Todos os produtos
Search
Central de documentação

Security Center:Autorização RAM

Última atualização: Nov 05, 2026

O Resource Access Management (RAM) é um serviço fornecido pela Alibaba Cloud para gerenciar identidades de usuários e permissões de acesso a recursos. O uso do RAM ajuda a evitar o compartilhamento das chaves da sua conta da Alibaba Cloud com outros usuários e permite conceder aos usuários o acesso com privilégio mínimo. O RAM usa políticas de permissão para definir autorizações. Este tópico descreve a estrutura geral de uma política RAM e os elementos de instrução de política (Action, Resource e Condition) definidos por Security Center para políticas de permissão RAM. O código RAM (RamCode) para Security Center é threatdetection,yundun-aegis,yundun-sas , e a granularidade de autorização suportada é RESOURCE .

Estrutura geral de uma política

As políticas de permissão suportam o formato JSON com a seguinte estrutura geral:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

A lista a seguir descreve os campos da política:

  • Version: Especifica o número da versão da política. É fixo em 1.

  • Statement:

    • Effect: Especifica o resultado da autorização. Valores válidos: Allow e Deny.

    • Action: Especifica uma ou mais operações que são permitidas ou negadas.

    • Resource: Especifica os objetos específicos afetados pelas operações. Você pode usar os Alibaba Cloud Resource Names (ARNs) para descrever recursos específicos.

    • Condition: Especifica as condições para que a autorização entre em vigor. Este campo é opcional.

      • Operador de condição: Especifica os operadores condicionais. Diferentes tipos de condições suportam diferentes operadores condicionais.

      • Condition_key: Especifica as chaves de condição.

      • Condition_value: Especifica os valores de condição.

Action

A tabela a seguir lista as ações definidas por Security Center. As colunas da tabela são descritas a seguir:

  • Action: As ações podem ser usadas no elemento Action das instruções de política de permissão RAM para conceder permissões para realizar a operação.

  • API: A API que você pode chamar para realizar a ação.

  • Nível de acesso: O nível de acesso predefinido concedido para cada API. Valores válidos: create, list, get, update e delete.

  • Tipo de recurso: O tipo de recurso que suporta autorização para realizar a ação. Indica se a ação suporta permissão em nível de recurso. O recurso especificado deve ser compatível com a ação. Caso contrário, a política será ineficaz.

    • Para APIs com permissões em nível de recurso, os tipos de recursos obrigatórios são marcados com um asterisco (*). Especifique o ARN correspondente no elemento Resource da política.

    • Para APIs sem permissões em nível de recurso, é exibido como Todos os Recursos. Use um asterisco (*) no elemento Resource da política.

  • Chave de condição: As chaves de condição definidas pelo serviço. A chave permite controle granular, aplicando-se apenas a ações ou a ações associadas a recursos específicos. Além das chaves de condição específicas do serviço, a Alibaba Cloud fornece um conjunto de chaves de condição comuns aplicáveis a todos os serviços integrados ao RAM. Para mais informações, consulte Chaves de condição comuns.

  • Ação dependente: As ações dependentes necessárias para executar a ação. Para concluir a ação, o usuário RAM ou a função RAM deve ter permissões para realizar todas as ações dependentes.

Action

API

Nível de acesso

Tipo de recurso

Chave de condição

Ação dependente

yundun-aegis:DescribeReportExport DescribeReportExport get

*All Resource

*

Nenhum Nenhum
yundun-aegis:ModifyStartVulScan ModifyStartVulScan update

*All Resource

*

Nenhum Nenhum
yundun-aegis:GetLastOnceTaskInfo GetLastOnceTaskInfo get

*All Resource

*

Nenhum Nenhum
yundun-aegis:DescribeNoticeConfig DescribeNoticeConfig get

*All Resource

*

Nenhum Nenhum
yundun-aegis:DescribeVulNumStatistics DescribeVulNumStatistics get

*All Resource

*

Nenhum Nenhum
yundun-aegis:DescribeCustomizeReportConfigDetail DescribeCustomizeReportConfigDetail get

*All Resource

*

Nenhum Nenhum
yundun-aegis:OperateVuls OperateVuls none

*All Resource

*

Nenhum Nenhum
yundun-aegis:GenerateOnceTask GenerateOnceTask none

*All Resource

*

Nenhum Nenhum
yundun-aegis:CopyCustomizeReportConfig CopyCustomizeReportConfig get

*All Resource

*

Nenhum Nenhum
yundun-aegis:GetOnceTaskResultInfo GetOnceTaskResultInfo get

*All Resource

*

Nenhum Nenhum
yundun-aegis:DescribeAccesskeyLeakList DescribeAccesskeyLeakList get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdatePublishGraySwitch UpdatePublishGraySwitch update

*All Resource

*

Nenhum Nenhum
yundun-sas:EnableServiceAccessResourceDirectory EnableServiceAccessResourceDirectory create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSoarStrategyParam DescribeSoarStrategyParam get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBackupMachineStatus DescribeBackupMachineStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:RollbackSuspEventQuaraFile RollbackSuspEventQuaraFile none

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteK8sAccessInfo DeleteK8sAccessInfo delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeGroupedTags DescribeGroupedTags get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetInstanceAuthRange GetInstanceAuthRange get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListInterceptionHistory ListInterceptionHistory get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVpcHoneyPotCriteria DescribeVpcHoneyPotCriteria get

*HoneyPot

acs:yundun-sas:{#regionId}:{#accountId}:honeypot/*

Nenhum Nenhum
yundun-sas:DescribeAppNetworkFromSnapshot GetAppNetwork get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCloudProductFieldStatistics DescribeCloudProductFieldStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyContainerDefenseRule ModifyContainerDefenseRule update

*ContainerDefenseRule

acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}

Nenhum Nenhum
yundun-sas:DescribeSuspEventQuaraFiles DescribeSuspEventQuaraFiles get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeConcernNecessity DescribeConcernNecessity get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeChartData DescribeChartData none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyPortItem DescribePropertyPortItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateHoneypot UpdateHoneypot update

*HoneyPot

acs:yundun-sas:{#regionId}:{#accountId}:honeypot/{#HoneypotId}

Nenhum Nenhum
yundun-sas:ListCheckInstanceResult ListCheckInstanceResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateCheck SubmitOperationTask create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSoarSubscribedStrategy DescribeSoarSubscribedStrategy get

*All Resource

*

Nenhum Nenhum
yundun-sas:EnableCustomBlockRecord EnableCustomBlockRecord update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAutoDelConfig DescribeAutoDelConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAssetSelectionConfig GetAssetSelectionConfig get

*AssetSelectionConfig

acs:yundun-sas:{#regionId}:{#accountId}:assetselectionconfig/{#BusinessType}

Nenhum Nenhum
yundun-sas:ModifyAntiBruteForceRule ModifyAntiBruteForceRule update

*AntiBruteForceRule

acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}

Nenhum Nenhum
yundun-sas:GetFileUploadLimit GetFileUploadLimit get

*FileUploadLimit

acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit

Nenhum Nenhum
yundun-sas:DescribeRiskListCheckResult DescribeRiskListCheckResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSoarStrategies DescribeSoarStrategies get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeInstallCode DescribeInstallCode get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyServerlessAuthToMachine ModifyServerlessAuthToMachine update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteMaliciousNote DeleteMaliciousNote delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUuidsByAppId ListUuidsByAppId list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSuspEventDetail DescribeSuspEventDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:FixCheckWarnings FixCheckWarnings none

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteContainerPluginRule DeleteContainerPluginRule delete

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateTargetListByBatch UpdateTargetListByBatch update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWhiteListProcess DescribeWhiteListProcess get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateOssScanConfig UpdateOssScanConfig update

*OssScanConfig

acs:yundun-sas:*:{#accountId}:ossscanconfig/{#ConfigId}

Nenhum Nenhum
yundun-sas:DeleteBinarySecurityPolicy DeleteBinarySecurityPolicy delete

*All Resource

*

Nenhum Nenhum
yundun-sas:GetPublishCron GetPublishCron get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetOpaClusterBaseLineList GetOpaClusterBaseLineList get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotEvents ListHoneypotEvents list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVpcList DescribeVpcList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyPortDetail DescribePropertyPortDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListPrivateRegistryList ListPrivateRegistryList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCustomizedDictUploadInfo DescribeCustomizedDictUploadInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCustomizedDict DescribeCustomizedDict get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListUnknownThreatDetectMachine ListUnknownThreatDetectMachine list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAttackTypeList GetAttackTypeList get

*All Resource

*

Nenhum Nenhum
yundun-sas:SaveWhiteListStrategy SaveWhiteListStrategy create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCheckWarningCount DescribeCheckWarningCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:AddUninstallClientsByUuids AddUninstallClientsByUuids create

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifySasContainerWebDefenseRule ModifySasContainerWebDefenseRule update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteHoneypotProbe DeleteHoneypotProbe delete

*HoneypotProbe

acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/{#HoneypotProbeId}

Nenhum Nenhum
yundun-sas:CreateInterceptionTarget CreateInterceptionTarget create

*All Resource

*

Nenhum Nenhum
yundun-sas:describeCloudVendorTrialConfig DescribeCloudVendorTrialConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyBinarySecurityPolicy ModifyBinarySecurityPolicy update

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateJenkinsImageRegistryName UpdateJenkinsImageRegistryName update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyScaItem DescribePropertyScaItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyProcItem DescribePropertyProcItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAgentlessTaskCountBatch GetAgentlessTaskCountBatch get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAccountLabel GetAccountLabel get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageStatistics DescribeImageStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifySearchCondition ModifySearchCondition update

*All Resource

*

Nenhum Nenhum
yundun-sas:HandleSecurityEvents HandleSecurityEvents none

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyAssetImportant ModifyAssetImportant update

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateMultiUserInstances UpdateMultiUserInstances update

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateHoneypotProbe CreateHoneypotProbe create

*HoneypotProbe

acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/*

Nenhum Nenhum
yundun-sas:GetCheckRiskStatistics GetCheckRiskStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyUsageTop DescribePropertyUsageTop get

*All Resource

*

Nenhum Nenhum
yundun-sas:UnbindAegis UnbindAegis none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeRiskItemType DescribeRiskItemType get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateDynamicDict CreateDynamicDict create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeTaskErrorLog DescribeTaskErrorLog get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyWebLockStart ModifyWebLockStart update

*WebLockBind

acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}

Nenhum Nenhum
yundun-sas:ListBaselineCheckWhiteRecord ListBaselineCheckWhiteRecord list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSuspiciousSecurityEventyStatistics DescribeSuspiciousSecurityEventyStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:AddIdcProbe AddIdcProbe create

*All Resource

*

Nenhum Nenhum
yundun-sas:AddProtectVpcList AddProtectVpcList create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUniBackupPolicies DescribeUniBackupPolicies get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyWebPath ModifyWebPath update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAssetRefreshTaskConfig ListAssetRefreshTaskConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:OperationSuspEvents OperationSuspEvents none

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteAttestor DeleteAttestor delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageScanAuthCount DescribeImageScanAuthCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetInstallCodeForUuid GetInstallCodeForUuid get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyImageRegistry ModifyImageRegistry update

*All Resource

*

Nenhum Nenhum
yundun-sas:HandleUnknownThreatDetectEvent HandleUnknownThreatDetectEvent update

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyPushAllTask ModifyPushAllTask update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteStrategy DeleteStrategy delete

*BaselineStrategy

acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/{#BaselineStrategyId}

Nenhum Nenhum
yundun-sas:AddImageVulWhiteList AddImageVulWhiteList create

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCloudAssetSummary GetCloudAssetSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyInterceptionTarget ModifyInterceptionTarget update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListClientUserDefineRuleTypes ListClientUserDefineRuleTypes get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulDetails DescribeVulDetails get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeStrategyDetail DescribeStrategyDetail get

*BaselineStrategy

acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/{#BaselineStrategyId}

Nenhum Nenhum
yundun-sas:StartIdcProbeScan StartIdcProbeScan none

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateBucketScanTask OperateBucketScanTask update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeTotalStatistics DescribeTotalStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:MarkMonitorAccounts MarkMonitorAccounts update

*All Resource

*

Nenhum Nenhum
yundun-sas:AddUnknownThreatDetectProcess AddUnknownThreatDetectProcess create

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyLoginBaseConfig ModifyLoginBaseConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListGroups ListGroups list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUuidsByVulNames DescribeUuidsByVulNames get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockExclusiveFileType DescribeWebLockExclusiveFileType get

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateCommonOverallConfig OperateCommonOverallConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListFileProtectClientRule ListFileProtectClientRule list

*FileProtectClientRule

acs:yundun-sas:{#regionId}:{#accountId}:fileprotectclientrule/*

Nenhum Nenhum
yundun-sas:ValidateHcWarnings ValidateHcWarnings none

*All Resource

*

Nenhum Nenhum
yundun-sas:GetOpaClusterLabelList GetOpaClusterLabelList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteMonitorAccount DeleteMonitorAccount delete

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateOpaClusterPlugin CreateOpaClusterPlugin create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAffectedMaliciousFileImages DescribeAffectedMaliciousFileImages get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWhiteListAuthorize DescribeWhiteListAuthorize get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertySoftwareDetail DescribePropertySoftwareDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCommonOverallConfig DescribeCommonOverallConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:GenerateK8sAccessInfo GenerateK8sAccessInfo create

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateFileProtectRule CreateFileProtectRule create

*ClientFileProtect

acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/*

Nenhum Nenhum
yundun-sas:ModifyWebLockStatus ModifyWebLockStatus update

*WebLockBind

acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}

Nenhum Nenhum
yundun-sas:DescribeWebLockFileEvents DescribeWebLockFileEvents get

*WebLockBind

acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/*

Nenhum Nenhum
yundun-sas:StopHoneypot StopHoneypot update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteHybridProxyCluster DeleteHybridProxyCluster delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyCloudVendorAccountAK ModifyCloudVendorAccountAK update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListImageRegistryExtra ListImageRegistryExtra list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeMonitorAccounts DescribeMonitorAccounts get

*All Resource

*

Nenhum Nenhum
yundun-sas:ChangeAssetRefreshTaskConfig ChangeAssetRefreshTaskConfig none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeInstallCaptcha DescribeInstallCaptcha get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulTargetStatistics DescribeVulTargetStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetConsoleFuncGrayStatus GetConsoleFuncGrayStatus none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerServiceK8sClusterNamespaces DescribeContainerServiceK8sClusterNamespaces get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetServiceTrail GetServiceTrail get

*SasTrail

acs:yundun-sas:{#regionId}:{#accountId}:sastrail

Nenhum Nenhum
yundun-sas:CreateJenkinsImageRegistry CreateJenkinsImageRegistry create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeMatchedMaliciousNames DescribeMatchedMaliciousNames get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetBackupAutoConfigStatus GetBackupAutoConfigStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVpcHoneyPotList DescribeVpcHoneyPotList get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAgentlessAsset ListAgentlessAsset list

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateContainerScanTask CreateContainerScanTask create

*All Resource

*

Nenhum Nenhum
yundun-sas:SaveSuspEventUserSetting SaveSuspEventUserSetting create

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateServiceLinkedRole CreateServiceLinkedRole create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockProcessList DescribeWebLockProcessList get

*WebLockBind

acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/*

Nenhum Nenhum
yundun-sas:GetFunctionTrialStatus GetFunctionTrialStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteLoginBaseConfig DeleteLoginBaseConfig delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerCriteria DescribeContainerCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:CheckTrialFixCount CheckTrialFixCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyCheckRule ModifyCheckRule update

*All Resource

*

Nenhum Nenhum
yundun-sas:AddSasContainerWebDefenseRule AddSasContainerWebDefenseRule create

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateFileProtectClientRuleStatus UpdateFileProtectClientRuleStatus update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckStandard ListCheckStandard get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotProbeUuid ListHoneypotProbeUuid list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerServiceK8sClusters DescribeContainerServiceK8sClusters get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateFileProtectClientRule CreateFileProtectClientRule create

*FileProtectClientRule

acs:yundun-sas:{#regionId}:{#accountId}:fileprotectclientrule/*

Nenhum Nenhum
yundun-sas:GetFileProtectEventCount GetFileProtectEventCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpgradeVersionByUuids UpgradeVersionByUuids update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListVirusScanMachineEvent ListVirusScanMachineEvent get

*All Resource

*

Nenhum Nenhum
yundun-sas:GenerateClusterScannerWebhookYaml GenerateClusterScannerWebhookYaml create

*ClusterScannerYaml

acs:yundun-sas:{#regionId}:{#accountId}:clusterscanneryaml/*

Nenhum Nenhum
yundun-sas:ModifyWebLockUnbind ModifyWebLockUnbind update

*WebLockBind

acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}

Nenhum Nenhum
yundun-sas:RemoveCheckInstanceResultWhiteList RemoveCheckInstanceResultWhiteList delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageBaselineStrategy DescribeImageBaselineStrategy get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertySoftwareItem DescribePropertySoftwareItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckTypes ListCheckTypes get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetDefenceCount GetDefenceCount none

*All Resource

*

Nenhum Nenhum
yundun-sas:OperationCustomizeReportChart OperationCustomizeReportChart update

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateUserSetting CreateUserSetting create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeEmgVulItem DescribeEmgVulItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:OpenBackupAutoConfig OpenBackupAutoConfig create

*All Resource

*

Nenhum Nenhum
yundun-sas:ListUniBackupRecord ListUniBackupRecord list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeHybridProxyClusterList DescribeHybridProxyClusterList get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetPropertyScheduleConfig GetPropertyScheduleConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateWhiteListStrategyStatus UpdateWhiteListStrategyStatus update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockFileChangeStatistics DescribeWebLockFileChangeStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:SetImageBuildRiskStatus SetImageBuildRiskStatus none

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyCreateVulWhitelist ModifyCreateVulWhitelist update

*VulWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/*

Nenhum Nenhum
yundun-sas:DescribeClientConfStrategy DescribeClientConfStrategy get

*All Resource

*

Nenhum Nenhum
yundun-sas:RefreshAssets RefreshAssets none

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateJenkinsImageScanTask CreateJenkinsImageScanTask create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyUserItem DescribePropertyUserItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDefaultProxyInstallVersion DescribeDefaultProxyInstallVersion get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetUserLang GetUserLang get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSoarStrategyTaskResult DescribeSoarStrategyTaskResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAssetDetailByUuids DescribeAssetDetailByUuids get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeScanTaskStatistics DescribeScanTaskStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckItems ListCheckItems get

*CustomCheckItem

acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#CheckId}

Nenhum Nenhum
yundun-sas:DescribeAllGroups DescribeAllGroups get

*Group

acs:yundun-sas:{#regionId}:{#accountId}:group/*

Nenhum Nenhum
yundun-sas:DescribeSupportRegion DescribeSupportRegion get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListPodRisk ListPodRisk list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeRiskType DescribeRiskType get

*All Resource

*

Nenhum Nenhum
yundun-sas:SaveWhiteListStrategyAssets SaveWhiteListStrategyAssets create

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyEmgVulSubmit ModifyEmgVulSubmit update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeFrontVulPatchList DescribeFrontVulPatchList get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckItemWarningSummary ListCheckItemWarningSummary list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageVulWhiteList DescribeImageVulWhiteList list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBackUpExportInfo DescribeBackUpExportInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:ExportCustomizeReport ExportCustomizeReport get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyScheduleConfig DescribePropertyScheduleConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListRuleTargetAll ListRuleTargetAll get

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateSuspiciousTargetConfig OperateSuspiciousTargetConfig none

*All Resource

*

Nenhum Nenhum
yundun-sas:IgnoreHcCheckWarnings IgnoreHcCheckWarnings none

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateVirusEvents OperateVirusEvents update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSecurityCheckScheduleConfig DescribeSecurityCheckScheduleConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateAlarmEvent UpdateAlarmEvent update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteCustomizeReport DeleteCustomizeReport delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAttackPathEvent ListAttackPathEvent list

*All Resource

*

Nenhum Nenhum
yundun-sas:SetSyncRefreshRegion SetSyncRefreshRegion update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListOssScanConfig ListOssScanConfig list

*OssScanConfig

acs:yundun-sas:*:{#accountId}:ossscanconfig/*

Nenhum Nenhum
yundun-sas:CreateAntiBruteForceRule CreateAntiBruteForceRule create

*AntiBruteForceRule

acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/*

Nenhum Nenhum
yundun-sas:OperateSwitchStatus OperateSwitchStatus update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVersionConfig DescribeVersionConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBinarySecurityPolicies DescribeBinarySecurityPolicies get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeExposedCheckWarning DescribeExposedCheckWarning get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateImageEventOperation UpdateImageEventOperation update

*ImageEventOperation

acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/{#ImageEventOperationId}

Nenhum Nenhum
yundun-sas:CheckStsTokenAuth CheckStsTokenAuth none

*All Resource

*

Nenhum Nenhum
yundun-sas:InstallAegisForLingjun InstallAegisForLingjun none

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteBackupPolicyMachine DeleteBackupPolicyMachine delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteUnknownThreatDetectStrategy DeleteUnknownThreatDetectStrategy delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyAccessKeyLeakDeal ModifyAccessKeyLeakDeal update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSuspEventUserSetting DescribeSuspEventUserSetting get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeGroupedVul DescribeGroupedVul get

*All Resource

*

acs:ResourceGroupId

Nenhum
yundun-sas:GetHoneyPotUploadPolicyInfo GetHoneyPotUploadPolicyInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeClusterVulStatistics DescribeClusterVulStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:RetryInstallProbe RetryInstallProbe none

*All Resource

*

Nenhum Nenhum
yundun-sas:RebootMachine RebootMachine none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeHoneyPotSuspStatistics DescribeHoneyPotSuspStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyCycleTask ModifyCycleTask update

*CycleTask

acs:yundun-sas:{#regionId}:{#accountId}:cycletask/{#ConfigId}

Nenhum Nenhum
yundun-sas:CreateOssBucketScanTask CreateOssBucketScanTask create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSuspEvents DescribeSuspEvents get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateVulAutoRepairConfig CreateVulAutoRepairConfig create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSupervisonInfo DescribeSupervisonInfo none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerStatistics DescribeContainerStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListFileProtectPluginStatus ListFileProtectPluginStatus list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAegisContainerPluginRuleCriteria GetAegisContainerPluginRuleCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListTargetByBatch ListTargetByBatch list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetInterceptionRuleDetail GetInterceptionRuleDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyClearLogstoreStorage ModifyClearLogstoreStorage update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerGroupedFieldDetail DescribeContainerGroupedFieldDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:HandleMaliciousFiles HandleMaliciousFiles none

*All Resource

*

Nenhum Nenhum
yundun-sas:AddTagWithUuid AddTagWithUuid create

*All Resource

*

Nenhum Nenhum
yundun-sas:GetVulWhitelist GetVulWhitelist get

*VulWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}

Nenhum Nenhum
yundun-sas:RefreshContainerAssets RefreshContainerAssets none

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCheckDetail GetCheckDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCloudVendorRegions ListCloudVendorRegions list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteBackupPolicy DeleteBackupPolicy delete

*BackupPolicy

acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}

Nenhum Nenhum
yundun-sas:CreateOpaStrategyNew CreateOpaStrategyNew create

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateHoneypotNode UpdateHoneypotNode update

*HoneypotNode

acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}

Nenhum Nenhum
yundun-sas:GetInstanceAlarmStatistics GetInstanceAlarmStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateWhiteList UpdateWhiteList update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBackupClients DescribeBackupClients get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotAttackerPortrait ListHoneypotAttackerPortrait get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetVirusScanLatestTaskStatistic GetVirusScanLatestTaskStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteCheckItem DeleteCheckItem delete

*CustomCheckItem

acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#customcheckitemId}

Nenhum Nenhum
yundun-sas:DescribeImageListByBuildRisk DescribeImageListByBuildRisk list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetSensitiveDefineRuleConfig GetSensitiveDefineRuleConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCloudVendorAccountAKList DescribeCloudVendorAccountAKList list

*All Resource

*

Nenhum Nenhum
yundun-sas:UnMarkMonitorAccounts UnMarkMonitorAccounts update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetContainerDefenseRuleDetail GetContainerDefenseRuleDetail get

*ContainerDefenseRule

acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}

Nenhum Nenhum
yundun-sas:ModifyAssetCleanConfig ModifyAssetCleanConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:VerifyCheckResult VerifyCheckResult none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeStrictEventName DescribeStrictEventName none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDefaultKeyInfo DescribeDefaultKeyInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetServerlessAuthSummary GetServerlessAuthSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockFileTypeSummary DescribeWebLockFileTypeSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeClusterNetwork DescribeClusterNetwork get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockConfigList DescribeWebLockConfigList get

*WebLockConfig

acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}

Nenhum Nenhum
yundun-sas:ListCloudAssetSchemas ListCloudAssetSchemas list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetHoneypotNodeMetricList GetHoneypotNodeMetricList list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCloudAssetCriteria GetCloudAssetCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAttackEventDashboard GetAttackEventDashboard get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteClientUserDefineRule DeleteClientUserDefineRule delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyHybridProxyPolicy ModifyHybridProxyPolicy update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageVulList DescribeImageVulList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageBaselineItemList DescribeImageBaselineItemList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCheckWarningSummary DescribeCheckWarningSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeReportRecipientStatus DescribeReportRecipientStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetLogMeta GetLogMeta get

*LogMeta

acs:yundun-sas:{#regionId}:{#accountId}:logmeta/{#LogMetaName}

Nenhum Nenhum
yundun-sas:AddContainerPluginRule AddContainerPluginRule create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCloudCenterInstances DescribeCloudCenterInstances get

*Asset

acs:yundun-sas:{#regionId}:{#accountId}:asset/*

Nenhum Nenhum
yundun-sas:DescribeCriteria DescribeCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyScaDetail DescribePropertyScaDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListSystemRuleAggregationTypes ListSystemRuleAggregationTypes get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeRiskCheckResult DescribeRiskCheckResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListVirusScanMachine ListVirusScanMachine get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteVulAutoRepairConfig DeleteVulAutoRepairConfig delete

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateBaselineCheckWhiteRecord UpdateBaselineCheckWhiteRecord update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteHoneypot DeleteHoneypot delete

*HoneyPot

acs:yundun-sas:{#regionId}:{#accountId}:honeypot/{#HoneypotId}

Nenhum Nenhum
yundun-sas:DescribeClusterImageSecuritySummary DescribeClusterImageSecuritySummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSuspiciousOverallConfig DescribeSuspiciousOverallConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAutoTagRules ListAutoTagRules list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePluginSummary DescribePluginSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateSimilarSecurityEventsQueryTask CreateSimilarSecurityEventsQueryTask create

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateAttackPathSensitiveAssetConfig CreateAttackPathSensitiveAssetConfig create

*AttackPathSensitiveAssetConfig

acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/*

Nenhum Nenhum
yundun-sas:AddCheckInstanceResultWhiteList AddCheckInstanceResultWhiteList create

*All Resource

*

Nenhum Nenhum
yundun-sas:GetModuleConfigStatus GetModuleConfigStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileProtectClientDashboard GetFileProtectClientRuleDashboard list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAssetSummary DescribeAssetSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyWebLockDeleteConfig ModifyWebLockDeleteConfig update

*WebLockConfig

acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}

Nenhum Nenhum
yundun-sas:ModifyCustomBlockRecord ModifyCustomBlockRecord update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerServiceK8sClusterKritisStatus DescribeContainerServiceK8sClusterKritisStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetTenantCheckAvailable GetTenantCheckAvailable get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAssetCleanConfig ListAssetCleanConfig list

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateSelectionKeyByType UpdateSelectionKeyByType update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeInstanceAntiBruteForceRules DescribeInstanceAntiBruteForceRules get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotProbe ListHoneypotProbe get

*HoneypotProbe

acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/*

Nenhum Nenhum
yundun-sas:DescribeContainerTags DescribeContainerTags get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSimilarEventScenarios DescribeSimilarEventScenarios get

*All Resource

*

Nenhum Nenhum
yundun-sas:FinishGuidTask FinishGuidTask none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCompressFileDetectResult ListCompressFileDetectResult list

*All Resource

*

Nenhum Nenhum
yundun-sas:UnBindHybridProxy UnBindHybridProxy update

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateCommonTargetConfig OperateCommonTargetConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetSwitchRegionDetail GetSwitchRegionDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:GrantSwitchAgreement GrantSwitchAgreement none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCycleTaskList DescribeCycleTaskList get

*CycleTask

acs:yundun-sas:{#regionId}:{#accountId}:cycletask/{#ConfigId}

Nenhum Nenhum
yundun-sas:ListSystemClientRules ListSystemClientRules get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockBindList DescribeWebLockBindList get

*WebLockBind

acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}

Nenhum Nenhum
yundun-sas:QueryDiscoverDatabase QueryDiscoverDatabase get

*All Resource

*

Nenhum Nenhum
yundun-sas:BatchDeleteMaliciousFileWhitelistConfig BatchDeleteMaliciousFileWhitelistConfig delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteCustomBlockRecord DeleteCustomBlockRecord delete

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateOssScanConfig CreateOssScanConfig create

*OssScanConfig

acs:yundun-sas:*:{#accountId}:ossscanconfig/*

Nenhum Nenhum
yundun-sas:ListBackupRecord ListBackupRecord list

*All Resource

*

Nenhum Nenhum
yundun-sas:AddVpcHoneyPot AddVpcHoneyPot create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerInstances DescribeContainerInstances get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeGroupedInstances DescribeGroupedInstances get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyContainerDefenseRuleSwitch ModifyContainerDefenseRuleSwitch update

*ContainerDefenseRule

acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}

Nenhum Nenhum
yundun-sas:DescribeTraceInfoNode DescribeTraceInfoNode get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyWebLockCreateConfig ModifyWebLockCreateConfig update

*WebLockConfig

acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}

Nenhum Nenhum
yundun-sas:GetRdTree GetRdTree get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageSensitiveFileByKey DescribeImageSensitiveFileByKey get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAgentlessTaskUsedSizeEstimate GetAgentlessTaskUsedSizeEstimate get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListImageRisk ListImageRisk list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeRiskCheckItemResult DescribeRiskCheckItemResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeHoneyPotAuth DescribeHoneyPotAuth get

*HoneyPot

acs:yundun-sas:{#regionId}:{#accountId}:honeypot/*

Nenhum Nenhum
yundun-sas:AddContainerDefenseRule AddContainerDefenseRule create

*ContainerDefenseRule

acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/*

Nenhum Nenhum
yundun-sas:DescribeImageFixCycleConfig DescribeImageFixCycleConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:StartPreCheckDatabase StartPreCheckDatabase update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSoarStrategyTaskParams DescribeSoarStrategyTaskParams get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageSecurityScanCount DescribeImageSecurityScanCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:RefreshOssBucketScanInfo RefreshOssBucketScanInfo none

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyHybridProxyCluster ModifyHybridProxyCluster update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotEventFlows ListHoneypotEventFlows list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteVulWhitelist DeleteVulWhitelist delete

*VulWhitelist

acs:threatdetection:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}

Nenhum Nenhum
yundun-sas:DescribeDomainCount DescribeDomainCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeNsasSuspEventType DescribeNsasSuspEventType get

*All Resource

*

Nenhum Nenhum
yundun-sas:AddBaselineCheckWhiteRecord AddBaselineCheckWhiteRecord create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeTarget DescribeTarget get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCheckSummary GetCheckSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCheckStructure GetCheckStructure list

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateBinarySecurityPolicy CreateBinarySecurityPolicy create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeClusterBasicInfo DescribeClusterBasicInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotAttackerSource ListHoneypotAttackerSource get

*All Resource

*

Nenhum Nenhum
yundun-sas:OpenSensitiveFileScan OpenSensitiveFileScan none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDomainSecureSuggests DescribeDomainSecureSuggests get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListUnfinishedOnceTask ListUnfinishedOnceTask list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVendorList DescribeVendorList get

*All Resource

*

Nenhum Nenhum
yundun-sas:SubmitTenantCheck SubmitTenantCheck create

*All Resource

*

Nenhum Nenhum
yundun-sas:ListVulAutoRepairConfig ListVulAutoRepairConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateUnknownThreatDetectProcess UpdateUnknownThreatDetectProcess update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAllEntity DescribeAllEntity get

*All Resource

*

Nenhum Nenhum
yundun-sas:EnableCustomInstanceBlockRecord EnableCustomInstanceBlockRecord update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeExposedStatistics DescribeExposedStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAppVulScanCycle DescribeAppVulScanCycle get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileDetectApiInvokeInfo GetFileDetectApiInvokeInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeModuleConfig DescribeModuleConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListOperatedTask ListOperationTask list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteCheckPolicy DeleteCheckPolicy delete

*CustomCheckStandardPolicy

acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/{#customcheckstandardpolicyId}

Nenhum Nenhum
yundun-sas:DeleteHybridProxy DeleteHybridProxy delete

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateOrUpdateAutoTagRule CreateOrUpdateAutoTagRule create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAssetDetailByUuid DescribeAssetDetailByUuid get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyTypeScaItem DescribePropertyTypeScaItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageRiskLevelStatistic DescribeImageRiskLevelStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListUuidsByWebPath ListUuidsByWebPath get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyClientConfStrategy ModifyClientConfStrategy update

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyVulWhitelistTarget ModifyVulWhitelistTarget update

*VulWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}

Nenhum Nenhum
yundun-sas:ModifyOpenLogShipper ModifyOpenLogShipper update

*LogShipper

acs:yundun-sas:{#regionId}:{#accountId}:logshipper

Nenhum Nenhum
yundun-sas:GenerateDynamicDict GenerateDynamicDict list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebPath DescribeWebPath get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeInstanceRebootStatus DescribeInstanceRebootStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulWhitelist DescribeVulWhitelist get

*VulWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/*

Nenhum Nenhum
yundun-sas:DeleteMaliciousFileWhitelistConfig DeleteMaliciousFileWhitelistConfig delete

*MaliciousFileWhitelistConfig

acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/{#ConfigId}

Nenhum Nenhum
yundun-sas:ModifyTagWithUuid ModifyTagWithUuid update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListPluginForUuid ListPluginForUuid get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyVpcHoneyPot ModifyVpcHoneyPot update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListInterceptionRulePage ListInterceptionRulePage get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateSoarStrategyTask CreateSoarStrategyTask create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUserSetting DescribeUserSetting get

*All Resource

*

Nenhum Nenhum
yundun-sas:modifyCloudVendorTrialConfig ModifyCloudVendorTrialConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetDataTrend GetDataTrend get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeHybridProxyLinkedClientList DescribeHybridProxyLinkedClientList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDingTalk DescribeDingTalk get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListClusterInterceptionConfig ListClusterInterceptionConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyAttestor ModifyAttestor update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetRegistryScanDayNum GetRegistryScanDayNum get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeletePrivateRegistry DeletePrivateRegistry delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeMachineAppPage ListMachineApps list

*All Resource

*

Nenhum Nenhum
yundun-sas:IgnoreCheckItems IgnoreCheckItems none

*All Resource

*

Nenhum Nenhum
yundun-sas:HandleObjectScanEvent HandleObjectScanEvent update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileDetectResult GetFileDetectResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeChartList DescribeChartList list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAlarmEventDetail DescribeAlarmEventDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:AddFileProtectBindMachine AddFileProtectBindMachine none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAgentlessRelateMalicious ListAgentlessRelateMalicious list

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateUniRestorePlan CreateUniRestorePlan create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCanFixVulList DescribeCanFixVulList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulExportInfo DescribeVulExportInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSuspEventExportInfo DescribeSuspEventExportInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulListPage DescribeVulListPage get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetOpaStrategyDetailNew GetOpaStrategyDetailNew get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateFileProtectRemark UpdateFileProtectRemark update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteHoneypotPreset DeleteHoneypotPreset delete

*HoneypotPreset

acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/{#HoneypotPresetId}

Nenhum Nenhum
yundun-sas:DescribeImageGroupedVulList DescribeImageGroupedVulList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageBuildRiskList DescribeImageBuildRiskList list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCommonOverallConfigList DescribeCommonOverallConfigList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUuidVulNumClassifyStatistic DescribeUuidVulNumClassifyStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUserBackupMachines DescribeUserBackupMachines get

*All Resource

*

Nenhum Nenhum
yundun-sas:CheckUserHasEcs CheckUserHasEcs none

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteHoneypotNode DeleteHoneypotNode delete

*HoneypotNode

acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}

Nenhum Nenhum
yundun-sas:DescribeCloudVendorProductTemplateConfig DescribeCloudVendorProductTemplateConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAssetsScaProcessNum DescribeAssetsScaProcessNum get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateSuspEventNote CreateSuspEventNote create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCustomBlockInstances DescribeCustomBlockInstances get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCountNotScannedImage DescribeCountNotScannedImage get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyWebLockProcessStatus ModifyWebLockProcessStatus update

*WebLockBind

acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}

Nenhum Nenhum
yundun-sas:ListInstanceRiskLevels ListInstanceRiskLevels list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyProcDetail DescribePropertyProcDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdatePublishAutoUpgrade UpdatePublishAutoUpgrade update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListFileProtectBindMachine ListFileProtectBindMachine list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteGroup DeleteGroup delete

*Group

acs:yundun-sas:{#regionId}:{#accountId}:group/{#GroupId}

Nenhum Nenhum
yundun-sas:ListAssetSelectionSelectedTarget ListAssetSelectionSelectedTarget list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDomainDetail DescribeDomainDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeOnceTaskLeafRecordPage DescribeOnceTaskLeafRecordPage get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCheckResult DescribeCheckResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:UninstallBackupClient UninstallBackupClient none

*All Resource

*

Nenhum Nenhum
yundun-sas:GetHoneypotEventTrend GetHoneypotEventTrend get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateFileDetect CreateFileDetect create

*All Resource

*

Nenhum Nenhum
yundun-sas:ListVirusScanTask ListVirusScanTask get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetHoneypotProbe GetHoneypotProbe get

*HoneypotProbe

acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/{#HoneypotProbeId}

Nenhum Nenhum
yundun-sas:ListSystemClientRuleTypes ListSystemClientRuleTypes get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyWebLockRefresh ModifyWebLockRefresh update

*WebLockBind

acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}

Nenhum Nenhum
yundun-sas:DescribeLogstoreStorage DescribeLogstoreStorage get

*All Resource

*

Nenhum Nenhum
yundun-sas:HandleSimilarMaliciousFiles HandleSimilarMaliciousFiles update

*All Resource

*

Nenhum Nenhum
yundun-sas:ChangeCheckCustomConfig ChangeCheckCustomConfig none

*All Resource

*

Nenhum Nenhum
yundun-sas:DingTalkOnlineTest DingTalkOnlineTest get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSoarPlaybookTaskDetail DescribeSoarPlaybookTaskDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyLoginSwitchConfig ModifyLoginSwitchConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:VerityCheckCustomConfig VerifyCheckCustomConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListInstanceRiskNum ListInstanceRiskNum list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeRisks DescribeRisks get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeStrategy DescribeStrategy get

*BaselineStrategy

acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/*

Nenhum Nenhum
yundun-sas:CreateUnknownThreatDetectStrategy CreateUnknownThreatDetectStrategy create

*All Resource

*

Nenhum Nenhum
yundun-sas:EnableBruteForceRecord EnableBruteForceRecord update

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifySecurityEventMarkMissIndividually ModifySecurityEventMarkMissIndividually update

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateOrUpdateAssetGroup CreateOrUpdateAssetGroup create

*Group

acs:yundun-sas:{#regionId}:{#accountId}:group/*

Nenhum Nenhum
yundun-sas:UpdatePublishCron UpdatePublishCron update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetVirusScanConfig GetVirusScanConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeGroupedContainerInstances DescribeGroupedContainerInstances get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAllRegionsStatistics DescribeAllRegionsStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotAlarmEvents ListHoneypotAlarmEvents get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulCheckTaskStatusDetail DescribeVulCheckTaskStatusDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateFileDetectUploadUrl CreateFileDetectUploadUrl create

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteFileProtectClientRule DeleteFileProtectClientRule delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDomainSecureRiskList DescribeDomainSecureRiskList list

*All Resource

*

Nenhum Nenhum
yundun-sas:ListMultiUserInstances ListMultiUserInstances list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetOpaPluginStatus GetOpaPluginStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListSystemAggregationRules ListSystemAggregationRules get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyAutoDelConfig ModifyAutoDelConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetOssScanConfig GetOssScanConfig get

*OssScanConfig

acs:yundun-sas:*:{#accountId}:ossscanconfig/{#ConfigId}

Nenhum Nenhum
yundun-sas:ListPrivateRegistryType ListPrivateRegistryType get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAccountsInResourceDirectory ListAccountsInResourceDirectory list

*All Resource

*

Nenhum Nenhum
yundun-sas:ChangeCheckScopeConfigInstance ChangeCheckScopeConfigInstance update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteOpaStrategyNew DeleteOpaStrategyNew delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ListK8sAccessInfo ListK8sAccessInfo list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUniBackupDatabase DescribeUniBackupDatabase get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWhiteListAsset DescribeWhiteListAsset get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetBackupStorageCount GetBackupStorageCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAttackEventInfo ListAttackEventInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListOperationProcess ListOperationProcess list

*OperationProcess

acs:yundun-sas:{#regionId}:{#accountId}:operationprocess/{#TaskId}

Nenhum Nenhum
yundun-sas:UpdatePostPaidBindRel UpdatePostPaidBindRel update

*AssetBind

acs:yundun-sas:{#regionId}:{#accountId}:assetbind/{#Uuid}

Nenhum Nenhum
yundun-sas:ListPrivateK8s ListPrivateK8s list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileProtectClientEvent GetFileProtectClientEvent get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifySoarStrategySubscribe ModifySoarStrategySubscribe update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteImageVulWhitelist DeleteImageVulWhitelist delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteInterceptionRule DeleteInterceptionRule delete

*All Resource

*

Nenhum Nenhum
yundun-sas:JoinWebLockProcessWhiteList JoinWebLockProcessWhiteList update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAllImageBaseline DescribeAllImageBaseline get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeRestoreJobs DescribeRestoreJobs get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulConfig DescribeVulConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerApps DescribeContainerApps list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteUnknownThreatDetectProcess DeleteUnknownThreatDetectProcess delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckPolicies ListCheckPolicies list

*CustomCheckStandardPolicy

acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/*

Nenhum Nenhum
yundun-sas:DescribeSasPmAgentList DescribeSasPmAgentList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCanTrySas DescribeCanTrySas get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListLogShipperRegions ListLogShipperRegions list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBackupRestoreCount DescribeBackupRestoreCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageInfoList DescribeImageInfoList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUniBackupPolicyDetail DescribeUniBackupPolicyDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeGraph4InvestigationOnline DescribeGraph4InvestigationOnline get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateFileProtectRule UpdateFileProtectRule update

*ClientFileProtect

acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/{#RuleId}

Nenhum Nenhum
yundun-sas:CreateVirusScanOnceTask CreateVirusScanOnceTask create

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyInstanceAntiBruteForceRule ModifyInstanceAntiBruteForceRule update

*AntiBruteForceRule

acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}

Nenhum Nenhum
yundun-sas:CreateServiceTrail CreateServiceTrail create

*SasTrail

acs:yundun-sas:{#regionId}:{#accountId}:sastrail/*

Nenhum Nenhum
yundun-sas:DescribeCustomBlockRecords DescribeCustomBlockRecords get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulList DescribeVulList get

*All Resource

*

acs:ResourceGroupId

Nenhum
yundun-sas:GetInterceptionTargetDetail GetInterceptionTargetDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateClientAlertMode UpdateClientAlertMode update

*All Resource

*

Nenhum Nenhum
yundun-sas:RetryAgentlessTask RetryAgentlessTask none

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyNoticeConfig ModifyNoticeConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateHoneypotProbeBind UpdateHoneypotProbeBind update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCommonTargetConfig DescribeCommonTargetConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetInterceptionSummary GetInterceptionSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockTotalFileChangeCount DescribeWebLockTotalFileChangeCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeExposedInstanceList DescribeExposedInstanceList get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyPostPayModuleSwitch ModifyPostPayModuleSwitch update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteBaselineCheckWhiteRecord DeleteBaselineCheckWhiteRecord delete

*All Resource

*

Nenhum Nenhum
yundun-sas:PublicSyncAndCreateImageScanTask PublicSyncAndCreateImageScanTask none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListOssBucketScanInfo ListOssBucketScanInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDomainSecureScore DescribeDomainSecureScore get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageRepoList DescribeImageRepoList get

*All Resource

*

Nenhum Nenhum
yundun-sas:InstallUniBackupAgent InstallUniBackupAgent none

*All Resource

*

Nenhum Nenhum
yundun-sas:AddSasModuleTrial AddSasModuleTrial create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAssetsSecurityEventSummary DescribeAssetsSecurityEventSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:BindHybridProxy BindHybridProxy none

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteUniBackupPolicy DeleteUniBackupPolicy delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DisableCustomBlockRecord DisableCustomBlockRecord update

*All Resource

*

Nenhum Nenhum
yundun-sas:AddCloudVendorAccountAK AddCloudVendorAccountAK create

*All Resource

*

Nenhum Nenhum
yundun-sas:BatchUpdateMaliciousFileWhitelistConfig BatchUpdateMaliciousFileWhitelistConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeOnceTask DescribeOnceTask get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSearchCondition DescribeSearchCondition get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyGroupProperty ModifyGroupProperty update

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyInterceptionRuleSwitch ModifyInterceptionRuleSwitch update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAttackPathEventDetail GetAttackPathEventDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListPublishBatch ListPublishBatch list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDynamicDictUploadInfo DescribeDynamicDictUploadInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:CheckSecurityEventId CheckSecurityEventId none

*All Resource

*

Nenhum Nenhum
yundun-sas:PauseClient PauseClient update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListImageBuildRiskItem ListImageBuildRiskItem list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteCloudVendorAccountAK DeleteCloudVendorAccountAK delete

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdatePublishBatch UpdatePublishBatch update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSyncAssetTaskLogDetail DescribeSyncAssetTaskLogDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCheckWarningDetail DescribeCheckWarningDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateCheckItem UpdateCheckItem create

*CustomCheckItem

acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#customcheckitemId}

Nenhum Nenhum
yundun-sas:GetAssetsPropertyDetail GetAssetsPropertyDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetHoneypotNode GetHoneypotNode get

*HoneypotNode

acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}

Nenhum Nenhum
yundun-sas:ListCloudAssetInstances ListCloudAssetInstances get

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateAgentClientInstall OperateAgentClientInstall none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAttackPathWhitelist ListAttackPathWhitelist list

*AttackPathWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/*

Nenhum Nenhum
yundun-sas:ModifyUniBackupPolicy ModifyUniBackupPolicy update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImage DescribeImage get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateAttestor CreateAttestor create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeOfflineMachines DescribeOfflineMachines get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetOpaClusterNamespaceList GetOpaClusterNamespaceList list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAttackEventDetail GetAttackEventDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageRepoDetailList DescribeImageRepoDetailList get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAlarmMachineCount GetAlarmMachineCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateHoneypotProbeBind CreateHoneypotProbeBind create

*All Resource

*

Nenhum Nenhum
yundun-sas:ListOssBucket ListOssBucket get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyAssetGroup ModifyAssetGroup update

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateHoneypotPreset UpdateHoneypotPreset update

*HoneypotPreset

acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/{#HoneypotPresetId}

Nenhum Nenhum
yundun-sas:GetCheckScopeConfig GetCheckScopeConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeLoginBaseConfigs DescribeLoginBaseConfigs get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateMaliciousFileWhitelistConfig CreateMaliciousFileWhitelistConfig create

*MaliciousFileWhitelistConfig

acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/*

Nenhum Nenhum
yundun-sas:ModifyProcessWhiteList ModifyProcessWhiteList create

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCommonSwitchConfig GetCommonSwitchConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetObjectScanEvent GetObjectScanEvent get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeMachineCanReboot DescribeMachineCanReboot get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulDefendCountStatistics DescribeVulDefendCountStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUniBackupStatistics DescribeUniBackupStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:StartDiscoverDatabaseTask StartDiscoverDatabaseTask update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeExcludeSystemPath DescribeExcludeSystemPath get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetClientRatioStatistic GetClientRatioStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteSearchCondition DeleteSearchCondition delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAssetInfoPublish ListAssetInfoPublish list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCanTrySas GetCanTrySas get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListClusterCnnfStatusDetail ListClusterCnnfStatusDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageBuildRiskByKey DescribeImageBuildRiskByKey list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSecureSuggestion DescribeSecureSuggestion get

*All Resource

*

Nenhum Nenhum
yundun-sas:CancelOnceTask CancelOnceTask none

*All Resource

*

Nenhum Nenhum
yundun-sas:GetValidDeductInstances GetValidDeductInstances none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBackupPolicy DescribeBackupPolicy get

*BackupPolicy

acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}

Nenhum Nenhum
yundun-sas:UninstallUniBackupAgent UninstallUniBackupAgent none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeHybridProxyList DescribeHybridProxyList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeGroupedMaliciousFiles DescribeGroupedMaliciousFiles get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageFixTask DescribeImageFixTask get

*All Resource

*

Nenhum Nenhum
yundun-sas:TriggerCheck TriggerCheck create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAttestors DescribeAttestors get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBackupPolicies DescribeBackupPolicies list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeLogShipperStatus DescribeLogShipperStatus get

*LogShipper

acs:yundun-sas:{#regionId}:{#accountId}:logshipper/*

Nenhum Nenhum
yundun-sas:ListSasContainerWebDefenseRule ListSasContainerWebDefenseRule list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCustomizedStrategyTargets DescribeCustomizedStrategyTargets get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeStrategyExecDetail DescribeStrategyExecDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DisableBruteForceRecord DisableBruteForceRecord update

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateHybridProxyCluster CreateHybridProxyCluster create

*All Resource

*

Nenhum Nenhum
yundun-sas:ExportSuspEvents ExportSuspEvents none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeInstanceVulStatistics DescribeInstanceVulStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCheckEcsWarnings DescribeCheckEcsWarnings get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeNeedAsyncQuery DescribeNeedAsyncQuery get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteDingTalk DeleteDingTalk delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyVulConfig ModifyVulConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListOpaClusterStrategyNew ListOpaClusterStrategyNew list

*All Resource

*

Nenhum Nenhum
yundun-sas:updateStrictEventName UpdateStrictEventName none

*All Resource

*

Nenhum Nenhum
yundun-sas:OperationCancelIgnoreSuspEvent OperationCancelIgnoreSuspEvent none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListDockerhubImage ListDockerhubImage list

*All Resource

*

Nenhum Nenhum
yundun-sas:ListFileProtectClientEvent ListFileProtectClientEvent list

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyStrategyTarget ModifyStrategyTarget update

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateSuspiciousOverallConfig OperateSuspiciousOverallConfig none

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCheckConfig GetCheckConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAttackPathWhitelist GetAttackPathWhitelist get

*AttackPathWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#AttackPathWhitelist}

Nenhum Nenhum
yundun-sas:GetLocalDefaultRegion GetLocalDefaultRegion get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyDingTalkStatus ModifyDingTalkStatus update

*All Resource

*

Nenhum Nenhum
yundun-sas:ChangeSecurityScoreRule ChangeSecurityScoreRule update

*All Resource

*

Nenhum Nenhum
yundun-sas:SetClusterInterceptionConfig SetClusterInterceptionConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:BatchOperateCommonOverallConfig BatchOperateCommonOverallConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetClusterStrategyCount GetClusterStrategyCount list

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateBackupPolicy CreateBackupPolicy create

*BackupPolicy

acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/*

Nenhum Nenhum
yundun-sas:DescribeImageListBySensitiveFile DescribeImageListBySensitiveFile get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteIdcProbe DeleteIdcProbe delete

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateFileUploadLimit UpdateFileUploadLimit update

*FileUploadLimit

acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit

Nenhum Nenhum
yundun-sas:GetOssBucketScanStatistic GetOssBucketScanStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyClusterCnnfStatusUserConfirm ModifyClusterCnnfStatusUserConfirm update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListImageRegistryRegion ListImageRegistryRegion get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageBaselineCheckSummary DescribeImageBaselineCheckSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:InstallPmAgent InstallPmAgent update

*All Resource

*

Nenhum Nenhum
yundun-sas:PublicPreCheckImageScanTask PublicPreCheckImageScanTask none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckRule ListCheckRule list

*All Resource

*

Nenhum Nenhum
yundun-sas:ListClientAlertMode ListClientAlertMode list

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateImageBaselineWhitelist OperateImageBaselineWhitelist none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotNode ListHoneypotNode get

*HoneypotNode

acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}

Nenhum Nenhum
yundun-sas:DescribeSummaryInfo DescribeSummaryInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSoarStrategyTaskDetail DescribeSoarStrategyTaskDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCheckCountStatistic GetCheckCountStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpgradeHoneypotNode UpgradeHoneypotNode get

*All Resource

*

Nenhum Nenhum
yundun-sas:PublicCreateImageScanTask PublicCreateImageScanTask none

*All Resource

*

Nenhum Nenhum
yundun-sas:QueryAttackCount QueryAttackCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateAttackPathWhitelist UpdateAttackPathWhitelist update

*AttackPathWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#AttackPathWhitelistId}

Nenhum Nenhum
yundun-sas:DescribeWarningExportInfo DescribeWarningExportInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCustomizeReportList DescribeCustomizeReportList list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetModuleConfig GetModuleConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:VerifyCheckInstanceResult VerifyCheckInstanceResult update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCriteriaStrategy ListCriteriaStrategy list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeExposedStatisticsDetail DescribeExposedStatisticsDetail list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetSasContainerWebDefenseRuleCriteria GetSasContainerWebDefenseRuleCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAssetDetailByUuid GetAssetDetailByUuid get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyLogMetaStatus ModifyLogMetaStatus update

*All Resource

*

Nenhum Nenhum
yundun-sas:ResetHoneypot ResetHoneypot update

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyStrategy ModifyStrategy update

*BaselineStrategy

acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/{#BaselineStrategyId}

Nenhum Nenhum
yundun-sas:DescribeStrategyTarget DescribeStrategyTarget get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAttackPathSensitiveAssetConfig GetAttackPathSensitiveAssetConfig list

*AttackPathSensitiveAssetConfig

acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/{#AttackPathSensitiveAssetConfigId}

Nenhum Nenhum
yundun-sas:GetAttackPathEventStatistics GetAttackPathEventStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:BindAuthToMachine BindAuthToMachine update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteServiceTrail DeleteServiceTrail delete

*SasTrail

acs:yundun-sas:{#regionId}:{#accountId}:sastrail/*

Nenhum Nenhum
yundun-sas:GetFileProtectClientEventDashboard GetFileProtectClientEventDashboard list

*All Resource

*

Nenhum Nenhum
yundun-sas:StartBaselineSecurityCheck StartBaselineSecurityCheck update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAgentlessRiskUuid ListAgentlessRiskUuid list

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateImageVul OperateImageVul none

*All Resource

*

Nenhum Nenhum
yundun-sas:IgnoreIdcProbeScanResult IgnoreIdcProbeScanResult none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeLoginSwitchConfigs DescribeLoginSwitchConfigs get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAttackAnalysisData DescribeAttackAnalysisData get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetClusterCheckSummary GetClusterCheckSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateMonitorAccount CreateMonitorAccount create

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateMaliciousFileWhitelistConfig UpdateMaliciousFileWhitelistConfig update

*MaliciousFileWhitelistConfig

acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/{#ConfigId}

Nenhum Nenhum
yundun-sas:UpdateHybridProxy UpdateHybridProxy update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCheckProcess GetCheckProcess get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateAssetSelectionConfig CreateAssetSelectionConfig create

*AssetSelectionConfig

acs:yundun-sas:{#regionId}:{#accountId}:assetselectionconfig/*

Nenhum Nenhum
yundun-sas:ListFileProtectClientRuleFileType ListFileProtectClientRuleFileType list

*All Resource

*

Nenhum Nenhum
yundun-sas:ListRdDefaultSyncList ListRdDefaultSyncList list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeClientProblemType DescribeClientProblemType get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeExportInfo DescribeExportInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAssetsPropertyItem GetAssetsPropertyItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerScanConfig DescribeContainerScanConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSecurityEventOperations DescribeSecurityEventOperations get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteBackupSnapshot DeleteBackupSnapshot delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeScreenScoreThread DescribeScreenScoreThread get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyImageFixCycleConfig ModifyImageFixCycleConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyBackupPolicyStatus ModifyBackupPolicyStatus update

*BackupPolicy

acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}

Nenhum Nenhum
yundun-sas:DescribeWebLockInclusiveFileType DescribeWebLockInclusiveFileType get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulMetaCountStatistics DescribeVulMetaCountStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ResetLogShipper ResetLogShipper update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListClientUserDefineRules ListClientUserDefineRules get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockStatus DescribeWebLockStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCanAccessVpcSale DescribeCanAccessVpcSale get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageEventOperationPage DescribeImageEventOperationPage list

*ImageEventOperation

acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/*

Nenhum Nenhum
yundun-sas:DescribeImageInstances DescribeImageInstances get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteHoneypotProbeBind DeleteHoneypotProbeBind delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteSuspEventNode DeleteSuspEventNode delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBackupFiles DescribeBackupFiles get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSyncAssetTaskList DescribeSyncAssetTaskList list

*All Resource

*

Nenhum Nenhum
yundun-sas:ExportWarning ExportWarning none

*All Resource

*

Nenhum Nenhum
yundun-sas:GetMaliciousFileWhitelistConfig GetMaliciousFileWhitelistConfig get

*MaliciousFileWhitelistConfig

acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/{#ConfigId}

Nenhum Nenhum
yundun-sas:ListInterceptionTargetPage ListInterceptionTargetPage get

*All Resource

*

Nenhum Nenhum
yundun-sas:BatchCreateMaliciousNote BatchCreateMaliciousNote create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSuspiciousUUIDConfig DescribeSuspiciousUUIDConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDomainSecureVulList DescribeDomainSecureVulList get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCheckCountStatistic GetCheckTimeDimensionStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyContainerPluginRule ModifyContainerPluginRule update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeServiceLinkedRoleStatus DescribeServiceLinkedRoleStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateCustomizeReportStatus UpdateCustomizeReportStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageCriteria DescribeImageCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListContainerDefenseRuleClusters ListContainerDefenseRuleClusters get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyClientUserDefineRule ModifyClientUserDefineRule update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetVulStatistics GetVulStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAntiBruteForceRules DescribeAntiBruteForceRules get

*AntiBruteForceRule

acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}

Nenhum Nenhum
yundun-sas:DescribeImageLatestScanTask DescribeImageLatestScanTask get

*All Resource

*

Nenhum Nenhum
yundun-sas:RefreshRegistryToken RefreshRegistryToken update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCommonTargetResultList DescribeCommonTargetResultList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeFieldStatistics DescribeFieldStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSoarStrategyTasks DescribeSoarStrategyTasks get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateHoneypot CreateHoneypot create

*HoneyPot

acs:yundun-sas:{#regionId}:{#accountId}:honeypot/*

Nenhum Nenhum
yundun-sas:ModifyIdcProbe ModifyIdcProbe update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteSecurityEventMarkMissList DeleteSecurityEventMarkMissList delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteAntiBruteForceRule DeleteAntiBruteForceRule delete

*AntiBruteForceRule

acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}

Nenhum Nenhum
yundun-sas:SaveCustomizeReportConfig SaveCustomizeReportConfig create

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyVulTarget ModifyVulTarget update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeInstallCodes DescribeInstallCodes get

*All Resource

*

Nenhum Nenhum
yundun-sas:RemoveCheckResultWhiteList RemoveCheckResultWhiteList delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteSasContainerWebDefenseRule DeleteSasContainerWebDefenseRule delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSimilarSecurityEvents DescribeSimilarSecurityEvents get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeInstanceStatistics DescribeInstanceStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUniRecoverableList DescribeUniRecoverableList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeEventLevelCount DescribeEventLevelCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetClientUserDefineRule GetClientUserDefineRule get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAssetSelectionTarget ListAssetSelectionTarget list

*AssetSelectionTargetAttachment

acs:yundun-sas:{#regionId}:{#accountId}:assetselectiontargetattachment/*

Nenhum Nenhum
yundun-sas:ModifyWebLockUpdateConfig ModifyWebLockUpdateConfig update

*WebLockConfig

acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}

Nenhum Nenhum
yundun-sas:ListFileProtectRule ListFileProtectRule list

*ClientFileProtect

acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/*

Nenhum Nenhum
yundun-sas:DescribeLatestScanTask DescribeLatestScanTask get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeClusterHostSecuritySummary DescribeClusterHostSecuritySummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetDockerhubImageRiskRankInfo GetDockerhubImageRiskRankInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:SetRegistryScanDayNum SetRegistryScanDayNum update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyCronDetail DescribePropertyCronDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetRulesCount GetRulesCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateFileDeepAnalyze CreateFileDeepAnalyze create

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAuthSummary GetAuthSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyCount DescribePropertyCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeClusterScannerList DescribeClusterScannerList get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetSasContainerWebDefenseRule GetSasContainerWebDefenseRule get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteTagWithUuid DeleteTagWithUuid delete

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckItemWarningMachine ListCheckItemWarningMachine list

*All Resource

*

Nenhum Nenhum
yundun-sas:ListOperationProcessDetail ListOperationProcessDetail list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBruteForceRecords DescribeBruteForceRecords list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeRiskCheckSummary DescribeRiskCheckSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:ConfirmVirusEvents ConfirmVirusEvents update

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateCheckItem CreateCheckItem create

*CustomCheckItem

acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/*

Nenhum Nenhum
yundun-sas:ListClusterCheckResult ListClusterCheckResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:InstallCloudMonitor InstallCloudMonitor none

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateOrUpdateDingTalk CreateOrUpdateDingTalk create

*All Resource

*

Nenhum Nenhum
yundun-sas:ListSupportAttackPathAsset ListSupportAttackPathAsset list

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateCheckPolicy UpdateCheckPolicy update

*CustomCheckStandardPolicy

acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/{#customcheckstandardpolicyId}

Nenhum Nenhum
yundun-sas:DescribeDomainList DescribeDomainList get

*All Resource

*

Nenhum Nenhum
yundun-sas:SubmitCheck SubmitCheck none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageBaselineDetail DescribeImageBaselineDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListUnknownThreatDetectStrategy ListUnknownThreatDetectStrategy list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileDetectReport GetFileDetectReport get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateOpaStrategyNew UpdateOpaStrategyNew update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetImageScanNumInPeriod GetImageScanNumInPeriod get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeEventOnStage DescribeEventOnStage get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeExposedInstanceCriteria DescribeExposedInstanceCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAccessKeyLeakDetail DescribeAccessKeyLeakDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:QueryJenkinsImageRegistryPersistenceDay QueryJenkinsImageRegistryPersistenceDay get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDataSource DescribeDataSource get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUniSupportRegion DescribeUniSupportRegion get

*All Resource

*

Nenhum Nenhum
yundun-sas:ProcessSoarStrategyTask ProcessSoarStrategyTask update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetHoneypotStatistics GetHoneypotStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeClientConfSetup DescribeClientConfSetup get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeRestorePlans DescribeRestorePlans get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyContainerScanConfig ModifyContainerScanConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetSuspiciousStatistics GetSuspiciousStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDomainSecureStatistics DescribeDomainSecureStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateAttackPathWhitelist CreateAttackPathWhitelist create

*AttackPathWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/*

Nenhum Nenhum
yundun-sas:OperateUnknownThreatDetectMachine OperateUnknownThreatDetectMachine update

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateJenkinsImageRegistryPersistenceDay UpdateJenkinsImageRegistryPersistenceDay update

*All Resource

*

Nenhum Nenhum
yundun-sas:AddAssetSelectionCriteria AddAssetSelectionCriteria create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSecurityEventOperationStatus DescribeSecurityEventOperationStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAvailableHoneypot ListAvailableHoneypot get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWhiteListEffectiveAssets DescribeWhiteListEffectiveAssets get

*All Resource

*

Nenhum Nenhum
yundun-sas:SetBuildRiskDefineRuleConfig SetBuildRiskDefineRuleConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCloudAssetMatchOperators ListCloudAssetMatchOperators list

*All Resource

*

Nenhum Nenhum
yundun-sas:QueryGroupedSecurityEventMarkMissList QueryGroupedSecurityEventMarkMissList get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateCustomBlockRecord CreateCustomBlockRecord create

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateCustomizedDict CreateCustomizedDict create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWhiteListStrategyStatistics DescribeWhiteListStrategyStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetSupportedModules GetSupportedModules list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCountScannedImage DescribeCountScannedImage get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifySecurityCheckScheduleConfig ModifySecurityCheckScheduleConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAffectedAssets DescribeAffectedAssets get

*All Resource

*

Nenhum Nenhum
yundun-sas:UploadedHoneyPotFile UploadedHoneyPotFile update

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateCycleTask CreateCycleTask create

*CycleTask

acs:yundun-sas:{#regionId}:{#accountId}:cycletask/*

Nenhum Nenhum
yundun-sas:GetOpaStrategyTemplateSummary GetOpaStrategyTemplateSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypot ListHoneypot get

*HoneyPot

acs:yundun-sas:{#regionId}:{#accountId}:honeypot/*

Nenhum Nenhum
yundun-sas:UpdateImageVulWhitelistTarget UpdateImageVulWhitelistTarget update

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyInterceptionRule ModifyInterceptionRule update

*All Resource

*

Nenhum Nenhum
yundun-sas:QueryGuidTaskList QueryGuidTaskList list

*All Resource

*

Nenhum Nenhum
yundun-sas:addCloudVendorTrialConfig AddCloudVendorTrialConfig create

*All Resource

*

Nenhum Nenhum
yundun-sas:StartHoneypot StartHoneypot update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWebLockProcessBlockStatistics DescribeWebLockProcessBlockStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListUninstallAegisMachines ListUninstallAegisMachines get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyClientConfSetup ModifyClientConfSetup update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageRepoCriteria DescribeImageRepoCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateUnknownThreatDetectStrategy UpdateUnknownThreatDetectStrategy update

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyVulTargetConfig ModifyVulTargetConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeScanTaskProgress DescribeScanTaskProgress get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListSupportObjectSuffix ListSupportObjectSuffix get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAlarmEventStackInfo DescribeAlarmEventStackInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDynamicDict DescribeDynamicDict get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAegisForLingjunStatus ListAegisForLingjunStatus none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWarningMachines DescribeWarningMachines get

*All Resource

*

Nenhum Nenhum
yundun-sas:InstallBackupClient InstallBackupClient none

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateRdDefaultSyncList CreateRdDefaultSyncList update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListUnknownThreatDetectProcess ListUnknownThreatDetectProcess list

*All Resource

*

Nenhum Nenhum
yundun-sas:ListKspmInstances ListKspmInstances get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyAppVulScanCycle ModifyAppVulScanCycle update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeUserBaselineAuthorization DescribeUserBaselineAuthorization get

*All Resource

*

Nenhum Nenhum
yundun-sas:ExportVul ExportVul none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckItem ListCheckItem list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulFixStatistics DescribeVulFixStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateRestoreJob CreateRestoreJob create

*All Resource

*

Nenhum Nenhum
yundun-sas:AddClientUserDefineRule AddClientUserDefineRule create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeBruteForceSummary DescribeBruteForceSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeHcExportInfo DescribeHcExportInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeClusterInfoList DescribeClusterInfoList get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeHybridProxyPolicy DescribeHybridProxyPolicy get

*All Resource

*

Nenhum Nenhum
yundun-sas:ExportRecord ExportRecord none

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteOssScanConfig DeleteOssScanConfig delete

*OssScanConfig

acs:yundun-sas:*:{#accountId}:ossscanconfig/{#ConfigId}

Nenhum Nenhum
yundun-sas:AddCheckResultWhiteList AddCheckResultWhiteList create

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteAttackPathSensitiveAssetConfig DeleteAttackPathSensitiveAssetConfig delete

*AttackPathSensitiveAssetConfig

acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/{#attackpathsensitiveassetconfigId}

Nenhum Nenhum
yundun-sas:DeleteCycleTask DeleteCycleTask delete

*CycleTask

acs:yundun-sas:{#regionId}:{#accountId}:cycletask/{#ConfigId}

Nenhum Nenhum
yundun-sas:HandleSimilarSecurityEvents HandleSimilarSecurityEvents none

*All Resource

*

Nenhum Nenhum
yundun-sas:ChangeUserLang ChangeUserLang update

*All Resource

*

Nenhum Nenhum
yundun-sas:ChangeCheckConfig ChangeCheckConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageEvenOperationCondition DescribeImageEventOperationCondition list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCheckSale GetCheckSale get

*All Resource

*

Nenhum Nenhum
yundun-sas:AddImageEventOperation AddImageEventOperation create

*ImageEventOperation

acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/*

Nenhum Nenhum
yundun-sas:SaveImageBaselineStrategy SaveImageBaselineStrategy create

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateUniBackupPolicy CreateUniBackupPolicy create

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateHoneypotNode CreateHoneypotNode create

*HoneypotNode

acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/*

Nenhum Nenhum
yundun-sas:InstallHybridProxy InstallHybridProxy create

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateSasTrial CreateSasTrial create

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeFixUsedCount DescribeFixUsedCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyRefreshProcessInfo ModifyRefreshProcessInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWhiteListStrategyUuidCount DescribeWhiteListStrategyUuidCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAgentInstallStatus DescribeAgentInstallStatus get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetModuleTrialAuthInfo GetModuleTrialAuthInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAegisContainerPluginRule ListAegisContainerPluginRule list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteFileProtectRule DeleteFileProtectRule delete

*ClientFileProtect

acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/{#RuleId}

Nenhum Nenhum
yundun-sas:CreateContainerScanTaskByAppName CreateContainerScanTaskByAppName create

*All Resource

*

Nenhum Nenhum
yundun-sas:GetClusterRuleSummary GetClusterRuleSummary get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeContainerFieldStatistics DescribeContainerFieldStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetSecurityScoreRule GetSecurityScoreRule get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateHoneypotPreset CreateHoneypotPreset create

*HoneypotPreset

acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/*

Nenhum Nenhum
yundun-sas:CreateBatchUploadURL CreateBatchUploadUrl none

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateApplication OperateApplication update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteAutoTagRules DeleteAutoTagRules delete

*All Resource

*

Nenhum Nenhum
yundun-sas:AddPublishBatch AddPublishBatch create

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAgentlessRegion ListAgentlessRegion list

*All Resource

*

Nenhum Nenhum
yundun-sas:SetImageSensitiveFileStatus SetImageSensitiveFileStatus none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSecurityStatInfo DescribeSecurityStatInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeLogMeta DescribeLogMeta get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateAgentlessScanTask CreateAgentlessScanTask create

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateCheckScopeConfig UpdateCheckScopeConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetClusterScannerYaml GetClusterScannerYaml get

*ClusterScannerYaml

acs:yundun-sas:{#regionId}:{#accountId}:clusterscanneryaml/${#ClusterId}

Nenhum Nenhum
yundun-sas:SendCustomizeReport SendCustomizeReport none

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateFileProtectClientRule UpdateFileProtectClientRule update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileProtectEvent GetFileProtectEvent get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAgentlessTask ListAgentlessTask list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCheckWarnings DescribeCheckWarnings get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileProtectDashboard GetFileProtectDashboard get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeExposedInstanceDetail DescribeExposedInstanceDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetImageEventOperation GetImageEventOperation get

*ImageEventOperation

acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/{#ImageEventOperationId}

Nenhum Nenhum
yundun-sas:UpdateFileProtectClientEvent UpdateFileProtectClientEvent update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCurrentVersionPublish GetCurrentVersionPublish get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyCronItem DescribePropertyCronItem get

*All Resource

*

Nenhum Nenhum
yundun-sas:ExecStrategy ExecStrategy none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAgentlessSensitiveFileByKey DescribeAgentlessSensitiveFileByKey get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeIdcProbeScanResultList DescribeIdcProbeScanResultList get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetDockerhubImageRiskStatistic GetDockerhubImageRiskStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAegisContainerPluginRule GetAegisContainerPluginRule get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCheckWarningMachines DescribeCheckWarningMachines get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVolDingdingMessage DescribeVolDingdingMessage get

*All Resource

*

Nenhum Nenhum
yundun-sas:AddInstallCode AddInstallCode create

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileProtectClientRule GetFileProtectClientRule get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeEmgUserAgreement DescribeEmgUserAgreement get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateAttackPathSensitiveAssetConfig UpdateAttackPathSensitiveAssetConfig update

*AttackPathSensitiveAssetConfig

acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/{#AttackPathSensitiveAssetConfigId}

Nenhum Nenhum
yundun-sas:GetOpaClusterImageList GetOpaClusterImageList list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteContainerDefenseRule DeleteContainerDefenseRule delete

*ContainerDefenseRule

acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}

Nenhum Nenhum
yundun-sas:ListUserVpc ListUserVpc list

*All Resource

*

Nenhum Nenhum
yundun-sas:StartVirusScanTask StartVirusScanTask update

*All Resource

*

Nenhum Nenhum
yundun-sas:ListUnknownThreatDetectEvent ListUnknownThreatDetectEvent list

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateCommonSwitchConfig UpdateCommonSwitchConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:ReceiveFunctionTrialRewardByAliUid ReceiveFunctionTrialRewardByAliUid get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateMaliciousNote CreateMaliciousNote get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetClusterSuspEventStatistics GetClusterSuspEventStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAgentlessMaliciousFiles ListAgentlessMaliciousFiles get

*All Resource

*

Nenhum Nenhum
yundun-sas:OperateWebLockFileEvents OperateWebLockFileEvents none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListHoneypotPreset ListHoneypotPreset get

*HoneypotPreset

acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/*

Nenhum Nenhum
yundun-sas:GetAgentlessTaskCount GetAgentlessTaskCount get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeQuaraFileDownloadInfo DescribeQuaraFileDownloadInfo get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageSensitiveFileList DescribeImageSensitiveFileList get

*All Resource

*

Nenhum Nenhum
yundun-sas:PageImageRegistry PageImageRegistry get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetCloudAssetDetail GetCloudAssetDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSecurityEventMarkMissList DescribeSecurityEventMarkMissList get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetServerlessAppAuthDetail GetServerlessAppAuthDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListClusterPluginInfo ListClusterPluginInfo list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetBuildRiskDefineRuleConfig GetBuildRiskDefineRuleConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:QueryPreCheckDatabase QueryPreCheckDatabase get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetSasContainerWebDefenseRuleApplication GetSasContainerWebDefenseRuleApplication get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeWhiteListStrategyList DescribeWhiteListStrategyList list

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteImageEventOperation DeleteImageEventOperation delete

*ImageEventOperation

acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/{#ImageEventOperationId}

Nenhum Nenhum
yundun-sas:ListMaliciousFileWhitelistConfigs ListMaliciousFileWhitelistConfigs list

*MaliciousFileWhitelistConfig

acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/*

Nenhum Nenhum
yundun-sas:DeleteSoarStrategyTask DeleteSoarStrategyTask delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeAIAssetSummary DescribeAIAssetSummary none

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateInterceptionRule CreateInterceptionRule create

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteAttackPathWhitelist DeleteAttackPathWhitelist delete

*AttackPathWhitelist

acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#attackpathwhitelistId}

Nenhum Nenhum
yundun-sas:ListObjectScanEvent ListObjectScanEvent get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeIdcProbeList DescribeIdcProbeList get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListOperatedCheck ListOperationCheck list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetFileProtectRule GetFileProtectRule get

*ClientFileProtect

acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/{#RuleId}

Nenhum Nenhum
yundun-sas:DeleteCustomizedDict DeleteCustomizedDict delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeTraceInfoDetail DescribeTraceInfoDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribePropertyScaProcessDetail DescribePropertyScaProcessDetail none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListContainerNetworkConnect FindContainerNetworkConnect none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeDomainSecureAlarmList DescribeDomainSecureAlarmList list

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyPropertyScheduleConfig ModifyPropertyScheduleConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:UpdateFileProtectEventStatus UpdateFileProtectEventStatus update

*All Resource

*

Nenhum Nenhum
yundun-sas:GetStrategyTemplateDetail GetStrategyTemplateDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:GetAuthVersionStatistic GetAuthVersionStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:UpgradeBackupPolicyVersion UpgradeBackupPolicyVersion none

*BackupPolicy

acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}

Nenhum Nenhum
yundun-sas:QueryGroupIdByGroupName QueryGroupIdByGroupName get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckResult ListCheckResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeSnapshots DescribeSnapshots get

*All Resource

*

Nenhum Nenhum
yundun-sas:CreateFileUploadLimit CreateFileUploadLimit create

*FileUploadLimit

acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit/*

Nenhum Nenhum
yundun-sas:CreateCheckPolicy CreateCheckPolicy create

*CustomCheckStandardPolicy

acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/*

Nenhum Nenhum
yundun-sas:GetHoneypotPreset GetHoneypotPreset get

*HoneypotPreset

acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/{#HoneypotPresetId}

Nenhum Nenhum
yundun-sas:ListVulGlobalConfig ListVulGlobalConfig list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeCheckFixDetails DescribeCheckFixDetails get

*All Resource

*

Nenhum Nenhum
yundun-sas:AdvanceSecurityEventOperations AdvanceSecurityEventOperations none

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeIdcAssetCriteria DescribeIdcAssetCriteria get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteInstallCode DeleteInstallCode delete

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeVulTargetConfig DescribeVulTargetConfig get

*All Resource

*

Nenhum Nenhum
yundun-sas:SetSensitiveDefineRuleConfig SetSensitiveDefineRuleConfig update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeGroupStruct DescribeGroupStruct none

*All Resource

*

Nenhum Nenhum
yundun-sas:ListFileProtectEvent ListFileProtectEvent list

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageListWithBaselineName DescribeImageListWithBaselineName get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyBackupPolicy ModifyBackupPolicy update

*BackupPolicy

acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}

Nenhum Nenhum
yundun-sas:DescribePropertyUserDetail DescribePropertyUserDetail get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyOperateVul ModifyOperateVul update

*All Resource

*

Nenhum Nenhum
yundun-sas:DescribeImageBaselineCheckResult DescribeImageBaselineCheckResult get

*All Resource

*

Nenhum Nenhum
yundun-sas:ModifyConcernNecessity ModifyConcernNecessity update

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteVpcHoneyPot DeleteVpcHoneyPot delete

*All Resource

*

Nenhum Nenhum
yundun-sas:SasInstallCode SasInstallCode none

*All Resource

*

Nenhum Nenhum
yundun-sas:AddPrivateRegistry AddPrivateRegistry create

*All Resource

*

Nenhum Nenhum
yundun-sas:ListContainerDefenseRule ListContainerDefenseRule get

*ContainerDefenseRule

acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/*

Nenhum Nenhum
yundun-sas:UpdateHoneypotProbe UpdateHoneypotProbe update

*HoneypotProbe

acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/{#HoneypotProbeId}

Nenhum Nenhum
yundun-sas:GetUnknownThreatDetectStatistic GetUnknownThreatDetectStatistic get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListAvailableAttackPath ListAvailableAttackPath get

*All Resource

*

Nenhum Nenhum
yundun-sas:DeleteInterceptionTarget DeleteInterceptionTarget delete

*All Resource

*

Nenhum Nenhum
yundun-sas:GetClusterCheckItemWarningStatistics GetClusterCheckItemWarningStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListCheckRuleInstances ListCheckRuleInstance list

*All Resource

*

Nenhum Nenhum
yundun-sas:GetHoneypotAttackStatistics GetHoneypotAttackStatistics get

*All Resource

*

Nenhum Nenhum
yundun-sas:ListInstanceCatalog ListInstanceCatalog get

*All Resource

*

Nenhum Nenhum

Resource

A tabela a seguir lista os recursos definidos por Security Center. Especifique-os no elemento Resource das instruções de política RAM para conceder permissões para operações específicas. Eles são identificados de forma exclusiva por ARNs. Formato: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

  • acs: A sigla do serviço da Alibaba Cloud, que indica a nuvem pública da Alibaba Cloud.

  • {#ramcode}: O código usado no RAM para indicar um serviço da Alibaba Cloud.

  • {#regionId}: O ID da região. Se o recurso abrange todas as regiões, defina-o como um asterisco (*).

  • {#accountId}: O ID da conta da Alibaba Cloud. Se o recurso abrange todas as contas da Alibaba Cloud, defina-o como um asterisco (*).

  • {#resourceType}: O identificador de recurso definido pelo serviço. Suporta uma estrutura hierárquica, semelhante a um caminho de arquivo. Se a instrução abrange recursos globais, defina-o como um asterisco (*).

Tipo de recurso

ARN

HoneyPot
  • acs:yundun-sas:{#regionId}:{#accountId}:honeypot/*
  • acs:yundun-sas:{#regionId}:{#accountId}:honeypot/{#HoneypotId}
ContainerDefenseRule
  • acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/{#RuleId}
  • acs:yundun-sas:{#regionId}:{#accountId}:containerdefenserule/*
AssetSelectionConfig
  • acs:yundun-sas:{#regionId}:{#accountId}:assetselectionconfig/{#BusinessType}
  • acs:yundun-sas:{#regionId}:{#accountId}:assetselectionconfig/*
AntiBruteForceRule
  • acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/{#AntiBruteForceRuleId}
  • acs:yundun-sas:{#regionId}:{#accountId}:antibruteforcerule/*
FileUploadLimit
  • acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit
  • acs:yundun-sas:{#regionId}:{#accountId}:fileuploadlimit/*
OssScanConfig
  • acs:yundun-sas:*:{#accountId}:ossscanconfig/{#ConfigId}
  • acs:yundun-sas:*:{#accountId}:ossscanconfig/*
HoneypotProbe
  • acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/{#HoneypotProbeId}
  • acs:yundun-sas:{#regionId}:{#accountId}:honeypotprobe/*
WebLockBind
  • acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/{#Uuid}
  • acs:yundun-sas:{#regionId}:{#accountId}:weblockbind/*
BaselineStrategy
  • acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/{#BaselineStrategyId}
  • acs:yundun-sas:{#regionId}:{#accountId}:baselinestrategy/*
FileProtectClientRule
  • acs:yundun-sas:{#regionId}:{#accountId}:fileprotectclientrule/*
ClientFileProtect
  • acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/*
  • acs:yundun-sas:{#regionId}:{#accountId}:clientfileprotect/{#RuleId}
SasTrail
  • acs:yundun-sas:{#regionId}:{#accountId}:sastrail
  • acs:yundun-sas:{#regionId}:{#accountId}:sastrail/*
ClusterScannerYaml
  • acs:yundun-sas:{#regionId}:{#accountId}:clusterscanneryaml/*
  • acs:yundun-sas:{#regionId}:{#accountId}:clusterscanneryaml/${#ClusterId}
VulWhitelist
  • acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/*
  • acs:yundun-sas:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}
  • acs:threatdetection:{#regionId}:{#accountId}:vulwhitelist/{#VulWhitelistId}
CustomCheckItem
  • acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#CheckId}
  • acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/{#customcheckitemId}
  • acs:yundun-sas:{#regionId}:{#accountId}:customcheckitem/*
Group
  • acs:yundun-sas:{#regionId}:{#accountId}:group/*
  • acs:yundun-sas:{#regionId}:{#accountId}:group/{#GroupId}
ImageEventOperation
  • acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/{#ImageEventOperationId}
  • acs:yundun-sas:{#regionId}:{#accountId}:imageeventoperation/*
CycleTask
  • acs:yundun-sas:{#regionId}:{#accountId}:cycletask/{#ConfigId}
  • acs:yundun-sas:{#regionId}:{#accountId}:cycletask/*
BackupPolicy
  • acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/{#BackupPolicyId}
  • acs:yundun-sas:{#regionId}:{#accountId}:backuppolicy/*
HoneypotNode
  • acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/{#NodeId}
  • acs:yundun-sas:{#regionId}:{#accountId}:honeypotnode/*
WebLockConfig
  • acs:yundun-sas:{#regionId}:{#accountId}:weblockconfig/{#Uuid}
LogMeta
  • acs:yundun-sas:{#regionId}:{#accountId}:logmeta/{#LogMetaName}
Asset
  • acs:yundun-sas:{#regionId}:{#accountId}:asset/*
AttackPathSensitiveAssetConfig
  • acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/*
  • acs:yundun-sas:{#regionId}:{#accountId}:attackpathsensitiveassetconfig/{#AttackPathSensitiveAssetConfigId}
CustomCheckStandardPolicy
  • acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/{#customcheckstandardpolicyId}
  • acs:yundun-sas:{#regionId}:{#accountId}:customcheckstandardpolicy/*
LogShipper
  • acs:yundun-sas:{#regionId}:{#accountId}:logshipper
  • acs:yundun-sas:{#regionId}:{#accountId}:logshipper/*
MaliciousFileWhitelistConfig
  • acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/{#ConfigId}
  • acs:yundun-sas:{#regionId}:{#accountId}:maliciousfilewhitelistconfig/*
HoneypotPreset
  • acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/{#HoneypotPresetId}
  • acs:yundun-sas:{#regionId}:{#accountId}:honeypotpreset/*
OperationProcess
  • acs:yundun-sas:{#regionId}:{#accountId}:operationprocess/{#TaskId}
AssetBind
  • acs:yundun-sas:{#regionId}:{#accountId}:assetbind/{#Uuid}
FileProtectClientEvent
  • acs:yundun-sas:{#regionId}:{#accountId}:fileprotectclientevent/*
AttackPathWhitelist
  • acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/*
  • acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#AttackPathWhitelist}
  • acs:yundun-sas:{#regionId}:{#accountId}:attackpathwhitelist/{#AttackPathWhitelistId}
AssetSelectionTargetAttachment
  • acs:yundun-sas:{#regionId}:{#accountId}:assetselectiontargetattachment/*

Condition

A tabela a seguir lista as chaves de condição em nível de produto definidas por Security Center. Você também pode usar as Chaves de condição comuns da Alibaba Cloud. Especifique essas chaves no elemento Condition das instruções de política RAM para definir regras de autorização granulares. Na chave de condição, especifique os valores de condição no elemento Condition_value da política.

Cada chave de condição possui um tipo de dado específico, como string, número, booleano ou endereço IP. O tipo de dado determina quais operadores condicionais podem ser usados para comparar os valores da solicitação com os valores da política. Você deve especificar os operadores condicionais compatíveis com o tipo de dado da chave de condição. Operadores incompatíveis tornarão a política inválida. Consulte Operador de condição para combinações válidas.

Chave de condição

Descrição

Tipo de dado

acs:ResourceGroupId O ID do grupo de recursos. String

Como criar políticas RAM personalizadas?

Você pode criar políticas personalizadas e concedê-las a usuários RAM, grupos de usuários RAM ou funções RAM. Para instruções, consulte: