Microservices Engine：使用資源群組進行精細化資源控制-最新

資源群組授權的工作原理

您可以使用資源群組（Resource Group）對阿里雲帳號內的資源進行分組管理。例如，為不同的專案建立對應的資源群組，並將資源轉移到對應的組中，以便集中管理各專案的資源。更多資訊，請參見什麼是資源群組。

在完成資源分組後，您可以為不同的RAM授權主體（RAM使用者、RAM使用者組或RAM角色）授予指定資源群組範圍的許可權，從而限定這個授權主體只能管理該資源群組內的資源。更多資訊，請參見資源分組和授權。

這種授權方式的優點有：

• 許可權精細化：確保每個身份能獲得最準確的資源存取權限，避免帳號下的多重專案的資源混合管理。

• 良好的擴充性：後續新增資源時，只需將其加入該資源群組，RAM身份便會自動獲得新資源的相應許可權，無需再次授權。

為RAM使用者授予資源群組層級的許可權

下面以RAM使用者為例，介紹授予指定資源群組內微服務引擎資源許可權的操作步驟。

支援資源群組的資源類型

微服務引擎支援資源群組的資源類型如下表所示：

不支援資源群組層級授權的操作

微服務引擎中不支援資源群組層級授權的操作（Action）如下：

對於不支援資源群組授權的操作，授權時資源範圍選取資源群組層級將無效。如果仍需要RAM使用者有上述操作許可權，您需要建立自訂權限原則，授權時資源範圍選取帳號層級。

以下是兩個自訂權限原則樣本，您可以根據實際需要調整策略內容。

• 允許不支援資源群組層級授權的全部唯讀操作：Action中列舉不支援資源群組層級授權的所有隻讀操作。

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "mse:AddLoadBalancePolicy",
          "mse:AddRoutePolicy",
          "mse:AddServiceTimeConfig",
          "mse:AddWhiteScreenRule",
          "mse:ApplyCanaryPolicy",
          "mse:ApplyGlobalReadWriteSplitRule",
          "mse:ApplyReadWriteSplitRule",
          "mse:BatchUpdateRulesEnable",
          "mse:CheckAuthPolicyName",
          "mse:CheckCanaryPolicy",
          "mse:CheckCsRole",
          "mse:CheckEciRole",
          "mse:CheckGatewayIngressMigrateTask",
          "mse:CheckKmsStatus",
          "mse:CheckMigrationServiceAnnotation",
          "mse:CheckRole",
          "mse:CheckServiceLinkRole",
          "mse:CheckUserReadinessConfig",
          "mse:CheckXTraceServiceStatus",
          "mse:CreateLicenseKey",
          "mse:CreateMseServiceApplication",
          "mse:CreateNamespace",
          "mse:CreateOrUpdateEmptyPushSetting",
          "mse:DeleteFaultInjectionRule",
          "mse:DeleteGovernanceKubernetesCluster",
          "mse:DeleteRetryRule",
          "mse:DeleteServiceTimeConfig",
          "mse:DeleteSwimmingLaneGroup",
          "mse:DeleteTimeoutRule",
          "mse:DeleteWhiteScreenRule",
          "mse:DescribeAppAgentStatus",
          "mse:DescribeScenarioRecordsForAhas",
          "mse:FetchAppLogConfig",
          "mse:FetchDataSourceConfig",
          "mse:FetchGlobalReadWriteSplitRules",
          "mse:FetchLogConfig",
          "mse:FetchLosslessRuleList",
          "mse:FetchReadWriteSplitRules",
          "mse:FetchRoutePolicyList",
          "mse:GetAccountMockRule",
          "mse:GetApiTestHistory",
          "mse:GetAppMessageQueueRoute",
          "mse:GetApplicationDetail",
          "mse:GetApplicationInstanceList",
          "mse:GetApplicationInstancesWithMetircs",
          "mse:GetApplicationList",
          "mse:GetApplicationListWithMetircs",
          "mse:GetApplicationTagList",
          "mse:GetArmsAlarms",
          "mse:GetAuthPolicyInfo",
          "mse:GetCanaryStatus",
          "mse:GetDubboServicePageWithMetrics",
          "mse:GetDubboTestMethod",
          "mse:GetEventDetail",
          "mse:GetEventFilterOptions",
          "mse:GetFaultInjectionRule",
          "mse:GetGatewayAlarms",
          "mse:GetGatewayIngressMigrateTaskDetail",
          "mse:GetGatewayMigrateNamespacedServices",
          "mse:GetGatewaySelection",
          "mse:GetGovernanceKubernetesClusterList",
          "mse:GetGraySwimmingLaneGroupInfo",
          "mse:GetHistorys",
          "mse:GetImage",
          "mse:GetLicenseKey",
          "mse:GetLocalityDistributionMetrics",
          "mse:GetLocalityRule",
          "mse:GetLosslessRuleByApp",
          "mse:GetMockRuleByConsumerAppId",
          "mse:GetMockRuleById",
          "mse:GetMockRuleByProviderAppId",
          "mse:GetMseFeatureSwitch",
          "mse:GetNacosDatasourceResource",
          "mse:GetNetworkInfo",
          "mse:GetOutlierPolicyInfo",
          "mse:GetOverview",
          "mse:GetPluginGuide",
          "mse:GetRegExpCheck",
          "mse:GetRegExpTest",
          "mse:GetResourcePackageStatus",
          "mse:GetRetryRule",
          "mse:GetRoutePolicy",
          "mse:GetServiceConsumersPage",
          "mse:GetServiceDetail",
          "mse:GetServiceList",
          "mse:GetServiceListPage",
          "mse:GetServiceMethodPage",
          "mse:GetServiceMethodPageWithMetrics",
          "mse:GetServiceProvidersPage",
          "mse:GetSpringCloudTestMethod",
          "mse:GetTagKey",
          "mse:GetTagVal",
          "mse:GetTagsBySwimmingLaneGroupId",
          "mse:GetTimeoutRule",
          "mse:GetTrace",
          "mse:GetUpstreamGroupOfSingleService",
          "mse:GetUserStatus",
          "mse:ImportMcpConfigFromSwagger",
          "mse:InitializeServiceLinkRole",
          "mse:InvokeDubboTestMethod",
          "mse:InvokeIstioTestMethod",
          "mse:InvokeSpringCloudTestMethod",
          "mse:ListAdaptiveOverloadProtectionConfig",
          "mse:ListAppBySwimmingLaneGroupTag",
          "mse:ListAppBySwimmingLaneGroupTags",
          "mse:ListAppResource",
          "mse:ListAppResourceWithMetrics",
          "mse:ListApplicationTagInstancese",
          "mse:ListApplicationsWithTagRules",
          "mse:ListAuthPolicy",
          "mse:ListAutoDeployAvailableVsws",
          "mse:ListAutoDeployAvailableZones",
          "mse:ListCircuitBreakerRules",
          "mse:ListClusterConnectionTypes",
          "mse:ListClusterSelection",
          "mse:ListClusterTypes",
          "mse:ListClusterVersions",
          "mse:ListCommunites",
          "mse:ListCsKubernetesClusters",
          "mse:ListCsSecurityGroup",
          "mse:ListDefaultCircuitBreakerRules",
          "mse:ListEurekaInstances",
          "mse:ListEventOfReource",
          "mse:ListEventRecords",
          "mse:ListEventsByType",
          "mse:ListFcServiceVersions",
          "mse:ListFcServices",
          "mse:ListFlowRules",
          "mse:ListGatewayDomainSSL",
          "mse:ListGatewayIngressMigrateTask",
          "mse:ListGatewayZone",
          "mse:ListHotParamRules",
          "mse:ListInstanceCount",
          "mse:ListInstances",
          "mse:ListIpOrHosts",
          "mse:ListIsolationRules",
          "mse:ListKubernetesNamespace",
          "mse:ListLogSpanServices",
          "mse:ListMethods",
          "mse:ListMigrationTask",
          "mse:ListMscEventRecords",
          "mse:ListNacosDatasourceResourceChangeEvent",
          "mse:ListNamespaces",
          "mse:ListProtectedAppResourceWithMetrics",
          "mse:ListResourceWhiteListConfigs",
          "mse:ListResources",
          "mse:ListSentinelBlockFallbackDefinitions",
          "mse:ListServiceQuotas",
          "mse:ListSpanNames",
          "mse:ListSwimPathPercent",
          "mse:ListUpgradableGatewayVersions",
          "mse:ListUserK8sByVpc",
          "mse:ListWebFlowRules",
          "mse:ModifyLosslessRule",
          "mse:QueryAhasUserStatus",
          "mse:QueryAllSwimmingLane",
          "mse:QueryAllSwimmingLaneGroup",
          "mse:QueryAppDataSourceList",
          "mse:QueryAppListMetrics",
          "mse:QueryAppRPCMacMetrics",
          "mse:QueryAppResourceMetrics",
          "mse:QueryAppResourceMetricsByInstance",
          "mse:QueryAppSummaryMetricsOverview",
          "mse:QueryAppSummaryMetricsOverviewWithSentinel",
          "mse:QueryAppSystemMetricsOfGroup",
          "mse:QueryAppSystemMetricsOfGroupByInstance",
          "mse:QueryAppTopNMacs",
          "mse:QueryBusinessLocations",
          "mse:QueryClusterDiskSpecification",
          "mse:QueryClusterSpecification",
          "mse:QueryDatabaseRoute",
          "mse:QueryEmptyPushSetting",
          "mse:QueryEventOverview",
          "mse:QueryGatewayRegion",
          "mse:QueryGatewayType",
          "mse:QueryGatewaysWithLabel",
          "mse:QueryGovernanceKubernetesCluster",
          "mse:QueryMetricsAveragedByInstance",
          "mse:QueryMseHomeDetail",
          "mse:QueryNamespace",
          "mse:QueryQuickStartStatus",
          "mse:QueryResourceTopN",
          "mse:QuerySentinelBlockFallbackDefinition",
          "mse:QueryServiceAppId",
          "mse:QueryServiceDetailWithMetrics",
          "mse:QueryServiceTimeConfig",
          "mse:QuerySlbSpec",
          "mse:QuerySwimmingLaneById",
          "mse:QueryUserKmsType",
          "mse:RemoveApplications",
          "mse:RemoveAuthPolicy",
          "mse:RemoveOutlierPolicy",
          "mse:RemoveRoutePolicy",
          "mse:SearchTraces",
          "mse:UpdateAppLogConfig",
          "mse:UpdateAuthPolicy",
          "mse:UpdateDatabaseRoute",
          "mse:UpdateInstanceRegisterStatus",
          "mse:UpdateLocalityRule",
          "mse:UpdateLogConfig",
          "mse:UpdateWhiteScreenRule",
          "mse:listGrayTag"
        ],
        "Resource": "*"
      }
    ]
  }
  

• 允許不支援資源群組層級授權的全部操作：Action中列舉不支援資源群組層級授權的全部操作。

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "mse:AddAuthPolicy",
          "mse:AddCustomPlugin",
          "mse:AddGatewayOrder",
          "mse:AddGatewayRetry",
          "mse:AddGatewayService",
          "mse:AddLoadBalancePolicy",
          "mse:AddMigrationTask",
          "mse:AddMockRule",
          "mse:AddRateLimit",
          "mse:AddRoutePolicy",
          "mse:AddServiceTimeConfig",
          "mse:AddWhiteScreenRule",
          "mse:ApplyCanaryPolicy",
          "mse:ApplyGlobalReadWriteSplitRule",
          "mse:ApplyReadWriteSplitRule",
          "mse:ApplyTagPolicies",
          "mse:BatchUpdateRulesEnable",
          "mse:BindSentinelBlockFallbackDefinition",
          "mse:BindSentinelBlockFallbackDefinitionBatch",
          "mse:ChangeOperateTaskTime",
          "mse:CheckAuthPolicyName",
          "mse:CheckCanaryPolicy",
          "mse:CheckCsRole",
          "mse:CheckEciRole",
          "mse:CheckGatewayIngressMigrateTask",
          "mse:CheckKmsStatus",
          "mse:CheckMigrationServiceAnnotation",
          "mse:CheckRole",
          "mse:CheckServiceLinkRole",
          "mse:CheckUserReadinessConfig",
          "mse:CheckXTraceServiceStatus",
          "mse:CloneSentinelRuleFromAhas",
          "mse:ConvertSwaggerToMcpConfig",
          "mse:CreateApplication",
          "mse:CreateCircuitBreakerRule",
          "mse:CreateDemoToUserCluster",
          "mse:CreateFlowRule",
          "mse:CreateGovernanceKubernetesCluster",
          "mse:CreateGovernanceService",
          "mse:CreateHotParamRule",
          "mse:CreateIsolationRule",
          "mse:CreateLicenseKey",
          "mse:CreateMseServiceApplication",
          "mse:CreateNamespace",
          "mse:CreateOrUpdateEmptyPushSetting",
          "mse:CreateOrUpdateSwimmingLane",
          "mse:CreateOrUpdateSwimmingLaneGroup",
          "mse:CreateOutlierConfig",
          "mse:CreateSentinelBlockFallbackDefinition",
          "mse:CreateWebFlowRule",
          "mse:DeleteBackupTask",
          "mse:DeleteCircuitBreakerRules",
          "mse:DeleteCustomPlugin",
          "mse:DeleteFaultInjectionRule",
          "mse:DeleteFlowRules",
          "mse:DeleteGatewayCircuitBreakerRule",
          "mse:DeleteGatewayIngressMigrateTask",
          "mse:DeleteGatewayIsolationRule",
          "mse:DeleteGovernanceKubernetesCluster",
          "mse:DeleteHotParamRules",
          "mse:DeleteIsolationRules",
          "mse:DeleteMigrationTask",
          "mse:DeleteNacosDatasourceResource",
          "mse:DeleteNamespace",
          "mse:DeleteRateLimit",
          "mse:DeleteRetryRule",
          "mse:DeleteSSLCert",
          "mse:DeleteSentinelBlockFallbackDefinition",
          "mse:DeleteServiceTimeConfig",
          "mse:DeleteSwimmingLane",
          "mse:DeleteSwimmingLaneGroup",
          "mse:DeleteTimeoutRule",
          "mse:DeleteTrace",
          "mse:DeleteUpstreamGroupOfSingleService",
          "mse:DeleteWebFlowRules",
          "mse:DeleteWhiteScreenRule",
          "mse:DescribeAppAgentStatus",
          "mse:DescribeScenarioRecordsForAhas",
          "mse:FallbackGateway",
          "mse:FetchAppLogConfig",
          "mse:FetchDataSourceConfig",
          "mse:FetchGlobalReadWriteSplitRules",
          "mse:FetchLogConfig",
          "mse:FetchLosslessRuleList",
          "mse:FetchReadWriteSplitRules",
          "mse:FetchRoutePolicyList",
          "mse:FixGateway",
          "mse:GatewayAdmin",
          "mse:GetAccountMockRule",
          "mse:GetApiTestHistory",
          "mse:GetAppMessageQueueRoute",
          "mse:GetApplicationDetail",
          "mse:GetApplicationInstanceList",
          "mse:GetApplicationInstancesWithMetircs",
          "mse:GetApplicationList",
          "mse:GetApplicationListWithMetircs",
          "mse:GetApplicationTagList",
          "mse:GetArmsAlarms",
          "mse:GetAuthPolicyInfo",
          "mse:GetCanaryStatus",
          "mse:GetConfig",
          "mse:GetDubboServicePageWithMetrics",
          "mse:GetDubboTestMethod",
          "mse:GetEventDetail",
          "mse:GetEventFilterOptions",
          "mse:GetFaultInjectionRule",
          "mse:GetGatewayAlarms",
          "mse:GetGatewayIngressMigrateTaskDetail",
          "mse:GetGatewayMigrateNamespacedServices",
          "mse:GetGatewaySelection",
          "mse:GetGovernanceKubernetesClusterList",
          "mse:GetGraySwimmingLaneGroupInfo",
          "mse:GetHistorys",
          "mse:GetImage",
          "mse:GetLicenseKey",
          "mse:GetLocalityDistributionMetrics",
          "mse:GetLocalityRule",
          "mse:GetLosslessRuleByApp",
          "mse:GetMockRuleByConsumerAppId",
          "mse:GetMockRuleById",
          "mse:GetMockRuleByProviderAppId",
          "mse:GetMseFeatureSwitch",
          "mse:GetNacosDatasourceResource",
          "mse:GetNetworkInfo",
          "mse:GetOutlierApplicationList",
          "mse:GetOutlierPolicyInfo",
          "mse:GetOverview",
          "mse:GetPluginGuide",
          "mse:GetRegExpCheck",
          "mse:GetRegExpTest",
          "mse:GetResourcePackageStatus",
          "mse:GetResourcePackageStatusWithVersion",
          "mse:GetRetryRule",
          "mse:GetRoutePolicy",
          "mse:GetServiceConsumersPage",
          "mse:GetServiceDetail",
          "mse:GetServiceList",
          "mse:GetServiceListPage",
          "mse:GetServiceMethodPage",
          "mse:GetServiceMethodPageWithMetrics",
          "mse:GetServiceProvidersPage",
          "mse:GetSpringCloudTestMethod",
          "mse:GetTagKey",
          "mse:GetTagVal",
          "mse:GetTagsBySwimmingLaneGroupId",
          "mse:GetTimeoutRule",
          "mse:GetTrace",
          "mse:GetUpstreamGroupOfSingleService",
          "mse:GetUserStatus",
          "mse:ImportMcpConfigFromSwagger",
          "mse:InitializeServiceLinkRole",
          "mse:InvokeDubboTestMethod",
          "mse:InvokeIstioTestMethod",
          "mse:InvokeSpringCloudTestMethod",
          "mse:ListAdaptiveOverloadProtectionConfig",
          "mse:ListAppBySwimmingLaneGroupTag",
          "mse:ListAppBySwimmingLaneGroupTags",
          "mse:ListAppResource",
          "mse:ListAppResourceWithMetrics",
          "mse:ListApplicationTagInstancese",
          "mse:ListApplicationsWithTagRules",
          "mse:ListAuthPolicy",
          "mse:ListAutoDeployAvailableVsws",
          "mse:ListAutoDeployAvailableZones",
          "mse:ListBackupTasks",
          "mse:ListBackups",
          "mse:ListCircuitBreakerRules",
          "mse:ListClusterConnectionTypes",
          "mse:ListClusterSelection",
          "mse:ListClusterTypes",
          "mse:ListClusterVersions",
          "mse:ListCommunites",
          "mse:ListCsKubernetesClusters",
          "mse:ListCsSecurityGroup",
          "mse:ListDefaultCircuitBreakerRules",
          "mse:ListEurekaInstances",
          "mse:ListEventOfReource",
          "mse:ListEventRecords",
          "mse:ListEventsByType",
          "mse:ListEventsPageByType",
          "mse:ListFcServiceAliases",
          "mse:ListFcServiceVersions",
          "mse:ListFcServices",
          "mse:ListFlowRules",
          "mse:ListGatewayDomainSSL",
          "mse:ListGatewayIngressMigrateTask",
          "mse:ListGatewayZone",
          "mse:ListHotParamRules",
          "mse:ListInstanceCount",
          "mse:ListInstances",
          "mse:ListIpOrHosts",
          "mse:ListIsolationRules",
          "mse:ListKubernetesNamespace",
          "mse:ListLogSpanServices",
          "mse:ListMethods",
          "mse:ListMigrationTask",
          "mse:ListMscEventRecords",
          "mse:ListNacosDatasourceResourceChangeEvent",
          "mse:ListNamespaces",
          "mse:ListOutlierPolicy",
          "mse:ListProtectedAppResourceWithMetrics",
          "mse:ListResourceWhiteListConfigs",
          "mse:ListResources",
          "mse:ListSentinelBlockFallbackDefinitions",
          "mse:ListServiceQuotas",
          "mse:ListSpanNames",
          "mse:ListSwimPathPercent",
          "mse:ListTaskBackups",
          "mse:ListUpgradableGatewayVersions",
          "mse:ListUserK8sByVpc",
          "mse:ListWebFlowRules",
          "mse:ModifyAdaptiveOverloadProtectionConfig",
          "mse:ModifyLosslessRule",
          "mse:ModifyNamespace",
          "mse:ModifyServiceQuota",
          "mse:OnAhas",
          "mse:OpenXTraceService",
          "mse:QueryAhasUserStatus",
          "mse:QueryAllSwimmingLane",
          "mse:QueryAllSwimmingLaneGroup",
          "mse:QueryAppDataSourceList",
          "mse:QueryAppListMetrics",
          "mse:QueryAppMethodMetrics",
          "mse:QueryAppMethodMetricsWithSentinel",
          "mse:QueryAppRPCMacMetrics",
          "mse:QueryAppResourceMetrics",
          "mse:QueryAppResourceMetricsByInstance",
          "mse:QueryAppSummaryMetricsOverview",
          "mse:QueryAppSummaryMetricsOverviewWithSentinel",
          "mse:QueryAppSystemMetricsOfGroup",
          "mse:QueryAppSystemMetricsOfGroupByInstance",
          "mse:QueryAppTopNMacs",
          "mse:QueryBusinessLocations",
          "mse:QueryClusterDiskSpecification",
          "mse:QueryClusterSpecification",
          "mse:QueryClustersWithLabel",
          "mse:QueryDatabaseRoute",
          "mse:QueryEmptyPushSetting",
          "mse:QueryEventOverview",
          "mse:QueryGatewayRegion",
          "mse:QueryGatewayTask",
          "mse:QueryGatewayType",
          "mse:QueryGatewaysWithLabel",
          "mse:QueryGovernanceKubernetesCluster",
          "mse:QueryMetricsAveragedByInstance",
          "mse:QueryMseHomeDetail",
          "mse:QueryNacosAi",
          "mse:QueryNacosConfig",
          "mse:QueryNacosGrayConfig",
          "mse:QueryNacosNaming",
          "mse:QueryNamespace",
          "mse:QueryQuickStartStatus",
          "mse:QueryResourceTopN",
          "mse:QuerySentinelBlockFallbackDefinition",
          "mse:QueryServiceAppId",
          "mse:QueryServiceDetailWithMetrics",
          "mse:QueryServiceMethodConsumerPageWithMetrics",
          "mse:QueryServiceTimeConfig",
          "mse:QuerySlbSpec",
          "mse:QuerySwimmingLaneById",
          "mse:QueryUserKmsType",
          "mse:RemoveApplication",
          "mse:RemoveApplications",
          "mse:RemoveAuthPolicy",
          "mse:RemoveOutlierPolicy",
          "mse:RemoveRoutePolicy",
          "mse:ReportMetadata",
          "mse:ReportOnePilotInfo",
          "mse:RevertApplicationRoutePolicy",
          "mse:RevertBackup",
          "mse:RunApiTest",
          "mse:RunServiceTest",
          "mse:SearchTraces",
          "mse:TestService",
          "mse:UnbindSentinelBlockFallbackDefinition",
          "mse:UpdateAppLogConfig",
          "mse:UpdateAuthPolicy",
          "mse:UpdateBackupTask",
          "mse:UpdateCircuitBreakerRule",
          "mse:UpdateCircuitBreakerRulesStatus",
          "mse:UpdateCustomPlugin",
          "mse:UpdateDataSourceConfig",
          "mse:UpdateDatabaseRoute",
          "mse:UpdateDefaultCircuitBreakerRule",
          "mse:UpdateFlowRule",
          "mse:UpdateFlowRulesStatus",
          "mse:UpdateGatewayIngressMigrateTask",
          "mse:UpdateGatewayIngressMigrateTaskStatus",
          "mse:UpdateGatewayServicePort",
          "mse:UpdateGatewaySlb",
          "mse:UpdateGovernanceServiceSubscribe",
          "mse:UpdateHotParamRule",
          "mse:UpdateHotParamRulesStatus",
          "mse:UpdateInstanceRegisterStatus",
          "mse:UpdateIsolationRule",
          "mse:UpdateIsolationRulesStatus",
          "mse:UpdateLocalityRule",
          "mse:UpdateLogConfig",
          "mse:UpdateMessageQueueRoute",
          "mse:UpdateMigrationTask",
          "mse:UpdateNacosAi",
          "mse:UpdateNacosDatasourceResource",
          "mse:UpdateNacosNaming",
          "mse:UpdateOutlierConfig",
          "mse:UpdateQuickStartStatus",
          "mse:UpdateRateLimit",
          "mse:UpdateResourceWhiteListConfig",
          "mse:UpdateSentinelBlockFallbackDefinition",
          "mse:UpdateUpstreamGroupOfSingleService",
          "mse:UpdateWebFlowRule",
          "mse:UpdateWebFlowRulesStatus",
          "mse:UpdateWhiteScreenRule",
          "mse:listGrayTag"
        ],
        "Resource": "*"
      }
    ]
  }
  

常見問題