すべてのプロダクト
Search
ドキュメントセンター

NAT Gateway:権限管理

最終更新日:Jul 15, 2026

Resource Access Management (RAM) は Alibaba Cloud によって提供される、ユーザーのアイデンティティとリソースの権限を管理するためのサービスです。RAM を使用すると、Alibaba Cloud アカウント (root ユーザー) のキーを他のユーザーと共有することを回避でき、ユーザーに必要最小限の権限を付与できます。RAM ではポリシーを使用して権限付与を定義します。このトピックでは、RAM ポリシーの一般的な構造と、 Virtual Private Cloud (VPC)。 のポリシーステートメントを構成する要素である「アクション (Action)」「リソース (Resource)」および「条件 (Condition) 」について説明します。 Virtual Private Cloud (VPC)。 は、RAM コード (RamCode) が vpc で、 リソースレベル。 での権限付与がサポートされています。

一般的なポリシー構造

RAM ポリシーは、一般的に以下のような JSON 構造で構成されます。

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

ポリシーのフィールドに関する説明:

  • Version:ポリシーのバージョン番号。現在のポリシーバージョンは 1 です。

  • Statement:

    • Effect:「許可するか、拒否するか」という、最終的な結果を定義します。有効な値:Allow (許可) または Deny (拒否)。

    • Action:「何をすることができるか、できないか」を定義する、リソースへの具体的な操作を指します。

    • Resource:「何に対して操作を行うか」を定義する、操作の具体的な対象です。対象となるリソースは、ARN (Alibaba Cloud Resource Name) を使用して指定できます。

    • Condition:「どのような状況下でポリシーが適用されるか」という、権限が有効になるための付加的な制約条件を定義します。このフィールドは任意です。

      • Condition operator:条件の演算子。条件キーの値とリクエスト値をどのように比較するかを定義する「比較方法」です。条件演算子は、条件のタイプによって異なります。

      • Condition_key:条件のキー。ポリシーの条件が満たされているかを判断するために、リクエストから参照・チェックされる特定の属性を指します。

      • Condition_value:条件の値。条件キーから取得されたリクエスト値と比較するための、具体的な「基準値」です。

アクション (Action)

下表に、Virtual Private Cloud (VPC)。 で定義されたアクションを示します。以下で各列名について説明します。

  • アクション:特定のリソースに対して実行可能な操作。ポリシー構文ではAction要素として指定します。

  • API:アクションを具体的に実行するための API。

  • アクセスレベル:各 API に対して事前定義されているアクセスの種類。有効な値:create、list、get、update、delete。

  • リソースタイプ:アクションが作用するリソースの種類。リソースレベルでの権限をサポートするかどうかを示すことができます。ポリシーの有効性を確保するため、アクションの対象として適切なリソースを指定する必要があります。

    • リソースレベルの権限を持つ API の場合、必要なリソースタイプはアスタリスク (*) でマークされます。ポリシーのResource要素で対応する ARN を指定してください。

    • リソースレベルの権限を持たない API の場合、「すべてのリソース」と表示され、ポリシーのResource要素でアスタリスク (*) でマークされます。

  • 条件キー:サービスによって定義された条件のキー。このキーにより、きめ細やかなアクセス制御が可能になります。この制御は、アクション単体に適用することも、特定のリソースに対するアクションに適用することもできます。Alibaba Cloud は、サービス固有の条件キーに加えて、すべての RAM 統合サービスに適用可能な一連の共通条件キーを提供しています。詳細については、「共通条件キー」をご参照ください。

  • 依存アクション:ある特定のアクションを実行するために、前提として実行が必要となる他のアクション。依存アクションの権限も RAM ユーザーまたは RAM ロールに付与する必要があります。

アクション

API

アクセスレベル

リソースタイプ

条件キー

依存アクション

vpc:DescribeFlowLogs DescribeFlowLogs get

*FlowLog

acs:vpc:{#regionId}:{#accountId}:flowlog/*

なし なし
vpc:DescribeVpnConnection DescribeVpnConnection get

*VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:CreateVbrHa CreateVbrHa create

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:OpenFlowLogService OpenFlowLogService create

*FlowLogService

acs:vpc:{#regionId}:{#accountId}:flowlog/*

なし なし
vpc:ModifyNatGatewaySpec ModifyNatGatewaySpec update

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:ModifyCommonBandwidthPackageAttribute ModifyCommonBandwidthPackageAttribute update

*BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

なし なし
vpc:ChangeResourceGroup ChangeResourceGroup update

*全部资源

*

なし なし
vpc:DescribeSnatTableEntries DescribeSnatTableEntries get

*SnatTable

acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}

なし なし
vpc:AddIPv6TranslatorAclListEntry AddIPv6TranslatorAclListEntry create

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:AllocateVpcIpv6Cidr AllocateVpcIpv6Cidr none

*全部资源

*

なし なし
vpc:ModifyIpv6GatewayAttribute ModifyIpv6GatewayAttribute update

*Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}

なし なし
vpc:CreateEnhancedVpnGateway CreateEnhancedVpnGateway create

*全部资源

*

なし なし
vpc:CreateNatGateway CreateNatGateway create

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/*

なし なし
vpc:ModifyExpressCloudConnectionAttribute ModifyExpressCloudConnectionAttribute update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:CreatePublicIpAddressPool CreatePublicIpAddressPool create

*PublicIpAddressPool

acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*

なし なし
vpc:CreateVpc CreateVpc create

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/*

なし なし
vpc:ModifyNatGatewayAttribute ModifyNatGatewayAttribute update

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:ModifyFullNatEntryAttribute ModifyFullNatEntryAttribute update

*FullNat

acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}

なし なし
vpc:EnableVpcIpv4Gateway EnableVpcIpv4Gateway update

*Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}

なし なし
vpc:DeleteNatGateway DeleteNatGateway delete

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid}

なし なし
vpc:DeletePublicIpAddressPoolCidrBlock DeletePublicIpAddressPoolCidrBlock delete

*PublicIpAddressPool

acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}

なし なし
vpc:PublishVpnRouteEntry PublishVpnRouteEntry update

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DescribeIpv6Gateways DescribeIpv6Gateways get

Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*

Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}

なし なし
vpc:DeleteVpnGateway DeleteVpnGateway delete

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DeleteBgpPeer DeleteBgpPeer delete

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:ListPublicIpAddressPoolCidrBlocks ListPublicIpAddressPoolCidrBlocks get

*PublicIpAddressPool

acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}

なし なし
vpc:ModifyNetworkAclAttributes ModifyNetworkAclAttributes update

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}

なし なし
vpc:ModifyPhysicalConnectionAttribute ModifyPhysicalConnectionAttribute update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:SetHighDefinitionMonitorLogStatus SetHighDefinitionMonitorLogStatus

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

なし なし
vpc:CreateVirtualPhysicalConnection CreateVirtualPhysicalConnection create

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}

なし なし
vpc:DescribeRouterInterfaces DescribeRouterInterfaces list

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

なし なし
vpc:DescribeVpcAttribute DescribeVpcAttribute get

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

vpc:tag

なし
vpc:GetFlowLogServiceStatus GetFlowLogServiceStatus get

*FlowLogService

acs:vpc:{#regionId}:{#accountId}:flowlog/*

なし なし
vpc:ListTagResourcesForExpressConnect ListTagResourcesForExpressConnect list

*全部资源

*

なし なし
vpc:CreateForwardEntry CreateForwardEntry create

*ForwardTable

acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}

なし なし
vpc:ModifyRouteEntry ModifyRouteEntry update

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:UpdatePublicIpAddressPoolAttribute UpdatePublicIpAddressPoolAttribute update

*PublicIpAddressPool

acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}

なし なし
vpc:DescribeVpnConnections DescribeVpnConnections list

VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/*

VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DeleteIpsecServer DeleteIpsecServer delete

*IpsecServer

acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}

なし なし
vpc:CreateFailoverTestJob CreateFailoverTestJob create

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:ListGeographicSubRegions ListGeographicSubRegions list

*全部资源

*

なし なし
vpc:CreatePhysicalConnectionOccupancyOrder CreatePhysicalConnectionOccupancyOrder create

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:UnassociateRouteTable UnassociateRouteTable update

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

なし なし
vpc:TransformEipSegmentToPublicIpAddressPool TransformEipSegmentToPublicIpAddressPool create

*全部资源

*

なし なし
vpc:CreateVpnGateway CreateVpnGateway create

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/*

なし なし
vpc:ModifyRouteTableAttributes ModifyRouteTableAttributes update

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

vpc:VRouter

なし
vpc:DeleteEnhancedVpnGateway DeleteEnhancedVpnGateway delete

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DeleteRouterInterface DeleteRouterInterface delete

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

なし なし
vpc:DeleteFailoverTestJob DeleteFailoverTestJob delete

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:AddCommonBandwidthPackageIps AddCommonBandwidthPackageIps create

*BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

なし なし
vpc:CreateTrafficMirrorFilter CreateTrafficMirrorFilter create

*TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*

なし なし
vpc:CreateVpnPbrRouteEntry CreateVpnPbrRouteEntry create

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:CreatePhysicalConnectionSetupOrder CreatePhysicalConnectionSetupOrder create

*全部资源

*

なし なし
vpc:ActiveFlowLog ActiveFlowLog update

*FlowLog

acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}

なし なし
vpc:ModifyIPv6TranslatorEntry ModifyIPv6TranslatorEntry update

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:AssociateEipAddress AssociateEipAddress update

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

Instance

acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}

Association

acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}

なし なし
vpc:DescribeIpv6EgressOnlyRules DescribeIpv6EgressOnlyRules get

*Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}

なし なし
vpc:DeactiveFlowLog DeactiveFlowLog update

*FlowLog

acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}

なし なし
vpc:RemoveCommonBandwidthPackageIp RemoveCommonBandwidthPackageIp delete

*BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

なし なし
vpc:DescribeNatGatewayAssociateNetworkInterfaces DescribeNatGatewayAssociateNetworkInterfaces list

NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:ListNatIps ListNatIps get

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:CreateDefaultVSwitch CreateDefaultVSwitch create

*VSwitch

acs:vpc:{#regionid}:{#accountId}:vswitch/*

なし なし
vpc:AssociateRouteTablesWithVpcGatewayEndpoint AssociateRouteTablesWithVpcGatewayEndpoint create

*GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}

なし なし
vpc:CreateCustomerGateway CreateCustomerGateway create

*CustomerGateway

acs:vpc:{#regionId}:{#accountId}:customergateway/*

なし なし
vpc:DeleteCommonBandwidthPackage DeleteCommonBandwidthPackage delete

*CommonBandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}

vpc:tag

なし
vpc:RevokeInstanceFromCen RevokeInstanceFromCen update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:ListVpcPublishedRouteEntries ListVpcPublishedRouteEntries list

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:CreateExpressCloudConnection CreateExpressCloudConnection create

*全部资源

*

なし なし
vpc:DissociateRouteTablesFromVpcGatewayEndpoint DissociateRouteTablesFromVpcGatewayEndpoint delete

*GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}

なし なし
vpc:UpdateRouteTargetGroup UpdateRouteTargetGroup update

*RouteTargetGroup

acs:vpc:{#regionId}:{#accountId}:routetargetgroup/{#RouteTargetGroupId}

なし なし
vpc:ModifyIPv6TranslatorBandwidth ModifyIPv6TranslatorBandwidth update

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:UpdateVirtualBorderBandwidth UpdateVirtualBorderBandwidth update

*VirtualBorderRouter

acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:TerminatePhysicalConnection TerminatePhysicalConnection update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:CreateNatIp CreateNatIp create

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:GetIpv4GatewayAttribute GetIpv4GatewayAttribute get

*Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}

なし なし
vpc:DeletionProtection DeletionProtection delete

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

なし なし
vpc:GetVpcPrefixListEntries GetVpcPrefixListEntries get

*PrefixList

acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}

なし なし
vpc:DescribeVpnCrossAccountAuthorizations DescribeVpnCrossAccountAuthorizations get

*VpnConnections

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:ListPrefixLists ListPrefixLists list

PrefixList

acs:vpc:{#regionId}:{#accountId}:prefixlist/*

なし なし
vpc:ListVpcEndpointServicesByEndUser ListVpcEndpointServicesByEndUser list

*全部资源

*

なし なし
vpc:ModifyGlobalAccelerationInstanceAttributes ModifyGlobalAccelerationInstanceAttributes update

*GlobalAccelerationInstance

acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}

なし なし
vpc:TagResourcesForExpressConnect TagResourcesForExpressConnect update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

*TrafficQos

acs:vpc:{#regionId}:{#accountId}:trafficqos/{#QosId}

なし なし
vpc:ConfirmPhysicalConnection ConfirmPhysicalConnection get

*全部资源

*

なし なし
vpc:DescribeNatGateways DescribeNatGateways get

NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/*

NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:CreateCommonBandwidthPackage CreateCommonBandwidthPackage create

*CommonBandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*

なし なし
vpc:AssociateHaVip AssociateHaVip create

*Instance

acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}

*HaVip

acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}

なし なし
vpc:CreateVpcGatewayEndpoint CreateVpcGatewayEndpoint create

*GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*

なし なし
vpc:ModifySnatEntry ModifySnatEntry update

*SnatTable

acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}

なし なし
vpc:CreateIPv6TranslatorEntry CreateIPv6TranslatorEntry create

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:CreateSslVpnServer CreateSslVpnServer create

*SslVpnServer

acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:ListVirtualPhysicalConnections ListVirtualPhysicalConnections list

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:GetVpcRouteEntrySummary GetVpcRouteEntrySummary list

RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}

なし なし
vpc:DescribeGrantRulesToEcr DescribeGrantRulesToEcr list

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:ConnectRouterInterface ConnectRouterInterface update

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

なし なし
vpc:CreateTrafficMirrorSession CreateTrafficMirrorSession create

*TrafficMirrorSession

acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*

*TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}

なし なし
vpc:DeleteBgpNetwork DeleteBgpNetwork delete

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:DeleteRouteTargetGroup DeleteRouteTargetGroup delete

*全部资源

*

なし なし
vpc:CopyNetworkAclEntries CopyNetworkAclEntries update

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}

なし なし
vpc:DeleteTrafficMirrorFilterRules DeleteTrafficMirrorFilterRules delete

*TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}

なし なし
vpc:DeleteVpcGatewayEndpoint DeleteVpcGatewayEndpoint delete

*GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}

なし なし
vpc:CreateTrafficMirrorFilterRules CreateTrafficMirrorFilterRules create

*TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}

なし なし
vpc:CreateVcoRouteEntry CreateVcoRouteEntry create

*VpnConnections

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DescribeServerRelatedGlobalAccelerationInstances DescribeServerRelatedGlobalAccelerationInstances get

*全部资源

*

なし なし
vpc:DeleteHaVip DeleteHaVip delete

*HaVip

acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}

なし なし
vpc:DeleteForwardEntry DeleteForwardEntry delete

*ForwardTable

acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}

なし なし
vpc:ModifyCustomerGatewayAttribute ModifyCustomerGatewayAttribute update

*CustomerGateway

acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}

なし なし
vpc:UpdateIpv4GatewayAttribute UpdateIpv4GatewayAttribute update

*Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}

なし なし
vpc:ListVpcGatewayEndpoints ListVpcGatewayEndpoints list

GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*

GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}

なし なし
vpc:DeleteVpnRouteEntry DeleteVpnRouteEntry delete

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:ListPhysicalConnectionFeatures ListPhysicalConnectionFeatures list

*PhysicalConnection

acs:vpc:{#regionId}:{#AccountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:DescribeVpnGateway DescribeVpnGateway get

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:UpdateVirtualPhysicalConnection UpdateVirtualPhysicalConnection update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}

なし なし
vpc:CreateVpconnFromVbr CreateVpconnFromVbr create

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}

なし なし
vpc:CreateIpv4Gateway CreateIpv4Gateway create

*Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*

なし なし
vpc:AllocateEipAddressPro AllocateEipAddressPro create

*Address

acs:vpc:{#regionId}:{#accountId}:eip/*

なし なし
vpc:GetNatGatewayAttribute GetNatGatewayAttribute get

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:AllocateEipSegmentAddress AllocateEipSegmentAddress create

*SegmentAddress

acs:vpc:{#regionId}:{#accountId}:eip/*

なし なし
vpc:CreateNetworkAcl CreateNetworkAcl create

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/*

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:ListTagResources ListTagResources get

BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable}

VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

vpc:tag

なし
vpc:ModifyGlobalAccelerationInstanceSpec ModifyGlobalAccelerationInstanceSpec update

*GlobalAccelerationInstance

acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}

なし なし
vpc:MoveResourceGroup MoveResourceGroup update

BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}

Eip

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

PrefixList

acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}

GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}

DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}

FlowLog

acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}

HaVip

acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}

Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}

Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}

PublicIpAddressPool

acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}

TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}

TrafficMirrorSession

acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}

なし なし
vpc:ModifyExpressConnectTrafficQosRule ModifyExpressConnectTrafficQosRule update

*全部资源

*

なし なし
vpc:CancelCommonBandwidthPackageIpBandwidth CancelCommonBandwidthPackageIpBandwidth update

*BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

なし なし
vpc:DescribeSslVpnClientCerts DescribeSslVpnClientCerts list

SslVpnClientCert

acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*

SslVpnClientCert

acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}

なし なし
vpc:DescribeCustomerGateways DescribeCustomerGateways list

CustomerGateway

acs:vpc:{#regionId}:{#accountId}:customergateway/*

CustomerGateway

acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}

なし なし
vpc:StartFailoverTestJob StartFailoverTestJob update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:DeleteRouteEntry DeleteRouteEntry delete

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:TagResources TagResources update

BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

vpc:tag

なし
vpc:RemoveSourcesFromTrafficMirrorSession RemoveSourcesFromTrafficMirrorSession update

*TrafficMirrorSession

acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}

なし なし
vpc:OpenTrafficMirrorService OpenTrafficMirrorService create

*全部资源

*

なし なし
vpc:UnassociateVpcCidrBlock UnassociateVpcCidrBlock delete

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:ListGatewayRouteTableEntries ListGatewayRouteTableEntries list

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}

なし なし
vpc:DescribeVpnConnectionLogs DescribeVpnConnectionLogs list

*VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DescribeHighDefinitionMonitorLogAttribute DescribeHighDefinitionMonitorLogAttribute get

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

なし なし
vpc:DescribeEcGrantRelation DescribeEcGrantRelation list

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:DeleteNetworkAcl DeleteNetworkAcl delete

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}

なし なし
vpc:DeletePublicIpAddressPool DeletePublicIpAddressPool delete

*PublicIpAddressPool

acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}

なし なし
vpc:RemoveIPv6TranslatorAclListEntry RemoveIPv6TranslatorAclListEntry delete

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:ModifyVpcPrefixList ModifyVpcPrefixList update

*PrefixList

acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}

なし なし
vpc:ModifyExpressConnectTrafficQosQueue ModifyExpressConnectTrafficQosQueue update

*全部资源

*

なし なし
vpc:UpdateDhcpOptionsSetAttribute UpdateDhcpOptionsSetAttribute update

*DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}

なし なし
vpc:DeleteVcoRouteEntry DeleteVcoRouteEntry delete

*VpnConnections

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:ModifyVpnAttachmentAttribute ModifyVpnAttachmentAttribute update

*VpnConnections

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DeleteExpressConnectTrafficQosRule DeleteExpressConnectTrafficQosRule delete

*全部资源

*

なし なし
vpc:DescribeIpv6Addresses DescribeIpv6Addresses list

*Ipv6InternetBandwidth

acs:vpc:{#regionId}:{#accountId}:vpc/*

なし なし
vpc:VpcDescribeVpcNatGatewayNetworkInterfaceQuota VpcDescribeVpcNatGatewayNetworkInterfaceQuota get

*全部资源

*

なし なし
vpc:DeleteVpnConnection DeleteVpnConnection delete

*VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DeleteIpv6Gateway DeleteIpv6Gateway delete

*Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}

なし なし
vpc:AllocateIpv6Address AllocateIpv6Address create

*Ipv6Address

acs:vpc:{#regionId}:{#accountId}:ipv6address/*

なし なし
vpc:ModifyIPv6TranslatorAttribute ModifyIPv6TranslatorAttribute update

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:ModifyEipForwardMode ModifyEipForwardMode update

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

なし なし
vpc:DescribeSslVpnClientCert DescribeSslVpnClientCert get

*SslVpnClientCert

acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}

なし なし
vpc:ModifyExpressConnectTrafficQos ModifyExpressConnectTrafficQos update

*全部资源

*

なし なし
vpc:AddPublicIpAddressPoolCidrBlock AddPublicIpAddressPoolCidrBlock create

*PublicIpAddressPool

acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}

なし なし
vpc:DescribeVSwitchAttributes DescribeVSwitchAttributes get

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

なし なし
vpc:ModifyVpnPbrRouteEntryAttribute ModifyVpnPbrRouteEntryAttribute update

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:UntagResourcesForExpressConnect UntagResourcesForExpressConnect update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

*TrafficQos

acs:vpc:{#regionId}:{#accountId}:trafficqos/{#QosId}

なし なし
vpc:AssociateVpnGatewayWithCertificate AssociateVpnGatewayWithCertificate update

*全部资源

*

なし なし
vpc:DescribeVSwitches DescribeVSwitches list

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/*

vpc:VPC

なし
vpc:GetVpcPrefixListAssociations GetVpcPrefixListAssociations get

*PrefixList

acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}

なし なし
vpc:GetRouteTargetGroup GetRouteTargetGroup get

*RouteTargetGroup

acs:vpc:{#regionId}:{#accountId}:routetargetgroup/{#RouteTargetGroupId}

なし なし
vpc:ListTrafficMirrorFilters ListTrafficMirrorFilters list

*TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*

なし なし
vpc:CreateDefaultVpc CreateDefaultVpc create

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/*

なし なし
vpc:ListEnhanhcedNatGatewayAvailableZones ListEnhanhcedNatGatewayAvailableZones list

*全部资源

*

なし なし
vpc:UpdateGatewayRouteTableEntryAttribute UpdateGatewayRouteTableEntryAttribute update

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:DeleteBgpGroup DeleteBgpGroup delete

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:ModifyVirtualBorderRouterAttribute ModifyVirtualBorderRouterAttribute update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:DescribeNetworkAcls DescribeNetworkAcls list

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/*

なし なし
vpc:DeleteSslVpnClientCert DeleteSslVpnClientCert delete

*SslVpnClientCert

acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}

なし なし
vpc:DeactivateRouterInterface DeactivateRouterInterface update

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

なし なし
vpc:ModifyTunnelAttribute ModifyTunnelAttribute update

*VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DescribeIPv6TranslatorEntries DescribeIPv6TranslatorEntries get

*全部资源

*

なし なし
vpc:DescribeEipAddresses DescribeEipAddresses list

*Address

acs:vpc:{#regionId}:{#accountId}:eip/*

vpc:tag

なし
vpc:Describe95Traffic Describe95Traffic get

*BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

なし なし
vpc:UpdateNetworkAclEntries UpdateNetworkAclEntries update

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}

なし なし
vpc:UpdateVpcGatewayEndpointAttribute UpdateVpcGatewayEndpointAttribute update

*GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}

なし なし
vpc:ListTrafficMirrorSessions ListTrafficMirrorSessions list

*TrafficMirrorSession

acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*

なし なし
vpc:AttachVbrToVpconn AttachVbrToVpconn update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}

なし なし
vpc:DescribeVpnRouteEntries DescribeVpnRouteEntries get

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:AssociatePhysicalConnectionToVirtualBorderRouter AssociatePhysicalConnectionToVirtualBorderRouter update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:ListVpnCertificateAssociations ListVpnCertificateAssociations list

*全部资源

*

なし なし
vpc:ModifyForwardEntry ModifyForwardEntry update

*ForwardTable

acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}

なし なし
vpc:DisableVpcClassicLink DisableVpcClassicLink update

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:UpdateFailoverTestJob UpdateFailoverTestJob update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:CancelPhysicalConnection CancelPhysicalConnection update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:ListFullNatEntries ListFullNatEntries get

*FullNat

acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}

なし なし
vpc:GrantInstanceToVbr GrantInstanceToVbr update

*VPC

acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}

なし なし
vpc:AllocateIpv6InternetBandwidth AllocateIpv6InternetBandwidth create

*Ipv6InternetBandwidth

acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*

なし なし
vpc:AssociateVpcCidrBlock AssociateVpcCidrBlock create

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:ModifyCommonBandwidthPackageSpec ModifyCommonBandwidthPackageSpec update

*BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

なし なし
vpc:CreateVpnRouteEntry CreateVpnRouteEntry create

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:CreateVpcPrefixList CreateVpcPrefixList create

*PrefixList

acs:vpc:{#regionId}:{#accountId}:prefixlist/*

なし なし
vpc:ListBusinessRegions ListBusinessRegions list

*全部资源

*

なし なし
vpc:ModifyVpnRouteEntryWeight ModifyVpnRouteEntryWeight update

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:CompletePhysicalConnectionLOA CompletePhysicalConnectionLOA update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:DescribeTagKeysForExpressConnect DescribeTagKeysForExpressConnect list

*全部资源

*

なし なし
vpc:DeleteGlobalAccelerationInstance DeleteGlobalAccelerationInstance delete

*GlobalAccelerationInstance

acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}

なし なし
vpc:ModifyIpv6InternetBandwidth ModifyIpv6InternetBandwidth update

*Ipv6InternetBandwidth

acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}

なし なし
vpc:DeleteRouteTable DeleteRouteTable delete

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:ModifyVcoRouteEntryWeight ModifyVcoRouteEntryWeight update

*VpnConnections

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DeleteSslVpnServer DeleteSslVpnServer delete

*SslVpnServer

acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}

なし なし
vpc:DescribeIPv6Translators DescribeIPv6Translators get

*全部资源

*

なし なし
vpc:AssociateRouteTableWithGateway AssociateRouteTableWithGateway create

*Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}

なし なし
vpc:DeleteNatIpCidr DeleteNatIpCidr delete

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:WithdrawVpcPublishedRouteEntries WithdrawVpcPublishedRouteEntries update

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:DescribeVpnGatewayAvailableZones DescribeVpnGatewayAvailableZones list

*全部资源

*

なし なし
vpc:DeleteSnatEntry DeleteSnatEntry delete

*SnatTable

acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}

なし なし
vpc:DeleteTrafficMirrorFilter DeleteTrafficMirrorFilter delete

*TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}

なし なし
vpc:DescribeVRouters DescribeVRouters list

*VRouter

acs:vpc:{#regionId}:{#accountId}:vrouter/*

vpc:VPC

なし
vpc:CreateBgpGroup CreateBgpGroup create

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:DescribeGrantRulesToCen DescribeGrantRulesToCen get

VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}

GrantRuleToCen

acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}

なし なし
vpc:UpdateEnhancedVpnGateway UpdateEnhancedVpnGateway update

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DeleteExpressConnectTrafficQos DeleteExpressConnectTrafficQos delete

*全部资源

*

なし なし
vpc:DescribeHaVips DescribeHaVips get

*HaVip

acs:vpc:{#regionId}:{#accountId}:havip/*

なし なし
vpc:DescribeIpv6GatewayAttribute DescribeIpv6GatewayAttribute get

*Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}

なし なし
vpc:AddSourcesToTrafficMirrorSession AddSourcesToTrafficMirrorSession update

*TrafficMirrorSession

acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}

なし なし
vpc:DescribeCommonBandwidthPackages DescribeCommonBandwidthPackages get

*CommonBandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*

なし なし
vpc:CreateSslVpnClientCert CreateSslVpnClientCert create

*SslVpnClientCert

acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*

*SslVpnServer

acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}

なし なし
vpc:GetDhcpOptionsSet GetDhcpOptionsSet get

*DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}

なし なし
vpc:ListNatIpCidrs ListNatIpCidrs list

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:GetTrafficMirrorServiceStatus GetTrafficMirrorServiceStatus get

*全部资源

*

なし なし
vpc:CreateRouteEntry CreateRouteEntry create

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:CreateRouteTargetGroup CreateRouteTargetGroup create

*RouteTargetGroup

acs:vpc:{#regionId}:{#accountId}:routetargetgroup/*

なし なし
vpc:DeleteIpv4Gateway DeleteIpv4Gateway delete

*Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}

なし なし
vpc:DescribeVirtualBorderRoutersForPhysicalConnection DescribeVirtualBorderRoutersForPhysicalConnection list

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

vpc:PhysicalConnection

なし
vpc:DeleteFlowLog DeleteFlowLog delete

*FlowLog

acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}

なし なし
vpc:AssociateNetworkAcl AssociateNetworkAcl update

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

なし なし
vpc:ListDhcpOptionsSets ListDhcpOptionsSets get

DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*

DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}

なし なし
vpc:CreateExpressConnectTrafficQos CreateExpressConnectTrafficQos create

*TrafficQos

acs:vpc:{#regionId}:{#accountId}:TrafficQos/*

なし なし
vpc:CreateDhcpOptionsSet CreateDhcpOptionsSet create

*DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*

なし なし
vpc:ModifyNatIpAttribute ModifyNatIpAttribute update

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:ListVSwitchCidrReservations ListVSwitchCidrReservations list

*VSwitchCidrReservation

acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*

なし なし
vpc:DescribeBgpPeers DescribeBgpPeers get

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:DescribeEipGatewayInfo DescribeEipGatewayInfo list

*GatewayInfo

acs:vpc:{#regionId}:{#accountId}:eip/*

なし なし
vpc:CreateFlowLog CreateFlowLog create

VSwitch

acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId}

*FlowLog

acs:vpc:{#regionId}:{#accountId}:flowlog/*

VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:ModifyBgpPeerAttribute ModifyBgpPeerAttribute update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:OpenPhysicalConnectionService OpenPhysicalConnectionService create

*全部资源

*

なし なし
vpc:DescribeVpnAttachments DescribeVpnAttachments list

*VpnConnections

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DescribeEipSegment DescribeEipSegment get

*SegmentAddress

acs:vpc:{#regionId}:{#accountId}:eip/*

なし なし
vpc:DescribePhysicalConnectionLOA DescribePhysicalConnectionLOA get

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:UpdateNatGatewayNatType UpdateNatGatewayNatType update

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:SecondApplyPhysicalConnectionLOA SecondApplyPhysicalConnectionLOA none

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:CreateSnatEntry CreateSnatEntry create

*SnatEntry

acs:vpc:{#regionId}:{#accountId}:snattable/*

なし なし
vpc:CreateVpnAttachment CreateVpnAttachment create

*全部资源

*

なし なし
vpc:ReleaseEipAddress ReleaseEipAddress update

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

vpc:tag

なし
vpc:CreateHaVip CreateHaVip create

*HaVip

acs:vpc:{#regionId}:{#accountId}:havip/*

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

なし なし
vpc:DescribeVpnGateways DescribeVpnGateways list

VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/*

VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}

なし なし
vpc:DeleteExpressConnectTrafficQosQueue DeleteExpressConnectTrafficQosQueue delete

*全部资源

*

なし なし
vpc:DeleteTrafficMirrorSession DeleteTrafficMirrorSession delete

*TrafficMirrorSession

acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}

なし なし
vpc:UnassociateNetworkAcl UnassociateNetworkAcl update

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

なし なし
vpc:RetryVpcPrefixListAssociation RetryVpcPrefixListAssociation update

*PrefixList

acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}

なし なし
vpc:DescribeFailoverTestJobs DescribeFailoverTestJobs list

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:ModifyVSwitchCidrReservationAttribute ModifyVSwitchCidrReservationAttribute update

*VSwitchCidrReservation

acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}

なし なし
vpc:UnassociateEipAddress UnassociateEipAddress delete

Instance

acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

HaVip

acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}

なし なし
vpc:ModifyExpressCloudConnectionBandwidth ModifyExpressCloudConnectionBandwidth update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:DescribeVbrHa DescribeVbrHa get

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:CheckCanAllocateVpcPrivateIpAddress CheckCanAllocateVpcPrivateIpAddress none

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

なし なし
vpc:OpenPublicIpAddressPoolService OpenPublicIpAddressPoolService create

*全部资源

*

なし なし
vpc:DeleteVpnPbrRouteEntry DeleteVpnPbrRouteEntry delete

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DeleteCustomerGateway DeleteCustomerGateway delete

*CustomerGateway

acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}

なし なし
vpc:ModifyFlowLogAttribute ModifyFlowLogAttribute update

*FlowLog

acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}

なし なし
vpc:UpdateTrafficMirrorSessionAttribute UpdateTrafficMirrorSessionAttribute update

*TrafficMirrorSession

acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}

TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}

なし なし
vpc:AddGlobalAccelerationInstanceIp AddGlobalAccelerationInstanceIp create

*全部资源

*

なし なし
vpc:DeleteRouteEntries DeleteRouteEntries delete

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}

なし なし
vpc:CreateExpressConnectTrafficQosQueue CreateExpressConnectTrafficQosQueue create

*全部资源

*

なし なし
vpc:ModifyRouterInterfaceAttribute ModifyRouterInterfaceAttribute update

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

vpc:TargetAccountRDId

なし
vpc:ApplyPhysicalConnectionLOA ApplyPhysicalConnectionLOA update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:ModifyVpnPbrRouteEntryWeight ModifyVpnPbrRouteEntryWeight update

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:ModifySslVpnServer ModifySslVpnServer update

*SslVpnServer

acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}

なし なし
vpc:RevokeInstanceFromVbr RevokeInstanceFromVbr update

*VPC

acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}

なし なし
vpc:DeleteIPv6TranslatorEntry DeleteIPv6TranslatorEntry delete

*全部资源

*

なし なし
vpc:DetachDhcpOptionsSetFromVpc DetachDhcpOptionsSetFromVpc update

*DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:DeleteDhcpOptionsSet DeleteDhcpOptionsSet delete

*DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}

なし なし
vpc:RecoverVirtualBorderRouter RecoverVirtualBorderRouter update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:GrantInstanceToCen GrantInstanceToCen update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:CreateRouteEntries CreateRouteEntries create

*RouteEntry

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:CreateIpv6Gateway CreateIpv6Gateway create

*Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*

なし なし
vpc:DeleteVpcPrefixList DeleteVpcPrefixList delete

*PrefixList

acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}

なし なし
vpc:UnassociateGlobalAccelerationInstance UnassociateGlobalAccelerationInstance delete

*全部资源

*

なし なし
vpc:ReleaseEipSegmentAddress ReleaseEipSegmentAddress delete

*SegmentAddress

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

なし なし
vpc:DeleteVirtualBorderRouter DeleteVirtualBorderRouter delete

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:ModifyHaVipAttribute ModifyHaVipAttribute update

*HaVip

acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}

なし なし
vpc:DescribeForwardTableEntries DescribeForwardTableEntries get

*ForwardTable

acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}

なし なし
vpc:CreateIpv6EgressOnlyRule CreateIpv6EgressOnlyRule create

*Ipv6EgressRule

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}

なし なし
vpc:ModifyIPv6TranslatorAclAttribute ModifyIPv6TranslatorAclAttribute update

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:DescribeEipMonitorData DescribeEipMonitorData get

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

なし なし
vpc:AddCommonBandwidthPackageIp AddCommonBandwidthPackageIp create

*BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

なし なし
vpc:DeleteVSwitch DeleteVSwitch delete

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

なし なし
vpc:DissociateRouteTableFromGateway DissociateRouteTableFromGateway get

*Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}

なし なし
vpc:DiagnoseVpnConnections DiagnoseVpnConnections get

*全部资源

*

なし なし
vpc:DeleteIPv6Translator DeleteIPv6Translator delete

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:DescribeRouteEntryList DescribeRouteEntryList get

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:ModifyVpnGatewayAttribute ModifyVpnGatewayAttribute update

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DescribeTags DescribeTags get

*全部资源

*

vpc:tag

なし
vpc:DescribeCustomerGateway DescribeCustomerGateway get

*CustomerGateway

acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}

なし なし
vpc:DescribeIPv6TranslatorAclLists DescribeIPv6TranslatorAclLists get

*全部资源

*

なし なし
vpc:DescribeExpressConnectTrafficQosRule DescribeExpressConnectTrafficQosRule list

*全部资源

*

なし なし
vpc:DescribeIPv6TranslatorAclListAttributes DescribeIPv6TranslatorAclListAttributes get

*IPv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId}

なし なし
vpc:DeleteVpc DeleteVpc delete

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

vpc:tag

なし
vpc:DescribeVirtualBorderRouters DescribeVirtualBorderRouters list

*VirtualBorderRouter

acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:CreateIPv6TranslatorAclList CreateIPv6TranslatorAclList create

*全部资源

*

なし なし
vpc:AddBgpNetwork AddBgpNetwork get

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:UpdateTrafficMirrorFilterRuleAttribute UpdateTrafficMirrorFilterRuleAttribute update

*TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}

なし なし
vpc:PublishVpcRouteEntries PublishVpcRouteEntries update

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

なし なし
vpc:DescribeVpnSslServerLogs DescribeVpnSslServerLogs get

*SslVpnServer

acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}

なし なし
vpc:ModifyVpcAttribute ModifyVpcAttribute update

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

vpc:tag

なし
vpc:CreateRouterInterface CreateRouterInterface create

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/*

vpc:TargetAccountRDId

なし
vpc:UpdateTrafficMirrorFilterAttribute UpdateTrafficMirrorFilterAttribute update

*TrafficMirrorFilter

acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}

なし なし
vpc:ModifyRouterInterfaceSpec ModifyRouterInterfaceSpec update

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

なし なし
vpc:ModifyNatIpCidrAttribute ModifyNatIpCidrAttribute update

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:DescribePhysicalConnections DescribePhysicalConnections list

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/*

なし なし
vpc:DeleteIpv6EgressOnlyRule DeleteIpv6EgressOnlyRule delete

*Ipv6Gateway

acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}

なし なし
vpc:CheckVpnBgpEnabled CheckVpnBgpEnabled none

*全部资源

*

なし なし
vpc:EnablePhysicalConnection EnablePhysicalConnection update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:CreateVSwitchCidrReservation CreateVSwitchCidrReservation create

*VSwitchCidrReservation

acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*

なし なし
vpc:GetPublicIpAddressPoolServiceStatus GetPublicIpAddressPoolServiceStatus get

*全部资源

*

なし なし
vpc:MoveVpnResourceGroup MoveVpnResourceGroup update

*全部资源

*

なし なし
vpc:DescribeRouteTables DescribeRouteTables list

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

vpc:VBR

vpc:VRouter

なし
vpc:CreateHighReliablePhysicalConnection CreateHighReliablePhysicalConnection create

*全部资源

*

なし なし
vpc:UnassociatePhysicalConnectionFromVirtualBorderRouter UnassociatePhysicalConnectionFromVirtualBorderRouter update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:DeleteVSwitchCidrReservation DeleteVSwitchCidrReservation delete

*VSwitchCidrReservation

acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}

なし なし
vpc:SwitchActiveRouteTarget SwitchActiveRouteTarget update

*RouteTargetGroup

acs:vpc:{#regionId}:{#accountId}:routetargetgroup/{#RouteTargetGroupId}

なし なし
vpc:ListIpv4Gateways ListIpv4Gateways list

Ipv4Gateway

acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*

なし なし
vpc:DescribeNetworkAclAttributes DescribeNetworkAclAttributes get

*NetworkAcl

acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}

なし なし
vpc:DescribeVpcs DescribeVpcs list

VPC

acs:vpc:{#regionId}:{#accountId}:vpc/*

VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId}

vpc:tag

なし
vpc:AttachDhcpOptionsSetToVpc AttachDhcpOptionsSetToVpc update

*DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:GetVpnGatewayDiagnoseResult GetVpnGatewayDiagnoseResult get

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}

なし なし
vpc:ActivateRouterInterface ActivateRouterInterface update

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

なし なし
vpc:DescribeSslVpnClients DescribeSslVpnClients list

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DescribeVpnPbrRouteEntries DescribeVpnPbrRouteEntries get

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DescribeVcoRouteEntries DescribeVcoRouteEntries list

*VpnConnections

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DeletePhysicalConnection DeletePhysicalConnection delete

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし
vpc:DeleteIPv6TranslatorAclList DeleteIPv6TranslatorAclList delete

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:CreateGlobalAccelerationInstance CreateGlobalAccelerationInstance create

*GlobalAccelerationInstance

acs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/*

なし なし
vpc:UnTagResources UnTagResources update

Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}

VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

vpc:tag

なし
vpc:DescribeGlobalAccelerationInstances DescribeGlobalAccelerationInstances get

*GlobalAccelerationInstance

acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/*

なし なし
vpc:ModifyBgpGroupAttribute ModifyBgpGroupAttribute update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:ModifyEipAddressAttribute ModifyEipAddressAttribute update

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

なし なし
vpc:DissociateVpnGatewayWithCertificate DissociateVpnGatewayWithCertificate update

*全部资源

*

なし なし
vpc:DeleteIpv6InternetBandwidth DeleteIpv6InternetBandwidth delete

*Ipv6InternetBandwidth

acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}

なし なし
vpc:CreateExpressConnectTrafficQosRule CreateExpressConnectTrafficQosRule create

*全部资源

*

なし なし
vpc:ModifySslVpnClientCert ModifySslVpnClientCert update

*SslVpnClientCert

acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}

なし なし
vpc:ModifyVSwitchAttribute ModifyVSwitchAttribute update

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}

なし なし
vpc:DeleteFullNatEntry DeleteFullNatEntry delete

*FullNat

acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}

なし なし
vpc:DescribeTagKeys DescribeTagKeys get

*全部资源

*

なし なし
vpc:RemoveGlobalAccelerationInstanceIp RemoveGlobalAccelerationInstanceIp delete

*全部资源

*

なし なし
vpc:AssociateEipAddressBatch AssociateEipAddressBatch update

*Address

acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}

Instance

acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}

NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:TerminateVirtualBorderRouter TerminateVirtualBorderRouter update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:ModifyVpnConnectionAttribute ModifyVpnConnectionAttribute update

*VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DescribeRouterInterfaceAttribute DescribeRouterInterfaceAttribute get

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

なし なし
vpc:ListPublicIpAddressPools ListPublicIpAddressPools get

*PublicIpAddressPool

acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*

なし なし
vpc:CreateVirtualBorderRouter CreateVirtualBorderRouter create

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*

なし なし
vpc:RecoverPhysicalConnection RecoverPhysicalConnection update

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}

なし なし
vpc:UnassociateHaVip UnassociateHaVip delete

*Instance

acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}

*HaVip

acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}

なし なし
vpc:AssociateRouteTable AssociateRouteTable update

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}

なし なし
vpc:DeleteNatIp DeleteNatIp delete

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:CreateBgpPeer CreateBgpPeer create

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}

なし なし
vpc:ModifyCommonBandwidthPackageIpBandwidth ModifyCommonBandwidthPackageIpBandwidth update

*BandwidthPackage

acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}

なし なし
vpc:CreateFullNatEntry CreateFullNatEntry create

*FullNat

acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}

なし なし
vpc:CreateIpsecServer CreateIpsecServer create

*全部资源

*

なし なし
vpc:DescribeExpressConnectTrafficQosQueue DescribeExpressConnectTrafficQosQueue list

*全部资源

*

なし なし
vpc:ListIpsecServers ListIpsecServers list

*全部资源

*

なし なし
vpc:CreateVpnConnection CreateVpnConnection create

*CustomerGateway

acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}

*VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/*

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:CreateRouteTable CreateRouteTable create

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/*

なし なし
vpc:CreateIPv6Translator CreateIPv6Translator create

*全部资源

*

なし なし
vpc:DeleteVbrHa DeleteVbrHa delete

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:ReplaceVpcDhcpOptionsSet ReplaceVpcDhcpOptionsSet update

*DhcpOptionsSet

acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:UpdateIpsecServer UpdateIpsecServer update

*全部资源

*

なし なし
vpc:CreateVSwitch CreateVSwitch create

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/*

vpc:tag

なし
vpc:CreateNatIpCidr CreateNatIpCidr create

*NatGateway

acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}

なし なし
vpc:AllocateEipAddress AllocateEipAddress create

*Address

acs:vpc:{#regionId}:{#accountId}:eip/*

なし なし
vpc:DeleteRouterInterface DeleteExpressConnect delete

*RouterInterface

acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}

なし なし
vpc:DescribeRouteTableList DescribeRouteTableList list

*RouteTable

acs:vpc:{#regionId}:{#accountId}:routetable/*

vpc:VRouter

vpc:VBR

なし
vpc:DescribeBgpNetworks DescribeBgpNetworks get

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:CreatePhysicalConnection CreatePhysicalConnection create

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/*

なし なし
vpc:ListBusinessAccessPoints ListBusinessAccessPoints list

*全部资源

*

なし なし
vpc:ModifyVpnPbrRouteEntryPriority ModifyVpnPbrRouteEntryPriority update

*VpnGateway

acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}

なし なし
vpc:DescribeVpcGrantRulesToEcr DescribeVpcGrantRulesToEcr list

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}

なし なし
vpc:ModifyIpv6AddressAttribute ModifyIpv6AddressAttribute update

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:DeleteVpnAttachment DeleteVpnAttachment delete

*VpnConnections

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:DescribePublicIpAddress DescribePublicIpAddress list

*全部资源

*

なし なし
vpc:DescribeBgpGroups DescribeBgpGroups get

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:ModifyIPv6TranslatorAclListEntry ModifyIPv6TranslatorAclListEntry update

*Ipv6Translator

acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}

なし なし
vpc:DownloadVpnConnectionConfig DownloadVpnConnectionConfig get

*VpnConnection

acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}

なし なし
vpc:GetVpcGatewayEndpointAttribute GetVpcGatewayEndpointAttribute get

*GatewayEndpoint

acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}

なし なし
vpc:GetVSwitchCidrReservationUsage GetVSwitchCidrReservationUsage get

*VSwitchCidrReservation

acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}

なし なし
vpc:ListRouteTargetGroups ListRouteTargetGroups list

*RouteTargetGroup

acs:vpc:{#regionId}:{#accountId}:routetargetgroup/*

なし なし
vpc:DescribeFailoverTestJob DescribeFailoverTestJob get

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

なし なし
vpc:ListIpsecServerLogs ListIpsecServerLogs list

*全部资源

*

なし なし
vpc:ModifyVRouterAttribute ModifyVRouterAttribute update

*VRouter

acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}

なし なし
vpc:EnableVpcClassicLink EnableVpcClassicLink update

*VPC

acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}

なし なし
vpc:GetPhysicalConnectionServiceStatus GetPhysicalConnectionServiceStatus get

*全部资源

*

なし なし
vpc:ReleaseIpv6Address ReleaseIpv6Address delete

*Ipv6Address

acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}

なし なし
vpc:DiagnoseVpnGateway DiagnoseVpnGateway get

*全部资源

*

なし なし
vpc:DescribeExpressConnectTrafficQos DescribeExpressConnectTrafficQos list

*TrafficQos

acs:vpc:{#regionId}:{#accountId}:TrafficQos/*

なし なし
vpc:DescribeSslVpnServers DescribeSslVpnServers list

SslVpnServer

acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*

SslVpnServer

acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}

なし なし
vpc:StopFailoverTestJob StopFailoverTestJob update

*VirtualBorderRouter

acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}

*PhysicalConnection

acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

なし なし

リソース (Resource)

下表に、Virtual Private Cloud (VPC)。 で定義されたリソースを示します。ポリシーステートメントのResource要素で指定することで、特定のアクションの適用対象を設定できます。各リソースは対応する ARN を持ち、一意的に識別されます。ARN はacs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}形式で、構成要素は以下のとおりです。

  • acs:Alibaba Cloud Service の頭文字で、Alibaba Cloud のパブリッククラウドを指します。

  • {#ramcode}:RAM における具体的な Alibaba Cloud サービスの識別コード。

  • {#regionId}リージョン ID。アスタリスク (*) に設定した場合、リソースがすべてのリージョンに適用することを示します。

  • {#accountId}:Alibaba Cloud アカウントの ID。アスタリスク (*) に設定した場合、リソースがすべての Alibaba Cloud アカウントに適用することを示します。

  • {#resourceType}:具体的な Alibaba Cloud サービスによって定義されたリソースの識別子で、ファイルパスに似た階層構造をサポートしています。アスタリスク (*) に設定した場合、ステートメントがすべてのリソースに適用することを示します。

リソースタイプ

ARN

FlowLog
  • acs:vpc:{#regionId}:{#accountId}:flowlog/*
  • acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
VpnConnection
  • acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
  • acs:vpc:{#regionId}:{#accountId}:vpnconnection/*
  • acs:vpc:{#regionId}:{#accountId}:*
  • acs:vpc:{#Region}:{#AccountId}:vpnconnection/{#VpnConnectionId}
VirtualBorderRouter
  • acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
  • acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
  • acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
  • acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}
  • acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*
FlowLogService
  • acs:vpc:{#regionId}:{#accountId}:flowlog/*
NatGateway
  • acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
  • acs:vpc:{#regionId}:{#accountId}:natgateway/*
  • acs:natgateway:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
BandwidthPackage
  • acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
  • acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}
PhysicalConnection
  • acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
  • acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
RouterInterface
  • acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}
  • acs:vpc:{#regionId}:{#accountId}:routerinterface/*
TrafficQos
  • acs:vpc:{#regionId}:{#accountId}:trafficqos/{#QosId}
  • acs:vpc:{#regionId}:{#accountId}:TrafficQos/*
SnatTable
  • acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
Ipv6Translator
  • acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}
  • acs:vpc:{#regionId}:{#accountId}:ipv6trans/*
VPC
  • acs:vpc:{#regionId}:{#accountId}:vpc/*
  • acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
  • acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
Ipv6Gateway
  • acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
  • acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
VpnGateway
  • acs:vpc:{#regionId}:{#accountId}:vpngateway/*
  • acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
  • acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}
  • acs:vpc:{#Region}:{#AccountId}:vpngateway/{#VpnInstanceId}
  • acs:vpc:{#regionId}:{#accountId}:
PublicIpAddressPool
  • acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
  • acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
FullNat
  • acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}
Ipv4Gateway
  • acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
  • acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
NetworkAcl
  • acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
  • acs:vpc:{#regionId}:{#accountId}:networkacl/*
Address
  • acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
  • acs:vpc:{#regionId}:{#accountId}:eip/*
ForwardTable
  • acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
RouteTable
  • acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
  • acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable}
  • acs:vpc:{#regionId}:{#accountId}:routetable/*
IpsecServer
  • acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}
  • acs:vpc:{#Region}:{#AccountId}: vpnipsecserver/{#IpsecServerId}
  • acs:vpc:{#regionId}:{#accountId}:ipsecserver/*
  • acs:vpc:{#regionId}:{#accountId}: vpnipsecserver/{#IpsecServerId}
VSwitch
  • acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
  • acs:vpc:{#regionid}:{#accountId}:vswitch/*
SegmentAddress
  • acs:eip:{#regionId}:{#accountId}:eipsegment/{#SegmentInstanceId}
  • acs:vpc:{#regionId}:{#accountId}:eip/*
  • acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
TrafficMirrorFilter
  • acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
  • acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
Instance
  • acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
  • acs:ecs:{#regionId}:{#accountId}:instance/{#Instanceid}
  • acs:ecs:{#regionId}:{#accountId}:instance/*
Association
  • acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
GatewayEndpoint
  • acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
  • acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
CustomerGateway
  • acs:vpc:{#regionId}:{#accountId}:customergateway/*
  • acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
  • acs:vpc:{#Region}:{#AccountId}:customergateway/{#CustomerGatewayId}
CommonBandwidthPackage
  • acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}
  • acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
RouteTargetGroup
  • acs:vpc:{#regionId}:{#accountId}:routetargetgroup/{#RouteTargetGroupId}
  • acs:vpc:{#regionId}:{#accountId}:routetargetgroup/*
PrefixList
  • acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
  • acs:vpc:{#regionId}:{#accountId}:prefixlist/*
VpnConnections
  • acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
GlobalAccelerationInstance
  • acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}
  • acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/*
  • acs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/*
HaVip
  • acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
  • acs:vpc:{#regionId}:{#accountId}:havip/*
SslVpnServer
  • acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
  • acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
  • acs:vpc:{#Region}:{#AccountId}:sslvpnserver/{#SslVpnServerId}
TrafficMirrorSession
  • acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
  • acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
Eip
  • acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
  • acs:vpc:{#regionId}:{#accountId}:eip/{#EipId}
DhcpOptionsSet
  • acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
  • acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
SslVpnClientCert
  • acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
  • acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
TrafficMirrorService
  • acs:vpc:{#regionId}:{#accountId}:trafficmirror/*
Ipv6InternetBandwidth
  • acs:vpc:{#regionId}:{#accountId}:vpc/*
  • acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*
  • acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
Ipv6Address
  • acs:vpc:{#regionId}:{#accountId}:ipv6address/*
  • acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
VpnCertificateAttachment
  • acs:vpc:{#regionId}:{#accountId}:vpncertificateattachment/{#VpnGatewayId}/{#CertificateType}/{#CertificateId}
IPv6Translator
  • acs:vpc:{#regionId}:{#accountId}:ipv6trans/*
  • acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId}
VRouter
  • acs:vpc:{#regionId}:{#accountId}:vrouter/*
  • acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}
GrantRuleToCen
  • acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
VSwitchCidrReservation
  • acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
  • acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
GatewayInfo
  • acs:vpc:{#regionId}:{#accountId}:eip/*
SnatEntry
  • acs:vpc:{#regionId}:{#accountId}:snattable/*
VpnAttachment
  • acs:vpc:{#Region}:{#AccountId}:vpnattachment/{#VpnConnectionId}
PublicIpAddressPoolService
  • acs:vpc:{#regionId}:{#accountId}:publicipaddresspoolservice/*
RouteEntry
  • acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
Ipv6EgressRule
  • acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
physicalconnection
  • acs:vpc:{#regionId}:{#accountId}:physicalconnection/*

条件 (Condition)

下表に、Virtual Private Cloud (VPC)。 で定義されたプロダクトレベルの条件キーを示します。このほかに、Alibaba Cloud の共通条件キーを使用することもできます。これらのキーをポリシーステートメントのCondition要素として指定することで、きめ細かい権限付与ルールを定義できます。条件キーで、ポリシーのCondition_value要素で条件の値を指定します。

各条件キーには、文字列、数値、ブール値、IP アドレスといった特定のデータ型が定められています。データ型によって使用できる条件演算子が異なるため、キーのデータ型に基づいて適切な演算子を指定する必要があります。不適切な演算子を指定した場合、ポリシーステートメントは機能しません。データ型と条件演算子の対応関係については、「Condition_operator」をご参照ください。

条件キー

説明

データ型

vpc:VRouter vRouter の情報。 String
vpc:VPC VPC の情報。 String
vpc:tag VPC のタグ。 String
vpc:TargetAccountRDId ピアアカウントのリソースディレクトリ ID の情報。 String
vpc:PhysicalConnection Express Connect 回線の情報。 String
vpc:VBR 仮想ボーダールーターの情報。 String

カスタム RAM ポリシーの作成方法

カスタムポリシーを作成し、RAM ユーザー、RAM ユーザーグループ、または RAM ロールに付与できます。詳細については、以下をご参照ください。