访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用RAM可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM中使用权限策略描述授权的具体内容。
本文为您介绍专有网络VPC(VPC)为RAM权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。专有网络VPC(VPC)的RAM代码(RamCode)为vpc,支持的授权粒度为RESOURCE。
权限策略通用结构
权限策略支持JSON格式,其通用结构如下:
{
"Version": "1",
"Statement": [
{
"Effect": "<Effect>",
"Action": "<Action>",
"Resource": "<Resource>",
"Condition": {
"<Condition_operator>": {
"<Condition_key>": [
"<Condition_value>"
]
}
}
}
]
}
- Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。
- Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)。
- Resource:受操作影响的具体对象,您可以使用资源ARN来描述指定资源。具体信息,请参见资源(Resource)。
- Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)。
- Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素。
- Condition_key:条件关键字。
- Condition_value:条件关键字对应的值。
操作(Action)
下表是专有网络VPC(VPC)定义的操作,这些操作可以在RAM权限策略语句的Action
元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:- 操作:是指具体的权限点。
- API:是指操作对应的API接口。
- 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。
- 资源类型:是指操作中支持授权的资源类型。具体说明如下:
- 对于必选的资源类型,用背景高亮的方式表示。
- 对于不支持资源级授权的操作,用
全部资源
表示。
- 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。
- 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。
操作 | API | 访问级别 | 资源类型 | 条件关键字 | 关联操作 |
---|---|---|---|---|---|
vpc:DeleteTrafficMirrorSession | DeleteTrafficMirrorSession | delete | TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId} | 无 | 无 |
vpc:CreateDefaultVSwitch | CreateDefaultVSwitch | Write | VSwitch acs:vpc:{#regionid}:{#accountId}:vswitch/* | 无 | 无 |
vpc:ModifyVpnPbrRouteEntryAttribute | ModifyVpnPbrRouteEntryAttribute | update | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:CreateIpsecServer | CreateIpsecServer | create | 全部资源 * | 无 | 无 |
vpc:DescribeRouteTables | DescribeRouteTables | list | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | vpc:VBR vpc:VRouter | 无 |
vpc:DeleteVpnGateway | DeleteVpnGateway | delete | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:DissociateRouteTablesFromVpcGatewayEndpoint | DissociateRouteTablesFromVpcGatewayEndpoint | delete | GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} | 无 | 无 |
vpc:DescribeAccessPoints | DescribeAccessPoints | get | 全部资源 * | 无 | 无 |
vpc:GetVpcGatewayEndpointAttribute | GetVpcGatewayEndpointAttribute | get | GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} | 无 | 无 |
vpc:CreatePhysicalConnectionOccupancyOrder | CreatePhysicalConnectionOccupancyOrder | create | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:ModifyExpressConnectTrafficQosQueue | ModifyExpressConnectTrafficQosQueue | update | 全部资源 * | 无 | 无 |
vpc:ModifyHaVipAttribute | ModifyHaVipAttribute | update | HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} | 无 | 无 |
vpc:DeletePhysicalConnection | DeletePhysicalConnection | delete | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:ListVpcEndpointServicesByEndUser | ListVpcEndpointServicesByEndUser | list | 全部资源 * | 无 | 无 |
vpc:DescribeSslVpnClientCert | DescribeSslVpnClientCert | get | SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId} | 无 | 无 |
vpc:ActivateRouterInterface | ActivateRouterInterface | update | RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:DescribeTagKeys | DescribeTagKeys | get | 全部资源 * | 无 | 无 |
vpc:AttachDhcpOptionsSetToVpc | AttachDhcpOptionsSetToVpc | update | DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:ConfirmPhysicalConnection | ConfirmPhysicalConnection | get | PhysicalConnection acs:vpc:{#regionid}:{#accountid}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:DescribeVirtualBorderRoutersForPhysicalConnection | DescribeVirtualBorderRoutersForPhysicalConnection | list | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | vpc:PhysicalConnection | 无 |
vpc:AllocateVpcIpv6Cidr | AllocateVpcIpv6Cidr | none | 全部资源 * | 无 | 无 |
vpc:CreateExpressConnectTrafficQosQueue | CreateExpressConnectTrafficQosQueue | create | 全部资源 * | 无 | 无 |
vpc:CheckCanAllocateVpcPrivateIpAddress | CheckCanAllocateVpcPrivateIpAddress | none | VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | 无 | 无 |
vpc:CreateSnatEntry | CreateSnatEntry | create | SnatEntry acs:vpc:{#regionId}:{#accountId}:snattable/* | 无 | 无 |
vpc:DescribeRouteEntryList | DescribeRouteEntryList | get | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:CreateCommonBandwidthPackage | CreateCommonBandwidthPackage | create | CommonBandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/* | 无 | 无 |
vpc:DescribeRouterInterfaceAttribute | DescribeRouterInterfaceAttribute | get | RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:DeactivateRouterInterface | DeactivateRouterInterface | update | RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:DeleteFlowLog | DeleteFlowLog | delete | FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId} | 无 | 无 |
vpc:ListVSwitchCidrReservations | ListVSwitchCidrReservations | list | VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/* | 无 | 无 |
vpc:DescribeEcGrantRelation | DescribeEcGrantRelation | list | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:DeactiveFlowLog | DeactiveFlowLog | update | FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId} | 无 | 无 |
vpc:DeleteBgpPeer | DeleteBgpPeer | delete | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:DeleteExpressConnectTrafficQosRule | DeleteExpressConnectTrafficQosRule | delete | 全部资源 * | 无 | 无 |
vpc:AddCommonBandwidthPackageIp | AddCommonBandwidthPackageIp | create | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} | 无 | 无 |
vpc:DeleteTrafficMirrorFilter | DeleteTrafficMirrorFilter | delete | TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} | 无 | 无 |
vpc:DeleteCustomerGateway | DeleteCustomerGateway | delete | CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId} | 无 | 无 |
vpc:GetVpcPrefixListAssociations | GetVpcPrefixListAssociations | get | PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} | 无 | 无 |
vpc:CreateNetworkAcl | CreateNetworkAcl | create | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/*VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:OpenPublicIpAddressPoolService | OpenPublicIpAddressPoolService | create | 全部资源 * | 无 | 无 |
vpc:RevokeInstanceFromVbr | RevokeInstanceFromVbr | update | VPC acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId} | 无 | 无 |
vpc:ListGeographicSubRegions | ListGeographicSubRegions | list | 全部资源 * | 无 | 无 |
vpc:AttachVbrToVpconn | AttachVbrToVpconn | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId} | 无 | 无 |
vpc:ReleaseIpv6Address | ReleaseIpv6Address | delete | Ipv6Address acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId} | 无 | 无 |
vpc:DescribeVpcAttribute | DescribeVpcAttribute | get | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | vpc:tag | 无 |
vpc:UntagResourcesForExpressConnect | UntagResourcesForExpressConnect | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:DescribeNatGateways | DescribeNatGateways | get | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/*NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 无 | 无 |
vpc:DescribeForwardTableEntries | DescribeForwardTableEntries | get | ForwardTable acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId} | 无 | 无 |
vpc:ModifySnatEntry | ModifySnatEntry | update | SnatTable acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId} | 无 | 无 |
vpc:DescribeExpressConnectTrafficQosRule | DescribeExpressConnectTrafficQosRule | list | 全部资源 * | 无 | 无 |
vpc:ListDhcpOptionsSets | ListDhcpOptionsSets | get | DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} | 无 | 无 |
vpc:DescribePhysicalConnections | DescribePhysicalConnections | list | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/* | 无 | 无 |
vpc:DescribePhysicalConnectionLOA | DescribePhysicalConnectionLOA | get | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:ModifyVpnPbrRouteEntryWeight | ModifyVpnPbrRouteEntryWeight | Write | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:UnassociateNetworkAcl | UnassociateNetworkAcl | update | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | 无 | 无 |
vpc:PublishVpcRouteEntries | PublishVpcRouteEntries | update | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:ModifyCommonBandwidthPackageAttribute | ModifyCommonBandwidthPackageAttribute | update | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} | 无 | 无 |
vpc:VpcDescribeVpcNatGatewayNetworkInterfaceQuota | VpcDescribeVpcNatGatewayNetworkInterfaceQuota | get | 全部资源 * | 无 | 无 |
vpc:GetTrafficMirrorServiceStatus | GetTrafficMirrorServiceStatus | get | 全部资源 * | 无 | 无 |
vpc:DescribeVbrHa | DescribeVbrHa | get | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:MoveResourceGroup | MoveResourceGroup | update | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}Eip acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId} | 无 | 无 |
vpc:DeleteVpnAttachment | DeleteVpnAttachment | delete | VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:DescribeSnatTableEntries | DescribeSnatTableEntries | get | SnatTable acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId} | 无 | 无 |
vpc:UpdateNetworkAclEntries | UpdateNetworkAclEntries | update | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} | 无 | 无 |
vpc:DescribeFailoverTestJob | DescribeFailoverTestJob | get | 全部资源 * | 无 | 无 |
vpc:Describe95Traffic | Describe95Traffic | get | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} | 无 | 无 |
vpc:DescribeIpv6Addresses | DescribeIpv6Addresses | list | Ipv6InternetBandwidth acs:vpc:{#regionId}:{#accountId}:vpc/* | 无 | 无 |
vpc:ModifyVpnPbrRouteEntryPriority | ModifyVpnPbrRouteEntryPriority | update | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:ModifySslVpnServer | ModifySslVpnServer | update | SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId} | 无 | 无 |
vpc:DisableNatGatewayEcsMetric | DisableNatGatewayEcsMetric | Write | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 无 | 无 |
vpc:DescribeBgpPeers | DescribeBgpPeers | get | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:DescribeVpnGatewayAvailableZones | DescribeVpnGatewayAvailableZones | list | 全部资源 * | 无 | 无 |
vpc:CreateVcoRouteEntry | CreateVcoRouteEntry | create | VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:ModifyVSwitchAttribute | ModifyVSwitchAttribute | update | VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | 无 | 无 |
vpc:DescribeVpnConnection | DescribeVpnConnection | get | VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:DescribeEipSegment | DescribeEipSegment | get | SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/* | 无 | 无 |
vpc:ModifyPhysicalConnectionAttribute | ModifyPhysicalConnectionAttribute | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:DescribeCustomerGateways | DescribeCustomerGateways | list | CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/*CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId} | 无 | 无 |
vpc:ModifyVcoRouteEntryWeight | ModifyVcoRouteEntryWeight | Write | VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:UpdateIpsecServer | UpdateIpsecServer | update | 全部资源 * | 无 | 无 |
vpc:GetIpv4GatewayAttribute | GetIpv4GatewayAttribute | get | Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId} | 无 | 无 |
vpc:RemoveSourcesFromTrafficMirrorSession | RemoveSourcesFromTrafficMirrorSession | update | TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId} | 无 | 无 |
vpc:DeletePublicIpAddressPoolCidrBlock | DeletePublicIpAddressPoolCidrBlock | Write | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 无 | 无 |
vpc:CreateForwardEntry | CreateForwardEntry | create | ForwardTable acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId} | 无 | 无 |
vpc:DeleteVpnConnection | DeleteVpnConnection | delete | VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:DeleteIpsecServer | DeleteIpsecServer | delete | IpsecServer acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId} | 无 | 无 |
vpc:DissociateRouteTableFromGateway | DissociateRouteTableFromGateway | get | Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId} | 无 | 无 |
vpc:AssociateVpcCidrBlock | AssociateVpcCidrBlock | create | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:CompletePhysicalConnectionLOA | CompletePhysicalConnectionLOA | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:CreateTrafficMirrorSession | CreateTrafficMirrorSession | create | TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} | 无 | 无 |
vpc:ListVirtualPhysicalConnections | ListVirtualPhysicalConnections | list | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:DeleteSslVpnClientCert | DeleteSslVpnClientCert | Write | SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId} | 无 | 无 |
vpc:DescribeVpnCrossAccountAuthorizations | DescribeVpnCrossAccountAuthorizations | get | VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:DeleteIpv6InternetBandwidth | DeleteIpv6InternetBandwidth | delete | Ipv6InternetBandwidth acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId} | 无 | 无 |
vpc:CreatePhysicalConnection | CreatePhysicalConnection | create | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/* | 无 | 无 |
vpc:DescribeEipAddresses | DescribeEipAddresses | list | Address acs:vpc:{#regionId}:{#accountId}:eip/* | vpc:tag | 无 |
vpc:UpdateVirtualPhysicalConnection | UpdateVirtualPhysicalConnection | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId} | 无 | 无 |
vpc:DescribeEipMonitorData | DescribeEipMonitorData | get | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 无 | 无 |
vpc:DeleteTrafficMirrorFilterRules | DeleteTrafficMirrorFilterRules | delete | TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} | 无 | 无 |
vpc:RecoverPhysicalConnection | RecoverPhysicalConnection | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId} | 无 | 无 |
vpc:DescribeTagKeysForExpressConnect | DescribeTagKeysForExpressConnect | list | PhysicalConnection acs:vpc:{#regionId}:{#AccountId}:physicalconnection/{#PhysicalConnectionId}RouterInterface acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}VirtualBorderRouter acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:DeleteSslVpnServer | DeleteSslVpnServer | Write | SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId} | 无 | 无 |
vpc:ReleaseEipAddress | ReleaseEipAddress | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | vpc:tag | 无 |
vpc:ModifyNatGatewaySpec | ModifyNatGatewaySpec | Write | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 无 | 无 |
vpc:CreateVpcGatewayEndpoint | CreateVpcGatewayEndpoint | create | GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/* | 无 | 无 |
vpc:CreateTrafficMirrorFilter | CreateTrafficMirrorFilter | create | TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/* | 无 | 无 |
vpc:ModifyNetworkAclAttributes | ModifyNetworkAclAttributes | update | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} | 无 | 无 |
vpc:AssociateRouteTable | AssociateRouteTable | update | VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId} | 无 | 无 |
vpc:ModifyVpnConnectionAttribute | ModifyVpnConnectionAttribute | update | VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:CreateVirtualPhysicalConnection | CreateVirtualPhysicalConnection | create | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId} | 无 | 无 |
vpc:AddCommonBandwidthPackageIps | AddCommonBandwidthPackageIps | create | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} | 无 | 无 |
vpc:UpdateIpv4GatewayAttribute | UpdateIpv4GatewayAttribute | update | Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId} | 无 | 无 |
vpc:GetNatGatewayAttribute | GetNatGatewayAttribute | get | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 无 | 无 |
vpc:CreateVpc | CreateVpc | create | VPC acs:vpc:{#regionId}:{#accountId}:vpc/* | 无 | 无 |
vpc:ListEnhanhcedNatGatewayAvailableZones | ListEnhanhcedNatGatewayAvailableZones | list | 全部资源 * | 无 | 无 |
vpc:SetHighDefinitionMonitorLogStatus | SetHighDefinitionMonitorLogStatus | Write | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 无 | 无 |
vpc:DeleteIpv4Gateway | DeleteIpv4Gateway | delete | Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId} | 无 | 无 |
vpc:UpdatePublicIpAddressPoolAttribute | UpdatePublicIpAddressPoolAttribute | Write | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 无 | 无 |
vpc:CancelPhysicalConnection | CancelPhysicalConnection | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:ModifyIpv6GatewayAttribute | ModifyIpv6GatewayAttribute | update | Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} | 无 | 无 |
vpc:CopyNetworkAclEntries | CopyNetworkAclEntries | update | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} | 无 | 无 |
vpc:ModifyCommonBandwidthPackageIpBandwidth | ModifyCommonBandwidthPackageIpBandwidth | update | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} | 无 | 无 |
vpc:DescribeNetworkAclAttributes | DescribeNetworkAclAttributes | get | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} | 无 | 无 |
vpc:DeleteVpcPrefixList | DeleteVpcPrefixList | delete | PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} | 无 | 无 |
vpc:ActiveFlowLog | ActiveFlowLog | update | FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId} | 无 | 无 |
vpc:ListVpcGatewayEndpoints | ListVpcGatewayEndpoints | list | GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} | 无 | 无 |
vpc:DescribeNetworkAcls | DescribeNetworkAcls | list | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/* | 无 | 无 |
vpc:AssociateHaVip | AssociateHaVip | create | Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} | 无 | 无 |
vpc:AllocateIpv6InternetBandwidth | AllocateIpv6InternetBandwidth | create | Ipv6InternetBandwidth acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/* | 无 | 无 |
vpc:CancelCommonBandwidthPackageIpBandwidth | CancelCommonBandwidthPackageIpBandwidth | update | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} | 无 | 无 |
vpc:CreateVpnPbrRouteEntry | CreateVpnPbrRouteEntry | create | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:ApplyPhysicalConnectionLOA | ApplyPhysicalConnectionLOA | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:CreateBgpGroup | CreateBgpGroup | create | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:CreateSslVpnServer | CreateSslVpnServer | create | SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:RevokeInstanceFromCen | RevokeInstanceFromCen | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:ConnectRouterInterface | ConnectRouterInterface | update | RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:DeleteBgpNetwork | DeleteBgpNetwork | delete | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:DescribeIpv6GatewayAttribute | DescribeIpv6GatewayAttribute | get | Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} | 无 | 无 |
vpc:CreateCustomerGateway | CreateCustomerGateway | create | CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/* | 无 | 无 |
vpc:CreateTrafficMirrorFilterRules | CreateTrafficMirrorFilterRules | create | TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} | 无 | 无 |
vpc:TagResourcesForExpressConnect | TagResourcesForExpressConnect | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:UpdateVirtualBorderBandwidth | UpdateVirtualBorderBandwidth | update | VirtualBorderRouter acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:DeleteDhcpOptionsSet | DeleteDhcpOptionsSet | delete | DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} | 无 | 无 |
vpc:DeleteForwardEntry | DeleteForwardEntry | delete | ForwardTable acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId} | 无 | 无 |
vpc:CreateRouteEntries | CreateRouteEntries | create | RouteEntry acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:DeleteBgpGroup | DeleteBgpGroup | delete | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:CreateVpconnFromVbr | CreateVpconnFromVbr | create | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId} | 无 | 无 |
vpc:OpenFlowLogService | OpenFlowLogService | create | FlowLogService acs:vpc:{#regionId}:{#accountId}:flowlog/* | 无 | 无 |
vpc:DeleteVSwitch | DeleteVSwitch | delete | VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | 无 | 无 |
vpc:DeleteRouteEntry | DeleteRouteEntry | delete | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:DeleteHaVip | DeleteHaVip | delete | HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} | 无 | 无 |
vpc:RetryVpcPrefixListAssociation | RetryVpcPrefixListAssociation | update | PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} | 无 | 无 |
vpc:ModifyIpv6AddressAttribute | ModifyIpv6AddressAttribute | update | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:AssociateNetworkAcl | AssociateNetworkAcl | update | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | 无 | 无 |
vpc:ListPublicIpAddressPools | ListPublicIpAddressPools | get | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/* | 无 | 无 |
vpc:DeleteVpc | DeleteVpc | delete | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | vpc:tag | 无 |
vpc:GrantInstanceToVbr | GrantInstanceToVbr | update | VPC acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId} | 无 | 无 |
vpc:DeleteRouterInterface | DeleteRouterInterface | delete | RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:CreateSslVpnClientCert | CreateSslVpnClientCert | create | SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId} | 无 | 无 |
vpc:DescribeVpnGateways | DescribeVpnGateways | list | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/*VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId} | 无 | 无 |
vpc:ReplaceVpcDhcpOptionsSet | ReplaceVpcDhcpOptionsSet | update | DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:DescribeVcoRouteEntries | DescribeVcoRouteEntries | list | VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:ListGatewayRouteTableEntries | ListGatewayRouteTableEntries | list | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId} | 无 | 无 |
vpc:GetVpcPrefixListEntries | GetVpcPrefixListEntries | get | PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} | 无 | 无 |
vpc:TerminateVirtualBorderRouter | TerminateVirtualBorderRouter | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:DescribeVpnGateway | DescribeVpnGateway | get | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:ModifyFlowLogAttribute | ModifyFlowLogAttribute | update | FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId} | 无 | 无 |
vpc:CreateFailoverTestJob | CreateFailoverTestJob | create | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:DeleteVSwitchCidrReservation | DeleteVSwitchCidrReservation | delete | VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId} | 无 | 无 |
vpc:ListVpcPublishedRouteEntries | ListVpcPublishedRouteEntries | list | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:DisableVpcClassicLink | DisableVpcClassicLink | update | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:GetPhysicalConnectionServiceStatus | GetPhysicalConnectionServiceStatus | get | 全部资源 * | 无 | 无 |
vpc:DeleteRouteEntries | DeleteRouteEntries | delete | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId} | 无 | 无 |
vpc:StopFailoverTestJob | StopFailoverTestJob | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:DescribeEipGatewayInfo | DescribeEipGatewayInfo | list | GatewayInfo acs:vpc:{#regionId}:{#accountId}:eip/* | 无 | 无 |
vpc:WithdrawVpcPublishedRouteEntries | WithdrawVpcPublishedRouteEntries | update | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:ModifyVSwitchCidrReservationAttribute | ModifyVSwitchCidrReservationAttribute | update | VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId} | 无 | 无 |
vpc:ModifyExpressConnectTrafficQosRule | ModifyExpressConnectTrafficQosRule | update | 全部资源 * | 无 | 无 |
vpc:ModifyRouteTableAttributes | ModifyRouteTableAttributes | update | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | vpc:VRouter | 无 |
vpc:ModifyVpnAttachmentAttribute | ModifyVpnAttachmentAttribute | update | VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:ModifyTunnelAttribute | ModifyTunnelAttribute | update | VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:AllocateEipAddressPro | AllocateEipAddressPro | update | Address acs:vpc:{#regionId}:{#accountId}:eip/* | 无 | 无 |
vpc:DescribeRouteTableList | DescribeRouteTableList | list | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/* | vpc:VRouter vpc:VBR | 无 |
vpc:MoveVpnResourceGroup | MoveVpnResourceGroup | update | 全部资源 * | 无 | 无 |
vpc:RecoverVirtualBorderRouter | RecoverVirtualBorderRouter | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:CreateVpcPrefixList | CreateVpcPrefixList | create | PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/* | 无 | 无 |
vpc:DescribeSslVpnServers | DescribeSslVpnServers | list | SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId} | 无 | 无 |
vpc:DescribeFailoverTestJobs | DescribeFailoverTestJobs | list | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:ModifyNatIpAttribute | ModifyNatIpAttribute | update | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 无 | 无 |
vpc:DeleteVbrHa | DeleteVbrHa | delete | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:DescribeSslVpnClientCerts | DescribeSslVpnClientCerts | list | SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId} | 无 | 无 |
vpc:DeleteExpressConnectTrafficQos | DeleteExpressConnectTrafficQos | delete | 全部资源 * | 无 | 无 |
vpc:UpdateVpcGatewayEndpointAttribute | UpdateVpcGatewayEndpointAttribute | update | GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} | 无 | 无 |
vpc:ModifyRouterInterfaceSpec | ModifyRouterInterfaceSpec | update | RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:DeleteRouteTable | DeleteRouteTable | delete | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:GetVpcRouteEntrySummary | GetVpcRouteEntrySummary | list | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId} | 无 | 无 |
vpc:ModifyBgpPeerAttribute | ModifyBgpPeerAttribute | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:UnassociateRouteTable | UnassociateRouteTable | update | VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | 无 | 无 |
vpc:DeletionProtection | DeletionProtection | delete | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 无 | 无 |
vpc:CreateVSwitchCidrReservation | CreateVSwitchCidrReservation | create | VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/* | 无 | 无 |
vpc:ModifySslVpnClientCert | ModifySslVpnClientCert | Write | SslVpnClientCert acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId} | 无 | 无 |
vpc:AllocateEipSegmentAddress | AllocateEipSegmentAddress | create | SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/* | 无 | 无 |
vpc:PublishVpnRouteEntry | PublishVpnRouteEntry | update | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:DescribeCommonBandwidthPackages | DescribeCommonBandwidthPackages | get | CommonBandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/* | 无 | 无 |
vpc:AddBgpNetwork | AddBgpNetwork | get | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:ChangeResourceGroup | ChangeResourceGroup | update | PhysicalConnection acs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId}RouterInterface acs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:ModifyVpnGatewayAttribute | ModifyVpnGatewayAttribute | update | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:DeleteNetworkAcl | DeleteNetworkAcl | delete | NetworkAcl acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} | 无 | 无 |
vpc:UnTagResources | UnTagResources | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | vpc:tag | 无 |
vpc:DeletePublicIpAddressPool | DeletePublicIpAddressPool | delete | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 无 | 无 |
vpc:CreateIpv4Gateway | CreateIpv4Gateway | create | Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/* | 无 | 无 |
vpc:AssociateEipAddress | AssociateEipAddress | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}Association acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} | 无 | 无 |
vpc:UpdateTrafficMirrorFilterAttribute | UpdateTrafficMirrorFilterAttribute | update | TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} | 无 | 无 |
vpc:EnableNatGatewayEcsMetric | EnableNatGatewayEcsMetric | Write | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 无 | 无 |
vpc:CreateNatGateway | CreateNatGateway | create | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/* | 无 | 无 |
vpc:AssociateRouteTableWithGateway | AssociateRouteTableWithGateway | create | Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId} | 无 | 无 |
vpc:UpdateDhcpOptionsSetAttribute | UpdateDhcpOptionsSetAttribute | update | DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} | 无 | 无 |
vpc:AddPublicIpAddressPoolCidrBlock | AddPublicIpAddressPoolCidrBlock | create | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 无 | 无 |
vpc:CreatePhysicalConnectionSetupOrder | CreatePhysicalConnectionSetupOrder | create | 全部资源 * | 无 | 无 |
vpc:AssociatePhysicalConnectionToVirtualBorderRouter | AssociatePhysicalConnectionToVirtualBorderRouter | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:OpenPhysicalConnectionService | OpenPhysicalConnectionService | create | 全部资源 * | 无 | 无 |
vpc:CreatePublicIpAddressPool | CreatePublicIpAddressPool | create | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/* | 无 | 无 |
vpc:UpdateTrafficMirrorSessionAttribute | UpdateTrafficMirrorSessionAttribute | update | TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} | 无 | 无 |
vpc:ListTrafficMirrorFilters | ListTrafficMirrorFilters | list | TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/* | 无 | 无 |
vpc:DeleteCommonBandwidthPackage | DeleteCommonBandwidthPackage | delete | CommonBandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId} | vpc:tag | 无 |
vpc:DeleteIpv6Gateway | DeleteIpv6Gateway | delete | Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} | 无 | 无 |
vpc:DescribeFlowLogs | DescribeFlowLogs | get | FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/* | 无 | 无 |
vpc:DescribeVpcs | DescribeVpcs | list | VPC acs:vpc:{#regionId}:{#accountId}:vpc/*VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId} | vpc:tag | 无 |
vpc:DeleteVirtualBorderRouter | DeleteVirtualBorderRouter | delete | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:CreateRouterInterface | CreateRouterInterface | create | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/* | vpc:TargetAccountRDId | 无 |
vpc:ModifyEipAddressAttribute | ModifyEipAddressAttribute | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 无 | 无 |
vpc:CreateDhcpOptionsSet | CreateDhcpOptionsSet | create | DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/* | 无 | 无 |
vpc:DeleteSnatEntry | DeleteSnatEntry | delete | SnatTable acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId} | 无 | 无 |
vpc:GetDhcpOptionsSet | GetDhcpOptionsSet | get | DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} | 无 | 无 |
vpc:ModifyNatGatewayAttribute | ModifyNatGatewayAttribute | update | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 无 | 无 |
vpc:DescribeVpnConnections | DescribeVpnConnections | list | VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/*VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:ModifyBgpGroupAttribute | ModifyBgpGroupAttribute | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:DescribeBgpGroups | DescribeBgpGroups | get | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:DescribeVpnPbrRouteEntries | DescribeVpnPbrRouteEntries | get | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:CreateVpnRouteEntry | CreateVpnRouteEntry | create | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:DescribeVpnSslServerLogs | DescribeVpnSslServerLogs | get | SslVpnServer acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId} | 无 | 无 |
vpc:DescribeCustomerGateway | DescribeCustomerGateway | get | CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId} | 无 | 无 |
vpc:ListTagResources | ListTagResources | get | 全部资源 * | vpc:tag | 无 |
vpc:EnableVpcClassicLink | EnableVpcClassicLink | update | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:CreateVSwitch | CreateVSwitch | create | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/* | vpc:tag | 无 |
vpc:UpdateTrafficMirrorFilterRuleAttribute | UpdateTrafficMirrorFilterRuleAttribute | update | TrafficMirrorFilter acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} | 无 | 无 |
vpc:DescribeHighDefinitionMonitorLogAttribute | DescribeHighDefinitionMonitorLogAttribute | get | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 无 | 无 |
vpc:ModifyCustomerGatewayAttribute | ModifyCustomerGatewayAttribute | update | CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId} | 无 | 无 |
vpc:ModifyVpcAttribute | ModifyVpcAttribute | update | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | vpc:tag | 无 |
vpc:ListTagResourcesForExpressConnect | ListTagResourcesForExpressConnect | list | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}RouterInterface acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:DeleteVpcGatewayEndpoint | DeleteVpcGatewayEndpoint | delete | GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} | 无 | 无 |
vpc:DeleteVcoRouteEntry | DeleteVcoRouteEntry | Write | VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:DescribeVirtualBorderRouters | DescribeVirtualBorderRouters | list | VirtualBorderRouter acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:DescribeVpnAttachments | DescribeVpnAttachments | list | VpnConnections acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:GrantInstanceToCen | GrantInstanceToCen | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:CreateIpv6Gateway | CreateIpv6Gateway | create | Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/* | 无 | 无 |
vpc:DescribeVpnConnectionLogs | DescribeVpnConnectionLogs | list | VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:AllocateIpv6Address | AllocateIpv6Address | create | Ipv6Address acs:vpc:{#regionId}:{#accountId}:ipv6address/* | 无 | 无 |
vpc:ListPublicIpAddressPoolCidrBlocks | ListPublicIpAddressPoolCidrBlocks | get | PublicIpAddressPool acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} | 无 | 无 |
vpc:GetPublicIpAddressPoolServiceStatus | GetPublicIpAddressPoolServiceStatus | get | 全部资源 * | 无 | 无 |
vpc:DetachDhcpOptionsSetFromVpc | DetachDhcpOptionsSetFromVpc | update | DhcpOptionsSet acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:DescribeGrantRulesToCen | DescribeGrantRulesToCen | get | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}GrantRuleToCen acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId} | 无 | 无 |
vpc:CreateVpnAttachment | CreateVpnAttachment | create | 全部资源 * | 无 | 无 |
vpc:DescribeIpv6EgressOnlyRules | DescribeIpv6EgressOnlyRules | get | Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} | 无 | 无 |
vpc:CreateExpressConnectTrafficQos | CreateExpressConnectTrafficQos | create | TrafficQos acs:vpc:{#regionId}:{#accountId}:TrafficQos/* | 无 | 无 |
vpc:DescribeVpnRouteEntries | DescribeVpnRouteEntries | get | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:CreateRouteTable | CreateRouteTable | create | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/* | 无 | 无 |
vpc:UpdateFailoverTestJob | UpdateFailoverTestJob | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:SecondApplyPhysicalConnectionLOA | SecondApplyPhysicalConnectionLOA | none | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:EnablePhysicalConnection | EnablePhysicalConnection | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
vpc:DescribeHaVips | DescribeHaVips | get | HaVip acs:vpc:{#regionId}:{#accountId}:havip/* | 无 | 无 |
vpc:CheckVpnBgpEnabled | CheckVpnBgpEnabled | none | 全部资源 * | 无 | 无 |
vpc:ModifyIpv6InternetBandwidth | ModifyIpv6InternetBandwidth | update | Ipv6InternetBandwidth acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId} | 无 | 无 |
vpc:ModifyRouteEntry | ModifyRouteEntry | update | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:DeleteFailoverTestJob | DeleteFailoverTestJob | delete | 全部资源 * | 无 | 无 |
vpc:UnassociateHaVip | UnassociateHaVip | delete | Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} | 无 | 无 |
vpc:DiagnoseVpnConnections | DiagnoseVpnConnections | get | 全部资源 * | 无 | 无 |
vpc:AssociateEipAddressBatch | AssociateEipAddressBatch | update | Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}Instance acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} | 无 | 无 |
vpc:DescribeVSwitchAttributes | DescribeVSwitchAttributes | get | VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | 无 | 无 |
vpc:ModifyVpnRouteEntryWeight | ModifyVpnRouteEntryWeight | Write | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:DescribeSslVpnClients | DescribeSslVpnClients | list | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:ListFullNatEntries | ListFullNatEntries | get | FullNat acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId} | 无 | 无 |
vpc:DeleteExpressConnectTrafficQosQueue | DeleteExpressConnectTrafficQosQueue | delete | 全部资源 * | 无 | 无 |
vpc:CreateIpv6EgressOnlyRule | CreateIpv6EgressOnlyRule | create | Ipv6EgressRule acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} | 无 | 无 |
vpc:CreateHighReliablePhysicalConnection | CreateHighReliablePhysicalConnection | create | 全部资源 * | 无 | 无 |
vpc:ListIpsecServers | ListIpsecServers | list | 全部资源 * | 无 | 无 |
vpc:OpenTrafficMirrorService | OpenTrafficMirrorService | create | 全部资源 * | 无 | 无 |
vpc:DescribeRouterInterfaces | DescribeRouterInterfaces | list | RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | 无 | 无 |
vpc:DownloadVpnConnectionConfig | DownloadVpnConnectionConfig | get | VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} | 无 | 无 |
vpc:CreateFlowLog | CreateFlowLog | create | VSwitch acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId}FlowLog acs:vpc:{#regionId}:{#accountId}:flowlog/*VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:ListTrafficMirrorSessions | ListTrafficMirrorSessions | list | TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/* | 无 | 无 |
vpc:RemoveCommonBandwidthPackageIp | RemoveCommonBandwidthPackageIp | delete | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} | 无 | 无 |
vpc:TagResources | TagResources | update | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | vpc:tag | 无 |
vpc:EnableVpcIpv4Gateway | EnableVpcIpv4Gateway | update | Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId} | 无 | 无 |
vpc:ModifyForwardEntry | ModifyForwardEntry | update | ForwardTable acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId} | 无 | 无 |
vpc:AddSourcesToTrafficMirrorSession | AddSourcesToTrafficMirrorSession | update | TrafficMirrorSession acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId} | 无 | 无 |
vpc:CreateDefaultVpc | CreateDefaultVpc | Write | VPC acs:vpc:{#regionId}:{#accountId}:vpc/* | 无 | 无 |
vpc:ModifyRouterInterfaceAttribute | ModifyRouterInterfaceAttribute | update | RouterInterface acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} | vpc:TargetAccountRDId | 无 |
vpc:UpdateGatewayRouteTableEntryAttribute | UpdateGatewayRouteTableEntryAttribute | update | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:ListBusinessAccessPoints | ListBusinessAccessPoints | list | 全部资源 * | 无 | 无 |
vpc:CreateHaVip | CreateHaVip | create | HaVip acs:vpc:{#regionId}:{#accountId}:havip/*VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} | 无 | 无 |
vpc:GetVSwitchCidrReservationUsage | GetVSwitchCidrReservationUsage | get | VSwitchCidrReservation acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId} | 无 | 无 |
vpc:ListIpv4Gateways | ListIpv4Gateways | list | Ipv4Gateway acs:vpc:{#regionId}:{#accountId}:ipv4gateway/* | 无 | 无 |
vpc:AllocateEipAddress | AllocateEipAddress | create | Address acs:vpc:{#regionId}:{#accountId}:eip/* | 无 | 无 |
vpc:DescribeBgpNetworks | DescribeBgpNetworks | get | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:CreateVpnGateway | CreateVpnGateway | create | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/* | 无 | 无 |
vpc:DescribeExpressConnectTrafficQosQueue | DescribeExpressConnectTrafficQosQueue | list | 全部资源 * | 无 | 无 |
vpc:ModifyExpressConnectTrafficQos | ModifyExpressConnectTrafficQos | update | 全部资源 * | 无 | 无 |
vpc:UnassociatePhysicalConnectionFromVirtualBorderRouter | UnassociatePhysicalConnectionFromVirtualBorderRouter | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:DeleteVpnRouteEntry | DeleteVpnRouteEntry | Write | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:CreateVirtualBorderRouter | CreateVirtualBorderRouter | create | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}VirtualBorderRouter acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/* | 无 | 无 |
vpc:ModifyVirtualBorderRouterAttribute | ModifyVirtualBorderRouterAttribute | update | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:DescribeTags | DescribeTags | get | 全部资源 * | vpc:tag | 无 |
vpc:AssociateRouteTablesWithVpcGatewayEndpoint | AssociateRouteTablesWithVpcGatewayEndpoint | create | GatewayEndpoint acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} | 无 | 无 |
vpc:DescribeIpv6Gateways | DescribeIpv6Gateways | get | Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} | 无 | 无 |
vpc:CreateExpressConnectTrafficQosRule | CreateExpressConnectTrafficQosRule | create | 全部资源 * | 无 | 无 |
vpc:DescribeVSwitches | DescribeVSwitches | list | VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/* | vpc:VPC | 无 |
vpc:DeleteVpnPbrRouteEntry | DeleteVpnPbrRouteEntry | Write | VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:ListPrefixLists | ListPrefixLists | list | PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/* | 无 | 无 |
vpc:ModifyVRouterAttribute | ModifyVRouterAttribute | update | VRouter acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId} | 无 | 无 |
vpc:DeleteIpv6EgressOnlyRule | DeleteIpv6EgressOnlyRule | delete | Ipv6Gateway acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} | 无 | 无 |
vpc:GetFlowLogServiceStatus | GetFlowLogServiceStatus | get | FlowLogService acs:vpc:{#regionId}:{#accountId}:flowlog/* | 无 | 无 |
vpc:UnassociateVpcCidrBlock | UnassociateVpcCidrBlock | delete | VPC acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} | 无 | 无 |
vpc:ModifyVpcPrefixList | ModifyVpcPrefixList | update | PrefixList acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} | 无 | 无 |
vpc:ReleaseEipSegmentAddress | ReleaseEipSegmentAddress | delete | SegmentAddress acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} | 无 | 无 |
vpc:CreateVpnConnection | CreateVpnConnection | create | CustomerGateway acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}VpnConnection acs:vpc:{#regionId}:{#accountId}:vpnconnection/*VpnGateway acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} | 无 | 无 |
vpc:CreateBgpPeer | CreateBgpPeer | create | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} | 无 | 无 |
vpc:CreateVbrHa | CreateVbrHa | create | VirtualBorderRouter acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} | 无 | 无 |
vpc:UnassociateEipAddress | UnassociateEipAddress | delete | Instance acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}Address acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}HaVip acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} | 无 | 无 |
vpc:DescribeVRouters | DescribeVRouters | list | VRouter acs:vpc:{#regionId}:{#accountId}:vrouter/* | vpc:VPC | 无 |
vpc:DescribeExpressConnectTrafficQos | DescribeExpressConnectTrafficQos | list | TrafficQos acs:vpc:{#regionId}:{#accountId}:TrafficQos/* | 无 | 无 |
vpc:ModifyCommonBandwidthPackageSpec | ModifyCommonBandwidthPackageSpec | update | BandwidthPackage acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} | 无 | 无 |
vpc:StartFailoverTestJob | StartFailoverTestJob | update | 全部资源 * | 无 | 无 |
vpc:DeleteNatGateway | DeleteNatGateway | delete | NatGateway acs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid} | 无 | 无 |
vpc:CreateRouteEntry | CreateRouteEntry | create | RouteTable acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} | 无 | 无 |
vpc:TerminatePhysicalConnection | TerminatePhysicalConnection | update | PhysicalConnection acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} | 无 | 无 |
资源(Resource)
下表是专有网络VPC(VPC)定义的资源,这些资源可以在RAM权限策略语句的Resource
元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源ARN是资源在阿里云上的唯一标识。具体说明如下:{#}
为变量标识,需要您替换为实际值。例如:{#ramcode}
需要您替换为实际的云服务RAM代码。-
*
表示全部。例如:{#resourceType}
为*
时:表示全部资源。{#regionId}
为*
时:表示全部地域。{#accountId}
为*
时:表示全部阿里云账号。
资源类型 | 资源ARN |
---|---|
TrafficMirrorSession | acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId} |
VSwitch | acs:vpc:{#regionid}:{#accountId}:vswitch/* |
RouterInterface | acs:vpc:*:{#accountId}:routerinterface/* |
VpnGateway | acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId} |
IpsecServer | acs:vpc:{#Region}:{#AccountId}: vpnipsecserver/{#IpsecServerId} |
VpnGateway | acs:vpc:{#Region}:{#AccountId}:vpngateway/{#VpnInstanceId} |
RouteTable | acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} |
GatewayEndpoint | acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId} |
VSwitch | acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId} |
Ipv6Translator | acs:vpc:{#regionId}:{#accountId}:ipv6trans/* |
PhysicalConnection | acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId} |
TrafficQos | acs:vpc:{#regionId}:{#accountId}:TrafficQos/* |
HaVip | acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} |
Instance | acs:ecs:{#regionId}:{#accountId}:instance/{#Instanceid} |
GlobalAccelerationInstance | acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/* |
GatewayEndpoint | acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/* |
SslVpnClientCert | acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId} |
RouterInterface | acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId} |
Ipv6Translator | acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId} |
Address | acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} |
VPC | acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId} |
DhcpOptionsSet | acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId} |
PhysicalConnection | acs:vpc:{#regionid}:{#accountid}:physicalconnection/{#PhysicalConnectionId} |
VPC | acs:vpc:{#regionId}:{#accountId}:vpc/* |
SnatEntry | acs:vpc:{#regionId}:{#accountId}:snattable/* |
VirtualBorderRouter | acs:expressconnect:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} |
CommonBandwidthPackage | acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/* |
FlowLog | acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId} |
VSwitchCidrReservation | acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/* |
NatGateway | acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId} |
GlobalAccelerationInstance | acs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId} |
VpnConnection | acs:vpc:{#regionId}:{#accountId}:* |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} |
BandwidthPackage | acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId} |
TrafficMirrorFilter | acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId} |
CustomerGateway | acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId} |
PrefixList | acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId} |
NetworkAcl | acs:vpc:{#regionId}:{#accountId}:networkacl/* |
PublicIpAddressPoolService | acs:vpc:{#regionId}:{#accountId}:publicipaddresspoolservice/* |
VPC | acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId} |
VirtualBorderRouter | acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId} |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId} |
Ipv6Address | acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId} |
NatGateway | acs:vpc:{#regionId}:{#accountId}:natgateway/* |
ForwardTable | acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId} |
SnatTable | acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId} |
DhcpOptionsSet | acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/* |
PhysicalConnection | acs:vpc:{#regionId}:{#accountId}:physicalconnection/* |
NetworkAcl | acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId} |
NatGateway | acs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid} |
TrafficMirrorService | acs:vpc:{#regionId}:{#accountId}:trafficmirror/* |
BandwidthPackage | acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId} |
Eip | acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} |
Ipv4Gateway | acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId} |
Ipv6Gateway | acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} |
PublicIpAddressPool | acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId} |
VpnConnections | acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} |
Ipv6InternetBandwidth | acs:vpc:{#regionId}:{#accountId}:vpc/* |
SslVpnServer | acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId} |
VpnGateway | acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId} |
VpnConnection | acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId} |
SegmentAddress | acs:vpc:{#regionId}:{#accountId}:eip/* |
CustomerGateway | acs:vpc:{#regionId}:{#accountId}:customergateway/* |
IpsecServer | acs:vpc:{#regionId}:{#accountId}:ipsecserver/* |
IpsecServer | acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId} |
Ipv4Gateway | acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId} |
RouteTable | acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId} |
TrafficMirrorSession | acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/* |
Ipv6InternetBandwidth | acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId} |
Address | acs:vpc:{#regionId}:{#accountId}:eip/* |
PhysicalConnection | acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId} |
PhysicalConnection | acs:vpc:{#regionId}:{#AccountId}:physicalconnection/{#PhysicalConnectionId} |
RouterInterface | acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId} |
TrafficMirrorFilter | acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/* |
VSwitch | acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId} |
VPC | acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId} |
Instance | acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId} |
Ipv6InternetBandwidth | acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/* |
SslVpnServer | acs:vpc:{#regionId}:{#accountId}:sslvpnserver/* |
BandwidthPackage | acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/* |
VirtualBorderRouter | acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId} |
RouteEntry | acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId} |
FlowLogService | acs:vpc:{#regionId}:{#accountId}:flowlog/* |
PublicIpAddressPool | acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/* |
SslVpnClientCert | acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/* |
VpnGateway | acs:vpc:{#regionId}:{#accountId}:vpngateway/* |
BandwidthPackage | acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/* |
VSwitchCidrReservation | acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId} |
NatIp | acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} |
GatewayInfo | acs:vpc:{#regionId}:{#accountId}:eip/* |
IPv6Translator | acs:vpc:{#regionId}:{#accountId}:ipv6trans/* |
IPv6Translator | acs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId} |
NatIpCidr | acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId} |
RouteTable | acs:vpc:{#regionId}:{#accountId}:routetable/* |
CustomerGateway | acs:vpc:{#Region}:{#AccountId}:customergateway/{#CustomerGatewayId} |
VpnAttachment | acs:vpc:{#Region}:{#AccountId}:vpnattachment/{#VpnConnectionId} |
VpnConnection | acs:vpc:{#Region}:{#AccountId}:vpnconnection/{#VpnConnectionId} |
SslVpnServer | acs:vpc:{#Region}:{#AccountId}:sslvpnserver/{#SslVpnServerId} |
PrefixList | acs:vpc:{#regionId}:{#accountId}:prefixlist/* |
VPC | acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId} |
PhysicalConnection | acs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId} |
VirtualBorderRouter | acs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId} |
RouterInterface | acs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId} |
Instance | acs:ecs:{#regionId}:{#accountId}:instance/* |
Ipv4Gateway | acs:vpc:{#regionId}:{#accountId}:ipv4gateway/* |
Association | acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId} |
CommonBandwidthPackage | acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId} |
FlowLog | acs:vpc:{#regionId}:{#accountId}:flowlog/* |
VPC | acs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId} |
RouterInterface | acs:vpc:{#regionId}:{#accountId}:routerinterface/* |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/* |
VpnConnection | acs:vpc:{#regionId}:{#accountId}:vpnconnection/* |
RouteTable | acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable} |
VSwitch | acs:vpc:{#regionId}:{#accountId}:vswitch/* |
Ipv6Gateway | acs:vpc:{#regionId}:{#accountId}:ipv6gateway/* |
Ipv6Address | acs:vpc:{#regionId}:{#accountId}:ipv6address/* |
VirtualBorderRouter | acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId} |
GrantRuleToCen | acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId} |
HaVip | acs:vpc:{#regionId}:{#accountId}:havip/* |
FullNat | acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId} |
Ipv6EgressRule | acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId} |
Eip | acs:vpc:{#regionId}:{#accountId}:eip/{#EipId} |
physicalconnection | acs:vpc:{#regionId}:{#accountId}:physicalconnection/* |
VpnGateway | acs:vpc:{#regionId}:{#accountId}: |
VSwitch | acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId} |
GlobalAccelerationInstance | acs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/* |
VirtualBorderRouter | acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/* |
Instance | acs:ecs:{#regionId}:{#accountId}:instance/{#BackendServerId} |
VRouter | acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId} |
SegmentAddress | acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId} |
Instance | acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId} |
VRouter | acs:vpc:{#regionId}:{#accountId}:vrouter/* |
条件(Condition)
下表是专有网络VPC(VPC)定义的产品级条件关键字,这些条件关键字可以在RAM权限策略语句的
Condition
元素中使用,用来描述授予权限的条件。以下仅列举产品级的条件关键字,阿里云定义的通用条件关键字也同样适用专有网络VPC(VPC)。其中,数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符,否则无法匹配策略语句,授权行为无效。数据类型与条件运算符的对应关系,请参见条件操作类型。
条件关键字 | 描述 | 类型 |
---|---|---|
vpc:PhysicalConnection | 物理专线信息 | String |
vpc:VBR | 边界路由器信息 | String |
vpc:VPC | VPC信息 | String |
vpc:VRouter | 路由器信息 | String |
vpc:tag | VPC的标签 | String |
vpc:TargetAccountRDId | 对端用户资源目录ID信息 | String |