AliyunKMSCryptoAdminAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunKMSCryptoAdminAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunKMSCryptoAdminAccess policy: Provides administrative access to cryptographic keys in KMS via Management Console.
Policy details
Type: service system policy
Creation time: 14:42:11 on March 04, 2020
Update time: 13:51:02 on June 26, 2023
Current version: v2
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"kms:*"
],
"Resource": [
"acs:kms:*:*:key*",
"acs:kms:*:*:alias*"
],
"Effect": "Allow"
},
{
"Action": ["ecs:TagResources","ecs:UntagResources","ecs:ListTagResources"],
"Resource": ["acs:kms:*:*:key/*","acs:kms:*:*:secret/*"],
"Effect": "Allow"
}
]
}