AliyunServiceRolePolicyForSFMSandbox 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForSFMSandbox 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2026-08-13 17:30:25
更新时间：2026-08-25 17:26:54
当前版本：v5
策略内容
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"fcsandbox:CreateCustomDomain",
"fcsandbox:UpdateCustomDomain",
"fcsandbox:DeleteCustomDomain",
"fcsandbox:GetCustomDomain",
"fcsandbox:ListCustomDomains",
"fcsandbox:DescribeSandbox",
"fcsandbox:ListSandboxes",
"fcsandbox:CreateTeam",
"fcsandbox:UpdateTeam",
"fcsandbox:DeleteTeam",
"fcsandbox:GetTeam",
"fcsandbox:ListTeams",
"fcsandbox:CreateApiKey",
"fcsandbox:UpdateApiKey",
"fcsandbox:ResetApiKey",
"fcsandbox:DeleteApiKey",
"fcsandbox:DescribeApiKey",
"fcsandbox:GetApiKey",
"fcsandbox:ListApiKeys",
"fcsandbox:UpdateQuota",
"fcsandbox:DeleteQuota",
"fcsandbox:DescribeQuota",
"fcsandbox:ListQuota",
"fcsandbox:UpdateTemplate",
"fcsandbox:DescribeTemplate",
"fcsandbox:ListTemplates"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"log:GetLogStoreLogs",
"log:GetLogStoreHistogram",
"log:GetLogStore",
"log:CreateLogStore",
"log:DeleteLogStore",
"log:CreateProject",
"log:DeleteProject",
"log:GetProject",
"log:CreateIndex",
"log:GetIndex"
],
"Resource": "acs:log:*:*:project/*"
},
{
"Effect": "Allow",
"Action": [
"cms:GetCmsService",
"cms:OpenCmsService",
"cms:ListPrometheusVirtualInstances",
"cms:CreatePrometheusVirtualInstance",
"cms:QueryMetricList",
"log:EnableService",
"arms:OpenArmsService"
],
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "sandbox.sfm.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "fc.aliyuncs.com"
}
}
}
]
}