AliyunCSManagedBackupRestoreRolePolicy 是专用于服务角色的授权策略，通常会在创建对应的服务角色时同步完成授权，以允许服务角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2024-10-18 11:11:38
更新时间：2026-04-01 02:00:48
当前版本：v5
策略内容
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"hbr:CreateVault",
"hbr:CreateBackupJob",
"hbr:DescribeVaults",
"hbr:DescribeBackupJobs2",
"hbr:DescribeRestoreJobs",
"hbr:SearchHistoricalSnapshots",
"hbr:CreateRestoreJob",
"hbr:AddContainerCluster",
"hbr:DescribeContainerCluster",
"hbr:CancelBackupJob",
"hbr:CancelRestoreJob",
"hbr:DescribeRestoreJobs2",
"hbr:CreateReplicationVault",
"hbr:DescribeVaultReplicationRegions",
"hbr:ControlReplicationVault",
"hbr:CreateVaultReplication",
"hbr:DeleteVaultReplication",
"hbr:DeleteContainerCluster"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ecs:CreateSnapshot",
"ecs:DeleteSnapshot",
"ecs:DescribeSnapshotGroups",
"ecs:CreateAutoSnapshotPolicy",
"ecs:ApplyAutoSnapshotPolicy",
"ecs:CancelAutoSnapshotPolicy",
"ecs:DeleteAutoSnapshotPolicy",
"ecs:DescribeAutoSnapshotPolicyEX",
"ecs:ModifyAutoSnapshotPolicyEx",
"ecs:DescribeSnapshots",
"ecs:DescribeInstances",
"ecs:CopySnapshot",
"ecs:CreateSnapshotGroup",
"ecs:DeleteSnapshotGroup"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"oss:PutObject",
"oss:GetObject",
"oss:DeleteObject",
"oss:GetBucket",
"oss:ListObjects",
"oss:ListBuckets",
"oss:GetBucketStat",
"oss:GetBucketReplication",
"oss:GetBucketReplicationLocation",
"oss:GetBucketReplicationProgress",
"oss:PutBucketReplication"
],
"Resource": "acs:oss:*:*:cnfs-oss*"
}
],
"Version": "1"
}