeRspRegistrarForRegistryOte

    -

    alidns:DescribeRspTld

    -

    alidns:DescribeRspTldMeta

    -

    alidns:DescribeRspTldMetaOte

    -

    alidns:DescribeRspTldOte

    -

    alidns:DescribeSiteMonitor

    -

    alidns:DescribeSiteMonitorIspCityInfos

    -

    alidns:DescribeSiteMonitorIspInfos

    -

    alidns:DescribeSlaveDnsDomains

    -

    alidns:DescribeSubJobs

    -

    alidns:DescribeSubdomainRecords

    -

    alidns:DescribeSupportLines

    -

    alidns:DescribeTags

    -

    alidns:DescribeTransferDomains

    -

    alidns:DescribeUserContactInfo

    -

    alidns:DescribeUserGrayStatus

    -

    alidns:DescribleMultiCommodityPrices

    -

    alidns:ExecuteGtmRecoveryPlan

    -

    alidns:ExportDomainJob

    -

    alidns:ExportResolveSummaryJob

    -

    alidns:FetchFusionFirewallThreatDownloadUrl

    -

    alidns:FinishEdgeDnsDeployTask

    -

    alidns:GetMainDomainName

    -

    alidns:GetTxtRecordForRetrievalDomainName

    -

    alidns:GetTxtRecordForVerify

    -

    alidns:ListAlidnsAlertLogs

    -

    alidns:ListAssistantChat

    -

    alidns:ListAssistantMessage

    -

    alidns:ListAssistantQuestionGuide

    -

    alidns:ListAssociatedResolveClusters

    -

    alidns:ListAvailableAlertGroups

    -

    alidns:ListCloudGtmAddressPools

    -

    alidns:ListCloudGtmAddresses

    -

    alidns:ListCloudGtmAlertLogs

    -

    alidns:ListCloudGtmAvailableAlertGroups

    -

    alidns:ListCloudGtmInstanceConfigs

    -

    alidns:ListCloudGtmInstances

    -

    alidns:ListCloudGtmMonitorNodes

    -

    alidns:ListCloudGtmMonitorTemplates

    -

    alidns:ListCloudMonitorAlertLogs

    -

    alidns:ListCloudMonitorProbes

    -

    alidns:ListCloudMonitorTasks

    -

    alidns:ListEdgeDnsAlertLogs

    -

    alidns:ListEdgeDnsClusters

    -

    alidns:ListEdgeDnsNodes

    -

    alidns:ListEdgeDnsNotifyConfigs

    -

    alidns:ListEdgeDnsNotifyGatewayConfigs

    -

    alidns:ListEdgeDnsResolveLogs

    -

    alidns:ListEppClient

    -

    alidns:ListRspContacts

    -

    alidns:ListRspContactsOte

    -

    alidns:ListRspDomainSuperProhibited

    -

    alidns:ListRspDomainSuperProhibitedOte

    -

    alidns:ListRspDomains

    -

    alidns:ListRspDomainsOte

    -

    alidns:ListRspEppClient

    -

    alidns:ListRspEppClientOte

    -

    alidns:ListRspEppClients

    -

    alidns:ListRspEppClientsOte

    -

    alidns:ListRspGateway

    -

    alidns:ListRspGatewayClientAuthorizedIp

    -

    alidns:ListRspGatewayClientAuthorizedIpOte

    -

    alidns:ListRspGatewayOte

    -

    alidns:ListRspHosts

    -

    alidns:ListRspHostsOte

    -

    alidns:ListRspInternalRegistrars

    -

    alidns:ListRspInternalRegistrarsOte

    -

    alidns:ListRspOperator

    -

    alidns:ListRspOperatorOte

    -

    alidns:ListRspRegistrarContact

    -

    alidns:ListRspRegistrarContactOte

    -

    alidns:ListRspRegistrars

    -

    alidns:ListRspRegistrarsOte

    -

    alidns:ListRspReservedName

    -

    alidns:ListRspReservedNameOte

    -

    alidns:ListRspSensitiveName

    -

    alidns:ListRspSensitiveNameOte

    -

    alidns:ListRspTld

    -

    alidns:ListRspTldGatewayConfig

    -

    alidns:ListRspTldGatewayConfigOte

    -

    alidns:ListRspTldOte

    -

    alidns:ListRspTldSuperProhibited

    -

    alidns:ListRspTldSuperProhibitedOte

    -

    alidns:ListTagResources

    -

    alidns:ListTld

    -

    alidns:ManuallyRetryEdgeDnsClusterDispatchDataJob

    -

    alidns:OpenPostBusinessService

    -

    alidns:OperateBatchDomain

    -

    alidns:OperateRspRegistration

    -

    alidns:OperateRspRegistrationOte

    -

    alidns:OrderPaidNotice

    -

    alidns:PreviewGtmRecoveryPlan

    -

    alidns:QueryAllowRenewPeriodList

    -

    alidns:QueryDnsMonitorErrorEvent

    -

    alidns:QueryDnsMonitorFailureRate

    -

    alidns:QueryDnsMonitorHistory

    -

    alidns:QueryDnsMonitorLast

    -

    alidns:QueryDnsMonitorNodeResponseTime

    -

    alidns:QueryDnsMonitorStatistics

    -

    alidns:QueryEdgeDnsMonitors

    -

    alidns:QueryEdgeDnsResolveQps

    -

    alidns:QueryEdgeDnsTopData

    -

    alidns:QueryEdgeDnsTopDomain

    -

    alidns:QueryEdgeDnsTopRCode

    -

    alidns:QueryInstanceUnpaidOrder

    -

    alidns:QueryRenewPrice

    -

    alidns:RecheckInvalidDomain

    -

    alidns:ReclaimDomain

    -

    alidns:RefundOrder

    -

    alidns:RemoveRspDomainServerHoldStatusForGateway

    -

    alidns:RemoveRspDomainServerHoldStatusForGatewayOte

    -

    alidns:ReplaceAlidnsResolveAnalysisConfig

    -

    alidns:ReplaceCloudGtmResolveAnalysisConfig

    -

    alidns:ReplacePtrRecordSet

    -

    alidns:ResetBatchResult

    -

    alidns:ResetImportDomainsResult

    -

    alidns:ResetRspEppClientPassword

    -

    alidns:ResetRspEppClientPasswordOTE

    -

    alidns:RetrieveBatchDomain

    -

    alidns:RetrieveDomain

    -

    alidns:RollbackGtmRecoveryPlan

    -

    alidns:SaveResolveClustersAssociation

    -

    alidns:ScanSubdomainRecords

    -

    alidns:SearchCloudGtmAddressPools

    -

    alidns:SearchCloudGtmAddresses

    -

    alidns:SearchCloudGtmInstanceConfigs

    -

    alidns:SearchCloudGtmInstances

    -

    alidns:SearchCloudGtmMonitorTemplates

    -

    alidns:SearchCloudMonitorTasks

    -

    alidns:SearchEdgeDnsClusters

    -

    alidns:SearchEdgeDnsNodes

    -

    alidns:SendVerifyCode

    -

    alidns:SetCloudGtmInstanceConfigLogSwitch

    -

    alidns:SetCloudMonitorTaskStatus

    -

    alidns:SetDomainAuthLogConfig

    -

    alidns:SetEdgeDnsClusterRecurseEnableStatus

    -

    alidns:SetInstanceRenewalStatus

    -

    alidns:SetPtrRecordStatus

    -

    alidns:SubmitEdgeDnsDeployRetryTask

    -

    alidns:SubmitEdgeDnsDeployTask

    -

    alidns:SubmitImportDomainRecordsFile

    -

    alidns:SubmitIspFlushCacheTask

    -

    alidns:TagResources

    -

    alidns:TemporaryCancelFusionResource

    -

    alidns:TransferBatchDomain

    -

    alidns:UnbindInstanceDomains

    -

    alidns:UntagResources

    -

    alidns:UpdateAlidnsGlobalAlert

    -

    alidns:UpdateAlidnsLineRecordSet

    -

    alidns:UpdateAlidnsResolveAnalysisConfig

    -

    alidns:UpdateAssistantChatName

    -

    alidns:UpdateAssistantMessageFeedback

    -

    alidns:UpdateBatchRr

    -

    alidns:UpdateCloudGtmAddressEnableStatus

    -

    alidns:UpdateCloudGtmAddressManualAvailableStatus

    -

    alidns:UpdateCloudGtmAddressPoolEnableStatus

    -

    alidns:UpdateCloudGtmAddressPoolRemark

    -

    alidns:UpdateCloudGtmAddressRemark

    -

    alidns:UpdateCloudGtmGlobalAlert

    -

    alidns:UpdateCloudGtmInstanceConfigBasic

    -

    alidns:UpdateCloudGtmInstanceConfigRemark

    -

    alidns:UpdateCloudGtmInstanceName

    -

    alidns:UpdateCloudGtmMonitorTemplateRemark

    -

    alidns:UpdateCloudGtmResolveAnalysisConfig

    -

    alidns:UpdateCloudMonitorGlobalAlertConfig

    -

    alidns:UpdateCloudMonitorTask

    -

    alidns:UpdateCloudMonitorTaskAlertConfig

    -

    alidns:UpdateCloudMonitorTaskRemark

    -

    alidns:UpdateDnsMonitor

    -

    alidns:UpdateDnsTemplateName

    -

    alidns:UpdateDnsTemplateRecord

    -

    alidns:UpdateDomainGroup

    -

    alidns:UpdateDomainServerHoldStatus

    -

    alidns:UpdateDomainStatus

    -

    alidns:UpdateEdgeDnsCluster

    -

    alidns:UpdateEdgeDnsClusterRecurseRemark

    -

    alidns:UpdateEdgeDnsNodeName

    -

    alidns:UpdateEdgeDnsNodeOperationIp

    -

    alidns:UpdateEdgeDnsNodeRemark

    -

    alidns:UpdateEdgeDnsNotifyConfig

    -

    alidns:UpdateEdgeDnsNotifyGatewayConfig

    -

    alidns:UpdateEdgeDnsSyslogDnsLogNotifyConfig

    -

    alidns:UpdateFusionClientConfig

    -

    alidns:UpdateFusionClientNodeEscapeConfig

    -

    alidns:UpdateFusionFirewallSubscriptionConfig

    -

    alidns:UpdateGtmRecoveryPlan

    -

    alidns:UpdateIspFlushCacheInstanceConfig

    -

    alidns:UpdatePtrRecordRemark

    -

    alidns:UpdateRspDomainServerHoldStatus

    -

    alidns:UpdateRspDomainServerHoldStatusOte

    -

    alidns:UpdateRspDomainServerProhibitStatus

    -

    alidns:UpdateRspDomainServerProhibitStatusForGateway

    -

    alidns:UpdateRspDomainServerProhibitStatusForGatewayOte

    -

    alidns:UpdateRspDomainServerProhibitStatusOte

    -

    alidns:UpdateRspDomainStatus

    -

    alidns:UpdateRspDomainStatusOte

    -

    alidns:UpdateRspEppClient

    -

    alidns:UpdateRspEppClientAllowedTlds

    -

    alidns:UpdateRspEppClientAllowedTldsOte

    -

    alidns:UpdateRspEppClientGatewayId

    -

    alidns:UpdateRspEppClientGatewayIdOte

    -

    alidns:UpdateRspEppClientIpWhiteList

    -

    alidns:UpdateRspEppClientIpWhiteListOte

    -

    alidns:UpdateRspEppClientMaxConnection

    -

    alidns:UpdateRspEppClientMaxConnectionOte

    -

    alidns:UpdateRspEppClientOte

    -

    alidns:UpdateRspEppClientRemark

    -

    alidns:UpdateRspEppClientRemarkOte

    -

    alidns:UpdateRspEppClientStatus

    -

    alidns:UpdateRspEppClientStatusOte

    -

    alidns:UpdateRspEppClientTld

    -

    alidns:UpdateRspEppClientTldOte

    -

    alidns:UpdateRspGateway

    -

    alidns:UpdateRspGatewayClientAuthorizedIp

    -

    alidns:UpdateRspGatewayClientAuthorizedIpOte

    -

    alidns:UpdateRspGatewayOte

    -

    alidns:UpdateRspGatewayStatus

    -

    alidns:UpdateRspGatewayStatusOte

    -

    alidns:UpdateRspRegistrar

    -

    alidns:UpdateRspRegistrarContact

    -

    alidns:UpdateRspRegistrarContactOte

    -

    alidns:UpdateRspRegistrarOte

    -

    alidns:UpdateRspRegistrarStatus

    -

    alidns:UpdateRspRegistrarStatusOte

    -

    alidns:UpdateRspReservedName

    -

    alidns:UpdateRspReservedNameOte

    -

    alidns:UpdateRspSensitiveName

    -

    alidns:UpdateRspSensitiveNameOte

    -

    alidns:UpdateRspTld

    -

    alidns:UpdateRspTldDisableCommand

    -

    alidns:UpdateRspTldDisableCommandOte

    -

    alidns:UpdateRspTldGatewayConfig

    -

    alidns:UpdateRspTldGatewayConfigOte

    -

    alidns:UpdateRspTldOte

    -

    alidns:UpdateRspTldPrice

    -

    alidns:UpdateRspTldPriceOte

    -

    alidns:UpdateRspTldStatus

    -

    alidns:UpdateRspTldStatusOte

    -

    alidns:UpdateUserProductFeedback

    -

    alidns:ValidateDomainCanAdd

    -

    alidns:ValidateVerifyCode

    -

    alidns:VerifyAccount

    -

    alidns:VerifyTxtRecord

    -

    alidns:VerifyTxtRecordForRetrievalDomainName

    -

    alidns:addDomainRecord

    -

    alidns:createTldMeta

    -

    alidns:deleteDomainRecord

    -

    alidns:null

    -

    alidns:read

    -

    alidns:setDomainRecordStatus

    -

    alidns:update

    -

    alidns:updateDomainRecord

    -

    alidns:updateDomainRecordRemark

    -

    上記のアクションについては、 [Resource Scope] を [Account] に設定し、カスタムポリシーを作成する必要があります。

    image.png 以下のポリシー例は、必要に応じてカスタマイズ可能です。

    • 読み取り専用アクセスの許可

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "alidns:CheckDomainRecord",
        "alidns:CheckEdgeDnsClusterConnection",
        "alidns:CheckEdgeDnsClusterDeploymentAppVersion",
        "alidns:CheckEdgeDnsDeploymentAppVersion",
        "alidns:CheckFusionClientAvailable",
        "alidns:CheckGtmInstanceExistence",
        "alidns:CheckInstanceAllowSystemAssign",
        "alidns:CheckSubDomainRecord4Add",
        "alidns:DescribeAccount",
        "alidns:DescribeAlidnsGlobalAlert",
        "alidns:DescribeAlidnsInstances",
        "alidns:DescribeAlidnsPostBusinessStatus",
        "alidns:DescribeAlidnsResolveAnalysisConfig",
        "alidns:DescribeBatchLogs",
        "alidns:DescribeBatchResultCount",
        "alidns:DescribeBatchResultDetail",
        "alidns:DescribeBundleRecordTaskResult",
        "alidns:DescribeBundleTempDomains",
        "alidns:DescribeCanAddMonitorDomainRrs",
        "alidns:DescribeCanAddMonitorSubDomainInfo",
        "alidns:DescribeChangeLogs",
        "alidns:DescribeCloudGtmAddress",
        "alidns:DescribeCloudGtmAddressPool",
        "alidns:DescribeCloudGtmAddressPoolReference",
        "alidns:DescribeCloudGtmAddressReference",
        "alidns:DescribeCloudGtmGlobalAlert",
        "alidns:DescribeCloudGtmInstanceConfigAlert",
        "alidns:DescribeCloudGtmInstanceConfigFullInfo",
        "alidns:DescribeCloudGtmMonitorTemplate",
        "alidns:DescribeCloudGtmResolveAnalysisConfig",
        "alidns:DescribeCloudGtmSummary",
        "alidns:DescribeCloudGtmSystemLines",
        "alidns:DescribeCloudMonitorDetectCountOverview",
        "alidns:DescribeCloudMonitorDetectCountSummary",
        "alidns:DescribeCloudMonitorDetectLogs",
        "alidns:DescribeCloudMonitorGlobalAlertConfig",
        "alidns:DescribeCloudMonitorLatestDetectLogOverview",
        "alidns:DescribeCloudMonitorLatestDetectLogs",
        "alidns:DescribeCloudMonitorTask",
        "alidns:DescribeCloudMonitorTaskAlertConfig",
        "alidns:DescribeCloudMonitorTaskDetectSummary",
        "alidns:DescribeCloudMonitorTaskOverview",
        "alidns:DescribeDnsCacheDomains",
        "alidns:DescribeDnsGtmAddrAttributeInfo",
        "alidns:DescribeDnsGtmAvailableAlertGroup",
        "alidns:DescribeDnsGtmMonitorAvailableConfig",
        "alidns:DescribeDnsMonitor",
        "alidns:DescribeDnsMonitorAvailableNodes",
        "alidns:DescribeDnsMonitorTaskConfig",
        "alidns:DescribeDnsMonitors",
        "alidns:DescribeDnsProductInstance",
        "alidns:DescribeDnsProductInstanceSummary",
        "alidns:DescribeDnsProductInstances",
        "alidns:DescribeDnsTemplateInfo",
        "alidns:DescribeDnsTemplates",
        "alidns:DescribeDnsUserInstancesInfo",
        "alidns:DescribeDohAccountStatistics",
        "alidns:DescribeDohDomainStatistics",
        "alidns:DescribeDohDomainStatisticsSummary",
        "alidns:DescribeDohSdkList",
        "alidns:DescribeDohSubDomainStatistics",
        "alidns:DescribeDohSubDomainStatisticsSummary",
        "alidns:DescribeDohUserInfo",
        "alidns:DescribeDomainBackups",
        "alidns:DescribeDomainGroups",
        "alidns:DescribeDomainLogs",
        "alidns:DescribeDomainResolveStatisticsSummary",
        "alidns:DescribeDomainStatisticsSummary",
        "alidns:DescribeEdgeDnsAppAgentInfo",
        "alidns:DescribeEdgeDnsAppLatestVersion",
        "alidns:DescribeEdgeDnsClusterFullInfo",
        "alidns:DescribeEdgeDnsClusterNodeContainers",
        "alidns:DescribeEdgeDnsClusterNodeServiceStatus",
        "alidns:DescribeEdgeDnsClusterResource",
        "alidns:DescribeEdgeDnsClusterResourceOverview",
        "alidns:DescribeEdgeDnsDeployNotFinalStatusTask",
        "alidns:DescribeEdgeDnsDeployOptionalIp",
        "alidns:DescribeEdgeDnsDeployOptionalVersion",
        "alidns:DescribeEdgeDnsDeployTask",
        "alidns:DescribeEdgeDnsDeploymentInfo",
        "alidns:DescribeEdgeDnsDeploymentStatistics",
        "alidns:DescribeEdgeDnsNodeConnectionToken",
        "alidns:DescribeEdgeDnsNodeFullInfo",
        "alidns:DescribeFusionOnPremisesInstances",
        "alidns:DescribeFusionResources",
        "alidns:DescribeGtmAvailableAlertGroup",
        "alidns:DescribeGtmMonitorAvailableConfig",
        "alidns:DescribeGtmRecoveryPlan",
        "alidns:DescribeGtmRecoveryPlanAvailableConfig",
        "alidns:DescribeGtmRecoveryPlans",
        "alidns:DescribeImportDomainRecordsResult",
        "alidns:DescribeImportDomainsResult",
        "alidns:DescribeInstanceDomains",
        "alidns:DescribeInstanceExtendStatus",
        "alidns:DescribeInternetDnsLogs",
        "alidns:DescribeIntranetFirewallProtectionDetail",
        "alidns:DescribeIntranetFirewallProtectionDetails",
        "alidns:DescribeIntranetFirewallProtectionHistory",
        "alidns:DescribeIntranetFirewallProtectionLogs",
        "alidns:DescribeIntranetFirewallProtectionOverview",
        "alidns:DescribeIntranetFirewallProtectionRankings",
        "alidns:DescribeInvalidDomains",
        "alidns:DescribeIspFlushCacheInstances",
        "alidns:DescribeIspFlushCacheRemainQuota",
        "alidns:DescribeIspFlushCacheTask",
        "alidns:DescribeIspFlushCacheTasks",
        "alidns:DescribeJobOverview",
        "alidns:DescribeJobs",
        "alidns:DescribePostBusinessServiceStatus",
        "alidns:DescribePtrRecordSet",
        "alidns:DescribePtrRecords",
        "alidns:DescribeRecommendCommodities",
        "alidns:DescribeRecursionFirewallProtectionDetail",
        "alidns:DescribeRecursionFirewallProtectionDetails",
        "alidns:DescribeRecursionFirewallProtectionHistory",
        "alidns:DescribeRecursionFirewallProtectionLogs",
        "alidns:DescribeRecursionFirewallProtectionOverview",
        "alidns:DescribeRecursionFirewallProtectionRankings",
        "alidns:DescribeResolveAndOperatorClusterAssociationOverview",
        "alidns:DescribeResolveSummary",
        "alidns:DescribeRestoreDomainResults",
        "alidns:DescribeRestoringDomainTasks",
        "alidns:DescribeRspDomainStatus",
        "alidns:DescribeRspDomainStatusOte",
        "alidns:DescribeRspGateway",
        "alidns:DescribeRspGatewayOte",
        "alidns:DescribeRspRegistrarForRegistrar",
        "alidns:DescribeRspRegistrarForRegistrarOte",
        "alidns:DescribeRspRegistrarForRegistry",
        "alidns:DescribeRspRegistrarForRegistryOte",
        "alidns:DescribeRspTld",
        "alidns:DescribeRspTldMeta",
        "alidns:DescribeRspTldMetaOte",
        "alidns:DescribeRspTldOte",
        "alidns:DescribeSiteMonitor",
        "alidns:DescribeSiteMonitorIspCityInfos",
        "alidns:DescribeSiteMonitorIspInfos",
        "alidns:DescribeSlaveDnsDomains",
        "alidns:DescribeSubJobs",
        "alidns:DescribeSubdomainRecords",
        "alidns:DescribeSupportLines",
        "alidns:DescribeTags",
        "alidns:DescribeTransferDomains",
        "alidns:DescribeUserContactInfo",
        "alidns:DescribeUserGrayStatus",
        "alidns:GetMainDomainName",
        "alidns:GetTxtRecordForRetrievalDomainName",
        "alidns:GetTxtRecordForVerify",
        "alidns:ListAlidnsAlertLogs",
        "alidns:ListAssistantChat",
        "alidns:ListAssistantMessage",
        "alidns:ListAssistantQuestionGuide",
        "alidns:ListAssociatedResolveClusters",
        "alidns:ListAvailableAlertGroups",
        "alidns:ListCloudGtmAddressPools",
        "alidns:ListCloudGtmAddresses",
        "alidns:ListCloudGtmAlertLogs",
        "alidns:ListCloudGtmAvailableAlertGroups",
        "alidns:ListCloudGtmInstanceConfigs",
        "alidns:ListCloudGtmInstances",
        "alidns:ListCloudGtmMonitorNodes",
        "alidns:ListCloudGtmMonitorTemplates",
        "alidns:ListCloudMonitorAlertLogs",
        "alidns:ListCloudMonitorProbes",
        "alidns:ListCloudMonitorTasks",
        "alidns:ListEdgeDnsAlertLogs",
        "alidns:ListEdgeDnsClusters",
        "alidns:ListEdgeDnsNodes",
        "alidns:ListEdgeDnsNotifyConfigs",
        "alidns:ListEdgeDnsNotifyGatewayConfigs",
        "alidns:ListEdgeDnsResolveLogs",
        "alidns:ListEppClient",
        "alidns:ListRspContacts",
        "alidns:ListRspContactsOte",
        "alidns:ListRspDomainSuperProhibited",
        "alidns:ListRspDomainSuperProhibitedOte",
        "alidns:ListRspDomains",
        "alidns:ListRspDomainsOte",
        "alidns:ListRspEppClient",
        "alidns:ListRspEppClientOte",
        "alidns:ListRspEppClients",
        "alidns:ListRspEppClientsOte",
        "alidns:ListRspGateway",
        "alidns:ListRspGatewayClientAuthorizedIp",
        "alidns:ListRspGatewayClientAuthorizedIpOte",
        "alidns:ListRspGatewayOte",
        "alidns:ListRspHosts",
        "alidns:ListRspHostsOte",
        "alidns:ListRspInternalRegistrars",
        "alidns:ListRspInternalRegistrarsOte",
        "alidns:ListRspOperator",
        "alidns:ListRspOperatorOte",
        "alidns:ListRspRegistrarContact",
        "alidns:ListRspRegistrarContactOte",
        "alidns:ListRspRegistrars",
        "alidns:ListRspRegistrarsOte",
        "alidns:ListRspReservedName",
        "alidns:ListRspReservedNameOte",
        "alidns:ListRspSensitiveName",
        "alidns:ListRspSensitiveNameOte",
        "alidns:ListRspTld",
        "alidns:ListRspTldGatewayConfig",
        "alidns:ListRspTldGatewayConfigOte",
        "alidns:ListRspTldOte",
        "alidns:ListRspTldSuperProhibited",
        "alidns:ListRspTldSuperProhibitedOte",
        "alidns:ListTagResources",
        "alidns:ListTld",
        "alidns:QueryAllowRenewPeriodList",
        "alidns:QueryDnsMonitorErrorEvent",
        "alidns:QueryDnsMonitorFailureRate",
        "alidns:QueryDnsMonitorHistory",
        "alidns:QueryDnsMonitorLast",
        "alidns:QueryDnsMonitorNodeResponseTime",
        "alidns:QueryDnsMonitorStatistics",
        "alidns:QueryEdgeDnsMonitors",
        "alidns:QueryEdgeDnsResolveQps",
        "alidns:QueryEdgeDnsTopData",
        "alidns:QueryEdgeDnsTopDomain",
        "alidns:QueryEdgeDnsTopRCode",
        "alidns:QueryInstanceUnpaidOrder",
        "alidns:QueryRenewPrice",
        "alidns:SearchCloudGtmAddressPools",
        "alidns:SearchCloudGtmAddresses",
        "alidns:SearchCloudGtmInstanceConfigs",
        "alidns:SearchCloudGtmInstances",
        "alidns:SearchCloudGtmMonitorTemplates",
        "alidns:SearchCloudMonitorTasks",
        "alidns:SearchEdgeDnsClusters",
        "alidns:SearchEdgeDnsNodes",
        "alidns:ValidateDomainCanAdd"
      ],
      "Resource": "*"
    }
  ]
}

    • フルアクセスの許可

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "alidns:AddBatchDomain",
        "alidns:AddBatchDomainFromFile",
        "alidns:AddBatchRr",
        "alidns:AddBatchTempDomains",
        "alidns:AddDnsCacheDomain",
        "alidns:AddDnsMonitor",
        "alidns:AddDnsTemplate",
        "alidns:AddDnsTemplateRecord",
        "alidns:AddDohUser",
        "alidns:AddDomainGroup",
        "alidns:AddGateway",
        "alidns:AddGtmRecoveryPlan",
        "alidns:AddRegistrar",
        "alidns:AddRegistrarContact",
        "alidns:AddRspDomainServerHoldStatusForGateway",
        "alidns:AddRspDomainServerHoldStatusForGatewayOte",
        "alidns:AddRspEppClient",
        "alidns:AddSensitiveName",
        "alidns:AddUserProductFeedback",
        "alidns:BatchDomainRecordOperate",
        "alidns:BindInstanceDomains",
        "alidns:CancelJob",
        "alidns:CancelOrder",
        "alidns:ChangeBatchDomainGroup",
        "alidns:ChangeDomainOfDnsProduct",
        "alidns:ChatAssistantMessage",
        "alidns:CheckDomainRecord",
        "alidns:CheckEdgeDnsClusterConnection",
        "alidns:CheckEdgeDnsClusterDeploymentAppVersion",
        "alidns:CheckEdgeDnsDeploymentAppVersion",
        "alidns:CheckFusionClientAvailable",
        "alidns:CheckGtmInstanceExistence",
        "alidns:CheckInstanceAllowSystemAssign",
        "alidns:CheckSubDomainRecord4Add",
        "alidns:CompleteCommodity",
        "alidns:CompleteCommodityWithoutTraffic",
        "alidns:CopyGtmConfig",
        "alidns:CreateCloudMonitorTask",
        "alidns:CreateEdgeDnsCluster",
        "alidns:CreateInstance",
        "alidns:CreateMultiCommodityOrder",
        "alidns:CreatePtrRecordSet",
        "alidns:CreateRenewOrder",
        "alidns:CreateRspDomainSuperProhibited",
        "alidns:CreateRspDomainSuperProhibitedOte",
        "alidns:CreateRspEppClient",
        "alidns:CreateRspEppClientOte",
        "alidns:CreateRspGateway",
        "alidns:CreateRspGatewayClientAuthorizedIp",
        "alidns:CreateRspGatewayClientAuthorizedIpOte",
        "alidns:CreateRspGatewayOte",
        "alidns:CreateRspRegistrar",
        "alidns:CreateRspRegistrarContact",
        "alidns:CreateRspRegistrarContactOte",
        "alidns:CreateRspRegistrarOte",
        "alidns:CreateRspReservedName",
        "alidns:CreateRspReservedNameOte",
        "alidns:CreateRspSensitiveName",
        "alidns:CreateRspSensitiveNameOte",
        "alidns:CreateRspTldGatewayConfig",
        "alidns:CreateRspTldGatewayConfigOte",
        "alidns:CreateRspTldMeta",
        "alidns:CreateRspTldMetaOte",
        "alidns:CreateRspTldSuperProhibited",
        "alidns:CreateRspTldSuperProhibitedOte",
        "alidns:DeleteAssistantChat",
        "alidns:DeleteBatchDomain",
        "alidns:DeleteBatchRr",
        "alidns:DeleteCloudGtmAddress",
        "alidns:DeleteCloudGtmAddressPool",
        "alidns:DeleteCloudGtmInstanceConfig",
        "alidns:DeleteCloudGtmMonitorTemplate",
        "alidns:DeleteCloudMonitorTask",
        "alidns:DeleteCloudMonitorTasksJob",
        "alidns:DeleteDnsMonitor",
        "alidns:DeleteDnsTemplate",
        "alidns:DeleteDnsTemplateRecord",
        "alidns:DeleteDomainGroup",
        "alidns:DeleteEdgeDnsCluster",
        "alidns:DeleteFusionClientConfig",
        "alidns:DeleteGtmRecoveryPlan",
        "alidns:DeletePtrRecord",
        "alidns:DeleteRspDomainSuperProhibited",
        "alidns:DeleteRspDomainSuperProhibitedOte",
        "alidns:DeleteRspEppClient",
        "alidns:DeleteRspEppClientOte",
        "alidns:DeleteRspGatewayClientAuthorizedIp",
        "alidns:DeleteRspGatewayClientAuthorizedIpOte",
        "alidns:DeleteRspRegistrar",
        "alidns:DeleteRspRegistrarContact",
        "alidns:DeleteRspRegistrarContactOte",
        "alidns:DeleteRspRegistrarOte",
        "alidns:DeleteRspReservedName",
        "alidns:DeleteRspReservedNameOte",
        "alidns:DeleteRspSensitiveName",
        "alidns:DeleteRspSensitiveNameOte",
        "alidns:DeleteRspTldGatewayConfig",
        "alidns:DeleteRspTldGatewayConfigOte",
        "alidns:DeleteRspTldSuperProhibited",
        "alidns:DeleteRspTldSuperProhibitedOte",
        "alidns:DescribeAccount",
        "alidns:DescribeAlidnsGlobalAlert",
        "alidns:DescribeAlidnsInstances",
        "alidns:DescribeAlidnsPostBusinessStatus",
        "alidns:DescribeAlidnsResolveAnalysisConfig",
        "alidns:DescribeBatchLogs",
        "alidns:DescribeBatchResultCount",
        "alidns:DescribeBatchResultDetail",
        "alidns:DescribeBundleRecordTaskResult",
        "alidns:DescribeBundleTempDomains",
        "alidns:DescribeCanAddMonitorDomainRrs",
        "alidns:DescribeCanAddMonitorSubDomainInfo",
        "alidns:DescribeChangeLogs",
        "alidns:DescribeCloudGtmAddress",
        "alidns:DescribeCloudGtmAddressPool",
        "alidns:DescribeCloudGtmAddressPoolReference",
        "alidns:DescribeCloudGtmAddressReference",
        "alidns:DescribeCloudGtmGlobalAlert",
        "alidns:DescribeCloudGtmInstanceConfigAlert",
        "alidns:DescribeCloudGtmInstanceConfigFullInfo",
        "alidns:DescribeCloudGtmMonitorTemplate",
        "alidns:DescribeCloudGtmResolveAnalysisConfig",
        "alidns:DescribeCloudGtmSummary",
        "alidns:DescribeCloudGtmSystemLines",
        "alidns:DescribeCloudMonitorDetectCountOverview",
        "alidns:DescribeCloudMonitorDetectCountSummary",
        "alidns:DescribeCloudMonitorDetectLogs",
        "alidns:DescribeCloudMonitorGlobalAlertConfig",
        "alidns:DescribeCloudMonitorLatestDetectLogOverview",
        "alidns:DescribeCloudMonitorLatestDetectLogs",
        "alidns:DescribeCloudMonitorTask",
        "alidns:DescribeCloudMonitorTaskAlertConfig",
        "alidns:DescribeCloudMonitorTaskDetectSummary",
        "alidns:DescribeCloudMonitorTaskOverview",
        "alidns:DescribeDnsCacheDomains",
        "alidns:DescribeDnsGtmAddrAttributeInfo",
        "alidns:DescribeDnsGtmAvailableAlertGroup",
        "alidns:DescribeDnsGtmMonitorAvailableConfig",
        "alidns:DescribeDnsMonitor",
        "alidns:DescribeDnsMonitorAvailableNodes",
        "alidns:DescribeDnsMonitorTaskConfig",
        "alidns:DescribeDnsMonitors",
        "alidns:DescribeDnsProductInstance",
        "alidns:DescribeDnsProductInstanceSummary",
        "alidns:DescribeDnsProductInstances",
        "alidns:DescribeDnsTemplateInfo",
        "alidns:DescribeDnsTemplates",
        "alidns:DescribeDnsUserInstancesInfo",
        "alidns:DescribeDohAccountStatistics",
        "alidns:DescribeDohDomainStatistics",
        "alidns:DescribeDohDomainStatisticsSummary",
        "alidns:DescribeDohSdkList",
        "alidns:DescribeDohSubDomainStatistics",
        "alidns:DescribeDohSubDomainStatisticsSummary",
        "alidns:DescribeDohUserInfo",
        "alidns:DescribeDomainBackups",
        "alidns:DescribeDomainGroups",
        "alidns:DescribeDomainLogs",
        "alidns:DescribeDomainResolveStatisticsSummary",
        "alidns:DescribeDomainStatisticsSummary",
        "alidns:DescribeEdgeDnsAppAgentInfo",
        "alidns:DescribeEdgeDnsAppLatestVersion",
        "alidns:DescribeEdgeDnsClusterFullInfo",
        "alidns:DescribeEdgeDnsClusterNodeContainers",
        "alidns:DescribeEdgeDnsClusterNodeServiceStatus",
        "alidns:DescribeEdgeDnsClusterResource",
        "alidns:DescribeEdgeDnsClusterResourceOverview",
        "alidns:DescribeEdgeDnsDeployNotFinalStatusTask",
        "alidns:DescribeEdgeDnsDeployOptionalIp",
        "alidns:DescribeEdgeDnsDeployOptionalVersion",
        "alidns:DescribeEdgeDnsDeployTask",
        "alidns:DescribeEdgeDnsDeploymentInfo",
        "alidns:DescribeEdgeDnsDeploymentStatistics",
        "alidns:DescribeEdgeDnsNodeConnectionToken",
        "alidns:DescribeEdgeDnsNodeFullInfo",
        "alidns:DescribeFusionOnPremisesInstances",
        "alidns:DescribeFusionResources",
        "alidns:DescribeGtmAvailableAlertGroup",
        "alidns:DescribeGtmMonitorAvailableConfig",
        "alidns:DescribeGtmRecoveryPlan",
        "alidns:DescribeGtmRecoveryPlanAvailableConfig",
        "alidns:DescribeGtmRecoveryPlans",
        "alidns:DescribeImportDomainRecordsResult",
        "alidns:DescribeImportDomainsResult",
        "alidns:DescribeInstanceDomains",
        "alidns:DescribeInstanceExtendStatus",
        "alidns:DescribeInternetDnsLogs",
        "alidns:DescribeIntranetFirewallProtectionDetail",
        "alidns:DescribeIntranetFirewallProtectionDetails",
        "alidns:DescribeIntranetFirewallProtectionHistory",
        "alidns:DescribeIntranetFirewallProtectionLogs",
        "alidns:DescribeIntranetFirewallProtectionOverview",
        "alidns:DescribeIntranetFirewallProtectionRankings",
        "alidns:DescribeInvalidDomains",
        "alidns:DescribeIspFlushCacheInstances",
        "alidns:DescribeIspFlushCacheRemainQuota",
        "alidns:DescribeIspFlushCacheTask",
        "alidns:DescribeIspFlushCacheTasks",
        "alidns:DescribeJobOverview",
        "alidns:DescribeJobs",
        "alidns:DescribePostBusinessServiceStatus",
        "alidns:DescribePtrRecordSet",
        "alidns:DescribePtrRecords",
        "alidns:DescribeRecommendCommodities",
        "alidns:DescribeRecursionFirewallProtectionDetail",
        "alidns:DescribeRecursionFirewallProtectionDetails",
        "alidns:DescribeRecursionFirewallProtectionHistory",
        "alidns:DescribeRecursionFirewallProtectionLogs",
        "alidns:DescribeRecursionFirewallProtectionOverview",
        "alidns:DescribeRecursionFirewallProtectionRankings",
        "alidns:DescribeResolveAndOperatorClusterAssociationOverview",
        "alidns:DescribeResolveSummary",
        "alidns:DescribeRestoreDomainResults",
        "alidns:DescribeRestoringDomainTasks",
        "alidns:DescribeRspDomainStatus",
        "alidns:DescribeRspDomainStatusOte",
        "alidns:DescribeRspGateway",
        "alidns:DescribeRspGatewayOte",
        "alidns:DescribeRspRegistrarForRegistrar",
        "alidns:DescribeRspRegistrarForRegistrarOte",
        "alidns:DescribeRspRegistrarForRegistry",
        "alidns:DescribeRspRegistrarForRegistryOte",
        "alidns:DescribeRspTld",
        "alidns:DescribeRspTldMeta",
        "alidns:DescribeRspTldMetaOte",
        "alidns:DescribeRspTldOte",
        "alidns:DescribeSiteMonitor",
        "alidns:DescribeSiteMonitorIspCityInfos",
        "alidns:DescribeSiteMonitorIspInfos",
        "alidns:DescribeSlaveDnsDomains",
        "alidns:DescribeSubJobs",
        "alidns:DescribeSubdomainRecords",
        "alidns:DescribeSupportLines",
        "alidns:DescribeTags",
        "alidns:DescribeTransferDomains",
        "alidns:DescribeUserContactInfo",
        "alidns:DescribeUserGrayStatus",
        "alidns:DescribleMultiCommodityPrices",
        "alidns:ExecuteGtmRecoveryPlan",
        "alidns:ExportDomainJob",
        "alidns:ExportResolveSummaryJob",
        "alidns:FetchFusionFirewallThreatDownloadUrl",
        "alidns:FinishEdgeDnsDeployTask",
        "alidns:GetMainDomainName",
        "alidns:GetTxtRecordForRetrievalDomainName",
        "alidns:GetTxtRecordForVerify",
        "alidns:ListAlidnsAlertLogs",
        "alidns:ListAssistantChat",
        "alidns:ListAssistantMessage",
        "alidns:ListAssistantQuestionGuide",
        "alidns:ListAssociatedResolveClusters",
        "alidns:ListAvailableAlertGroups",
        "alidns:ListCloudGtmAddressPools",
        "alidns:ListCloudGtmAddresses",
        "alidns:ListCloudGtmAlertLogs",
        "alidns:ListCloudGtmAvailableAlertGroups",
        "alidns:ListCloudGtmInstanceConfigs",
        "alidns:ListCloudGtmInstances",
        "alidns:ListCloudGtmMonitorNodes",
        "alidns:ListCloudGtmMonitorTemplates",
        "alidns:ListCloudMonitorAlertLogs",
        "alidns:ListCloudMonitorProbes",
        "alidns:ListCloudMonitorTasks",
        "alidns:ListEdgeDnsAlertLogs",
        "alidns:ListEdgeDnsClusters",
        "alidns:ListEdgeDnsNodes",
        "alidns:ListEdgeDnsNotifyConfigs",
        "alidns:ListEdgeDnsNotifyGatewayConfigs",
        "alidns:ListEdgeDnsResolveLogs",
        "alidns:ListEppClient",
        "alidns:ListRspContacts",
        "alidns:ListRspContactsOte",
        "alidns:ListRspDomainSuperProhibited",
        "alidns:ListRspDomainSuperProhibitedOte",
        "alidns:ListRspDomains",
        "alidns:ListRspDomainsOte",
        "alidns:ListRspEppClient",
        "alidns:ListRspEppClientOte",
        "alidns:ListRspEppClients",
        "alidns:ListRspEppClientsOte",
        "alidns:ListRspGateway",
        "alidns:ListRspGatewayClientAuthorizedIp",
        "alidns:ListRspGatewayClientAuthorizedIpOte",
        "alidns:ListRspGatewayOte",
        "alidns:ListRspHosts",
        "alidns:ListRspHostsOte",
        "alidns:ListRspInternalRegistrars",
        "alidns:ListRspInternalRegistrarsOte",
        "alidns:ListRspOperator",
        "alidns:ListRspOperatorOte",
        "alidns:ListRspRegistrarContact",
        "alidns:ListRspRegistrarContactOte",
        "alidns:ListRspRegistrars",
        "alidns:ListRspRegistrarsOte",
        "alidns:ListRspReservedName",
        "alidns:ListRspReservedNameOte",
        "alidns:ListRspSensitiveName",
        "alidns:ListRspSensitiveNameOte",
        "alidns:ListRspTld",
        "alidns:ListRspTldGatewayConfig",
        "alidns:ListRspTldGatewayConfigOte",
        "alidns:ListRspTldOte",
        "alidns:ListRspTldSuperProhibited",
        "alidns:ListRspTldSuperProhibitedOte",
        "alidns:ListTagResources",
        "alidns:ListTld",
        "alidns:ManuallyRetryEdgeDnsClusterDispatchDataJob",
        "alidns:OpenPostBusinessService",
        "alidns:OperateBatchDomain",
        "alidns:OperateRspRegistration",
        "alidns:OperateRspRegistrationOte",
        "alidns:OrderPaidNotice",
        "alidns:PreviewGtmRecoveryPlan",
        "alidns:QueryAllowRenewPeriodList",
        "alidns:QueryDnsMonitorErrorEvent",
        "alidns:QueryDnsMonitorFailureRate",
        "alidns:QueryDnsMonitorHistory",
        "alidns:QueryDnsMonitorLast",
        "alidns:QueryDnsMonitorNodeResponseTime",
        "alidns:QueryDnsMonitorStatistics",
        "alidns:QueryEdgeDnsMonitors",
        "alidns:QueryEdgeDnsResolveQps",
        "alidns:QueryEdgeDnsTopData",
        "alidns:QueryEdgeDnsTopDomain",
        "alidns:QueryEdgeDnsTopRCode",
        "alidns:QueryInstanceUnpaidOrder",
        "alidns:QueryRenewPrice",
        "alidns:RecheckInvalidDomain",
        "alidns:ReclaimDomain",
        "alidns:RefundOrder",
        "alidns:RemoveRspDomainServerHoldStatusForGateway",
        "alidns:RemoveRspDomainServerHoldStatusForGatewayOte",
        "alidns:ReplaceAlidnsResolveAnalysisConfig",
        "alidns:ReplaceCloudGtmResolveAnalysisConfig",
        "alidns:ReplacePtrRecordSet",
        "alidns:ResetBatchResult",
        "alidns:ResetImportDomainsResult",
        "alidns:ResetRspEppClientPassword",
        "alidns:ResetRspEppClientPasswordOTE",
        "alidns:RetrieveBatchDomain",
        "alidns:RetrieveDomain",
        "alidns:RollbackGtmRecoveryPlan",
        "alidns:SaveResolveClustersAssociation",
        "alidns:ScanSubdomainRecords",
        "alidns:SearchCloudGtmAddressPools",
        "alidns:SearchCloudGtmAddresses",
        "alidns:SearchCloudGtmInstanceConfigs",
        "alidns:SearchCloudGtmInstances",
        "alidns:SearchCloudGtmMonitorTemplates",
        "alidns:SearchCloudMonitorTasks",
        "alidns:SearchEdgeDnsClusters",
        "alidns:SearchEdgeDnsNodes",
        "alidns:SendVerifyCode",
        "alidns:SetCloudGtmInstanceConfigLogSwitch",
        "alidns:SetCloudMonitorTaskStatus",
        "alidns:SetDomainAuthLogConfig",
        "alidns:SetEdgeDnsClusterRecurseEnableStatus",
        "alidns:SetInstanceRenewalStatus",
        "alidns:SetPtrRecordStatus",
        "alidns:SubmitEdgeDnsDeployRetryTask",
        "alidns:SubmitEdgeDnsDeployTask",
        "alidns:SubmitImportDomainRecordsFile",
        "alidns:SubmitIspFlushCacheTask",
        "alidns:TagResources",
        "alidns:TemporaryCancelFusionResource",
        "alidns:TransferBatchDomain",
        "alidns:UnbindInstanceDomains",
        "alidns:UntagResources",
        "alidns:UpdateAlidnsGlobalAlert",
        "alidns:UpdateAlidnsLineRecordSet",
        "alidns:UpdateAlidnsResolveAnalysisConfig",
        "alidns:UpdateAssistantChatName",
        "alidns:UpdateAssistantMessageFeedback",
        "alidns:UpdateBatchRr",
        "alidns:UpdateCloudGtmAddressEnableStatus",
        "alidns:UpdateCloudGtmAddressManualAvailableStatus",
        "alidns:UpdateCloudGtmAddressPoolEnableStatus",
        "alidns:UpdateCloudGtmAddressPoolRemark",
        "alidns:UpdateCloudGtmAddressRemark",
        "alidns:UpdateCloudGtmGlobalAlert",
        "alidns:UpdateCloudGtmInstanceConfigBasic",
        "alidns:UpdateCloudGtmInstanceConfigRemark",
        "alidns:UpdateCloudGtmInstanceName",
        "alidns:UpdateCloudGtmMonitorTemplateRemark",
        "alidns:UpdateCloudGtmResolveAnalysisConfig",
        "alidns:UpdateCloudMonitorGlobalAlertConfig",
        "alidns:UpdateCloudMonitorTask",
        "alidns:UpdateCloudMonitorTaskAlertConfig",
        "alidns:UpdateCloudMonitorTaskRemark",
        "alidns:UpdateDnsMonitor",
        "alidns:UpdateDnsTemplateName",
        "alidns:UpdateDnsTemplateRecord",
        "alidns:UpdateDomainGroup",
        "alidns:UpdateDomainServerHoldStatus",
        "alidns:UpdateDomainStatus",
        "alidns:UpdateEdgeDnsCluster",
        "alidns:UpdateEdgeDnsClusterRecurseRemark",
        "alidns:UpdateEdgeDnsNodeName",
        "alidns:UpdateEdgeDnsNodeOperationIp",
        "alidns:UpdateEdgeDnsNodeRemark",
        "alidns:UpdateEdgeDnsNotifyConfig",
        "alidns:UpdateEdgeDnsNotifyGatewayConfig",
        "alidns:UpdateEdgeDnsSyslogDnsLogNotifyConfig",
        "alidns:UpdateFusionClientConfig",
        "alidns:UpdateFusionClientNodeEscapeConfig",
        "alidns:UpdateFusionFirewallSubscriptionConfig",
        "alidns:UpdateGtmRecoveryPlan",
        "alidns:UpdateIspFlushCacheInstanceConfig",
        "alidns:UpdatePtrRecordRemark",
        "alidns:UpdateRspDomainServerHoldStatus",
        "alidns:UpdateRspDomainServerHoldStatusOte",
        "alidns:UpdateRspDomainServerProhibitStatus",
        "alidns:UpdateRspDomainServerProhibitStatusForGateway",
        "alidns:UpdateRspDomainServerProhibitStatusForGatewayOte",
        "alidns:UpdateRspDomainServerProhibitStatusOte",
        "alidns:UpdateRspDomainStatus",
        "alidns:UpdateRspDomainStatusOte",
        "alidns:UpdateRspEppClient",
        "alidns:UpdateRspEppClientAllowedTlds",
        "alidns:UpdateRspEppClientAllowedTldsOte",
        "alidns:UpdateRspEppClientGatewayId",
        "alidns:UpdateRspEppClientGatewayIdOte",
        "alidns:UpdateRspEppClientIpWhiteList",
        "alidns:UpdateRspEppClientIpWhiteListOte",
        "alidns:UpdateRspEppClientMaxConnection",
        "alidns:UpdateRspEppClientMaxConnectionOte",
        "alidns:UpdateRspEppClientOte",
        "alidns:UpdateRspEppClientRemark",
        "alidns:UpdateRspEppClientRemarkOte",
        "alidns:UpdateRspEppClientStatus",
        "alidns:UpdateRspEppClientStatusOte",
        "alidns:UpdateRspEppClientTld",
        "alidns:UpdateRspEppClientTldOte",
        "alidns:UpdateRspGateway",
        "alidns:UpdateRspGatewayClientAuthorizedIp",
        "alidns:UpdateRspGatewayClientAuthorizedIpOte",
        "alidns:UpdateRspGatewayOte",
        "alidns:UpdateRspGatewayStatus",
        "alidns:UpdateRspGatewayStatusOte",
        "alidns:UpdateRspRegistrar",
        "alidns:UpdateRspRegistrarContact",
        "alidns:UpdateRspRegistrarContactOte",
        "alidns:UpdateRspRegistrarOte",
        "alidns:UpdateRspRegistrarStatus",
        "alidns:UpdateRspRegistrarStatusOte",
        "alidns:UpdateRspReservedName",
        "alidns:UpdateRspReservedNameOte",
        "alidns:UpdateRspSensitiveName",
        "alidns:UpdateRspSensitiveNameOte",
        "alidns:UpdateRspTld",
        "alidns:UpdateRspTldDisableCommand",
        "alidns:UpdateRspTldDisableCommandOte",
        "alidns:UpdateRspTldGatewayConfig",
        "alidns:UpdateRspTldGatewayConfigOte",
        "alidns:UpdateRspTldOte",
        "alidns:UpdateRspTldPrice",
        "alidns:UpdateRspTldPriceOte",
        "alidns:UpdateRspTldStatus",
        "alidns:UpdateRspTldStatusOte",
        "alidns:UpdateUserProductFeedback",
        "alidns:ValidateDomainCanAdd",
        "alidns:ValidateVerifyCode",
        "alidns:VerifyAccount",
        "alidns:VerifyTxtRecord",
        "alidns:VerifyTxtRecordForRetrievalDomainName",
        "alidns:addDomainRecord",
        "alidns:createTldMeta",
        "alidns:deleteDomainRecord",
        "alidns:null",
        "alidns:read",
        "alidns:setDomainRecordStatus",
        "alidns:update",
        "alidns:updateDomainRecord",
        "alidns:updateDomainRecordRemark"
      ],
      "Resource": "*"
    }
  ]
}
    重要

    アカウントレベルの権限を付与すると、アカウント内のすべての関連リソースへのアクセスが許可されます。常に最小権限の原則に従ってください。

    よくある質問

    リソースがどのリソースグループに属しているかを確認するにはどうすればよいですか。

    • 方法 1：所属サービスのコンソールで確認

      • リソースが所属する Alibaba Cloud サービスのコンソールに移動します。通常、リソースの詳細ページの基本情報セクションにリソースグループが記載されています。

    • 方法 2：Resource Management コンソールで確認

      • Resource Management コンソールにログインします。

      • [Resource Center] > [Resource Search]を選択します。

      • 左側のメニューで、対象リソースを所有するアカウントを選択します (デフォルトは [Current Account]) を選択します。

      • フィルター条件を使用してリソースを検索します。

      • [Resource Group Name] 列に、リソースが属するグループが表示されます。

    特定のリソースグループ内のすべてのリソースを表示するにはどうすればよいですか。

    • 方法 1：

      • Resource Management コンソールにログインします。

      • [Resource Center] > [Resource Search]を選択します。

      • 左側のメニューで、リソースを所有するアカウント (デフォルトは [Current Account]) の下にある、対象のリソースグループ名をクリックします。

      • 右側の画面で、[Select resource types] ドロップダウンリストからクラウドサービスを選択します。

      • そのグループ内のすべてのリソースが表示されます。

    • 方法 2：

      • Resource Management コンソールにログインします。

      • [Resource Group] > [Resource Group]を選択します。

      • 対象のリソースグループを見つけ、[Actions] 列の [Manage Resource] をクリックします。

      • リソース管理ページで、[Service] ドロップダウンリストからクラウドサービスを選択します。

      • そのグループ内のすべてのリソースが表示されます。

    複数のリソースを別のリソースグループに一括で移動するにはどうすればよいですか。

    1. Resource Management コンソールにログインします。

    2. 左側のメニューで、 [Resource Group] > [Resource Group] を選択します。

    3. 対象のリソースグループを見つけ、[Actions] 列の [Manage Resource] をクリックします。

    4. リソース管理ページで、フィルター条件を使用して移動したいリソースを検索します。

    5. 移動したいリソースのチェックボックスを選択します。

    6. ページ下部にある [Transfer] をクリックします。

    7. ダイアログボックスで、移動先のリソースグループを選択し、 [Confirm] をクリックします。