AliyunExpressConnectFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunExpressConnectFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunExpressConnectFullAccess policy: Provides full access to Express Connect via Management Console.
Policy details
Type: service system policy
Creation time: 11:45:22 on January 09, 2017
Update time: 02:24:53 on May 29, 2023
Current version: v10
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"vpc:*PhysicalConnection*",
"vpc:*VirtualBorderRouter*",
"vpc:UpdateVirtualBorderBandwidth",
"vpc:*Vbr*",
"vpc:*RouterInterface*",
"vpc:*RouteEntry*",
"vpc:*RouteTable*",
"vpc:*Bgp*",
"vpc:DescribeVpcs",
"vpc:DescribeVirtualBorderRouters",
"vpc:DescribeGrantRulesToCen",
"vpc:*ExpressCloudConnection*",
"vpc:ChangeResourceGroup",
"vpc:*GeographicSubRegions*",
"vpc:*BusinessAccessPoint*",
"vpc:*EcGrant*",
"vpc:QueryPconnTrafficPrice",
"vpc:ListBusinessRegions",
"vpc:UpdateCrossBoarderStatus",
"vpc:DescribeVBRs",
"vpc:DescribeAccessPoints",
"vpc:*BondRouterInterface*",
"vpc:*Tag*",
"vpc:*Nqa*",
"vpc:*FailoverTestJob*",
"vpc:*ExpressConnectTrafficQos*",
"expressconnectrouter:*",
"snsu:ListOssIntentOrder",
"vpc:DescribeExpressConnectInstanceTrafficData",
"vpc:DescribeExpressConnectResourceStatus"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ram:CreateServiceLinkedRole",
"ram:CheckServiceLinkedRoleExistence"
],
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"ecr.aliyuncs.com"
]
}
}
}
]
}