授權信息 - Microservices Engine

存取控制（RAM）是阿里雲提供的系統管理使用者身份與資源存取權限的服務。使用 RAM 可以讓您避免與其他使用者共用阿里雲帳號密鑰，並可按需為使用者授予最小許可權。RAM 中使用權限原則描述授權的具體內容。

本文為您介紹為 RAM 權限原則定義的操作（Action）、資源（Resource）和條件（Condition）。的 RAM 代碼（RamCode）為 mse,microgw ，支援的授權粒度為 RESOURCE 。

權限原則通用結構

權限原則支援 JSON 格式，其通用結構如下：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

各欄位含義如下：

Effect：權限原則效果。取值：Allow（允許）、Deny（拒絕）。
Action：授予允許或拒絕許可權的具體操作。具體資訊，請參見操作（Action）。
Resource：受操作影響的具體對象，您可以使用資源 ARN 來描述指定資源。具體資訊，請參見資源（Resource）。
Condition：指授權生效的條件。可選欄位。具體資訊，請參見條件（Condition）。
- Condition_operator：條件運算子，不同類型的條件對應不同的條件運算子。具體資訊，請參見權限原則基本元素。
- Condition_key：條件關鍵字。
- Condition_value：條件關鍵字對應的值。

操作（Action）

下表是定義的操作，這些操作可以在 RAM 權限原則語句的Action元素中使用，用來授予執行該操作的許可權。下面對錶中的具體項提供說明：

操作：是指具體的許可權點。
API：是指操作對應的 API 介面。
存取層級：是指每個操作的存取層級，取值為寫入（Write）、讀取（Read）或列出（List）。
資源類型：是指操作中支援授權的資源類型。具體說明如下：
- 對於必選的資源類型，用前面加 * 表示。
- 對於不支援資源級授權的操作，用全部資源表示。
條件關鍵字：是指雲產品自身定義的條件關鍵字。該列不體現適用於任何操作的通用條件關鍵字。
關聯操作：是指成功執行操作所需要的其他許可權。操作者必須同時具備關聯操作的許可權，操作才能成功。

操作	API	存取層級	資源類型	條件關鍵字	關聯操作
mse:QueryZnodeDetail	QueryZnodeDetail	get	All Resource ``	無	無
mse:QueryGatewayType	QueryGatewayType	get	All Resource ``	無	無
mse:GetServiceList	GetServiceList	get	All Resource ``	無	無
mse:GetNacosConfig	GetNacosConfig	get	*EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:FetchLosslessRuleList	FetchLosslessRuleList	get	All Resource ``	無	無
mse:DeleteBlackWhiteList	DeleteBlackWhiteList	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetTagsBySwimmingLaneGroupId	GetTagsBySwimmingLaneGroupId	get	All Resource ``	無	無
mse:GetMseSource	GetMseSource	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateSSLCert	UpdateSSLCert	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListInstanceCount	ListInstanceCount	get	All Resource ``	無	無
mse:ListAppBySwimmingLaneGroupTag	ListAppBySwimmingLaneGroupTag	get	All Resource ``	無	無
mse:UpdateGatewayDomain	UpdateGatewayDomain	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewayRouteAuth	UpdateGatewayRouteAuth		*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteSwimmingLane	DeleteSwimmingLane	delete	All Resource ``	無	無
mse:CloneSentinelRuleFromAhas	CloneSentinelRuleFromAhas	create	All Resource ``	無	無
mse:DeleteNacosConfig	DeleteNacosConfig	delete	All Resource ``	無	無
mse:GetOverview	GetOverview		All Resource ``	無	無
mse:ListSSLCert	ListSSLCert	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteGatewayRoute	DeleteGatewayRoute	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListGatewayFlowRule	ListGatewayFlowRule	list	All Resource ``	無	無
mse:UpdateConfig	UpdateConfig	update	All Resource ``	無	無
mse:ImportServices	ImportServices	create	All Resource ``	無	無
mse:UpdateGatewayAuthConsumerResource	UpdateGatewayAuthConsumerResource	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetGatewayRouteDetail	GetGatewayRouteDetail	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:QuerySwimmingLaneById	QuerySwimmingLaneById	get	*GovernanceNamespace `acs:mse:{#regionId}:{#accountId}:namespace/{#Namespace}`	無	無
mse:UpdateIsolationRule	UpdateIsolationRule	update	All Resource ``	無	無
mse:UpdateNacosInstance	UpdateNacosInstance	update	All Resource ``	無	無
mse:ListGatewayAuthConsumerResource	ListGatewayAuthConsumerResource		*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListGatewayIsolationRule	ListGatewayIsolationRule	list	All Resource ``	無	無
mse:DeleteIsolationRules	DeleteIsolationRules	delete	All Resource ``	無	無
mse:DeleteCluster	DeleteCluster	delete	All Resource ``	無	無
mse:DeleteSecurityGroupRule	DeleteSecurityGroupRule	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewayRouteTimeout	UpdateGatewayRouteTimeout	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetImportFileUrl	GetImportFileUrl	get	Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}` EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:AddGateway	AddGateway	create	Gateway `acs:mse:{#regionId}:{#accountId}:instance/`	無	無
mse:ListClusterTypes	ListClusterTypes		All Resource ``	無	無
mse:ListZkTrack	ListZkTrack	list	All Resource ``	無	無
mse:UpdateMigrationTask	UpdateMigrationTask	update	All Resource ``	無	無
mse:UpdateCluster	UpdateCluster	update	All Resource ``	無	無
mse:DeleteGatewayAuthConsumerResource	DeleteGatewayAuthConsumerResource		*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewayName	UpdateGatewayName	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListClusterHealthCheckTask	ListClusterHealthCheckTask	get	All Resource ``	無	無
mse:TagResources	TagResources	update	All Resource ``	無	無
mse:GetLocalityRule	GetLocalityRule	get	All Resource ``	無	無
mse:QueryClusterInfo	QueryClusterInfo	get	All Resource ``	無	無
mse:ListIsolationRules	ListIsolationRules	list	All Resource ``	無	無
mse:DeleteGatewayDomain	DeleteGatewayDomain	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:QueryMonitor	QueryMonitor	get	All Resource ``	無	無
mse:AddAuthPolicy	AddAuthPolicy	update	All Resource ``	無	無
mse:AddGatewaySlb	AddGatewaySlb	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteEngineNamespace	DeleteEngineNamespace	delete	All Resource ``	無	無
mse:UpdateGatewayRoute	UpdateGatewayRoute	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListNacosMcpServers	ListNacosMcpServers	list	All Resource ``	無	無
mse:ListEurekaServices	ListEurekaServices	get	All Resource ``	無	無
mse:QueryInstancesInfo	QueryInstancesInfo	get	All Resource ``	無	無
mse:GetAppMessageQueueRoute	GetAppMessageQueueRoute	get	All Resource ``	無	無
mse:CreateGatewayIsolationRule	CreateGatewayIsolationRule	create	All Resource ``	無	無
mse:ListZnodeChildren	ListZnodeChildren	list	All Resource ``	無	無
mse:AddMigrationTask	AddMigrationTask	create	All Resource ``	無	無
mse:AddAuthResource	AddAuthResource	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListConfigTrack	ListConfigTrack	list	Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}` EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:DeleteGateway	DeleteGateway	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:AddGatewayRoute	AddGatewayRoute	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListGateway	ListGateway	get	All Resource ``	無	無
mse:CloneNacosConfig	CloneNacosConfig	create	All Resource ``	無	無
mse:QueryAllSwimmingLaneGroup	QueryAllSwimmingLaneGroup	get	All Resource ``	無	無
mse:UpdateNacosConfig	UpdateNacosConfig	update	All Resource ``	無	無
mse:GetNacosMcpServer	GetNacosMcpServer	get	All Resource ``	無	無
mse:CreateOrUpdateSwimmingLaneGroup	CreateOrUpdateSwimmingLaneGroup	update	*GovernanceNamespace `acs:mse:{#regionId}:{#accountId}:namespace/{#Namespace}`	無	無
mse:ApplyGatewayRoute	ApplyGatewayRoute	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListGatewayDomain	ListGatewayDomain	list	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListClusters	ListClusters	get	All Resource ``	無	無
mse:CreateEngineNamespace	CreateEngineNamespace	create	All Resource ``	無	無
mse:DeleteGatewayCircuitBreakerRule	DeleteGatewayCircuitBreakerRule	delete	All Resource ``	無	無
mse:CreateMseServiceApplication	CreateMseServiceApplication	get	All Resource ``	無	無
mse:ExportZookeeperData	ExportZookeeperData	get	All Resource ``	無	無
mse:AddSSLCert	AddSSLCert	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateMessageQueueRoute	UpdateMessageQueueRoute	update	All Resource ``	無	無
mse:DeleteGatewayService	DeleteGatewayService	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewayRouteWafStatus	UpdateGatewayRouteWafStatus	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetGovernanceKubernetesCluster	GetGovernanceKubernetesCluster	get	All Resource ``	無	無
mse:RestartCluster	RestartCluster	update	*Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}`	無	無
mse:GetApplicationInstanceList	GetApplicationInstanceList	get	All Resource ``	無	無
mse:ListGatewayAuth	ListGatewayAuth	get	All Resource ``	無	無
mse:ListGatewayRouteOnAuth	ListGatewayRouteOnAuth	list	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteNacosService	DeleteNacosService	update	All Resource ``	無	無
mse:UpdateZooKeeperSaslUser	UpdateZooKeeperSaslUser	update	All Resource ``	無	無
mse:AddZooKeeperSaslUser	AddZooKeeperSaslUser	create	All Resource ``	無	無
mse:DeleteMigrationTask	DeleteMigrationTask	delete	All Resource ``	無	無
mse:DeleteWebFlowRules	DeleteWebFlowRules	delete	All Resource ``	無	無
mse:GetServiceListeners	GetServiceListeners	get	Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}` EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:CreateNacosInstance	CreateNacosInstance	create	All Resource ``	無	無
mse:GetNacosHistoryConfig	GetNacosHistoryConfig	get	All Resource ``	無	無
mse:ListWebFlowRules	ListWebFlowRules	list	All Resource ``	無	無
mse:CreateCircuitBreakerRule	CreateCircuitBreakerRule	create	All Resource ``	無	無
mse:CreateNacosMcpServer	CreateNacosMcpServer	create	All Resource ``	無	無
mse:UpdateNacosConfig	UpdateNacosGrayConfig	update	All Resource ``	無	無
mse:ListNacosConfigs	ListNacosConfigs	get	All Resource ``	無	無
mse:CreateIsolationRule	CreateIsolationRule	create	All Resource ``	無	無
mse:PutClusterHealthCheckTask	PutClusterHealthCheckTask		*Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}`	無	無
mse:GatewayBlackWhiteList	GatewayBlackWhiteList	get	All Resource ``	無	無
mse:ListTagResources	ListTagResources	get	All Resource ``	無	無
mse:QueryAllSwimmingLane	QueryAllSwimmingLane	get	*GovernanceNamespace `acs:mse:{#regionId}:{#accountId}:namespace/{#Namespace}`	無	無
mse:CreateNacosConfig	CreateNacosConfig	get	All Resource ``	無	無
mse:ListApplicationsWithTagRules	ListApplicationsWithTagRules	get	All Resource ``	無	無
mse:UpdateZnode	UpdateZnode	update	All Resource ``	無	無
mse:UpdateBlackWhiteList	UpdateBlackWhiteList	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewayServiceCheck	UpdateGatewayServiceCheck	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:QueryGovernanceKubernetesCluster	QueryGovernanceKubernetesCluster	get	All Resource ``	無	無
mse:GetMseFeatureSwitch	GetMseFeatureSwitch	get	All Resource ``	無	無
mse:DeletePluginConfig	DeletePluginConfig	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateAcl	UpdateAcl	update	All Resource ``	無	無
mse:GetNacosConfig	QueryNacosGrayConfig	get	All Resource ``	無	無
mse:DeleteNacosConfigs	DeleteNacosConfigs	delete	All Resource ``	無	無
mse:AddGatewayAuth	AddGatewayAuth	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListGatewaySlb	ListGatewaySlb	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListAnsInstances	ListAnsInstances	list	All Resource ``	無	無
mse:UpdateGatewayServiceVersion	UpdateGatewayServiceVersion	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListNamespaces	ListNamespaces	list	All Resource ``	無	無
mse:RemoveZooKeeperSaslUser	RemoveZooKeeperSaslUser	delete	All Resource ``	無	無
mse:ListGatewayCircuitBreakerRule	ListGatewayCircuitBreakerRule	list	All Resource ``	無	無
mse:ListAnsServiceClusters	ListAnsServiceClusters	list	Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}` EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:UntagResources	UntagResources	delete	All Resource ``	無	無
mse:QueryClusterSpecification	QueryClusterSpecification		All Resource ``	無	無
mse:GetGatewayAuthDetail	GetGatewayAuthDetail	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListExportZookeeperData	ListExportZookeeperData	list	All Resource ``	無	無
mse:CreateGatewayFlowRule	CreateGatewayFlowRule	create	All Resource ``	無	無
mse:CreateZnode	CreateZnode	create	All Resource ``	無	無
mse:OfflineGatewayRoute	OfflineGatewayRoute		*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetEngineNamepace	GetEngineNamepace	get	All Resource ``	無	無
mse:ListAppBySwimmingLaneGroupTags	ListAppBySwimmingLaneGroupTags	list	All Resource ``	無	無
mse:ListGatewayAuthConsumer	ListGatewayAuthConsumer	list	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetBlackWhiteList	GetBlackWhiteList	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListEngineNamespaces	ListEngineNamespaces	list	All Resource ``	無	無
mse:UpdateImage	UpdateImage	update	*Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}`	無	無
mse:CreatePluginConfig	CreatePluginConfig	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListSecurityGroupRule	ListSecurityGroupRule	list	All Resource ``	無	無
mse:UpdateGatewayAuthConsumer	UpdateGatewayAuthConsumer		*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteAuthResource	DeleteAuthResource	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:QuerySlbSpec	QuerySlbSpec	list	All Resource ``	無	無
mse:QueryNamespace	QueryNamespace	get	All Resource ``	無	無
mse:ListMigrationTask	ListMigrationTask	list	All Resource ``	無	無
mse:ImportZookeeperData	ImportZookeeperData	update	All Resource ``	無	無
mse:ModifyGovernanceKubernetesCluster	ModifyGovernanceKubernetesCluster	update	All Resource ``	無	無
mse:GetPluginConfig	GetPluginConfig	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListNamingTrack	ListNamingTrack	get	*Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}`	無	無
mse:ListGatewayZone	ListGatewayZone	list	All Resource ``	無	無
mse:BindSentinelBlockFallbackDefinition	BindSentinelBlockFallbackDefinition	update	*GovernanceApplication `acs:mse:{#regionId}:{#accountId}:namespace/{#Namespace}/application/{#AppName}`	無	無
mse:GetGatewayConfig	GetGatewayConfig	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListServiceSource	ListServiceSource	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:QueryConfig	QueryConfig	get	All Resource ``	無	無
mse:GetGatewayDomainDetail	GetGatewayDomainDetail	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListGatewayService	ListGatewayService	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetZookeeperDataImportUrl	GetZookeeperDataImportUrl	get	All Resource ``	無	無
mse:OrderClusterHealthCheckRiskNotice	OrderClusterHealthCheckRiskNotice	get	All Resource ``	無	無
mse:ListAnsServices	ListAnsServices	list	All Resource ``	無	無
mse:DeleteGatewaySlb	DeleteGatewaySlb	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteGatewayAuth	DeleteGatewayAuth	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListSecurityGroup	ListSecurityGroup	list	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateNacosService	UpdateNacosService	update	All Resource ``	無	無
mse:DeleteNacosInstance	DeleteNacosInstance	delete	All Resource ``	無	無
mse:GetServiceListPage	GetServiceListPage	get	All Resource ``	無	無
mse:ListAuthPolicy	ListAuthPolicy	get	All Resource ``	無	無
mse:RetryCluster	RetryCluster	update	*Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}`	無	無
mse:CreateApplication	CreateApplication	create	All Resource ``	無	無
mse:UpdateGatewayRouteRetry	UpdateGatewayRouteRetry	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:QueryGatewayRegion	QueryGatewayRegion	get	All Resource ``	無	無
mse:ApplyTagPolicies	ApplyTagPolicies	update	All Resource ``	無	無
mse:GetGatewayOption	GetGatewayOption	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:CreateGatewayCircuitBreakerRule	CreateGatewayCircuitBreakerRule	create	All Resource ``	無	無
mse:UpdateGatewayRouteHeaderOp	UpdateGatewayRouteHeaderOp	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ImportNacosConfig	ImportNacosConfig	create	All Resource ``	無	無
mse:UpdateGatewayRouteCORS	UpdateGatewayRouteCORS	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewayConfig	UpdateGatewayConfig	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewaySpec	UpdateGatewaySpec	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetImage	GetImage	get	All Resource ``	無	無
mse:DeleteGatewayServiceVersion	DeleteGatewayServiceVersion	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:AddBlackWhiteList	AddBlackWhiteList	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:PullServices	PullServices	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:CreateCluster	CreateCluster	create	Cluster `acs:mse:{#regionId}:{#accountId}:instance/`	無	無
mse:GetGateway	GetGateway	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteFlowRules	DeleteFlowRules	delete	All Resource ``	無	無
mse:QueryClusterDetail	QueryClusterDetail	get	All Resource ``	無	無
mse:UpdateGatewayFlowRule	UpdateGatewayFlowRule	update	All Resource ``	無	無
mse:UpdateLocalityRule	UpdateLocalityRule	get	All Resource ``	無	無
mse:CreateNamespace	CreateNamespace	get	All Resource ``	無	無
mse:QueryClusterDiskSpecification	QueryClusterDiskSpecification	get	All Resource ``	無	無
mse:UpdateGatewayRouteHTTPRewrite	UpdateGatewayRouteHTTPRewrite	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:RemoveAuthPolicy	RemoveAuthPolicy	get	All Resource ``	無	無
mse:UpdateGatewayCircuitBreakerRule	UpdateGatewayCircuitBreakerRule	update	All Resource ``	無	無
mse:AddGatewayServiceVersion	AddGatewayServiceVersion	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewayService	UpdateGatewayService	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteNamespace	DeleteNamespace	delete	All Resource ``	無	無
mse:DeleteNacosMcpServer	DeleteNacosMcpServer	delete	All Resource ``	無	無
mse:SelectGatewaySlb	SelectGatewaySlb	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:AddServiceSource	AddServiceSource	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:AddGatewayAuthConsumer	AddGatewayAuthConsumer	create	All Resource ``	無	無
mse:UpgradeCluster	UpgradeCluster		All Resource ``	無	無
mse:ExportNacosConfig	ExportNacosConfig	get	Cluster `acs:mse:{#regionId}:{#AccountId}:instance/{#InstanceId}` EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:UpdateGatewayOption	UpdateGatewayOption	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListSentinelBlockFallbackDefinitions	ListSentinelBlockFallbackDefinitions	list	All Resource ``	無	無
mse:DeleteGatewayFlowRule	DeleteGatewayFlowRule	delete	All Resource ``	無	無
mse:CreateNacosService	CreateNacosService	get	All Resource ``	無	無
mse:UpdateGatewayAuth	UpdateGatewayAuth	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:EnableProxyProtocol	EnableProxyProtocol	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteCircuitBreakerRules	DeleteCircuitBreakerRules	delete	All Resource ``	無	無
mse:UpdatePluginConfig	UpdatePluginConfig	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListListenersByIp	ListListenersByIp	get	Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}` EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:ListEurekaInstances	ListEurekaInstances	get	All Resource ``	無	無
mse:UpdateEngineNamespace	UpdateEngineNamespace	update	All Resource ``	無	無
mse:UpdateFlowRule	UpdateFlowRule	update	All Resource ``	無	無
mse:ListFlowRules	ListFlowRules	list	All Resource ``	無	無
mse:ListListenersByConfig	ListListenersByConfig	get	Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}` EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:AddMockRule	AddMockRule		All Resource ``	無	無
mse:DeleteGatewayAuthConsumer	DeleteGatewayAuthConsumer		*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateGatewayIsolationRule	UpdateGatewayIsolationRule	update	All Resource ``	無	無
mse:CreateWebFlowRule	CreateWebFlowRule	update	All Resource ``	無	無
mse:ListCircuitBreakerRules	ListCircuitBreakerRules	list	All Resource ``	無	無
mse:DeleteSwimmingLaneGroup	DeleteSwimmingLaneGroup	get	All Resource ``	無	無
mse:GetApplicationList	GetApplicationList	get	All Resource ``	無	無
mse:ListNacosHistoryConfigs	ListNacosHistoryConfigs	get	All Resource ``	無	無
mse:CreateSentinelBlockFallbackDefinition	CreateSentinelBlockFallbackDefinition	update	All Resource ``	無	無
mse:UpdateGatewayAuthConsumerStatus	UpdateGatewayAuthConsumerStatus		*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateServiceSource	UpdateServiceSource	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteServiceSource	DeleteServiceSource	delete	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListClusterVersions	ListClusterVersions		All Resource ``	無	無
mse:ListGatewayRoute	ListGatewayRoute	get	All Resource ``	無	無
mse:GetLosslessRuleByApp	GetLosslessRuleByApp	get	All Resource ``	無	無
mse:DeleteGatewayIsolationRule	DeleteGatewayIsolationRule	delete	All Resource ``	無	無
mse:GetServiceMethodPage	GetServiceMethodPage	get	All Resource ``	無	無
mse:GetGatewayAuthConsumerDetail	GetGatewayAuthConsumerDetail	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateWebFlowRule	UpdateWebFlowRule	update	All Resource ``	無	無
mse:UpdateGatewayServiceTrafficPolicy	UpdateGatewayServiceTrafficPolicy	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:AddSecurityGroupRule	AddSecurityGroupRule	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:UpdateNacosCluster	UpdateNacosCluster	update	Cluster `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}` EngineNamespace `acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId}`	無	無
mse:UpdateClusterSpec	UpdateClusterSpec	update	All Resource ``	無	無
mse:AddGatewayDomain	AddGatewayDomain	create	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ModifyLosslessRule	ModifyLosslessRule	get	All Resource ``	無	無
mse:ChangeResourceGroup	ChangeResourceGroup	update	All Resource ``	無	無
mse:GetGatewayServiceDetail	GetGatewayServiceDetail	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:EnableHttp2	EnableHttp2	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:ListZooKeeperSaslUser	ListZooKeeperSaslUser	list	All Resource ``	無	無
mse:InitializeServiceLinkRole	InitializeServiceLinkRole	get	All Resource ``	無	無
mse:PreserveHeaderFormat	PreserveHeaderFormat	update	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:RemoveApplication	RemoveApplication	delete	All Resource ``	無	無
mse:UpdateGatewayAuthConsumerResourceStatus	UpdateGatewayAuthConsumerResourceStatus		*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:GetPlugins	GetPlugins	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:CreateOrUpdateSwimmingLane	CreateOrUpdateSwimmingLane	create	*GovernanceNamespace `acs:mse:{#regionId}:{#accountId}:namespace/{#Namespace}`	無	無
mse:GetKubernetesSource	GetKubernetesSource	get	*Gateway `acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId}`	無	無
mse:DeleteZnode	DeleteZnode	delete	All Resource ``	無	無
mse:CreateFlowRule	CreateFlowRule	create	All Resource ``	無	無
mse:ListClusterConnectionTypes	ListClusterConnectionTypes	get	All Resource ``	無	無
mse:UpdateCircuitBreakerRule	UpdateCircuitBreakerRule	update	All Resource ``	無	無
mse:UpdateAuthPolicy	UpdateAuthPolicy	get	All Resource ``	無	無

資源（Resource）

下表是定義的資源，這些資源可以在 RAM 權限原則語句的Resource元素中使用，用來授予對該資源執行具體操作的許可權。其中，資源 ARN 是資源在阿里雲上的唯一標識。具體說明如下：

{#}為變數標識，需要您替換為實際值。例如：{#ramcode}需要您替換為實際的雲端服務RAM代碼。
*表示全部。例如：
- {#resourceType}為*時：表示全部資源。
- {#regionId}為*時：表示全部地區。
- {#accountId}為*時：表示全部阿里雲帳號。

資源類型	資源 ARN
EngineNamespace	acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/{#NamespaceId} acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId}/*
Gateway	acs:mse:{#regionId}:{#accountId}:instance/{#GatewayUniqueId} acs:mse:{#Region}:{#AccountId}:instance/{#GatewayUniqueId} acs:mse:{#regionId}:{#accountId}:instance/*
NacosConfig	acs:mse:*:{#accountId}:nacosconfig/{#DataId} acs:mse::{#accountId}:nacosconfig/{#DataId}
GovernanceNamespace	acs:mse:{#regionId}:{#accountId}:namespace/{#Namespace} acs:mse:{#Region}:{#AccountId}:namespace/{#Namespace}
NacosService	acs:mse:*:{#accountId}:nacosservice/{#ServiceName}
NacosInstance	acs:mse:{#regionId}:{#accountId}:nacosinstance/*
Cluster	acs:mse:{#regionId}:{#accountId}:instance/{#InstanceId} acs:mse:{#regionId}:{#accountId}:cluster/{#InstanceId} acs:mse:{#regionId}:{#accountId}:instance/*
GovernanceApplication	acs:mse:{#Region}:{#AccountId}:namespace/{#Namespace}/application/{#AppName} acs:mse:{#regionId}:{#accountId}:namespace/{#Namespace}/application/{#AppName}

條件（Condition）

未定義產品層級的條件關鍵字。如需查看適用於所有雲產品的通用條件關鍵字，請參見通用條件關鍵字。

Microservices Engine：授權信息

權限原則通用結構

操作（Action）

資源（Resource）

條件（Condition）

相關操作