Autorização RAM - Elastic Compute Service: Central de Documentação do Alibaba Cloud

O Resource Access Management (RAM) é um serviço fornecido pela Alibaba Cloud para gerenciar identidades de usuários e permissões de acesso a recursos. O uso do RAM ajuda a evitar o compartilhamento das chaves da sua conta da Alibaba Cloud com outros usuários e permite conceder aos usuários o acesso com privilégio mínimo. O RAM usa políticas de permissão para definir autorizações. Este tópico descreve a estrutura geral de uma política RAM e os elementos de instrução de política (Action, Resource e Condition) definidos por Elastic Compute Service para políticas de permissão RAM. O código RAM (RamCode) para Elastic Compute Service é ecs,vpc,ecs-workbench , e a granularidade de autorização suportada é RESOURCE .

Estrutura geral de uma política

As políticas de permissão suportam o formato JSON com a seguinte estrutura geral:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

A lista a seguir descreve os campos da política:

Version: Especifica o número da versão da política. É fixo em 1.
Statement:
- Effect: Especifica o resultado da autorização. Valores válidos: Allow e Deny.
- Action: Especifica uma ou mais operações que são permitidas ou negadas.
- Resource: Especifica os objetos específicos afetados pelas operações. Você pode usar os Alibaba Cloud Resource Names (ARNs) para descrever recursos específicos.
- Condition: Especifica as condições para que a autorização entre em vigor. Este campo é opcional.
  - Operador de condição: Especifica os operadores condicionais. Diferentes tipos de condições suportam diferentes operadores condicionais.
  - Condition_key: Especifica as chaves de condição.
  - Condition_value: Especifica os valores de condição.

Action

A tabela a seguir lista as ações definidas por Elastic Compute Service. As colunas da tabela são descritas a seguir:

Action: As ações podem ser usadas no elemento Action das instruções de política de permissão RAM para conceder permissões para realizar a operação.
API: A API que você pode chamar para realizar a ação.
Nível de acesso: O nível de acesso predefinido concedido para cada API. Valores válidos: create, list, get, update e delete.
Tipo de recurso: O tipo de recurso que suporta autorização para realizar a ação. Indica se a ação suporta permissão em nível de recurso. O recurso especificado deve ser compatível com a ação. Caso contrário, a política será ineficaz.
- Para APIs com permissões em nível de recurso, os tipos de recursos obrigatórios são marcados com um asterisco (*). Especifique o ARN correspondente no elemento Resource da política.
- Para APIs sem permissões em nível de recurso, é exibido como Todos os Recursos. Use um asterisco (*) no elemento Resource da política.
Chave de condição: As chaves de condição definidas pelo serviço. A chave permite controle granular, aplicando-se apenas a ações ou a ações associadas a recursos específicos. Além das chaves de condição específicas do serviço, a Alibaba Cloud fornece um conjunto de chaves de condição comuns aplicáveis a todos os serviços integrados ao RAM. Para mais informações, consulte Chaves de condição comuns.
Ação dependente: As ações dependentes necessárias para executar a ação. Para concluir a ação, o usuário RAM ou a função RAM deve ter permissões para realizar todas as ações dependentes.

Action	API	Nível de acesso	Tipo de recurso	Chave de condição	Ação dependente
ecs:ModifyDiskDeployment	ModifyDiskDeployment	update	*Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}`	Nenhum	Nenhum
ecs:DescribePrice	DescribePrice	get	All resources ``	Nenhum	Nenhum
ecs:ModifyInstanceChargeType	ModifyInstanceChargeType	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeElasticityAssurances	DescribeElasticityAssurances	get	ElasticityAssurance `acs:ecs:{#regionId}:{#accountId}:elasticityassurance/`	Nenhum	Nenhum
ecs:DeleteInstances	DeleteInstances	delete	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:EnableDiskEncryptionByDefault	EnableDiskEncryptionByDefault	none	All resources ``	Nenhum	Nenhum
ecs:ModifyInstanceSpec	ModifyInstanceSpec	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	ecs:AssociatePublicIpAddress	Nenhum
ecs:ImportImage	ImportImage	update	Image `acs:ecs:{#regionId}:{#accountId}:image/`	Nenhum	Nenhum
ecs:LockSnapshot	LockSnapshot	update	*Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#SnapshotId}`	Nenhum	Nenhum
ecs:CancelCopyImage	CancelCopyImage	update	*Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:ModifyInstanceVncPasswd	ModifyInstanceVncPasswd	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifyCapacityReservation	ModifyCapacityReservation	update	*CapacityReservation `acs:ecs:{#regionId}:{#accountId}:capacityreservation/{#CapacityReservationId}`	Nenhum	Nenhum
ecs:DeleteAutoProvisioningGroup	DeleteAutoProvisioningGroup	delete	*AutoProvisioningGroup `acs:ecs:{#regionId}:{#accountId}:autoprovisioninggroup/{#autoprovisioninggroupId}`	Nenhum	ram:CreateServiceLinkedRole
ecs:DescribeImageSupportInstanceTypes	DescribeImageSupportInstanceTypes	get	*Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:DescribeCloudAssistantStatus	DescribeCloudAssistantStatus	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeDisks	DescribeDisks	list	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Disk `acs:ecs:{#regionId}:{#accountId}:disk/*`	Nenhum	Nenhum
ecs:ModifyDiskAttribute	ModifyDiskAttribute	update	*Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}`	Nenhum	Nenhum
ecs:DeleteActivation	DeleteActivation	update	*activation `acs:ecs:{#regionId}:{#accountId}:activation/{#activationId}`	Nenhum	Nenhum
ecs:DescribeSecurityGroups	DescribeSecurityGroups	get	SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/*` SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	ecs:tag ecs:tag ecs:tag ecs:tag	Nenhum
ecs:DescribeResourcesModification	DescribeResourcesModification	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeDiagnosticReportAttributes	DescribeDiagnosticReportAttributes	get	All resources ``	Nenhum	Nenhum
ecs:RedeployDedicatedHost	RedeployDedicatedHost	update	*DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}`	Nenhum	Nenhum
ecs:RebootInstances	RebootInstances	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifySecurityGroupEgressRule	ModifySecurityGroupEgressRule	update	All resources ``	ecs:tag ecs:tag ecs:SecurityGroupIpProtocols ecs:SecurityGroupSourceCidrIps	Nenhum
ecs:DescribeInvocations	DescribeInvocations	get	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` Command `acs:ecs:{#regionId}:{#accountId}:command/{#commandId}`	Nenhum	Nenhum
ecs:DescribeEniMonitorData	DescribeEniMonitorData	get	NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}` *Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeAutoSnapshotPolicyEx	DescribeAutoSnapshotPolicyEx	get	AutoSnapshotPolicy `acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/*` AutoSnapshotPolicy `acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/{#snapshotpolicyId}`	Nenhum	Nenhum
ecs:AttachDisk	AttachDisk	update	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	ecs:LoginAsNonRoot ecs:PasswordCustomized	Nenhum
ecs:AllocateDedicatedHosts	AllocateDedicatedHosts	create	DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/`	Nenhum	Nenhum
ecs:DescribeInstanceRamRole	DescribeInstanceRamRole	get	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` Role `acs:ram:{#regionId}:{#accountId}:role/{#roleName}`	Nenhum	Nenhum
ecs:DescribeNetworkInterfaceAttribute	DescribeNetworkInterfaceAttribute	get	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:ModifyPrepayInstanceSpec	ModifyPrepayInstanceSpec	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeInvocationResults	DescribeInvocationResults	get	Command `acs:ecs:{#regionId}:{#accountId}:command/{#commandId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DeleteImage	DeleteImage	delete	*Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:RenewInstance	RenewInstance	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeKeyPairs	DescribeKeyPairs	get	KeyPair `acs:ecs:{#regionId}:{#accountId}:keypair/{#keypairName}` KeyPair `acs:ecs:{#regionId}:{#accountId}:keypair/*`	Nenhum	Nenhum
ecs:ModifyDedicatedHostAutoReleaseTime	ModifyDedicatedHostAutoReleaseTime	update	*DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}`	Nenhum	Nenhum
ecs:DeleteSnapshot	DeleteSnapshot	delete	*Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	Nenhum	Nenhum
ecs:ModifyInstanceAutoReleaseTime	ModifyInstanceAutoReleaseTime	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifySnapshotGroup	ModifySnapshotGroup	update	*SnapshotGroup `acs:ecs:{#regionId}:{#accountId}:snapshotgroup/{#SnapshotGroupId}`	Nenhum	Nenhum
ecs:GetInstanceScreenshot	GetInstanceScreenshot	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifyInstanceMetadataOptions	ModifyInstanceMetadataOptions	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ReplaceSystemDisk	ReplaceSystemDisk	update	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}` *Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	ecs:IsDiskEncrypted ecs:IsSystemDiskEncrypted ecs:PasswordInherit ecs:PasswordCustomized ecs:IsDiskByokEncrypted ecs:IsSystemDiskByokEncrypted ecs:LoginAsNonRoot ecs:ImagePlatform	Nenhum
ecs:DescribePrefixListAssociations	DescribePrefixListAssociations	get	*PrefixList `acs:ecs:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	Nenhum	Nenhum
ecs:DescribeCommands	DescribeCommands	get	Command `acs:ecs:{#regionId}:{#accountId}:command/*` Command `acs:ecs:{#regionId}:{#accountId}:command/{#commandId}`	Nenhum	Nenhum
ecs:RenewReservedInstances	RenewReservedInstances	create	*ReservedInstance `acs:ecs:{#regionId}:{#accountId}:reservedinstance/{#ReservedInstanceId}`	Nenhum	Nenhum
ecs:AttachInstanceRamRole	AttachInstanceRamRole	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` Role `acs:ram:{#regionId}:{#accountId}:role/{#roleName}`	Nenhum	ram:PassRole
ecs:DisableActivation	DisableActivation	update	*Activation `acs:ecs:{#regionId}:{#accountId}:activation/{#ActivationId}`	Nenhum	Nenhum
ecs:StopInstances	StopInstances	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ApplyAutoSnapshotPolicy	ApplyAutoSnapshotPolicy	update	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` AutoSnapshotPolicy `acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/{#snapshotpolicyId}`	Nenhum	Nenhum
ecs:StopInvocation	StopInvocation	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` Command `acs:ecs:{#regionId}:{#accountId}:command/{#commandId}`	Nenhum	Nenhum
ecs:ModifyDiskChargeType	ModifyDiskChargeType	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DeleteCommand	DeleteCommand	delete	*Command `acs:ecs:{#regionId}:{#accountId}:command/{#commandId}`	Nenhum	Nenhum
ecs:DeleteSnapshotGroup	DeleteSnapshotGroup	delete	*SnapshotGroup `acs:ecs:{#regionId}:{#accountId}:snapshotgroup/{#snapshotgroupId}`	Nenhum	Nenhum
ecs:DescribeElasticityAssuranceAutoRenewAttribute	DescribeElasticityAssuranceAutoRenewAttribute	get	*ElasticityAssurance `acs:ecs:{#regionId}:{#accountId}:elasticityassurance/{#ElasticityAssuranceId}`	Nenhum	Nenhum
ecs:CloneDisks	CloneDisks	create	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#SourceDiskId}` Disk `acs:ecs:{#regionId}:{#accountId}:disk/*`	Nenhum	Nenhum
ecs:DescribeImageComponents	DescribeImageComponents	get	ImageComponent `acs:ecs:{#regionId}:{#accountId}:imagecomponent/` *ImageComponent `acs:ecs:{#regionId}:{#accountId}:imagecomponent/{#imagecomponentId}`	Nenhum	Nenhum
ecs:DescribeInstanceStatus	DescribeInstanceStatus	list	All resources ``	Nenhum	Nenhum
ecs:RunInstances	RunInstances	create	All resources ``	vpc:IsDefaultVSwitch vpc:IsDefaultVpc vpc:VPC ecs:IsDiskEncrypted ecs:InstanceTypeFamily ecs:InstanceType ecs:ImageOwnerId ecs:ImageSource ecs:NotSpecifySecurityGroupId ecs:LoginAsNonRoot ecs:IsSystemDiskByokEncrypted ecs:IsDiskByokEncrypted ecs:PasswordInherit ecs:PasswordCustomized ecs:IsSystemDiskEncrypted ecs:ImagePlatform ecs:IsDiskEncrypted ecs:SecurityHardeningMode ecs:AssociatePublicIpAddress vpc:CreateDefaultVpc ecs:SecurityEnhancementStrategy ecs:InstanceChargeType	Nenhum
ecs:DescribeInstancesFullStatus	DescribeInstancesFullStatus	list	All resources ``	Nenhum	Nenhum
ecs:DescribeInstanceVncUrl	DescribeInstanceVncUrl	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DetachKeyPair	DetachKeyPair	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` KeyPair `acs:ecs:{#regionId}:{#accountId}:keypair/{#keypairName}`	Nenhum	Nenhum
ecs:DeregisterManagedInstance	DeregisterManagedInstance	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:CopyImage	CopyImage	update	Image `acs:ecs:{#regionId}:{#accountId}:image/` *Image `acs:ecs:{#regionId}:{#accountId}:image/{#ImageId}`	Nenhum	Nenhum
ecs:DescribeAutoProvisioningGroups	DescribeAutoProvisioningGroups	get	All resources ``	Nenhum	Nenhum
ecs:ResizeDisk	ResizeDisk	update	*Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}`	Nenhum	Nenhum
ecs:CancelTask	CancelTask	update	All resources ``	Nenhum	Nenhum
ecs:DeleteInstance	DeleteInstance	delete	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifyHpcClusterAttribute	ModifyHpcClusterAttribute	update	All resources ``	Nenhum	Nenhum
ecs:ModifyDiagnosticMetricSet	ModifyDiagnosticMetricSet	update	All resources ``	Nenhum	Nenhum
ecs:RenewElasticityAssurances	RenewElasticityAssurances	create	*ElasticityAssurance `acs:ecs:{#regionId}:{#accountId}:elasticityassurance/{#ElasticityAssuranceId}`	Nenhum	Nenhum
ecs:DescribeSecurityGroupReferences	DescribeSecurityGroupReferences	get	*SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	Nenhum	Nenhum
ecs:DescribeSnapshots	DescribeSnapshots	get	Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/*` Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	Nenhum	Nenhum
ecs:CreateDeploymentSet	CreateDeploymentSet	create	DeploymentSet `acs:ecs:{#regionId}:{#accountId}:deploymentset/`	Nenhum	Nenhum
ecs:JoinSecurityGroup	JoinSecurityGroup	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` *SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}` NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:DescribePrefixListAttributes	DescribePrefixListAttributes	get	*PrefixList `acs:ecs:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	Nenhum	Nenhum
ecs:ModifyDedicatedHostClusterAttribute	ModifyDedicatedHostClusterAttribute	update	*ddhcluster `acs:ecs:{#regionId}:{#accountId}:ddhcluster/{#ddhclusterId}`	Nenhum	Nenhum
ecs:CreateImage	CreateImage	create	Image `acs:ecs:{#regionId}:{#accountId}:image/` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	Nenhum	Nenhum
ecs:DisableDiskEncryptionByDefault	DisableDiskEncryptionByDefault	none	All resources ``	Nenhum	Nenhum
ecs:ModifyInstanceClockOptions	ModifyInstanceClockOptions	update	All resources ``	Nenhum	Nenhum
ecs:DeleteLaunchTemplateVersion	DeleteLaunchTemplateVersion	delete	*LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/{#launchtemplateId}`	Nenhum	Nenhum
ecs:ModifyDedicatedHostsChargeType	ModifyDedicatedHostsChargeType	update	All resources ``	Nenhum	Nenhum
ecs:CancelImagePipelineExecution	CancelImagePipelineExecution	update	ImagePipeline `acs:ecs:{#regionId}:{#accountId}:imagepipeline/{#imagepipelineId}` ImagePipelineExecution `acs:ecs:{#regionId}:{#accountId}:imagepipelineexecution/{#executionId}`	Nenhum	Nenhum
ecs:CreateSnapshot	CreateSnapshot	create	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/*`	Nenhum	Nenhum
ecs:ModifyInstanceAttribute	ModifyInstanceAttribute	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#SecurityGroupId}`	ecs:tag ecs:PasswordCustomized	Nenhum
ecs:DescribeImages	DescribeImages	get	Image `acs:ecs:{#regionId}:{#accountId}:image/*` Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:DescribeReservedInstanceAutoRenewAttribute	DescribeReservedInstanceAutoRenewAttribute	get	*ReservedInstance `acs:ecs:{#regionId}:{#accountId}:reservedinstance/{#ReservedInstanceId}`	Nenhum	Nenhum
ecs:ReInitDisk	ReInitDisk	update	*Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}`	ecs:PasswordCustomized	Nenhum
ecs:DescribePrefixLists	DescribePrefixLists	get	*PrefixList `acs:ecs:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	Nenhum	Nenhum
ecs:CreateNetworkInterface	CreateNetworkInterface	create	NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/` SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}` VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}`	vpc:IsDefaultVSwitch vpc:IsDefaultVpc vpc:VPC vpc:tag vpc:tag vpc:tag	Nenhum
ecs:ModifyCommand	ModifyCommand	update	*Command `acs:ecs:{#regionId}:{#accountId}:command/{#commandId}`	Nenhum	Nenhum
ecs:EnableNetworkInterfaceQoS	EnableNetworkInterfaceQoS	update	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:DescribeCapacityReservationInstances	DescribeCapacityReservationInstances	get	*CapacityReservation `acs:ecs:{#regionId}:{#accountId}:capacityreservation/{#CapacityReservationId}`	Nenhum	Nenhum
ecs:ModifyInstanceAutoRenewAttribute	ModifyInstanceAutoRenewAttribute	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeNetworkInterfaces	DescribeNetworkInterfaces	get	NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:ModifyInstanceVpcAttribute	ModifyInstanceVpcAttribute	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` VSwitch `acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}`	vpc:tag vpc:VPC	Nenhum
ecs:DescribeDiagnosticMetricSets	DescribeDiagnosticMetricSets	get	All resources ``	Nenhum	Nenhum
ecs:UntagResources	UntagResources	delete	All resources ``	Nenhum	Nenhum
ecs:ReleaseDedicatedHost	ReleaseDedicatedHost	delete	*DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}`	Nenhum	Nenhum
ecs:ModifySnapshotAttribute	ModifySnapshotAttribute	update	*Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	Nenhum	Nenhum
ecs:CreateSimulatedSystemEvents	CreateSimulatedSystemEvents	create	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeUserData	DescribeUserData	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeDisksFullStatus	DescribeDisksFullStatus	list	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Disk `acs:ecs:{#regionId}:{#accountId}:disk/*`	Nenhum	Nenhum
ecs:DeleteLaunchTemplate	DeleteLaunchTemplate	delete	LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/{#launchtemplateId}`	Nenhum	Nenhum
ecs:DescribeInstances	DescribeInstances	list	Instance `acs:ecs:{#regionId}:{#accountId}:instance/*` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	ResourceOwner	Nenhum
ecs:DescribePortRangeListEntries	DescribePortRangeListEntries	list	*PortRangeList `acs:ecs:{#regionId}:{#accountId}:portrangelist/{#portRangeListId}`	Nenhum	Nenhum
ecs:ModifyInvocationAttribute	ModifyInvocationAttribute	update	*Invocation `acs:ecs:{#regionId}:{#accountId}:invocation/{#invocationId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:TagResources	TagResources	create	All resources ``	Nenhum	Nenhum
ecs:DescribeCloudAssistantSettings	DescribeCloudAssistantSettings	list	*ServiceSettings `acs:ecs:{#regionId}:{#accountId}:servicesettings/{#servicesettingId}`	Nenhum	Nenhum
ecs:ModifySecurityGroupPolicy	ModifySecurityGroupPolicy	update	*SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	Nenhum	Nenhum
ecs:DescribeImageFromFamily	DescribeImageFromFamily	get	All resources ``	Nenhum	Nenhum
ecs:DetachInstanceRamRole	DetachInstanceRamRole	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` Role `acs:ram:{#regionId}:{#accountId}:role/{#roleName}`	Nenhum	Nenhum
ecs:EndTerminalSession	EndTerminalSession	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}`	Nenhum	Nenhum
ecs:CreateDiagnosticReport	CreateDiagnosticReport	create	All resources ``	Nenhum	Nenhum
ecs:DescribeInstanceAutoRenewAttribute	DescribeInstanceAutoRenewAttribute	list	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/*`	Nenhum	Nenhum
ecs:DescribePlanMaintenanceWindows	DescribePlanMaintenanceWindows	list	All resources ``	Nenhum	Nenhum
ecs:DescribeLaunchTemplates	DescribeLaunchTemplates	get	LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/*` LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/{#launchtemplateId}`	Nenhum	Nenhum
ecs:AttachNetworkInterface	AttachNetworkInterface	update	NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeActivations	DescribeActivations	get	Activation `acs:ecs:{#regionId}:{#accountId}:activation/*` Activation `acs:ecs:{#regionId}:{#accountId}:activation/{#activationId}`	Nenhum	Nenhum
ecs:DescribeStorageCapacityUnits	DescribeStorageCapacityUnits	get	StorageCapacityUnit `acs:ecs:{#regionId}:{#accountId}:scu/*` StorageCapacityUnit `acs:ecs:{#regionId}:{#accountId}:scu/{#scuId}`	Nenhum	Nenhum
ecs:ModifyImageSharePermission	ModifyImageSharePermission	update	*Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:DescribeBandwidthLimitation	DescribeBandwidthLimitation	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:CreateActivation	CreateActivation	create	Activation `acs:ecs:{#regionId}:{#accountId}:activation/`	Nenhum	Nenhum
ecs:InvokeCommand	InvokeCommand	update	Command `acs:ecs:{#regionId}:{#accountId}:command/{#commandId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	ecs:CommandRunAs	Nenhum
ecs:DescribeHpcClusters	DescribeHpcClusters	get	HpcCluster `acs:ecs:{#regionId}:{#accountId}:hpc/`	Nenhum	Nenhum
ecs:DeleteAutoSnapshotPolicy	DeleteAutoSnapshotPolicy	delete	*AutoSnapshotPolicy `acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/{#SnapshotPolicyId}`	Nenhum	Nenhum
ecs:ImportKeyPair	ImportKeyPair	create	KeyPair `acs:ecs:{#regionId}:{#accountId}:keypair/`	Nenhum	Nenhum
ecs:DescribeInstanceHistoryEvents	DescribeInstanceHistoryEvents	get	All resources ``	Nenhum	Nenhum
ecs:CreateElasticityAssurance	CreateElasticityAssurance	create	ElasticityAssurance `acs:ecs:{#regionId}:{#accountId}:elasticityassurance/`	Nenhum	Nenhum
ecs:DetachNetworkInterface	DetachNetworkInterface	update	NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifySecurityGroupAttribute	ModifySecurityGroupAttribute	update	*SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	Nenhum	Nenhum
ecs:ModifyInstanceAttachmentAttributes	ModifyInstanceAttachmentAttributes	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ReleaseCapacityReservation	ReleaseCapacityReservation	delete	*CapacityReservation `acs:ecs:{#regionId}:{#accountId}:capacityreservation/{#CapacityReservationId}`	Nenhum	Nenhum
ecs:DeletePrefixList	DeletePrefixList	delete	*PrefixList `acs:ecs:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	Nenhum	Nenhum
ecs:ModifyStorageCapacityUnitAttribute	ModifyStorageCapacityUnitAttribute	update	*StorageCapacityUnit `acs:ecs:{#regionId}:{#accountId}:scu/{#scuId}`	Nenhum	Nenhum
ecs:AssignIpv6Addresses	AssignIpv6Addresses	create	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:RenewDedicatedHosts	RenewDedicatedHosts	update	*DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}`	Nenhum	Nenhum
ecs:DescribeDiskDefaultKMSKeyId	DescribeDiskDefaultKMSKeyId	get	DiskEncryptionDefaultConfig `acs:ecs:{#regionId}:{#accountId}:diskencryptiondefaultconfig/`	Nenhum	Nenhum
ecs:RunCommand	RunCommand	update	All resources ``	ecs:CommandRunAs	Nenhum
ecs:DescribeManagedInstances	DescribeManagedInstances	get	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:CreateImageComponent	CreateImageComponent	create	ImageComponent `acs:ecs:{#regionId}:{#accountId}:imagecomponent/`	Nenhum	Nenhum
ecs:StartImagePipelineExecution	StartImagePipelineExecution	update	ImagePipeline `acs:ecs:{#regionId}:{#accountId}:imagepipeline/{#imagepipelineId}` ImagePipelineExecution `acs:ecs:{#regionId}:{#accountId}:imagepipelineexecution/`	Nenhum	Nenhum
ecs:DescribeSnapshotMonitorData	DescribeSnapshotMonitorData	get	All resources ``	Nenhum	Nenhum
ecs:StopInstance	StopInstance	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DetachDisk	DetachDisk	update	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ReActivateInstances	ReActivateInstances	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:GetInstanceConsoleOutput	GetInstanceConsoleOutput	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeCapacityReservations	DescribeCapacityReservations	get	CapacityReservation `acs:ecs:{#regionId}:{#accountId}:capacityreservation/`	Nenhum	Nenhum
ecs:RevokeSecurityGroup	RevokeSecurityGroup	delete	*SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	ecs:tag ecs:tag ecs:tag	Nenhum
ecs:ResetDisks	ResetDisks	update	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	Nenhum	Nenhum
ecs:AttachKeyPair	AttachKeyPair	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` KeyPair `acs:ecs:{#regionId}:{#accountId}:keypair/{#keypairName}`	Nenhum	Nenhum
ecs:DescribeTaskAttribute	DescribeTaskAttribute	get	All resources ``	Nenhum	Nenhum
ecs:RebootInstance	RebootInstance	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifyDeploymentSetAttribute	ModifyDeploymentSetAttribute	update	*DeploymentSet `acs:ecs:{#regionId}:{#accountId}:deploymentset/{#DeploymentSetId}`	Nenhum	Nenhum
ecs:DeleteDeploymentSet	DeleteDeploymentSet	delete	*DeploymentSet `acs:ecs:{#regionid}:{#accountId}:deploymentset/{#deploymentSetId}`	Nenhum	Nenhum
ecs:CreateHpcCluster	CreateHpcCluster	create	HpcCluster `acs:ecs:{#regionId}:{#accountId}:hpc/`	Nenhum	Nenhum
ecs:DescribeReservedInstances	DescribeReservedInstances	get	ReservedInstance `acs:ecs:{#regionId}:{#accountId}:reservedinstance/*` ReservedInstance `acs:ecs:{#regionId}:{#accountId}:reservedinstance/{#reservedinstanceId}`	Nenhum	Nenhum
ecs:CreateKeyPair	CreateKeyPair	create	KeyPair `acs:ecs:{#regionId}:{#accountId}:keypair/`	Nenhum	Nenhum
ecs:DescribeDiagnosticMetrics	DescribeDiagnosticMetrics	get	All resources ``	Nenhum	Nenhum
ecs:DeleteHpcCluster	DeleteHpcCluster	delete	All resources ``	Nenhum	Nenhum
ecs:DescribeNetworkInterfacePermissions	DescribeNetworkInterfacePermissions	get	NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:DescribeInstanceAttribute	DescribeInstanceAttribute	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:CreateInstance	CreateInstance	create	All resources ``	vpc:VPC vpc:IsDefaultVSwitch vpc:IsDefaultVpc ecs:IsDiskEncrypted ecs:InstanceType ecs:InstanceTypeFamily ecs:ImageOwnerId ecs:ImageSource ecs:NotSpecifySecurityGroupId ecs:LoginAsNonRoot ecs:IsSystemDiskByokEncrypted ecs:IsDiskByokEncrypted ecs:PasswordInherit ecs:PasswordCustomized ecs:IsSystemDiskEncrypted ecs:ImagePlatform ecs:LoginAsNonRoot ecs:IsSystemDiskByokEncrypted ecs:IsDiskByokEncrypted ecs:PasswordInherit ecs:PasswordCustomized ecs:IsSystemDiskEncrypted ecs:ImagePlatform ecs:SecurityHardeningMode vpc:CreateDefaultVpc ecs:SecurityEnhancementStrategy ecs:AssociatePublicIpAddress ecs:InstanceChargeType	Nenhum
ecs:DeleteNetworkInterface	DeleteNetworkInterface	delete	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:JoinResourceGroup	JoinResourceGroup	update	All resources ``	Nenhum	Nenhum
ecs:ModifyAutoProvisioningGroup	ModifyAutoProvisioningGroup	update	*autoprovisioninggroup `acs:ecs:{#regionId}:{#accountId}:autoprovisioninggroup/{#autoprovisioninggroupId}`	Nenhum	ram:CreateServiceLinkedRole
ecs:DescribeInstanceAttachmentAttributes	DescribeInstanceAttachmentAttributes	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifyDiskDefaultKMSKeyId	ModifyDiskDefaultKMSKeyId	update	All resources ``	Nenhum	Nenhum
ecs:ModifyInstanceNetworkSpec	ModifyInstanceNetworkSpec	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	ecs:AssociatePublicIpAddress	Nenhum
ecs:DeleteSecurityGroup	DeleteSecurityGroup	delete	*SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	Nenhum	Nenhum
ecs:ModifyPortRangeList	ModifyPortRangeList	update	*PortRangeList `acs:ecs:{#regionId}:{#accountId}:portrangelist/{#portRangeListId}`	Nenhum	Nenhum
ecs:CreateLaunchTemplateVersion	CreateLaunchTemplateVersion	create	*LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/{#launchtemplateId}`	Nenhum	Nenhum
ecs:ModifyDedicatedHostAttribute	ModifyDedicatedHostAttribute	update	*DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}` DedicatedHostCluster `acs:ecs:{#regionId}:{#accountId}:ddhcluster/{#ddhclusterId}`	Nenhum	Nenhum
ecs:CreateDedicatedHostCluster	CreateDedicatedHostCluster	create	All resources ``	Nenhum	Nenhum
ecs:DetachClassicLinkVpc	DetachClassicLinkVpc	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}`	Nenhum	Nenhum
ecs:DeletePlanMaintenanceWindow	DeletePlanMaintenanceWindow	delete	All resources ``	Nenhum	Nenhum
ecs:ModifyReservedInstanceAttribute	ModifyReservedInstanceAttribute	update	*ReservedInstance `acs:ecs:{#regionId}:{#accountId}:reservedinstance/{#reservedinstanceId}`	Nenhum	Nenhum
ecs:DescribeDiagnosticReports	DescribeDiagnosticReports	get	All resources ``	Nenhum	Nenhum
ecs:ModifyReservedInstances	ModifyReservedInstances	update	*ReservedInstance `acs:ecs:{#regionId}:{#accountId}:reservedinstance/{#reservedinstanceId}`	Nenhum	Nenhum
ecs:DescribeElasticityAssuranceInstances	DescribeElasticityAssuranceInstances	get	*ElasticityAssurance `acs:ecs:{#regionId}:{#accountId}:elasticityassurance/{#ElasticityAssuranceId}`	Nenhum	Nenhum
ecs:CancelSimulatedSystemEvents	CancelSimulatedSystemEvents	update	All resources ``	Nenhum	Nenhum
ecs:InstallCloudAssistant	InstallCloudAssistant	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeSendFileResults	DescribeSendFileResults	get	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:CreatePlanMaintenanceWindow	CreatePlanMaintenanceWindow	create	All resources ``	Nenhum	Nenhum
ecs:AttachClassicLinkVpc	AttachClassicLinkVpc	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}`	vpc:tag	Nenhum
ecs:UnlockSnapshot	UnlockSnapshot	update	*Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#SnapshotId}`	Nenhum	Nenhum
ecs:ReportInstancesStatus	ReportInstancesStatus	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifyImageShareGroupPermission	ModifyImageShareGroupPermission	update	*Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:RevokeSecurityGroupEgress	RevokeSecurityGroupEgress	delete	*SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	ecs:tag ecs:tag ecs:tag	Nenhum
ecs:DescribeInstanceModificationPrice	DescribeInstanceModificationPrice	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}`	Nenhum	Nenhum
ecs:DescribeTasks	DescribeTasks	get	All resources ``	Nenhum	Nenhum
ecs:DeleteDiagnosticReports	DeleteDiagnosticReports	delete	All resources ``	Nenhum	Nenhum
ecs:DeleteDedicatedHostCluster	DeleteDedicatedHostCluster	delete	*DedicatedHostCluster `acs:ecs:{#regionId}:{#accountId}:ddhcluster/{#ddhclusterId}`	Nenhum	Nenhum
ecs:ModifyDedicatedHostAutoRenewAttribute	ModifyDedicatedHostAutoRenewAttribute	update	*DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}`	Nenhum	Nenhum
ecs:ModifyReservedInstanceAutoRenewAttribute	ModifyReservedInstanceAutoRenewAttribute	update	*ReservedInstance `acs:ecs:{#regionId}:{#accountId}:reservedinstance/{#ReservedInstanceId}`	Nenhum	Nenhum
ecs:ModifyDiskSpec	ModifyDiskSpec	update	*Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}`	Nenhum	Nenhum
ecs:AllocatePublicIpAddress	AllocatePublicIpAddress	create	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DisableNetworkInterfaceQoS	DisableNetworkInterfaceQoS	update	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:DescribeDiskEncryptionByDefaultStatus	DescribeDiskEncryptionByDefaultStatus	none	DiskEncryptionDefaultConfig `acs:ecs:{#regionId}:{#accountId}:diskencryptiondefaultconfig/`	Nenhum	Nenhum
ecs:DescribeAutoSnapshotPolicyAssociations	DescribeAutoSnapshotPolicyAssociations	get	AutoSnapshotPolicy `acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/{#snapshotpolicyId}` Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}`	Nenhum	Nenhum
ecs:ResetDisk	ResetDisk	update	Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	Nenhum	Nenhum
ecs:CreateNetworkInterfacePermission	CreateNetworkInterfacePermission	create	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:DescribeClassicLinkInstances	DescribeClassicLinkInstances	get	All resources ``	Nenhum	Nenhum
ecs:DeleteKeyPairs	DeleteKeyPairs	delete	*KeyPair `acs:ecs:{#regionId}:{#accountId}:keypair/{#keypairName}`	Nenhum	Nenhum
ecs:DescribeDedicatedHostClusters	DescribeDedicatedHostClusters	get	DedicatedHostCluster `acs:ecs:{#regionId}:{#accountId}:ddhcluster/{#ddhclusterId}` DedicatedHostCluster `acs:ecs:{#regionId}:{#accountId}:ddhcluster/*`	Nenhum	Nenhum
ecs:DescribePortRangeLists	DescribePortRangeLists	list	PortRangeList `acs:ecs:{#regionId}:{#accountId}:portrangelist/` PortRangeList `acs:ecs:{#regionId}:{#accountId}:portrangelist/{#portRangeListId}`	Nenhum	Nenhum
ecs:ListPluginStatus	ListPluginStatus	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}`	Nenhum	Nenhum
ecs:PurchaseReservedInstancesOffering	PurchaseReservedInstancesOffering	create	ReservedInstance `acs:ecs:{#regionId}:{#accountId}:reservedinstance/`	Nenhum	Nenhum
ecs:ModifyInstanceNetworkOptions	ModifyInstanceNetworkOptions	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}`	Nenhum	Nenhum
ecs:ListTagResources	ListTagResources	get	All resources ``	Nenhum	Nenhum
ecs:ModifyCloudAssistantSettings	ModifyCloudAssistantSettings	update	*ServiceSettings `acs:ecs:{#regionId}:{#accountId}:servicesettings/{#servicesettingId}`	Nenhum	Nenhum
ecs:ConvertNatPublicIpToEip	ConvertNatPublicIpToEip	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:CreatePrefixList	CreatePrefixList	create	All resources ``	Nenhum	Nenhum
ecs:CreateAutoProvisioningGroup	CreateAutoProvisioningGroup	create	All resources ``	Nenhum	ram:CreateServiceLinkedRole
ecs:CancelAutoSnapshotPolicy	CancelAutoSnapshotPolicy	update	*Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` AutoSnapshotPolicy `acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/{#snapshotpolicyId}`	Nenhum	Nenhum
ecs:AuthorizeSecurityGroup	AuthorizeSecurityGroup	create	All resources ``	ecs:SecurityGroupIpProtocols ecs:SecurityGroupSourceCidrIps	Nenhum
ecs:DeleteImagePipeline	DeleteImagePipeline	delete	*ImagePipeline `acs:ecs:{#regionId}:{#accountId}:imagepipeline/{#imagepipelineId}`	Nenhum	Nenhum
ecs:UnassignPrivateIpAddresses	UnassignPrivateIpAddresses	delete	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:ModifySnapshotCategory	ModifySnapshotCategory	update	*Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	ecs:tag	Nenhum
ecs:DescribeDeploymentSets	DescribeDeploymentSets	get	DeploymentSet `acs:ecs:{#regionId}:{#accountId}:deploymentset/`	Nenhum	Nenhum
ecs:CopySnapshot	CopySnapshot	create	*Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	Nenhum	Nenhum
ecs:DescribePortRangeListAssociations	DescribePortRangeListAssociations	list	*PortRangeList `acs:ecs:{#regionId}:{#accountId}:portrangelist/{#portRangeListId}`	Nenhum	Nenhum
ecs:CreateCommand	CreateCommand	create	Command `acs:ecs:{#regionId}:{#accountId}:command/`	Nenhum	Nenhum
ecs:CreateCapacityReservation	CreateCapacityReservation	create	CapacityReservation `acs:ecs:{#regionId}:{#accountId}:capacityreservation/`	Nenhum	Nenhum
ecs:CreateImagePipeline	CreateImagePipeline	create	ImagePipeline `acs:ecs:{#regionId}:{#accountId}:imagepipeline/`	Nenhum	ram:CreateServiceLinkedRole
ecs:CreateDiagnosticMetricSet	CreateDiagnosticMetricSet	create	All resources ``	Nenhum	Nenhum
ecs:CreateDisk	CreateDisk	create	Disk `acs:ecs:{#regionId}:{#accountId}:disk/*` Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}` Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#snapshotId}`	ecs:IsDiskEncrypted ecs:IsDiskByokEncrypted	Nenhum
ecs:UnassignIpv6Addresses	UnassignIpv6Addresses	delete	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:DescribeImageSharePermission	DescribeImageSharePermission	get	*Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:SendFile	SendFile	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DeleteImageComponent	DeleteImageComponent	delete	*ImageComponent `acs:ecs:{#regionId}:{#accountId}:imagecomponent/{#imagecomponentId}`	Nenhum	Nenhum
ecs:DescribeAutoProvisioningGroupInstances	DescribeAutoProvisioningGroupInstances	get	*AutoProvisioningGroup `acs:ecs:{#regionId}:{#accountId}:autoprovisioninggroup/{#autoprovisioninggroupId}`	Nenhum	Nenhum
ecs:ModifyAutoSnapshotPolicyEx	ModifyAutoSnapshotPolicyEx	update	*Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/{#autoSnapshotPolicyId}`	Nenhum	Nenhum
ecs:ModifyPlanMaintenanceWindow	ModifyPlanMaintenanceWindow	update	All resources ``	Nenhum	Nenhum
ecs:StartInstances	StartInstances	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeInstanceMaintenanceAttributes	DescribeInstanceMaintenanceAttributes	get	All resources ``	Nenhum	Nenhum
ecs:ModifySecurityGroupRule	ModifySecurityGroupRule	update	All resources ``	ecs:SecurityGroupIpProtocols ecs:SecurityGroupSourceCidrIps	Nenhum
ecs:DescribeLockedSnapshots	DescribeLockedSnapshots	list	Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/*` Snapshot `acs:ecs:{#regionId}:{#accountId}:snapshot/{#SnapshotId}`	Nenhum	Nenhum
ecs:CreateSnapshotGroup	CreateSnapshotGroup	create	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#DiskId}`	Nenhum	Nenhum
ecs:ExportImage	ExportImage	update	*Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:DeleteDisk	DeleteDisk	delete	*Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}`	Nenhum	Nenhum
ecs:AcceptInquiredSystemEvent	AcceptInquiredSystemEvent	update	All resources ``	Nenhum	Nenhum
ecs:DescribeDiskMonitorData	DescribeDiskMonitorData	get	*Disk `acs:ecs:{#regionId}:{#accountId}:disk/{#diskId}`	Nenhum	Nenhum
ecs:DescribeImagePipelineExecutions	DescribeImagePipelineExecutions	get	ImagePipelineExecution `acs:ecs:{#regionId}:{#accountId}:imagepipelineexecution/` ImagePipelineExecution `acs:ecs:{#regionId}:{#accountId}:imagepipelineexecution/{#ImagePipelineExecutionId}` ImagePipeline `acs:ecs:{#regionId}:{#accountId}:imagepipeline/` ImagePipeline `acs:ecs:{#regionId}:{#accountId}:imagepipeline/{#ImagePipelineId}`	Nenhum	Nenhum
ecs:ModifyLaunchTemplateDefaultVersion	ModifyLaunchTemplateDefaultVersion	update	LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/{#launchtemplateId}`	Nenhum	Nenhum
ecs:ModifyPrefixList	ModifyPrefixList	update	*PrefixList `acs:ecs:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}`	Nenhum	Nenhum
ecs:CreateAutoSnapshotPolicy	CreateAutoSnapshotPolicy	create	AutoSnapshotPolicy `acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/`	Nenhum	Nenhum
ecs:AuthorizeSecurityGroupEgress	AuthorizeSecurityGroupEgress	create	All resources ``	ecs:SecurityGroupIpProtocols ecs:SecurityGroupSourceCidrIps	Nenhum
ecs:CreateSecurityGroup	CreateSecurityGroup	create	SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/` *VPC `acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}`	Nenhum	Nenhum
ecs:DescribeSecurityGroupAttribute	DescribeSecurityGroupAttribute	get	*SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	ecs:tag	Nenhum
ecs:DescribeTerminalSessions	DescribeTerminalSessions	list	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}`	Nenhum	Nenhum
ecs:DescribeSnapshotLinks	DescribeSnapshotLinks	get	All resources ``	Nenhum	Nenhum
ecs:DescribeAutoProvisioningGroupHistory	DescribeAutoProvisioningGroupHistory	get	All resources ``	Nenhum	Nenhum
ecs:ModifyElasticityAssuranceAutoRenewAttribute	ModifyElasticityAssuranceAutoRenewAttribute	update	*ElasticityAssurance `acs:ecs:{#regionId}:{#accountId}:elasticityassurance/{#ElasticityAssuranceId}`	Nenhum	Nenhum
ecs:LeaveSecurityGroup	LeaveSecurityGroup	update	Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` *SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}` NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:DescribeInstanceMonitorData	DescribeInstanceMonitorData	get	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifyNetworkInterfaceAttribute	ModifyNetworkInterfaceAttribute	update	NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}` SecurityGroup `acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}`	Nenhum	Nenhum
ecs:DescribeSnapshotGroups	DescribeSnapshotGroups	get	SnapshotGroup `acs:ecs:{#regionId}:{#accountId}:snapshotgroup/*` SnapshotGroup `acs:ecs:{#regionId}:{#accountId}:snapshotgroup/{#snapshotgroupId}`	Nenhum	Nenhum
ecs:StartTerminalSession	StartTerminalSession	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	ecs:SessionStartAs	Nenhum
ecs:StartInstance	StartInstance	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:AssignPrivateIpAddresses	AssignPrivateIpAddresses	create	*NetworkInterface `acs:ecs:{#regionId}:{#accountId}:eni/{#eniId}`	Nenhum	Nenhum
ecs:ModifyImageAttribute	ModifyImageAttribute	update	*Image `acs:ecs:{#regionId}:{#accountId}:image/{#imageId}`	Nenhum	Nenhum
ecs:DeleteDiagnosticMetricSets	DeleteDiagnosticMetricSets	delete	All resources ``	Nenhum	Nenhum
ecs:DescribeSnapshotsUsage	DescribeSnapshotsUsage	get	All resources ``	Nenhum	Nenhum
ecs:CreatePortRangeList	CreatePortRangeList	create	PortRangeList `acs:ecs:{#regionId}:{#accountId}:portrangelist/`	Nenhum	Nenhum
ecs:DescribeDedicatedHosts	DescribeDedicatedHosts	get	DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/*` DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}`	Nenhum	Nenhum
ecs:DescribeLaunchTemplateVersions	DescribeLaunchTemplateVersions	list	LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/*` LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/{#launchtemplateId}`	Nenhum	Nenhum
ecs:OpenSnapshotService	OpenSnapshotService	create	All resources. ``	Nenhum	Nenhum
ecs:DescribeAccountAttributes	DescribeAccountAttributes	get	All resources. ``	Nenhum	Nenhum
ecs:CreateLaunchTemplate	CreateLaunchTemplate	create	LaunchTemplate `acs:ecs:{#regionId}:{#accountId}:launchtemplate/`	Nenhum	Nenhum
ecs:ModifyElasticityAssurance	ModifyElasticityAssurance	update	*ElasticityAssurance `acs:ecs:{#regionId}:{#accountId}:elasticityassurance/{#ElasticityAssuranceId}`	Nenhum	Nenhum
ecs:DescribeDedicatedHostAutoRenew	DescribeDedicatedHostAutoRenew	get	*DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}`	Nenhum	Nenhum
ecs:ModifyInstanceMaintenanceAttributes	ModifyInstanceMaintenanceAttributes	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeRenewalPrice	DescribeRenewalPrice	get	DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}` Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DeletePortRangeList	DeletePortRangeList	delete	*PortRangeList `acs:ecs:{#regionId}:{#accountId}:portrangelist/{#portRangeListId}`	Nenhum	Nenhum
ecs:RedeployInstance	RedeployInstance	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:DescribeImagePipelines	DescribeImagePipelines	get	ImagePipeline `acs:ecs:{#regionId}:{#accountId}:imagepipeline/` *ImagePipeline `acs:ecs:{#regionId}:{#accountId}:imagepipeline/{#imagepipelineId}`	Nenhum	Nenhum
ecs:PurchaseStorageCapacityUnit	PurchaseStorageCapacityUnit	create	StorageCapacityUnit `acs:ecs:{#regionId}:{#accountId}:scu/`	Nenhum	Nenhum
ecs:ModifyManagedInstance	ModifyManagedInstance	update	*Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}`	Nenhum	Nenhum
ecs:ModifyInstanceDeployment	ModifyInstanceDeployment	update	DedicatedHost `acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId}` *Instance `acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}` DedicatedHostCluster `acs:ecs:{#regionId}:{#accountId}:ddhcluster/{#ddhClusterId}`	Nenhum	Nenhum
ecs:ResetDiskDefaultKMSKeyId	ResetDiskDefaultKMSKeyId	none	All resources. ``	Nenhum	Nenhum
vpc:ModifyEipAddressAttribute	ModifyEipAddressAttribute	update	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	Nenhum	Nenhum
vpc:DeleteBandwidthPackage	DeleteBandwidthPackage	delete	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}`	Nenhum	Nenhum
vpc:DescribeBandwidthPackages	DescribeBandwidthPackages	get	All resources. ``	Nenhum	Nenhum
vpc:RemoveBandwidthPackageIps	RemoveBandwidthPackageIps	delete	*BandwidthPackage `acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}`	Nenhum	Nenhum
vpc:DescribeEipAddresses	DescribeEipAddresses	get	*Address `acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}`	Nenhum	Nenhum

Resource

A tabela a seguir lista os recursos definidos por Elastic Compute Service. Especifique-os no elemento Resource das instruções de política RAM para conceder permissões para operações específicas. Eles são identificados de forma exclusiva por ARNs. Formato: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: A sigla do serviço da Alibaba Cloud, que indica a nuvem pública da Alibaba Cloud.
{#ramcode}: O código usado no RAM para indicar um serviço da Alibaba Cloud.
{#regionId}: O ID da região. Se o recurso abrange todas as regiões, defina-o como um asterisco (*).
{#accountId}: O ID da conta da Alibaba Cloud. Se o recurso abrange todas as contas da Alibaba Cloud, defina-o como um asterisco (*).
{#resourceType}: O identificador de recurso definido pelo serviço. Suporta uma estrutura hierárquica, semelhante a um caminho de arquivo. Se a instrução abrange recursos globais, defina-o como um asterisco (*).

Tipo de recurso	ARN
Disk	acs:ecs:{#regionId}:{#accountId}:disk/{#diskId} acs:ecs:{#regionId}:{#accountId}:disk/* acs:ecs:{#regionId}:{#accountId}:disk/{#SourceDiskId}
Instance	acs:ecs:{#regionId}:{#accountId}:instance/* acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}
ElasticityAssurance	acs:ecs:{#regionId}:{#accountId}:elasticityassurance/* acs:ecs:{#regionId}:{#accountId}:elasticityassurance/{#ElasticityAssuranceId}
Image	acs:ecs:{#regionId}:{#accountId}:image/* acs:ecs:{#regionId}:{#accountId}:image/{#imageId}
Snapshot	acs:ecs:{#regionId}:{#accountId}:snapshot/{#SnapshotId} acs:ecs:{#regionId}:{#accountId}:snapshot/* acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/{#autoSnapshotPolicyId} acs:ecs::{#accountId}:snapshot/*
CapacityReservation	acs:ecs:{#regionId}:{#accountId}:capacityreservation/{#CapacityReservationId} acs:ecs:{#regionId}:{#accountId}:capacityreservation/*
AutoProvisioningGroup	acs:ecs:{#regionId}:{#accountId}:autoprovisioninggroup/{#autoprovisioninggroupId} acs:ecs:{#regionId}:{#accountId}:autoprovisioninggroup/*
activation	acs:ecs:{#regionId}:{#accountId}:activation/{#activationId}
SecurityGroup	acs:ecs:{#regionId}:{#accountId}:securitygroup/* acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}
DedicatedHost	acs:ecs:{#regionId}:{#accountId}:ddh/{#ddhId} acs:ecs:{#regionId}:{#accountId}:ddh/*
PortRangeList	acs:ecs:{#regionId}:{#accountId}:portrangelist/* acs:ecs:{#regionId}:{#accountId}:portrangelist/{#portRangeListId}
Command	acs:ecs:{#regionId}:{#accountId}:command/{#commandId} acs:ecs:{#regionId}:{#accountId}:command/*
Vsc	acs:ecs:{#regionId}:{#accountId}:vsc/* acs:ecs:{#regionId}:{#accountId}:vsc/{#VscId}
NetworkInterface	acs:ecs:{#regionId}:{#accountId}:eni/{#eniId} acs:ecs:{#regionId}:{#accountId}:eni/*
AutoSnapshotPolicy	acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/* acs:ecs:{#regionId}:{#accountId}:snapshotpolicy/{#snapshotpolicyId}
Role	acs:ram:{#regionId}:{#accountId}:role/{#roleName}
KeyPair	acs:ecs:{#regionId}:{#accountId}:keypair/{#keypairName} acs:ecs:{#regionId}:{#accountId}:keypair/* acs:ecs:{#regionId}:{#accountId}:keypair/{#keypairId}
SnapshotGroup	acs:ecs:{#regionId}:{#accountId}:snapshotgroup/{#SnapshotGroupId} acs:ecs:{#regionId}:{#accountId}:snapshotgroup/*
PrefixList	acs:ecs:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
ReservedInstance	acs:ecs:{#regionId}:{#accountId}:reservedinstance/{#ReservedInstanceId} acs:ecs:{#regionId}:{#accountId}:reservedinstance/*
Activation	acs:ecs:{#regionId}:{#accountId}:activation/{#ActivationId} acs:ecs:{#regionId}:{#accountId}:activation/*
ImageComponent	acs:ecs:{#regionId}:{#accountId}:imagecomponent/* acs:ecs:{#regionId}:{#accountId}:imagecomponent/{#imagecomponentId}
VSwitch	acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId} acs:vpc:{#regionId}:{#accountId}:vswitch/*
HpcCluster	acs:ecs:{#regionId}:{#accountId}:hpc/{#hpcClusterId} acs:ecs:{#regionId}:{#accountId}:hpc/*
DeploymentSet	acs:ecs:{#regionId}:{#accountId}:deploymentset/* acs:ecs:{#regionId}:{#accountId}:deploymentset/{#DeploymentSetId}
ddhcluster	acs:ecs:{#regionId}:{#accountId}:ddhcluster/{#ddhclusterId} acs:ecs:{#regionId}:{#accountId}:ddhcluster/*
LaunchTemplate	acs:ecs:{#regionId}:{#accountId}:launchtemplate/{#launchtemplateId} acs:ecs:{#regionId}:{#accountId}:launchtemplate/*
ImagePipeline	acs:ecs:{#regionId}:{#accountId}:imagepipeline/{#imagepipelineId} acs:ecs:{#regionId}:{#accountId}:imagepipeline/*
ImagePipelineExecution	acs:ecs:{#regionId}:{#accountId}:imagepipelineexecution/{#executionId} acs:ecs:{#regionId}:{#accountId}:imagepipelineexecution/{#ImagePipelineExecutionId} acs:ecs:{#regionId}:{#accountId}:imagepipelineexecution/*
DedicatedHostCluster	acs:ecs:{#regionId}:{#accountId}:ddhcluster/{#ddhclusterId} acs:ecs:{#regionId}:{#accountId}:ddhcluster/*
Invocation	acs:ecs:{#regionId}:{#accountId}:invocation/{#invocationId}
ServiceSettings	acs:ecs:{#regionId}:{#accountId}:servicesettings/{#servicesettingId}
StorageCapacityUnit	acs:ecs:{#regionId}:{#accountId}:scu/* acs:ecs:{#regionId}:{#accountId}:scu/{#scuId}
DiskEncryptionDefaultConfig	acs:ecs:{#regionId}:{#accountId}:diskencryptiondefaultconfig/*
autoprovisioninggroup	acs:ecs:{#regionId}:{#accountId}:autoprovisioninggroup/{#autoprovisioninggroupId}
VPC	acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}
Fleet	acs:ecs:{#regionId}:{#accountId}:fleet/*
Address	acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
BandwidthPackage	acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId} acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/*

Condition

A tabela a seguir lista as chaves de condição em nível de produto definidas por Elastic Compute Service. Você também pode usar as Chaves de condição comuns da Alibaba Cloud. Especifique essas chaves no elemento Condition das instruções de política RAM para definir regras de autorização granulares. Na chave de condição, especifique os valores de condição no elemento Condition_value da política.

Cada chave de condição possui um tipo de dado específico, como string, número, booleano ou endereço IP. O tipo de dado determina quais operadores condicionais podem ser usados para comparar os valores da solicitação com os valores da política. Você deve especificar os operadores condicionais compatíveis com o tipo de dado da chave de condição. Operadores incompatíveis tornarão a política inválida. Consulte Operador de condição para combinações válidas.

Chave de condição	Descrição	Tipo de dado
ecs:SecurityEnhancementStrategy	Especifica se o reforço de segurança está ativado. Valores válidos: Active Deactive	String
vpc:CreateDefaultVpc	Especifica se uma VPC padrão pode ser criada. Valores válidos: true false	Boolean
ecs:AssociatePublicIpAddress	Especifica se endereços IP públicos podem ser atribuídos a recursos durante a criação de recursos ou alterações de configuração. Este parâmetro indica se os recursos podem ser configurados com largura de banda pública maior que 0 Mbit/s. Valores válidos: true false	Boolean
ecs:PasswordInherit	Especifica se deve ser usada a senha predefinida na imagem. Valores válidos: true false	Boolean
ecs:RamRoleName	O nome da função RAM da instância especificado quando a instância é criada.	String
vpc:IsDefaultVSwitch	Especifica se o vSwitch é o vSwitch padrão e se o vSwitch padrão pode ser usado. Valores válidos: true false	Boolean
ecs:IsSystemDiskEncrypted	Especifica se o disco do sistema está criptografado.	String
ecs:PasswordCustomized	Especifica se uma senha personalizada é usada. Valores válidos: true false	Boolean
ecs:CommandRunAs	O usuário do sistema operacional que executa os comandos do Cloud Assistant.	String
ecs:SecurityGroupSourceCidrIps	O bloco CIDR IPv4 de origem para o qual o grupo de segurança concede permissões de acesso.	Array
ecs:InstanceTypeFamily	A família da instância.	String
ecs:SecurityGroupIpProtocols	O protocolo da camada de transporte ativado pelo grupo de segurança.	Array
vpc:IsDefaultVpc	Especifica se a VPC é a VPC padrão. Valores válidos: true false	Boolean
ecs:IsDiskByokEncrypted	Especifica se o disco de dados está criptografado usando a chave mestra.	String
ecs:InstanceType	O tipo de instância.	String
ecs:NotSpecifySecurityGroupId	Especifica se nenhum ID de grupo de segurança é especificado. Valores válidos: true false	Boolean
ecs:ImagePlatform	O tipo de sistema operacional da imagem. Valores válidos: linux windows	String
ecs:NotSpecifyRamRoleName	Especifica se RamRoleName não é especificado. Valores válidos: true false	Boolean
ecs:IsSystemDiskByokEncrypted	Especifica se o disco do sistema está criptografado usando a chave mestra.	String
ecs:SessionStartAs	Os usuários que podem usar o recurso de gerenciamento de sessões.	String
ecs:ImageSource	A origem da imagem. Valores válidos: System Custom Marketplace	String
ecs:SecurityHardeningMode	Especifica se o modo reforçado (IMDSv2) é necessário quando os metadados da instância são acessados. Valores válidos: true false	Boolean
vpc:VPC	Descrição: O ARN do recurso VPC. Exemplo: acs:vpc:cn-shanghai:1234567890:vpc/vpc-abc0123efg4567***	String
ecs:IsDiskEncrypted	Especifica se o disco de dados está criptografado.	String
ecs:InstanceChargeType	O método de cobrança da instância. Valores válidos: PrePaid PostPaid	String
ecs:ImageOwnerId	O UID do proprietário da imagem.	String
ecs:LoginAsNonRoot	Especifica se o login na instância é realizado por um usuário não root. Valores válidos: true false	Boolean

Como criar políticas RAM personalizadas?

Você pode criar políticas personalizadas e concedê-las a usuários RAM, grupos de usuários RAM ou funções RAM. Para instruções, consulte: