すべてのプロダクト
Search

このプロダクト

    Microservices Engine:リソースグループによるきめ細かなアクセス制御

    ドキュメントセンター

    Microservices Engine:リソースグループによるきめ細かなアクセス制御

    最終更新日:Apr 23, 2026

    リソースグループを活用することで、Microservices Engine (MSE)リソースの一元管理が可能になり、RAM (Resource Access Management) ポリシーを用いたグループ単位でのきめ細かなアクセス制御を実現できます。これにより、Alibaba Cloud アカウントで最小権限の原則 (PoLP) を徹底できます。

    説明

    リソースグループレベルの権限設定は、サポート対象リソースタイプとアクションに限られます。サポート対象外アクションの場合、リソースグループに対するポリシーを指定しても無視されます。アクセス制御のため、アカウントに対するポリシーを設定する必要があります。

    仕組み

    リソースグループは、プロジェクトや環境ごとにリソースを整理します。リソースをグループ化したら、そのグループにのみ権限を限定する RAM ポリシーをアイデンティティ (RAM ユーザー、ユーザーグループ、ロールなど) にアタッチできます。詳細については、「リソースのグループ化と権限付与」をご参照ください。

    このアプローチには、主に 2 つのメリットがあります。

    • きめ細かなアクセス制御：アカウント全体の権限を付与する代わりに、アイデンティティのアクセスを特定のグループ内のリソースのみに制限できます。これにより、プロジェクト固有のワークロードを分離し、意図しないアクセスのリスクを軽減できます。

    • 管理の簡素化：新しいリソースがリソースグループに追加されると、そのグループに限定された権限を持つ RAM アイデンティティは自動的にアクセスできます。新しいリソースが作成されるたびに RAM ポリシーを更新する必要はありません。

    RAM ユーザーへのリソースグループレベルの権限付与

    このセクションでは、特定のリソースグループ内のMicroservices Engine (MSE)リソースにのみアクセス権限を RAM ユーザーに付与する方法について説明します。

    1. 前提条件

    2. 権限付与

    リソースグループレベルの権限は、Resource Management コンソールまたは RAM コンソールのいずれかから付与できます。

    Resource Management コンソール

    • Resource Management コンソールにログインします。

    • [Resource Group] ページで、対象のリソースグループを見つけ、[Actions] 列の [Manage Permission] をクリックします。

    • [Permissions] タブで、[Grant Permission] をクリックします。

    • [Grant Permission] パネルで、プリンシパルとアクセスポリシーを設定します。

      • Principal：RAM ユーザーを選択します。

      • Policy：[System Policy] または [Custom Policy] を選択します。詳細については、「カスタム権限ポリシーの作成」をご参照ください。

    • [Grant Permissions] をクリックします。

    詳細については、「リソースグループに対する RAM アイデンティティへの権限付与」をご参照ください。

    RAM コンソール

    • Alibaba Cloud アカウント (root ユーザー)または RAM 管理者アカウントを使用して、RAM コンソールにログインします。

    • 左側のメニューで、[Identities] > [Users]を選択します。[Users] ページで、対象の RAM ユーザーを見つけ、[Actions] 列の [Add Permissions] をクリックします。

    • [Grant Permission] パネルで、RAM ユーザーに権限を追加します。

      • Resource Scope：[Resource Group] を選択します。

      • Principal：既存の RAM ユーザーまたは前のステップで作成した RAM ユーザーを選択します。

      • Access Policy：[System Policy] または [Custom Policy] を選択します。詳細については、「カスタム権限ポリシーの作成」をご参照ください。

    • [OK] をクリックします。

    詳細については、「RAM ユーザーへの権限付与」をご参照ください。

    サポート対象リソース

    以下のMicroservices Engine (MSE)リソースは、リソースグループレベルの権限付与をサポートしています。

    Alibaba Cloud サービス

    サービスコード

    リソースタイプ

    Microservices Engine (MSE)

    mse

    cluster : クラスター

    Microservices Engine (MSE)

    mse

    gateway : ゲートウェイ
    説明

    上表に記載されていないリソースタイプのサポートをリクエストするには、Resource Management コンソールでフィードバックを送信してください。

    image

    サポート対象外アクション

    以下のMicroservices Engine (MSE)アクションは、リソースグループレベルの権限付与をサポートしていません。

    アクション

    説明

    mse:AddAuthPolicy

    -

    mse:AddCustomPlugin

    -

    mse:AddGatewayOrder

    -

    mse:AddGatewayRetry

    -

    mse:AddGatewayService

    -

    mse:AddLoadBalancePolicy

    -

    mse:AddMigrationTask

    -

    mse:AddMockRule

    -

    mse:AddRateLimit

    -

    mse:AddRoutePolicy

    -

    mse:AddServiceTimeConfig

    -

    mse:AddWhiteScreenRule

    -

    mse:ApplyCanaryPolicy

    -

    mse:ApplyGlobalReadWriteSplitRule

    -

    mse:ApplyReadWriteSplitRule

    -

    mse:ApplyTagPolicies

    -

    mse:BatchUpdateRulesEnable

    -

    mse:BindSentinelBlockFallbackDefinition

    -

    mse:BindSentinelBlockFallbackDefinitionBatch

    -

    mse:ChangeOperateTaskTime

    -

    mse:CheckAuthPolicyName

    -

    mse:CheckCanaryPolicy

    -

    mse:CheckCsRole

    -

    mse:CheckEciRole

    -

    mse:CheckGatewayIngressMigrateTask

    -

    mse:CheckKmsStatus

    -

    mse:CheckMigrationServiceAnnotation

    -

    mse:CheckRole

    -

    mse:CheckServiceLinkRole

    -

    mse:CheckUserReadinessConfig

    -

    mse:CheckXTraceServiceStatus

    -

    mse:CloneSentinelRuleFromAhas

    -

    mse:ConvertSwaggerToMcpConfig

    -

    mse:CreateApplication

    -

    mse:CreateCircuitBreakerRule

    -

    mse:CreateDemoToUserCluster

    -

    mse:CreateFlowRule

    -

    mse:CreateGovernanceKubernetesCluster

    -

    mse:CreateGovernanceService

    -

    mse:CreateHotParamRule

    -

    mse:CreateIsolationRule

    -

    mse:CreateLicenseKey

    -

    mse:CreateMseServiceApplication

    -

    mse:CreateNamespace

    -

    mse:CreateOrUpdateEmptyPushSetting

    -

    mse:CreateOrUpdateSwimmingLane

    -

    mse:CreateOrUpdateSwimmingLaneGroup

    -

    mse:CreateOutlierConfig

    -

    mse:CreateSentinelBlockFallbackDefinition

    -

    mse:CreateWebFlowRule

    -

    mse:DeleteBackupTask

    -

    mse:DeleteCircuitBreakerRules

    -

    mse:DeleteCustomPlugin

    -

    mse:DeleteFaultInjectionRule

    -

    mse:DeleteFlowRules

    -

    mse:DeleteGatewayCircuitBreakerRule

    -

    mse:DeleteGatewayIngressMigrateTask

    -

    mse:DeleteGatewayIsolationRule

    -

    mse:DeleteGovernanceKubernetesCluster

    -

    mse:DeleteHotParamRules

    -

    mse:DeleteIsolationRules

    -

    mse:DeleteMigrationTask

    -

    mse:DeleteNacosDatasourceResource

    -

    mse:DeleteNamespace

    -

    mse:DeleteRateLimit

    -

    mse:DeleteRetryRule

    -

    mse:DeleteSSLCert

    -

    mse:DeleteSentinelBlockFallbackDefinition

    -

    mse:DeleteServiceTimeConfig

    -

    mse:DeleteSwimmingLane

    -

    mse:DeleteSwimmingLaneGroup

    -

    mse:DeleteTimeoutRule

    -

    mse:DeleteTrace

    -

    mse:DeleteUpstreamGroupOfSingleService

    -

    mse:DeleteWebFlowRules

    -

    mse:DeleteWhiteScreenRule

    -

    mse:DescribeAppAgentStatus

    -

    mse:DescribeScenarioRecordsForAhas

    -

    mse:FallbackGateway

    -

    mse:FetchAppLogConfig

    -

    mse:FetchDataSourceConfig

    -

    mse:FetchGlobalReadWriteSplitRules

    -

    mse:FetchLogConfig

    -

    mse:FetchLosslessRuleList

    -

    mse:FetchReadWriteSplitRules

    -

    mse:FetchRoutePolicyList

    -

    mse:FixGateway

    -

    mse:GatewayAdmin

    -

    mse:GetAccountMockRule

    -

    mse:GetApiTestHistory

    -

    mse:GetAppMessageQueueRoute

    -

    mse:GetApplicationDetail

    -

    mse:GetApplicationInstanceList

    -

    mse:GetApplicationInstancesWithMetircs

    -

    mse:GetApplicationList

    -

    mse:GetApplicationListWithMetircs

    -

    mse:GetApplicationTagList

    -

    mse:GetArmsAlarms

    -

    mse:GetAuthPolicyInfo

    -

    mse:GetCanaryStatus

    -

    mse:GetConfig

    -

    mse:GetDubboServicePageWithMetrics

    -

    mse:GetDubboTestMethod

    -

    mse:GetEventDetail

    -

    mse:GetEventFilterOptions

    -

    mse:GetFaultInjectionRule

    -

    mse:GetGatewayAlarms

    -

    mse:GetGatewayIngressMigrateTaskDetail

    -

    mse:GetGatewayMigrateNamespacedServices

    -

    mse:GetGatewayNotice

    -

    mse:GetGatewaySelection

    -

    mse:GetGovernanceKubernetesClusterList

    -

    mse:GetGraySwimmingLaneGroupInfo

    -

    mse:GetHistorys

    -

    mse:GetImage

    -

    mse:GetLicenseKey

    -

    mse:GetLocalityDistributionMetrics

    -

    mse:GetLocalityRule

    -

    mse:GetLosslessRuleByApp

    -

    mse:GetMockRuleByConsumerAppId

    -

    mse:GetMockRuleById

    -

    mse:GetMockRuleByProviderAppId

    -

    mse:GetMseFeatureSwitch

    -

    mse:GetNacosDatasourceResource

    -

    mse:GetNetworkInfo

    -

    mse:GetOutlierApplicationList

    -

    mse:GetOutlierPolicyInfo

    -

    mse:GetOverview

    -

    mse:GetPluginGuide

    -

    mse:GetRegExpCheck

    -

    mse:GetRegExpTest

    -

    mse:GetResourcePackageStatus

    -

    mse:GetResourcePackageStatusWithVersion

    -

    mse:GetRetryRule

    -

    mse:GetRoutePolicy

    -

    mse:GetServiceConsumersPage

    -

    mse:GetServiceDetail

    -

    mse:GetServiceList

    -

    mse:GetServiceListPage

    -

    mse:GetServiceMethodPage

    -

    mse:GetServiceMethodPageWithMetrics

    -

    mse:GetServiceProvidersPage

    -

    mse:GetSpringCloudTestMethod

    -

    mse:GetTagKey

    -

    mse:GetTagVal

    -

    mse:GetTagsBySwimmingLaneGroupId

    -

    mse:GetTimeoutRule

    -

    mse:GetTrace

    -

    mse:GetUpstreamGroupOfSingleService

    -

    mse:GetUserStatus

    -

    mse:ImportMcpConfigFromSwagger

    -

    mse:InitializeServiceLinkRole

    -

    mse:InvokeDubboTestMethod

    -

    mse:InvokeIstioTestMethod

    -

    mse:InvokeSpringCloudTestMethod

    -

    mse:ListAdaptiveOverloadProtectionConfig

    -

    mse:ListAppBySwimmingLaneGroupTag

    -

    mse:ListAppBySwimmingLaneGroupTags

    -

    mse:ListAppResource

    -

    mse:ListAppResourceWithMetrics

    -

    mse:ListApplicationTagInstancese

    -

    mse:ListApplicationsWithTagRules

    -

    mse:ListAuthPolicy

    -

    mse:ListAutoDeployAvailableVsws

    -

    mse:ListAutoDeployAvailableZones

    -

    mse:ListBackupTasks

    -

    mse:ListBackups

    -

    mse:ListCircuitBreakerRules

    -

    mse:ListClusterConnectionTypes

    -

    mse:ListClusterSelection

    -

    mse:ListClusterTypes

    -

    mse:ListClusterVersions

    -

    mse:ListCommunites

    -

    mse:ListCsKubernetesClusters

    -

    mse:ListCsSecurityGroup

    -

    mse:ListDefaultCircuitBreakerRules

    -

    mse:ListEurekaInstances

    -

    mse:ListEventOfReource

    -

    mse:ListEventRecords

    -

    mse:ListEventsByType

    -

    mse:ListEventsPageByType

    -

    mse:ListFcServiceAliases

    -

    mse:ListFcServiceVersions

    -

    mse:ListFcServices

    -

    mse:ListFlowRules

    -

    mse:ListGatewayDomainSSL

    -

    mse:ListGatewayIngressMigrateTask

    -

    mse:ListGatewayZone

    -

    mse:ListHotParamRules

    -

    mse:ListInstanceCount

    -

    mse:ListInstances

    -

    mse:ListIpOrHosts

    -

    mse:ListIsolationRules

    -

    mse:ListKubernetesNamespace

    -

    mse:ListLogSpanServices

    -

    mse:ListMethods

    -

    mse:ListMigrationTask

    -

    mse:ListMscEventRecords

    -

    mse:ListNacosDatasourceResourceChangeEvent

    -

    mse:ListNamespaces

    -

    mse:ListOutlierPolicy

    -

    mse:ListProtectedAppResourceWithMetrics

    -

    mse:ListResourceWhiteListConfigs

    -

    mse:ListResources

    -

    mse:ListSentinelBlockFallbackDefinitions

    -

    mse:ListServiceQuotas

    -

    mse:ListSpanNames

    -

    mse:ListSwimPathPercent

    -

    mse:ListTaskBackups

    -

    mse:ListUpgradableGatewayVersions

    -

    mse:ListUserK8sByVpc

    -

    mse:ListWebFlowRules

    -

    mse:ModifyAdaptiveOverloadProtectionConfig

    -

    mse:ModifyLosslessRule

    -

    mse:ModifyNamespace

    -

    mse:ModifyServiceQuota

    -

    mse:OnAhas

    -

    mse:OpenXTraceService

    -

    mse:ProcessMessage

    -

    mse:QueryAhasUserStatus

    -

    mse:QueryAllSwimmingLane

    -

    mse:QueryAllSwimmingLaneGroup

    -

    mse:QueryAppDataSourceList

    -

    mse:QueryAppListMetrics

    -

    mse:QueryAppMethodMetrics

    -

    mse:QueryAppMethodMetricsWithSentinel

    -

    mse:QueryAppRPCMacMetrics

    -

    mse:QueryAppResourceMetrics

    -

    mse:QueryAppResourceMetricsByInstance

    -

    mse:QueryAppSummaryMetricsOverview

    -

    mse:QueryAppSummaryMetricsOverviewWithSentinel

    -

    mse:QueryAppSystemMetricsOfGroup

    -

    mse:QueryAppSystemMetricsOfGroupByInstance

    -

    mse:QueryAppTopNMacs

    -

    mse:QueryBusinessLocations

    -

    mse:QueryClusterDiskSpecification

    -

    mse:QueryClusterSpecification

    -

    mse:QueryClustersWithLabel

    -

    mse:QueryDatabaseRoute

    -

    mse:QueryEmptyPushSetting

    -

    mse:QueryEventOverview

    -

    mse:QueryGatewayRegion

    -

    mse:QueryGatewayTask

    -

    mse:QueryGatewayType

    -

    mse:QueryGatewaysWithLabel

    -

    mse:QueryGovernanceKubernetesCluster

    -

    mse:QueryMetricsAveragedByInstance

    -

    mse:QueryMseHomeDetail

    -

    mse:QueryNacosAi

    -

    mse:QueryNacosConfig

    -

    mse:QueryNacosGrayConfig

    -

    mse:QueryNacosNaming

    -

    mse:QueryNamespace

    -

    mse:QueryQuickStartStatus

    -

    mse:QueryResourceTopN

    -

    mse:QuerySentinelBlockFallbackDefinition

    -

    mse:QueryServiceAppId

    -

    mse:QueryServiceDetailWithMetrics

    -

    mse:QueryServiceMethodConsumerPageWithMetrics

    -

    mse:QueryServiceTimeConfig

    -

    mse:QuerySlbSpec

    -

    mse:QuerySwimmingLaneById

    -

    mse:QueryUserKmsType

    -

    mse:RemoveApplication

    -

    mse:RemoveApplications

    -

    mse:RemoveAuthPolicy

    -

    mse:RemoveOutlierPolicy

    -

    mse:RemoveRoutePolicy

    -

    mse:ReportMetadata

    -

    mse:ReportOnePilotInfo

    -

    mse:RevertApplicationRoutePolicy

    -

    mse:RevertBackup

    -

    mse:RunApiTest

    -

    mse:RunServiceTest

    -

    mse:SearchTraces

    -

    mse:TestService

    -

    mse:UnbindSentinelBlockFallbackDefinition

    -

    mse:UpdateAppLogConfig

    -

    mse:UpdateAuthPolicy

    -

    mse:UpdateBackupTask

    -

    mse:UpdateCircuitBreakerRule

    -

    mse:UpdateCircuitBreakerRulesStatus

    -

    mse:UpdateCustomPlugin

    -

    mse:UpdateDataSourceConfig

    -

    mse:UpdateDatabaseRoute

    -

    mse:UpdateDefaultCircuitBreakerRule

    -

    mse:UpdateFlowRule

    -

    mse:UpdateFlowRulesStatus

    -

    mse:UpdateGatewayIngressMigrateTask

    -

    mse:UpdateGatewayIngressMigrateTaskStatus

    -

    mse:UpdateGatewayServicePort

    -

    mse:UpdateGovernanceServiceSubscribe

    -

    mse:UpdateHotParamRule

    -

    mse:UpdateHotParamRulesStatus

    -

    mse:UpdateInstanceRegisterStatus

    -

    mse:UpdateIsolationRule

    -

    mse:UpdateIsolationRulesStatus

    -

    mse:UpdateLocalityRule

    -

    mse:UpdateLogConfig

    -

    mse:UpdateMessageQueueRoute

    -

    mse:UpdateMigrationTask

    -

    mse:UpdateNacosAi

    -

    mse:UpdateNacosDatasourceResource

    -

    mse:UpdateNacosNaming

    -

    mse:UpdateOutlierConfig

    -

    mse:UpdateQuickStartStatus

    -

    mse:UpdateRateLimit

    -

    mse:UpdateResourceWhiteListConfig

    -

    mse:UpdateSentinelBlockFallbackDefinition

    -

    mse:UpdateUpstreamGroupOfSingleService

    -

    mse:UpdateWebFlowRule

    -

    mse:UpdateWebFlowRulesStatus

    -

    mse:UpdateWhiteScreenRule

    -

    mse:listGrayTag

    -

    上記のアクションについては、 [Resource Scope] を [Account] に設定し、カスタムポリシーを作成する必要があります。

    image.png 以下のポリシー例は、必要に応じてカスタマイズ可能です。

    • 読み取り専用アクセスの許可

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "mse:CheckServiceLinkRole",
        "mse:GetAccountMockRule",
        "mse:GetApiTestHistory",
        "mse:GetAppMessageQueueRoute",
        "mse:GetApplicationDetail",
        "mse:GetApplicationInstanceList",
        "mse:GetApplicationInstancesWithMetircs",
        "mse:GetApplicationList",
        "mse:GetApplicationListWithMetircs",
        "mse:GetApplicationTagList",
        "mse:GetArmsAlarms",
        "mse:GetAuthPolicyInfo",
        "mse:GetCanaryStatus",
        "mse:GetConfig",
        "mse:GetDubboServicePageWithMetrics",
        "mse:GetDubboTestMethod",
        "mse:GetEventDetail",
        "mse:GetEventFilterOptions",
        "mse:GetFaultInjectionRule",
        "mse:GetGatewayAlarms",
        "mse:GetGatewayIngressMigrateTaskDetail",
        "mse:GetGatewayMigrateNamespacedServices",
        "mse:GetGatewayNotice",
        "mse:GetGatewaySelection",
        "mse:GetGovernanceKubernetesClusterList",
        "mse:GetGraySwimmingLaneGroupInfo",
        "mse:GetHistorys",
        "mse:GetImage",
        "mse:GetLicenseKey",
        "mse:GetLocalityDistributionMetrics",
        "mse:GetLocalityRule",
        "mse:GetLosslessRuleByApp",
        "mse:GetMockRuleByConsumerAppId",
        "mse:GetMockRuleById",
        "mse:GetMockRuleByProviderAppId",
        "mse:GetMseFeatureSwitch",
        "mse:GetNacosDatasourceResource",
        "mse:GetNetworkInfo",
        "mse:GetOutlierApplicationList",
        "mse:GetOutlierPolicyInfo",
        "mse:GetOverview",
        "mse:GetPluginGuide",
        "mse:GetRegExpCheck",
        "mse:GetRegExpTest",
        "mse:GetResourcePackageStatus",
        "mse:GetResourcePackageStatusWithVersion",
        "mse:GetRetryRule",
        "mse:GetRoutePolicy",
        "mse:GetServiceConsumersPage",
        "mse:GetServiceDetail",
        "mse:GetServiceList",
        "mse:GetServiceListPage",
        "mse:GetServiceMethodPage",
        "mse:GetServiceMethodPageWithMetrics",
        "mse:GetServiceProvidersPage",
        "mse:GetSpringCloudTestMethod",
        "mse:GetTagKey",
        "mse:GetTagVal",
        "mse:GetTagsBySwimmingLaneGroupId",
        "mse:GetTimeoutRule",
        "mse:GetTrace",
        "mse:GetUpstreamGroupOfSingleService",
        "mse:GetUserStatus",
        "mse:ListAdaptiveOverloadProtectionConfig",
        "mse:ListAppBySwimmingLaneGroupTag",
        "mse:ListAppBySwimmingLaneGroupTags",
        "mse:ListAppResource",
        "mse:ListAppResourceWithMetrics",
        "mse:ListApplicationTagInstancese",
        "mse:ListApplicationsWithTagRules",
        "mse:ListAuthPolicy",
        "mse:ListAutoDeployAvailableVsws",
        "mse:ListAutoDeployAvailableZones",
        "mse:ListBackupTasks",
        "mse:ListBackups",
        "mse:ListCircuitBreakerRules",
        "mse:ListClusterConnectionTypes",
        "mse:ListClusterSelection",
        "mse:ListClusterTypes",
        "mse:ListClusterVersions",
        "mse:ListCommunites",
        "mse:ListCsKubernetesClusters",
        "mse:ListCsSecurityGroup",
        "mse:ListDefaultCircuitBreakerRules",
        "mse:ListEurekaInstances",
        "mse:ListEventOfReource",
        "mse:ListEventRecords",
        "mse:ListEventsByType",
        "mse:ListEventsPageByType",
        "mse:ListFcServiceAliases",
        "mse:ListFcServiceVersions",
        "mse:ListFcServices",
        "mse:ListFlowRules",
        "mse:ListGatewayDomainSSL",
        "mse:ListGatewayIngressMigrateTask",
        "mse:ListGatewayZone",
        "mse:ListHotParamRules",
        "mse:ListInstanceCount",
        "mse:ListInstances",
        "mse:ListIpOrHosts",
        "mse:ListIsolationRules",
        "mse:ListKubernetesNamespace",
        "mse:ListLogSpanServices",
        "mse:ListMethods",
        "mse:ListMigrationTask",
        "mse:ListMscEventRecords",
        "mse:ListNacosDatasourceResourceChangeEvent",
        "mse:ListNamespaces",
        "mse:ListOutlierPolicy",
        "mse:ListProtectedAppResourceWithMetrics",
        "mse:ListResourceWhiteListConfigs",
        "mse:ListResources",
        "mse:ListSentinelBlockFallbackDefinitions",
        "mse:ListServiceQuotas",
        "mse:ListSpanNames",
        "mse:ListSwimPathPercent",
        "mse:ListTaskBackups",
        "mse:ListUpgradableGatewayVersions",
        "mse:ListUserK8sByVpc",
        "mse:ListWebFlowRules",
        "mse:QueryAhasUserStatus",
        "mse:QueryAllSwimmingLane",
        "mse:QueryAllSwimmingLaneGroup",
        "mse:QueryAppDataSourceList",
        "mse:QueryAppListMetrics",
        "mse:QueryAppMethodMetrics",
        "mse:QueryAppMethodMetricsWithSentinel",
        "mse:QueryAppRPCMacMetrics",
        "mse:QueryAppResourceMetrics",
        "mse:QueryAppResourceMetricsByInstance",
        "mse:QueryAppSummaryMetricsOverview",
        "mse:QueryAppSummaryMetricsOverviewWithSentinel",
        "mse:QueryAppSystemMetricsOfGroup",
        "mse:QueryAppSystemMetricsOfGroupByInstance",
        "mse:QueryAppTopNMacs",
        "mse:QueryBusinessLocations",
        "mse:QueryClusterDiskSpecification",
        "mse:QueryClusterSpecification",
        "mse:QueryClustersWithLabel",
        "mse:QueryDatabaseRoute",
        "mse:QueryEmptyPushSetting",
        "mse:QueryEventOverview",
        "mse:QueryGatewayRegion",
        "mse:QueryGatewayTask",
        "mse:QueryGatewayType",
        "mse:QueryGatewaysWithLabel",
        "mse:QueryGovernanceKubernetesCluster",
        "mse:QueryMetricsAveragedByInstance",
        "mse:QueryMseHomeDetail",
        "mse:QueryNacosAi",
        "mse:QueryNacosConfig",
        "mse:QueryNacosGrayConfig",
        "mse:QueryNacosNaming",
        "mse:QueryNamespace",
        "mse:QueryQuickStartStatus",
        "mse:QueryResourceTopN",
        "mse:QuerySentinelBlockFallbackDefinition",
        "mse:QueryServiceAppId",
        "mse:QueryServiceDetailWithMetrics",
        "mse:QueryServiceMethodConsumerPageWithMetrics",
        "mse:QueryServiceTimeConfig",
        "mse:QuerySlbSpec",
        "mse:QuerySwimmingLaneById",
        "mse:QueryUserKmsType"
      ],
      "Resource": "*"
    }
  ]
}

    • フルアクセスの許可

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "mse:AddAuthPolicy",
        "mse:AddCustomPlugin",
        "mse:AddGatewayOrder",
        "mse:AddGatewayRetry",
        "mse:AddGatewayService",
        "mse:AddLoadBalancePolicy",
        "mse:AddMigrationTask",
        "mse:AddMockRule",
        "mse:AddRateLimit",
        "mse:AddRoutePolicy",
        "mse:AddServiceTimeConfig",
        "mse:AddWhiteScreenRule",
        "mse:ApplyCanaryPolicy",
        "mse:ApplyGlobalReadWriteSplitRule",
        "mse:ApplyReadWriteSplitRule",
        "mse:ApplyTagPolicies",
        "mse:BatchUpdateRulesEnable",
        "mse:BindSentinelBlockFallbackDefinition",
        "mse:BindSentinelBlockFallbackDefinitionBatch",
        "mse:ChangeOperateTaskTime",
        "mse:CheckAuthPolicyName",
        "mse:CheckCanaryPolicy",
        "mse:CheckCsRole",
        "mse:CheckEciRole",
        "mse:CheckGatewayIngressMigrateTask",
        "mse:CheckKmsStatus",
        "mse:CheckMigrationServiceAnnotation",
        "mse:CheckRole",
        "mse:CheckServiceLinkRole",
        "mse:CheckUserReadinessConfig",
        "mse:CheckXTraceServiceStatus",
        "mse:CloneSentinelRuleFromAhas",
        "mse:ConvertSwaggerToMcpConfig",
        "mse:CreateApplication",
        "mse:CreateCircuitBreakerRule",
        "mse:CreateDemoToUserCluster",
        "mse:CreateFlowRule",
        "mse:CreateGovernanceKubernetesCluster",
        "mse:CreateGovernanceService",
        "mse:CreateHotParamRule",
        "mse:CreateIsolationRule",
        "mse:CreateLicenseKey",
        "mse:CreateMseServiceApplication",
        "mse:CreateNamespace",
        "mse:CreateOrUpdateEmptyPushSetting",
        "mse:CreateOrUpdateSwimmingLane",
        "mse:CreateOrUpdateSwimmingLaneGroup",
        "mse:CreateOutlierConfig",
        "mse:CreateSentinelBlockFallbackDefinition",
        "mse:CreateWebFlowRule",
        "mse:DeleteBackupTask",
        "mse:DeleteCircuitBreakerRules",
        "mse:DeleteCustomPlugin",
        "mse:DeleteFaultInjectionRule",
        "mse:DeleteFlowRules",
        "mse:DeleteGatewayCircuitBreakerRule",
        "mse:DeleteGatewayIngressMigrateTask",
        "mse:DeleteGatewayIsolationRule",
        "mse:DeleteGovernanceKubernetesCluster",
        "mse:DeleteHotParamRules",
        "mse:DeleteIsolationRules",
        "mse:DeleteMigrationTask",
        "mse:DeleteNacosDatasourceResource",
        "mse:DeleteNamespace",
        "mse:DeleteRateLimit",
        "mse:DeleteRetryRule",
        "mse:DeleteSSLCert",
        "mse:DeleteSentinelBlockFallbackDefinition",
        "mse:DeleteServiceTimeConfig",
        "mse:DeleteSwimmingLane",
        "mse:DeleteSwimmingLaneGroup",
        "mse:DeleteTimeoutRule",
        "mse:DeleteTrace",
        "mse:DeleteUpstreamGroupOfSingleService",
        "mse:DeleteWebFlowRules",
        "mse:DeleteWhiteScreenRule",
        "mse:DescribeAppAgentStatus",
        "mse:DescribeScenarioRecordsForAhas",
        "mse:FallbackGateway",
        "mse:FetchAppLogConfig",
        "mse:FetchDataSourceConfig",
        "mse:FetchGlobalReadWriteSplitRules",
        "mse:FetchLogConfig",
        "mse:FetchLosslessRuleList",
        "mse:FetchReadWriteSplitRules",
        "mse:FetchRoutePolicyList",
        "mse:FixGateway",
        "mse:GatewayAdmin",
        "mse:GetAccountMockRule",
        "mse:GetApiTestHistory",
        "mse:GetAppMessageQueueRoute",
        "mse:GetApplicationDetail",
        "mse:GetApplicationInstanceList",
        "mse:GetApplicationInstancesWithMetircs",
        "mse:GetApplicationList",
        "mse:GetApplicationListWithMetircs",
        "mse:GetApplicationTagList",
        "mse:GetArmsAlarms",
        "mse:GetAuthPolicyInfo",
        "mse:GetCanaryStatus",
        "mse:GetConfig",
        "mse:GetDubboServicePageWithMetrics",
        "mse:GetDubboTestMethod",
        "mse:GetEventDetail",
        "mse:GetEventFilterOptions",
        "mse:GetFaultInjectionRule",
        "mse:GetGatewayAlarms",
        "mse:GetGatewayIngressMigrateTaskDetail",
        "mse:GetGatewayMigrateNamespacedServices",
        "mse:GetGatewayNotice",
        "mse:GetGatewaySelection",
        "mse:GetGovernanceKubernetesClusterList",
        "mse:GetGraySwimmingLaneGroupInfo",
        "mse:GetHistorys",
        "mse:GetImage",
        "mse:GetLicenseKey",
        "mse:GetLocalityDistributionMetrics",
        "mse:GetLocalityRule",
        "mse:GetLosslessRuleByApp",
        "mse:GetMockRuleByConsumerAppId",
        "mse:GetMockRuleById",
        "mse:GetMockRuleByProviderAppId",
        "mse:GetMseFeatureSwitch",
        "mse:GetNacosDatasourceResource",
        "mse:GetNetworkInfo",
        "mse:GetOutlierApplicationList",
        "mse:GetOutlierPolicyInfo",
        "mse:GetOverview",
        "mse:GetPluginGuide",
        "mse:GetRegExpCheck",
        "mse:GetRegExpTest",
        "mse:GetResourcePackageStatus",
        "mse:GetResourcePackageStatusWithVersion",
        "mse:GetRetryRule",
        "mse:GetRoutePolicy",
        "mse:GetServiceConsumersPage",
        "mse:GetServiceDetail",
        "mse:GetServiceList",
        "mse:GetServiceListPage",
        "mse:GetServiceMethodPage",
        "mse:GetServiceMethodPageWithMetrics",
        "mse:GetServiceProvidersPage",
        "mse:GetSpringCloudTestMethod",
        "mse:GetTagKey",
        "mse:GetTagVal",
        "mse:GetTagsBySwimmingLaneGroupId",
        "mse:GetTimeoutRule",
        "mse:GetTrace",
        "mse:GetUpstreamGroupOfSingleService",
        "mse:GetUserStatus",
        "mse:ImportMcpConfigFromSwagger",
        "mse:InitializeServiceLinkRole",
        "mse:InvokeDubboTestMethod",
        "mse:InvokeIstioTestMethod",
        "mse:InvokeSpringCloudTestMethod",
        "mse:ListAdaptiveOverloadProtectionConfig",
        "mse:ListAppBySwimmingLaneGroupTag",
        "mse:ListAppBySwimmingLaneGroupTags",
        "mse:ListAppResource",
        "mse:ListAppResourceWithMetrics",
        "mse:ListApplicationTagInstancese",
        "mse:ListApplicationsWithTagRules",
        "mse:ListAuthPolicy",
        "mse:ListAutoDeployAvailableVsws",
        "mse:ListAutoDeployAvailableZones",
        "mse:ListBackupTasks",
        "mse:ListBackups",
        "mse:ListCircuitBreakerRules",
        "mse:ListClusterConnectionTypes",
        "mse:ListClusterSelection",
        "mse:ListClusterTypes",
        "mse:ListClusterVersions",
        "mse:ListCommunites",
        "mse:ListCsKubernetesClusters",
        "mse:ListCsSecurityGroup",
        "mse:ListDefaultCircuitBreakerRules",
        "mse:ListEurekaInstances",
        "mse:ListEventOfReource",
        "mse:ListEventRecords",
        "mse:ListEventsByType",
        "mse:ListEventsPageByType",
        "mse:ListFcServiceAliases",
        "mse:ListFcServiceVersions",
        "mse:ListFcServices",
        "mse:ListFlowRules",
        "mse:ListGatewayDomainSSL",
        "mse:ListGatewayIngressMigrateTask",
        "mse:ListGatewayZone",
        "mse:ListHotParamRules",
        "mse:ListInstanceCount",
        "mse:ListInstances",
        "mse:ListIpOrHosts",
        "mse:ListIsolationRules",
        "mse:ListKubernetesNamespace",
        "mse:ListLogSpanServices",
        "mse:ListMethods",
        "mse:ListMigrationTask",
        "mse:ListMscEventRecords",
        "mse:ListNacosDatasourceResourceChangeEvent",
        "mse:ListNamespaces",
        "mse:ListOutlierPolicy",
        "mse:ListProtectedAppResourceWithMetrics",
        "mse:ListResourceWhiteListConfigs",
        "mse:ListResources",
        "mse:ListSentinelBlockFallbackDefinitions",
        "mse:ListServiceQuotas",
        "mse:ListSpanNames",
        "mse:ListSwimPathPercent",
        "mse:ListTaskBackups",
        "mse:ListUpgradableGatewayVersions",
        "mse:ListUserK8sByVpc",
        "mse:ListWebFlowRules",
        "mse:ModifyAdaptiveOverloadProtectionConfig",
        "mse:ModifyLosslessRule",
        "mse:ModifyNamespace",
        "mse:ModifyServiceQuota",
        "mse:OnAhas",
        "mse:OpenXTraceService",
        "mse:ProcessMessage",
        "mse:QueryAhasUserStatus",
        "mse:QueryAllSwimmingLane",
        "mse:QueryAllSwimmingLaneGroup",
        "mse:QueryAppDataSourceList",
        "mse:QueryAppListMetrics",
        "mse:QueryAppMethodMetrics",
        "mse:QueryAppMethodMetricsWithSentinel",
        "mse:QueryAppRPCMacMetrics",
        "mse:QueryAppResourceMetrics",
        "mse:QueryAppResourceMetricsByInstance",
        "mse:QueryAppSummaryMetricsOverview",
        "mse:QueryAppSummaryMetricsOverviewWithSentinel",
        "mse:QueryAppSystemMetricsOfGroup",
        "mse:QueryAppSystemMetricsOfGroupByInstance",
        "mse:QueryAppTopNMacs",
        "mse:QueryBusinessLocations",
        "mse:QueryClusterDiskSpecification",
        "mse:QueryClusterSpecification",
        "mse:QueryClustersWithLabel",
        "mse:QueryDatabaseRoute",
        "mse:QueryEmptyPushSetting",
        "mse:QueryEventOverview",
        "mse:QueryGatewayRegion",
        "mse:QueryGatewayTask",
        "mse:QueryGatewayType",
        "mse:QueryGatewaysWithLabel",
        "mse:QueryGovernanceKubernetesCluster",
        "mse:QueryMetricsAveragedByInstance",
        "mse:QueryMseHomeDetail",
        "mse:QueryNacosAi",
        "mse:QueryNacosConfig",
        "mse:QueryNacosGrayConfig",
        "mse:QueryNacosNaming",
        "mse:QueryNamespace",
        "mse:QueryQuickStartStatus",
        "mse:QueryResourceTopN",
        "mse:QuerySentinelBlockFallbackDefinition",
        "mse:QueryServiceAppId",
        "mse:QueryServiceDetailWithMetrics",
        "mse:QueryServiceMethodConsumerPageWithMetrics",
        "mse:QueryServiceTimeConfig",
        "mse:QuerySlbSpec",
        "mse:QuerySwimmingLaneById",
        "mse:QueryUserKmsType",
        "mse:RemoveApplication",
        "mse:RemoveApplications",
        "mse:RemoveAuthPolicy",
        "mse:RemoveOutlierPolicy",
        "mse:RemoveRoutePolicy",
        "mse:ReportMetadata",
        "mse:ReportOnePilotInfo",
        "mse:RevertApplicationRoutePolicy",
        "mse:RevertBackup",
        "mse:RunApiTest",
        "mse:RunServiceTest",
        "mse:SearchTraces",
        "mse:TestService",
        "mse:UnbindSentinelBlockFallbackDefinition",
        "mse:UpdateAppLogConfig",
        "mse:UpdateAuthPolicy",
        "mse:UpdateBackupTask",
        "mse:UpdateCircuitBreakerRule",
        "mse:UpdateCircuitBreakerRulesStatus",
        "mse:UpdateCustomPlugin",
        "mse:UpdateDataSourceConfig",
        "mse:UpdateDatabaseRoute",
        "mse:UpdateDefaultCircuitBreakerRule",
        "mse:UpdateFlowRule",
        "mse:UpdateFlowRulesStatus",
        "mse:UpdateGatewayIngressMigrateTask",
        "mse:UpdateGatewayIngressMigrateTaskStatus",
        "mse:UpdateGatewayServicePort",
        "mse:UpdateGovernanceServiceSubscribe",
        "mse:UpdateHotParamRule",
        "mse:UpdateHotParamRulesStatus",
        "mse:UpdateInstanceRegisterStatus",
        "mse:UpdateIsolationRule",
        "mse:UpdateIsolationRulesStatus",
        "mse:UpdateLocalityRule",
        "mse:UpdateLogConfig",
        "mse:UpdateMessageQueueRoute",
        "mse:UpdateMigrationTask",
        "mse:UpdateNacosAi",
        "mse:UpdateNacosDatasourceResource",
        "mse:UpdateNacosNaming",
        "mse:UpdateOutlierConfig",
        "mse:UpdateQuickStartStatus",
        "mse:UpdateRateLimit",
        "mse:UpdateResourceWhiteListConfig",
        "mse:UpdateSentinelBlockFallbackDefinition",
        "mse:UpdateUpstreamGroupOfSingleService",
        "mse:UpdateWebFlowRule",
        "mse:UpdateWebFlowRulesStatus",
        "mse:UpdateWhiteScreenRule",
        "mse:listGrayTag"
      ],
      "Resource": "*"
    }
  ]
}
    重要

    アカウントレベルの権限を付与すると、アカウント内のすべての関連リソースへのアクセスが許可されます。常に最小権限の原則に従ってください。

    よくある質問

    リソースがどのリソースグループに属しているかを確認するにはどうすればよいですか。

    • 方法 1：所属サービスのコンソールで確認

      • リソースが所属する Alibaba Cloud サービスのコンソールに移動します。通常、リソースの詳細ページの基本情報セクションにリソースグループが記載されています。

    • 方法 2：Resource Management コンソールで確認

      • Resource Management コンソールにログインします。

      • [Resource Center] > [Resource Search]を選択します。

      • 左側のメニューで、対象リソースを所有するアカウントを選択します (デフォルトは [Current Account]) を選択します。

      • フィルター条件を使用してリソースを検索します。

      • [Resource Group Name] 列に、リソースが属するグループが表示されます。

    特定のリソースグループ内のすべてのリソースを表示するにはどうすればよいですか。

    • 方法 1：

      • Resource Management コンソールにログインします。

      • [Resource Center] > [Resource Search]を選択します。

      • 左側のメニューで、リソースを所有するアカウント (デフォルトは [Current Account]) の下にある、対象のリソースグループ名をクリックします。

      • 右側の画面で、[Select resource types] ドロップダウンリストからクラウドサービスを選択します。

      • そのグループ内のすべてのリソースが表示されます。

    • 方法 2：

      • Resource Management コンソールにログインします。

      • [Resource Group] > [Resource Group]を選択します。

      • 対象のリソースグループを見つけ、[Actions] 列の [Manage Resource] をクリックします。

      • リソース管理ページで、[Service] ドロップダウンリストからクラウドサービスを選択します。

      • そのグループ内のすべてのリソースが表示されます。

    複数のリソースを別のリソースグループに一括で移動するにはどうすればよいですか。

    1. Resource Management コンソールにログインします。

    2. 左側のメニューで、 [Resource Group] > [Resource Group] を選択します。

    3. 対象のリソースグループを見つけ、[Actions] 列の [Manage Resource] をクリックします。

    4. リソース管理ページで、フィルター条件を使用して移動したいリソースを検索します。

    5. 移動したいリソースのチェックボックスを選択します。

    6. ページ下部にある [Transfer] をクリックします。

    7. ダイアログボックスで、移動先のリソースグループを選択し、 [Confirm] をクリックします。