A AliyunServiceRolePolicyForAmqpSTAROps é a política de autorização dedicada a uma função vinculada a service. O sistema anexa essa política automaticamente à função de service durante a criação. Assim, a função vinculada a service obtém autorização para acessar outros services cloud. O service relevante da Alibaba Cloud atualize esta política. Não anexe esta política a nenhuma identidade RAM que não seja uma função vinculada a service.
Detalhes da política
Tipo: política de sistema de service
Data de criação: 23 de junho de 2026 às 16:26:50
Data de atualização: 14 de outubro de 2026 às 15:53:00
Versão atual: v6
Conteúdo da política
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"cms:CreateAddonRelease"
],
"Resource": [
"acs:cms:*:*:integrationpolicy/*/addonrelease/*"
]
},
{
"Effect": "Allow",
"Action": [
"cms:CreateCloudResource",
"cms:GetCloudResource"
],
"Resource": [
"acs:cms:*:*:cloudresource"
]
},
{
"Effect": "Allow",
"Action": [
"cms:CreateEntityStore"
],
"Resource": [
"acs:cms:*:*:workspace/*/entitystore"
]
},
{
"Effect": "Allow",
"Action": [
"cms:CreateIntegrationPolicy"
],
"Resource": [
"*"
]
},
{
"Effect": "Allow",
"Action": [
"starops:CreateChat",
"starops:CreateThread",
"starops:GetThread",
"starops:GetThreadData",
"starops:ListThreads",
"starops:UpdateThread",
"starops:DeleteThread"
],
"Resource": [
"acs:starops:*:*:digitalemployee/*",
"acs:starops:*:*:digitalemployee/*/thread/*"
]
},
{
"Effect": "Allow",
"Action": [
"starops:CreateMission",
"starops:GetMission",
"starops:ListMissions",
"starops:ListTasks",
"starops:UpdateMission",
"starops:DeleteMission"
],
"Resource": [
"acs:starops:*:*:mission/*"
]
},
{
"Effect": "Allow",
"Action": [
"starops:GetArtifact",
"starops:ListArtifacts"
],
"Resource": [
"acs:starops:*:*:digitalemployee/*/artifact/*"
]
},
{
"Effect": "Allow",
"Action": [
"cms:CreateChat",
"cms:CreateThread",
"cms:GetThread",
"cms:GetThreadData",
"cms:ListThreads",
"cms:UpdateThread",
"cms:DeleteThread"
],
"Resource": [
"acs:cms:*:*:digitalemployee/*",
"acs:cms:*:*:digitalemployee/*/thread/*"
]
},
{
"Effect": "Allow",
"Action": [
"cms:CreateMission",
"cms:GetMission",
"cms:ListMissions",
"cms:ListTasks",
"cms:UpdateMission",
"cms:DeleteMission"
],
"Resource": [
"acs:cms:*:*:mission/*"
]
},
{
"Effect": "Allow",
"Action": [
"cms:GetArtifact",
"cms:ListArtifacts"
],
"Resource": [
"acs:cms:*:*:digitalemployee/*/artifact/*"
]
},
{
"Effect": "Allow",
"Action": [
"cms:ListWorkspaces",
"cms:PutWorkspace",
"cms:GetWorkspace",
"cms:GetEntityStore",
"cms:GetEntityStoreData"
],
"Resource": [
"acs:cms:*:*:workspace/*",
"acs:cms:*:*:entitystore/*",
"acs:cms:*:*:entitystoredata/*"
]
},
{
"Effect": "Allow",
"Action": [
"log:GetProject",
"log:ListLogStores",
"log:GetLogStoreLogs",
"log:GetLogStore",
"log:GetMetricStore",
"log:ListMetricStores"
],
"Resource": [
"acs:log:*:*:project/*"
]
},
{
"Effect": "Allow",
"Action": "ram:PassRole",
"Resource": "acs:ram::*:role/AliyunServiceRoleForSTAROps",
"Condition": {
"StringEquals": {
"acs:Service": "operation-platform.aliyuncs.com"
}
}
},
{
"Effect": "Allow",
"Action": "ram:PassRole",
"Resource": "acs:ram::*:role/AliyunServiceRoleForSTAROps",
"Condition": {
"StringEquals": {
"acs:Service": "cloudmonitor.aliyuncs.com"
}
}
},
{
"Effect": "Allow",
"Action": "ram:PassRole",
"Resource": "acs:ram::*:role/aliyunserviceroleforstarops"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "starops.amqp.aliyuncs.com"
}
}
}
]
}