AliyunExpressConnectReadOnlyAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunExpressConnectReadOnlyAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunExpressConnectReadOnlyAccess policy: Provides read-only access to Express Connect via Management Console.
Policy details
Type: service system policy
Creation time: 11:45:27 on January 09, 2017
Update time: 06:35:45 on September 17, 2025
Current version: v14
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"vpc:DescribePhysicalConnection*",
"vpc:DescribeVirtualBorderRouter*",
"vpc:DescribeRouteTable*",
"vpc:DescribeRouteEntry*",
"vpc:DescribeRouterInterface*",
"vpc:DescribeBgp*",
"vpc:DescribeVpcs",
"vpc:DescribeVirtualBorderRouters",
"vpc:DescribeGrantRulesToCen",
"vpc:GetPhysicalConnectionServiceStatus",
"vpc:DescribeExpressCloudConnections",
"vpc:DescribeAccessPoints",
"vpc:DescribeVBRs",
"vpc:ListBondRouterInterfaceConnection",
"vpc:DescribeEcGrantRelation",
"vpc:DescribeTagKeysForExpressConnect",
"vpc:DescribeNqas",
"vpc:ListTagResourcesForExpressConnect",
"vpc:ListGeographicSubRegions",
"vpc:DescribeVbrAllowPrefixes*",
"vpc:GetBusinessAccessPointDetail",
"vpc:ListBusinessAccessPoints",
"vpc:ListBusinessRegions",
"vpc:ListVirtualPhysicalConnections",
"vpc:DescribeFailoverTestJob*",
"vpc:DescribeExpressConnectTrafficQos*",
"expressconnectrouter:Describe*",
"expressconnectrouter:List*",
"expressconnectrouter:CheckAddRegionToExpressConnectRouter",
"snsu:ListOssIntentOrder",
"vpc:DescribeExpressConnectInstanceTrafficData",
"vpc:DescribeExpressConnectResourceStatus"
],
"Resource": "*",
"Effect": "Allow"
}
]
}