全部产品
Search
文档中心

专有网络 VPC:授权信息

更新时间:Aug 29, 2024
访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用RAM可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM中使用权限策略描述授权的具体内容。
本文为您介绍专有网络VPC(VPC)为RAM权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。专有网络VPC(VPC)的RAM代码(RamCode)为vpc,支持的授权粒度为RESOURCE

权限策略通用结构

权限策略支持JSON格式,其通用结构如下:
{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}
各字段含义如下:
  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。
  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)
  • Resource:受操作影响的具体对象,您可以使用资源ARN来描述指定资源。具体信息,请参见资源(Resource)
  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)
    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素
    • Condition_key:条件关键字。
    • Condition_value:条件关键字对应的值。

操作(Action)

下表是专有网络VPC(VPC)定义的操作,这些操作可以在RAM权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:
  • 操作:是指具体的权限点。
  • API:是指操作对应的API接口。
  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。
  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:
    • 对于必选的资源类型,用背景高亮的方式表示。
    • 对于不支持资源级授权的操作,用全部资源表示。
  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字
  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。
操作API访问级别资源类型条件关键字关联操作
vpc:DeleteTrafficMirrorSessionDeleteTrafficMirrorSessiondelete
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
vpc:CreateDefaultVSwitchCreateDefaultVSwitchWrite
VSwitch
acs:vpc:{#regionid}:{#accountId}:vswitch/*
vpc:ModifyVpnPbrRouteEntryAttributeModifyVpnPbrRouteEntryAttributeupdate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:CreateIpsecServerCreateIpsecServercreate
全部资源
*
vpc:DescribeRouteTablesDescribeRouteTableslist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:VBR
vpc:VRouter
vpc:DeleteVpnGatewayDeleteVpnGatewaydelete
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DissociateRouteTablesFromVpcGatewayEndpointDissociateRouteTablesFromVpcGatewayEndpointdelete
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:DescribeAccessPointsDescribeAccessPointsget
全部资源
*
vpc:GetVpcGatewayEndpointAttributeGetVpcGatewayEndpointAttributeget
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:CreatePhysicalConnectionOccupancyOrderCreatePhysicalConnectionOccupancyOrdercreate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:ModifyExpressConnectTrafficQosQueueModifyExpressConnectTrafficQosQueueupdate
全部资源
*
vpc:ModifyHaVipAttributeModifyHaVipAttributeupdate
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:DeletePhysicalConnectionDeletePhysicalConnectiondelete
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:ListVpcEndpointServicesByEndUserListVpcEndpointServicesByEndUserlist
全部资源
*
vpc:DescribeSslVpnClientCertDescribeSslVpnClientCertget
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
vpc:ActivateRouterInterfaceActivateRouterInterfaceupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DescribeTagKeysDescribeTagKeysget
全部资源
*
vpc:AttachDhcpOptionsSetToVpcAttachDhcpOptionsSetToVpcupdate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:ConfirmPhysicalConnectionConfirmPhysicalConnectionget
PhysicalConnection
acs:vpc:{#regionid}:{#accountid}:physicalconnection/{#PhysicalConnectionId}
vpc:DescribeVirtualBorderRoutersForPhysicalConnectionDescribeVirtualBorderRoutersForPhysicalConnectionlist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:PhysicalConnection
vpc:AllocateVpcIpv6CidrAllocateVpcIpv6Cidrnone
全部资源
*
vpc:CreateExpressConnectTrafficQosQueueCreateExpressConnectTrafficQosQueuecreate
全部资源
*
vpc:CheckCanAllocateVpcPrivateIpAddressCheckCanAllocateVpcPrivateIpAddressnone
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:CreateSnatEntryCreateSnatEntrycreate
SnatEntry
acs:vpc:{#regionId}:{#accountId}:snattable/*
vpc:DescribeRouteEntryListDescribeRouteEntryListget
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:CreateCommonBandwidthPackageCreateCommonBandwidthPackagecreate
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
vpc:DescribeRouterInterfaceAttributeDescribeRouterInterfaceAttributeget
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DeactivateRouterInterfaceDeactivateRouterInterfaceupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DeleteFlowLogDeleteFlowLogdelete
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
vpc:ListVSwitchCidrReservationsListVSwitchCidrReservationslist
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
vpc:DescribeEcGrantRelationDescribeEcGrantRelationlist
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:DeactiveFlowLogDeactiveFlowLogupdate
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
vpc:DeleteBgpPeerDeleteBgpPeerdelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DeleteExpressConnectTrafficQosRuleDeleteExpressConnectTrafficQosRuledelete
全部资源
*
vpc:AddCommonBandwidthPackageIpAddCommonBandwidthPackageIpcreate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:DeleteTrafficMirrorFilterDeleteTrafficMirrorFilterdelete
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:DeleteCustomerGatewayDeleteCustomerGatewaydelete
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
vpc:GetVpcPrefixListAssociationsGetVpcPrefixListAssociationsget
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:CreateNetworkAclCreateNetworkAclcreate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:OpenPublicIpAddressPoolServiceOpenPublicIpAddressPoolServicecreate
全部资源
*
vpc:RevokeInstanceFromVbrRevokeInstanceFromVbrupdate
VPC
acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}
vpc:ListGeographicSubRegionsListGeographicSubRegionslist
全部资源
*
vpc:AttachVbrToVpconnAttachVbrToVpconnupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}
vpc:ReleaseIpv6AddressReleaseIpv6Addressdelete
Ipv6Address
acs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
vpc:DescribeVpcAttributeDescribeVpcAttributeget
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
vpc:UntagResourcesForExpressConnectUntagResourcesForExpressConnectupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DescribeNatGatewaysDescribeNatGatewaysget
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/*
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:DescribeForwardTableEntriesDescribeForwardTableEntriesget
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
vpc:ModifySnatEntryModifySnatEntryupdate
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
vpc:DescribeExpressConnectTrafficQosRuleDescribeExpressConnectTrafficQosRulelist
全部资源
*
vpc:ListDhcpOptionsSetsListDhcpOptionsSetsget
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
vpc:DescribePhysicalConnectionsDescribePhysicalConnectionslist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
vpc:DescribePhysicalConnectionLOADescribePhysicalConnectionLOAget
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:ModifyVpnPbrRouteEntryWeightModifyVpnPbrRouteEntryWeightWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:UnassociateNetworkAclUnassociateNetworkAclupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:PublishVpcRouteEntriesPublishVpcRouteEntriesupdate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:ModifyCommonBandwidthPackageAttributeModifyCommonBandwidthPackageAttributeupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:VpcDescribeVpcNatGatewayNetworkInterfaceQuotaVpcDescribeVpcNatGatewayNetworkInterfaceQuotaget
全部资源
*
vpc:GetTrafficMirrorServiceStatusGetTrafficMirrorServiceStatusget
全部资源
*
vpc:DescribeVbrHaDescribeVbrHaget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:MoveResourceGroupMoveResourceGroupupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}
Eip
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
vpc:DeleteVpnAttachmentDeleteVpnAttachmentdelete
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeSnatTableEntriesDescribeSnatTableEntriesget
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
vpc:UpdateNetworkAclEntriesUpdateNetworkAclEntriesupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:DescribeFailoverTestJobDescribeFailoverTestJobget
全部资源
*
vpc:Describe95TrafficDescribe95Trafficget
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:DescribeIpv6AddressesDescribeIpv6Addresseslist
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:vpc/*
vpc:ModifyVpnPbrRouteEntryPriorityModifyVpnPbrRouteEntryPriorityupdate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ModifySslVpnServerModifySslVpnServerupdate
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:DisableNatGatewayEcsMetricDisableNatGatewayEcsMetricWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:DescribeBgpPeersDescribeBgpPeersget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:DescribeVpnGatewayAvailableZonesDescribeVpnGatewayAvailableZoneslist
全部资源
*
vpc:CreateVcoRouteEntryCreateVcoRouteEntrycreate
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:ModifyVSwitchAttributeModifyVSwitchAttributeupdate
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:DescribeVpnConnectionDescribeVpnConnectionget
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeEipSegmentDescribeEipSegmentget
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:ModifyPhysicalConnectionAttributeModifyPhysicalConnectionAttributeupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:DescribeCustomerGatewaysDescribeCustomerGatewayslist
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/*
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
vpc:ModifyVcoRouteEntryWeightModifyVcoRouteEntryWeightWrite
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:UpdateIpsecServerUpdateIpsecServerupdate
全部资源
*
vpc:GetIpv4GatewayAttributeGetIpv4GatewayAttributeget
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}
vpc:RemoveSourcesFromTrafficMirrorSessionRemoveSourcesFromTrafficMirrorSessionupdate
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
vpc:DeletePublicIpAddressPoolCidrBlockDeletePublicIpAddressPoolCidrBlockWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:CreateForwardEntryCreateForwardEntrycreate
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
vpc:DeleteVpnConnectionDeleteVpnConnectiondelete
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DeleteIpsecServerDeleteIpsecServerdelete
IpsecServer
acs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}
vpc:DissociateRouteTableFromGatewayDissociateRouteTableFromGatewayget
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
vpc:AssociateVpcCidrBlockAssociateVpcCidrBlockcreate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:CompletePhysicalConnectionLOACompletePhysicalConnectionLOAupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:CreateTrafficMirrorSessionCreateTrafficMirrorSessioncreate
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:ListVirtualPhysicalConnectionsListVirtualPhysicalConnectionslist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:DeleteSslVpnClientCertDeleteSslVpnClientCertWrite
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
vpc:DescribeVpnCrossAccountAuthorizationsDescribeVpnCrossAccountAuthorizationsget
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DeleteIpv6InternetBandwidthDeleteIpv6InternetBandwidthdelete
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
vpc:CreatePhysicalConnectionCreatePhysicalConnectioncreate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/*
vpc:DescribeEipAddressesDescribeEipAddresseslist
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:tag
vpc:UpdateVirtualPhysicalConnectionUpdateVirtualPhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
vpc:DescribeEipMonitorDataDescribeEipMonitorDataget
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:DeleteTrafficMirrorFilterRulesDeleteTrafficMirrorFilterRulesdelete
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:RecoverPhysicalConnectionRecoverPhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
vpc:DescribeTagKeysForExpressConnectDescribeTagKeysForExpressConnectlist
PhysicalConnection
acs:vpc:{#regionId}:{#AccountId}:physicalconnection/{#PhysicalConnectionId}
RouterInterface
acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
vpc:DeleteSslVpnServerDeleteSslVpnServerWrite
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:ReleaseEipAddressReleaseEipAddressupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:tag
vpc:ModifyNatGatewaySpecModifyNatGatewaySpecWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:CreateVpcGatewayEndpointCreateVpcGatewayEndpointcreate
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
vpc:CreateTrafficMirrorFilterCreateTrafficMirrorFiltercreate
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
vpc:ModifyNetworkAclAttributesModifyNetworkAclAttributesupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:AssociateRouteTableAssociateRouteTableupdate
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}
vpc:ModifyVpnConnectionAttributeModifyVpnConnectionAttributeupdate
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:CreateVirtualPhysicalConnectionCreateVirtualPhysicalConnectioncreate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
vpc:AddCommonBandwidthPackageIpsAddCommonBandwidthPackageIpscreate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:UpdateIpv4GatewayAttributeUpdateIpv4GatewayAttributeupdate
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
vpc:GetNatGatewayAttributeGetNatGatewayAttributeget
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:CreateVpcCreateVpccreate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
vpc:ListEnhanhcedNatGatewayAvailableZonesListEnhanhcedNatGatewayAvailableZoneslist
全部资源
*
vpc:SetHighDefinitionMonitorLogStatusSetHighDefinitionMonitorLogStatusWrite
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:DeleteIpv4GatewayDeleteIpv4Gatewaydelete
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
vpc:UpdatePublicIpAddressPoolAttributeUpdatePublicIpAddressPoolAttributeWrite
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:CancelPhysicalConnectionCancelPhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:ModifyIpv6GatewayAttributeModifyIpv6GatewayAttributeupdate
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:CopyNetworkAclEntriesCopyNetworkAclEntriesupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:ModifyCommonBandwidthPackageIpBandwidthModifyCommonBandwidthPackageIpBandwidthupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:DescribeNetworkAclAttributesDescribeNetworkAclAttributesget
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:DeleteVpcPrefixListDeleteVpcPrefixListdelete
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:ActiveFlowLogActiveFlowLogupdate
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
vpc:ListVpcGatewayEndpointsListVpcGatewayEndpointslist
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:DescribeNetworkAclsDescribeNetworkAclslist
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/*
vpc:AssociateHaVipAssociateHaVipcreate
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:AllocateIpv6InternetBandwidthAllocateIpv6InternetBandwidthcreate
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*
vpc:CancelCommonBandwidthPackageIpBandwidthCancelCommonBandwidthPackageIpBandwidthupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:CreateVpnPbrRouteEntryCreateVpnPbrRouteEntrycreate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ApplyPhysicalConnectionLOAApplyPhysicalConnectionLOAupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:CreateBgpGroupCreateBgpGroupcreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:CreateSslVpnServerCreateSslVpnServercreate
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:RevokeInstanceFromCenRevokeInstanceFromCenupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:ConnectRouterInterfaceConnectRouterInterfaceupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DeleteBgpNetworkDeleteBgpNetworkdelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DescribeIpv6GatewayAttributeDescribeIpv6GatewayAttributeget
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:CreateCustomerGatewayCreateCustomerGatewaycreate
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/*
vpc:CreateTrafficMirrorFilterRulesCreateTrafficMirrorFilterRulescreate
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:TagResourcesForExpressConnectTagResourcesForExpressConnectupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:UpdateVirtualBorderBandwidthUpdateVirtualBorderBandwidthupdate
VirtualBorderRouter
acs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DeleteDhcpOptionsSetDeleteDhcpOptionsSetdelete
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
vpc:DeleteForwardEntryDeleteForwardEntrydelete
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
vpc:CreateRouteEntriesCreateRouteEntriescreate
RouteEntry
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:DeleteBgpGroupDeleteBgpGroupdelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:CreateVpconnFromVbrCreateVpconnFromVbrcreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}
vpc:OpenFlowLogServiceOpenFlowLogServicecreate
FlowLogService
acs:vpc:{#regionId}:{#accountId}:flowlog/*
vpc:DeleteVSwitchDeleteVSwitchdelete
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:DeleteRouteEntryDeleteRouteEntrydelete
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:DeleteHaVipDeleteHaVipdelete
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:RetryVpcPrefixListAssociationRetryVpcPrefixListAssociationupdate
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:ModifyIpv6AddressAttributeModifyIpv6AddressAttributeupdate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:AssociateNetworkAclAssociateNetworkAclupdate
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:ListPublicIpAddressPoolsListPublicIpAddressPoolsget
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
vpc:DeleteVpcDeleteVpcdelete
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
vpc:GrantInstanceToVbrGrantInstanceToVbrupdate
VPC
acs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}
vpc:DeleteRouterInterfaceDeleteRouterInterfacedelete
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:CreateSslVpnClientCertCreateSslVpnClientCertcreate
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:DescribeVpnGatewaysDescribeVpnGatewayslist
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}
vpc:ReplaceVpcDhcpOptionsSetReplaceVpcDhcpOptionsSetupdate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:DescribeVcoRouteEntriesDescribeVcoRouteEntrieslist
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:ListGatewayRouteTableEntriesListGatewayRouteTableEntrieslist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
vpc:GetVpcPrefixListEntriesGetVpcPrefixListEntriesget
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:TerminateVirtualBorderRouterTerminateVirtualBorderRouterupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DescribeVpnGatewayDescribeVpnGatewayget
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ModifyFlowLogAttributeModifyFlowLogAttributeupdate
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
vpc:CreateFailoverTestJobCreateFailoverTestJobcreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:DeleteVSwitchCidrReservationDeleteVSwitchCidrReservationdelete
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
vpc:ListVpcPublishedRouteEntriesListVpcPublishedRouteEntrieslist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:DisableVpcClassicLinkDisableVpcClassicLinkupdate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:GetPhysicalConnectionServiceStatusGetPhysicalConnectionServiceStatusget
全部资源
*
vpc:DeleteRouteEntriesDeleteRouteEntriesdelete
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
vpc:StopFailoverTestJobStopFailoverTestJobupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:DescribeEipGatewayInfoDescribeEipGatewayInfolist
GatewayInfo
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:WithdrawVpcPublishedRouteEntriesWithdrawVpcPublishedRouteEntriesupdate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:ModifyVSwitchCidrReservationAttributeModifyVSwitchCidrReservationAttributeupdate
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
vpc:ModifyExpressConnectTrafficQosRuleModifyExpressConnectTrafficQosRuleupdate
全部资源
*
vpc:ModifyRouteTableAttributesModifyRouteTableAttributesupdate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:VRouter
vpc:ModifyVpnAttachmentAttributeModifyVpnAttachmentAttributeupdate
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:ModifyTunnelAttributeModifyTunnelAttributeupdate
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:AllocateEipAddressProAllocateEipAddressProupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:DescribeRouteTableListDescribeRouteTableListlist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/*
vpc:VRouter
vpc:VBR
vpc:MoveVpnResourceGroupMoveVpnResourceGroupupdate
全部资源
*
vpc:RecoverVirtualBorderRouterRecoverVirtualBorderRouterupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:CreateVpcPrefixListCreateVpcPrefixListcreate
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/*
vpc:DescribeSslVpnServersDescribeSslVpnServerslist
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:DescribeFailoverTestJobsDescribeFailoverTestJobslist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:ModifyNatIpAttributeModifyNatIpAttributeupdate
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:DeleteVbrHaDeleteVbrHadelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:DescribeSslVpnClientCertsDescribeSslVpnClientCertslist
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
vpc:DeleteExpressConnectTrafficQosDeleteExpressConnectTrafficQosdelete
全部资源
*
vpc:UpdateVpcGatewayEndpointAttributeUpdateVpcGatewayEndpointAttributeupdate
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:ModifyRouterInterfaceSpecModifyRouterInterfaceSpecupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DeleteRouteTableDeleteRouteTabledelete
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:GetVpcRouteEntrySummaryGetVpcRouteEntrySummarylist
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}
vpc:ModifyBgpPeerAttributeModifyBgpPeerAttributeupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:UnassociateRouteTableUnassociateRouteTableupdate
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:DeletionProtectionDeletionProtectiondelete
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:CreateVSwitchCidrReservationCreateVSwitchCidrReservationcreate
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
vpc:ModifySslVpnClientCertModifySslVpnClientCertWrite
SslVpnClientCert
acs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
vpc:AllocateEipSegmentAddressAllocateEipSegmentAddresscreate
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:PublishVpnRouteEntryPublishVpnRouteEntryupdate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DescribeCommonBandwidthPackagesDescribeCommonBandwidthPackagesget
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
vpc:AddBgpNetworkAddBgpNetworkget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:ChangeResourceGroupChangeResourceGroupupdate
PhysicalConnection
acs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId}
vpc:ModifyVpnGatewayAttributeModifyVpnGatewayAttributeupdate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DeleteNetworkAclDeleteNetworkAcldelete
NetworkAcl
acs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
vpc:UnTagResourcesUnTagResourcesupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:tag
vpc:DeletePublicIpAddressPoolDeletePublicIpAddressPooldelete
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:CreateIpv4GatewayCreateIpv4Gatewaycreate
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
vpc:AssociateEipAddressAssociateEipAddressupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
Association
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:UpdateTrafficMirrorFilterAttributeUpdateTrafficMirrorFilterAttributeupdate
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:EnableNatGatewayEcsMetricEnableNatGatewayEcsMetricWrite
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:CreateNatGatewayCreateNatGatewaycreate
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/*
vpc:AssociateRouteTableWithGatewayAssociateRouteTableWithGatewaycreate
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
vpc:UpdateDhcpOptionsSetAttributeUpdateDhcpOptionsSetAttributeupdate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
vpc:AddPublicIpAddressPoolCidrBlockAddPublicIpAddressPoolCidrBlockcreate
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:CreatePhysicalConnectionSetupOrderCreatePhysicalConnectionSetupOrdercreate
全部资源
*
vpc:AssociatePhysicalConnectionToVirtualBorderRouterAssociatePhysicalConnectionToVirtualBorderRouterupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:OpenPhysicalConnectionServiceOpenPhysicalConnectionServicecreate
全部资源
*
vpc:CreatePublicIpAddressPoolCreatePublicIpAddressPoolcreate
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
vpc:UpdateTrafficMirrorSessionAttributeUpdateTrafficMirrorSessionAttributeupdate
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:ListTrafficMirrorFiltersListTrafficMirrorFilterslist
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
vpc:DeleteCommonBandwidthPackageDeleteCommonBandwidthPackagedelete
CommonBandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}
vpc:tag
vpc:DeleteIpv6GatewayDeleteIpv6Gatewaydelete
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:DescribeFlowLogsDescribeFlowLogsget
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/*
vpc:DescribeVpcsDescribeVpcslist
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId}
vpc:tag
vpc:DeleteVirtualBorderRouterDeleteVirtualBorderRouterdelete
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:CreateRouterInterfaceCreateRouterInterfacecreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/*
vpc:TargetAccountRDId
vpc:ModifyEipAddressAttributeModifyEipAddressAttributeupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:CreateDhcpOptionsSetCreateDhcpOptionsSetcreate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
vpc:DeleteSnatEntryDeleteSnatEntrydelete
SnatTable
acs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
vpc:GetDhcpOptionsSetGetDhcpOptionsSetget
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
vpc:ModifyNatGatewayAttributeModifyNatGatewayAttributeupdate
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:DescribeVpnConnectionsDescribeVpnConnectionslist
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/*
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:ModifyBgpGroupAttributeModifyBgpGroupAttributeupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DescribeBgpGroupsDescribeBgpGroupsget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:DescribeVpnPbrRouteEntriesDescribeVpnPbrRouteEntriesget
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:CreateVpnRouteEntryCreateVpnRouteEntrycreate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DescribeVpnSslServerLogsDescribeVpnSslServerLogsget
SslVpnServer
acs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
vpc:DescribeCustomerGatewayDescribeCustomerGatewayget
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
vpc:ListTagResourcesListTagResourcesget
全部资源
*
vpc:tag
vpc:EnableVpcClassicLinkEnableVpcClassicLinkupdate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:CreateVSwitchCreateVSwitchcreate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/*
vpc:tag
vpc:UpdateTrafficMirrorFilterRuleAttributeUpdateTrafficMirrorFilterRuleAttributeupdate
TrafficMirrorFilter
acs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
vpc:DescribeHighDefinitionMonitorLogAttributeDescribeHighDefinitionMonitorLogAttributeget
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:ModifyCustomerGatewayAttributeModifyCustomerGatewayAttributeupdate
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
vpc:ModifyVpcAttributeModifyVpcAttributeupdate
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:tag
vpc:ListTagResourcesForExpressConnectListTagResourcesForExpressConnectlist
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterface
acs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}
vpc:DeleteVpcGatewayEndpointDeleteVpcGatewayEndpointdelete
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:DeleteVcoRouteEntryDeleteVcoRouteEntryWrite
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:DescribeVirtualBorderRoutersDescribeVirtualBorderRouterslist
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
vpc:DescribeVpnAttachmentsDescribeVpnAttachmentslist
VpnConnections
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:GrantInstanceToCenGrantInstanceToCenupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:CreateIpv6GatewayCreateIpv6Gatewaycreate
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
vpc:DescribeVpnConnectionLogsDescribeVpnConnectionLogslist
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:AllocateIpv6AddressAllocateIpv6Addresscreate
Ipv6Address
acs:vpc:{#regionId}:{#accountId}:ipv6address/*
vpc:ListPublicIpAddressPoolCidrBlocksListPublicIpAddressPoolCidrBlocksget
PublicIpAddressPool
acs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
vpc:GetPublicIpAddressPoolServiceStatusGetPublicIpAddressPoolServiceStatusget
全部资源
*
vpc:DetachDhcpOptionsSetFromVpcDetachDhcpOptionsSetFromVpcupdate
DhcpOptionsSet
acs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:DescribeGrantRulesToCenDescribeGrantRulesToCenget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}
GrantRuleToCen
acs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
vpc:CreateVpnAttachmentCreateVpnAttachmentcreate
全部资源
*
vpc:DescribeIpv6EgressOnlyRulesDescribeIpv6EgressOnlyRulesget
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:CreateExpressConnectTrafficQosCreateExpressConnectTrafficQoscreate
TrafficQos
acs:vpc:{#regionId}:{#accountId}:TrafficQos/*
vpc:DescribeVpnRouteEntriesDescribeVpnRouteEntriesget
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:CreateRouteTableCreateRouteTablecreate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/*
vpc:UpdateFailoverTestJobUpdateFailoverTestJobupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:SecondApplyPhysicalConnectionLOASecondApplyPhysicalConnectionLOAnone
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:EnablePhysicalConnectionEnablePhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
vpc:DescribeHaVipsDescribeHaVipsget
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/*
vpc:CheckVpnBgpEnabledCheckVpnBgpEnablednone
全部资源
*
vpc:ModifyIpv6InternetBandwidthModifyIpv6InternetBandwidthupdate
Ipv6InternetBandwidth
acs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
vpc:ModifyRouteEntryModifyRouteEntryupdate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:DeleteFailoverTestJobDeleteFailoverTestJobdelete
全部资源
*
vpc:UnassociateHaVipUnassociateHaVipdelete
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:DiagnoseVpnConnectionsDiagnoseVpnConnectionsget
全部资源
*
vpc:AssociateEipAddressBatchAssociateEipAddressBatchupdate
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
Instance
acs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
vpc:DescribeVSwitchAttributesDescribeVSwitchAttributesget
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:ModifyVpnRouteEntryWeightModifyVpnRouteEntryWeightWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:DescribeSslVpnClientsDescribeSslVpnClientslist
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ListFullNatEntriesListFullNatEntriesget
FullNat
acs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}
vpc:DeleteExpressConnectTrafficQosQueueDeleteExpressConnectTrafficQosQueuedelete
全部资源
*
vpc:CreateIpv6EgressOnlyRuleCreateIpv6EgressOnlyRulecreate
Ipv6EgressRule
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:CreateHighReliablePhysicalConnectionCreateHighReliablePhysicalConnectioncreate
全部资源
*
vpc:ListIpsecServersListIpsecServerslist
全部资源
*
vpc:OpenTrafficMirrorServiceOpenTrafficMirrorServicecreate
全部资源
*
vpc:DescribeRouterInterfacesDescribeRouterInterfaceslist
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:DownloadVpnConnectionConfigDownloadVpnConnectionConfigget
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
vpc:CreateFlowLogCreateFlowLogcreate
VSwitch
acs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId}
FlowLog
acs:vpc:{#regionId}:{#accountId}:flowlog/*
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:ListTrafficMirrorSessionsListTrafficMirrorSessionslist
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
vpc:RemoveCommonBandwidthPackageIpRemoveCommonBandwidthPackageIpdelete
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:TagResourcesTagResourcesupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:tag
vpc:EnableVpcIpv4GatewayEnableVpcIpv4Gatewayupdate
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
vpc:ModifyForwardEntryModifyForwardEntryupdate
ForwardTable
acs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
vpc:AddSourcesToTrafficMirrorSessionAddSourcesToTrafficMirrorSessionupdate
TrafficMirrorSession
acs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
vpc:CreateDefaultVpcCreateDefaultVpcWrite
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/*
vpc:ModifyRouterInterfaceAttributeModifyRouterInterfaceAttributeupdate
RouterInterface
acs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
vpc:TargetAccountRDId
vpc:UpdateGatewayRouteTableEntryAttributeUpdateGatewayRouteTableEntryAttributeupdate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:ListBusinessAccessPointsListBusinessAccessPointslist
全部资源
*
vpc:CreateHaVipCreateHaVipcreate
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/*
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
vpc:GetVSwitchCidrReservationUsageGetVSwitchCidrReservationUsageget
VSwitchCidrReservation
acs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
vpc:ListIpv4GatewaysListIpv4Gatewayslist
Ipv4Gateway
acs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
vpc:AllocateEipAddressAllocateEipAddresscreate
Address
acs:vpc:{#regionId}:{#accountId}:eip/*
vpc:DescribeBgpNetworksDescribeBgpNetworksget
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:CreateVpnGatewayCreateVpnGatewaycreate
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/*
vpc:DescribeExpressConnectTrafficQosQueueDescribeExpressConnectTrafficQosQueuelist
全部资源
*
vpc:ModifyExpressConnectTrafficQosModifyExpressConnectTrafficQosupdate
全部资源
*
vpc:UnassociatePhysicalConnectionFromVirtualBorderRouterUnassociatePhysicalConnectionFromVirtualBorderRouterupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DeleteVpnRouteEntryDeleteVpnRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:CreateVirtualBorderRouterCreateVirtualBorderRoutercreate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouter
acs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*
vpc:ModifyVirtualBorderRouterAttributeModifyVirtualBorderRouterAttributeupdate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:DescribeTagsDescribeTagsget
全部资源
*
vpc:tag
vpc:AssociateRouteTablesWithVpcGatewayEndpointAssociateRouteTablesWithVpcGatewayEndpointcreate
GatewayEndpoint
acs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
vpc:DescribeIpv6GatewaysDescribeIpv6Gatewaysget
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:CreateExpressConnectTrafficQosRuleCreateExpressConnectTrafficQosRulecreate
全部资源
*
vpc:DescribeVSwitchesDescribeVSwitcheslist
VSwitch
acs:vpc:{#regionId}:{#accountId}:vswitch/*
vpc:VPC
vpc:DeleteVpnPbrRouteEntryDeleteVpnPbrRouteEntryWrite
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:ListPrefixListsListPrefixListslist
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/*
vpc:ModifyVRouterAttributeModifyVRouterAttributeupdate
VRouter
acs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}
vpc:DeleteIpv6EgressOnlyRuleDeleteIpv6EgressOnlyRuledelete
Ipv6Gateway
acs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
vpc:GetFlowLogServiceStatusGetFlowLogServiceStatusget
FlowLogService
acs:vpc:{#regionId}:{#accountId}:flowlog/*
vpc:UnassociateVpcCidrBlockUnassociateVpcCidrBlockdelete
VPC
acs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
vpc:ModifyVpcPrefixListModifyVpcPrefixListupdate
PrefixList
acs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
vpc:ReleaseEipSegmentAddressReleaseEipSegmentAddressdelete
SegmentAddress
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
vpc:CreateVpnConnectionCreateVpnConnectioncreate
CustomerGateway
acs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
VpnConnection
acs:vpc:{#regionId}:{#accountId}:vpnconnection/*
VpnGateway
acs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
vpc:CreateBgpPeerCreateBgpPeercreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
vpc:CreateVbrHaCreateVbrHacreate
VirtualBorderRouter
acs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
vpc:UnassociateEipAddressUnassociateEipAddressdelete
Instance
acs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}
Address
acs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
HaVip
acs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
vpc:DescribeVRoutersDescribeVRouterslist
VRouter
acs:vpc:{#regionId}:{#accountId}:vrouter/*
vpc:VPC
vpc:DescribeExpressConnectTrafficQosDescribeExpressConnectTrafficQoslist
TrafficQos
acs:vpc:{#regionId}:{#accountId}:TrafficQos/*
vpc:ModifyCommonBandwidthPackageSpecModifyCommonBandwidthPackageSpecupdate
BandwidthPackage
acs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
vpc:StartFailoverTestJobStartFailoverTestJobupdate
全部资源
*
vpc:DeleteNatGatewayDeleteNatGatewaydelete
NatGateway
acs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid}
vpc:CreateRouteEntryCreateRouteEntrycreate
RouteTable
acs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
vpc:TerminatePhysicalConnectionTerminatePhysicalConnectionupdate
PhysicalConnection
acs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}

资源(Resource)

下表是专有网络VPC(VPC)定义的资源,这些资源可以在RAM权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源ARN是资源在阿里云上的唯一标识。具体说明如下:
  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。
  • *表示全部。例如:
    • {#resourceType}*时:表示全部资源。
    • {#regionId}*时:表示全部地域。
    • {#accountId}*时:表示全部阿里云账号。
资源类型资源ARN
TrafficMirrorSessionacs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/{#TrafficMirrorSessionId}
VSwitchacs:vpc:{#regionid}:{#accountId}:vswitch/*
RouterInterfaceacs:vpc:*:{#accountId}:routerinterface/*
VpnGatewayacs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnGatewayId}
IpsecServeracs:vpc:{#Region}:{#AccountId}: vpnipsecserver/{#IpsecServerId}
VpnGatewayacs:vpc:{#Region}:{#AccountId}:vpngateway/{#VpnInstanceId}
RouteTableacs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
GatewayEndpointacs:vpc:{#regionId}:{#accountId}:gatewayendpoint/{#GatewayEndpointId}
VSwitchacs:vpc:{#regionId}:{#accountId}:vswitch/{#VSwitchId}
Ipv6Translatoracs:vpc:{#regionId}:{#accountId}:ipv6trans/*
PhysicalConnectionacs:vpc:{#regionId}:{#accountId}:physicalconnection/{#PhysicalConnectionId}
TrafficQosacs:vpc:{#regionId}:{#accountId}:TrafficQos/*
HaVipacs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
Instanceacs:ecs:{#regionId}:{#accountId}:instance/{#Instanceid}
GlobalAccelerationInstanceacs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/*
GatewayEndpointacs:vpc:{#regionId}:{#accountId}:gatewayendpoint/*
SslVpnClientCertacs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/{#SslVpnClientCertId}
RouterInterfaceacs:vpc:{#regionId}:{#accountId}:routerinterface/{#RouterInterfaceId}
Ipv6Translatoracs:vpc:{#regionId}:{#accountId}:ipv6trans/{#Ipv6TranslatorId}
Addressacs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
VPCacs:vpc:{#regionId}:{#accountId}:vpc/{#VpcId}
DhcpOptionsSetacs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/{#DhcpOptionsSetId}
PhysicalConnectionacs:vpc:{#regionid}:{#accountid}:physicalconnection/{#PhysicalConnectionId}
VPCacs:vpc:{#regionId}:{#accountId}:vpc/*
SnatEntryacs:vpc:{#regionId}:{#accountId}:snattable/*
VirtualBorderRouteracs:expressconnect:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
CommonBandwidthPackageacs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
FlowLogacs:vpc:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
VSwitchCidrReservationacs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/*
NatGatewayacs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
VirtualBorderRouteracs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VbrId}
GlobalAccelerationInstanceacs:vpc:{#regionId}:{#accountId}:globalaccelerationinstance/{#GlobalAccelerationInstanceId}
VpnConnectionacs:vpc:{#regionId}:{#accountId}:*
VirtualBorderRouteracs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
BandwidthPackageacs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#BandwidthPackageId}
TrafficMirrorFilteracs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/{#TrafficMirrorFilterId}
CustomerGatewayacs:vpc:{#regionId}:{#accountId}:customergateway/{#CustomerGatewayId}
PrefixListacs:vpc:{#regionId}:{#accountId}:prefixlist/{#PrefixListId}
NetworkAclacs:vpc:{#regionId}:{#accountId}:networkacl/*
PublicIpAddressPoolServiceacs:vpc:{#regionId}:{#accountId}:publicipaddresspoolservice/*
VPCacs:vpc:{#regionId}:{#AccountId}:vpc/{#VpcId}
VirtualBorderRouteracs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/{#VbrId}
VirtualBorderRouteracs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#virtualborderrouterId}
Ipv6Addressacs:vpc:{#regionId}:{#accountId}:ipv6address/{#Ipv6AddressId}
NatGatewayacs:vpc:{#regionId}:{#accountId}:natgateway/*
ForwardTableacs:vpc:{#regionId}:{#accountId}:forwardtable/{#ForwardTableId}
SnatTableacs:vpc:{#regionId}:{#accountId}:snattable/{#SnatTableId}
DhcpOptionsSetacs:vpc:{#regionId}:{#accountId}:dhcpoptionsset/*
PhysicalConnectionacs:vpc:{#regionId}:{#accountId}:physicalconnection/*
NetworkAclacs:vpc:{#regionId}:{#accountId}:networkacl/{#NetworkAclId}
NatGatewayacs:vpc:{#regionId}:{#accountId}:natgateway/{#natgatewayid}
TrafficMirrorServiceacs:vpc:{#regionId}:{#accountId}:trafficmirror/*
BandwidthPackageacs:vpc:{#regionId}:{#accountId}:bandwidthpackage/{#BandwidthPackageId}
Eipacs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
Ipv4Gatewayacs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#Ipv4GatewayId}
Ipv6Gatewayacs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
PublicIpAddressPoolacs:vpc:{#regionId}:{#accountId}:publicipaddresspool/{#PublicIpAddressPoolId}
VpnConnectionsacs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
Ipv6InternetBandwidthacs:vpc:{#regionId}:{#accountId}:vpc/*
SslVpnServeracs:vpc:{#regionId}:{#accountId}:sslvpnserver/{#SslVpnServerId}
VpnGatewayacs:vpc:{#regionId}:{#accountId}:vpngateway/{#VpnInstanceId}
VpnConnectionacs:vpc:{#regionId}:{#accountId}:vpnconnection/{#VpnConnectionId}
SegmentAddressacs:vpc:{#regionId}:{#accountId}:eip/*
CustomerGatewayacs:vpc:{#regionId}:{#accountId}:customergateway/*
IpsecServeracs:vpc:{#regionId}:{#accountId}:ipsecserver/*
IpsecServeracs:vpc:{#regionId}:{#accountId}:vpnipsecserver/{#IpsecServerId}
Ipv4Gatewayacs:vpc:{#regionId}:{#accountId}:ipv4gateway/{#ipv4gatewayId}
RouteTableacs:vpc:{#regionId}:{#accountId}:routetable/{#routetableId}
TrafficMirrorSessionacs:vpc:{#regionId}:{#accountId}:trafficmirrorsession/*
Ipv6InternetBandwidthacs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/{#Ipv6InternetBandwidthId}
Addressacs:vpc:{#regionId}:{#accountId}:eip/*
PhysicalConnectionacs:vpc:{#regionId}:{#accountId}:physicalconnection/{#physicalconnectionId}
PhysicalConnectionacs:vpc:{#regionId}:{#AccountId}:physicalconnection/{#PhysicalConnectionId}
RouterInterfaceacs:vpc:{#regionId}:{#AccountId}:routerinterface/{#RouterInterfaceId}
TrafficMirrorFilteracs:vpc:{#regionId}:{#accountId}:trafficmirrorfilter/*
VSwitchacs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}
VPCacs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
Instanceacs:vpc:{#regionId}:{#accountId}:instance/{#InstanceId}
Ipv6InternetBandwidthacs:vpc:{#regionId}:{#accountId}:ipv6bandwidth/*
SslVpnServeracs:vpc:{#regionId}:{#accountId}:sslvpnserver/*
BandwidthPackageacs:vpc:{#regionId}:{#accountId}:bandwidthpackage/*
VirtualBorderRouteracs:vpc:*:{#accountId}:virtualborderrouter/{#VirtualBorderRouterId}
RouteEntryacs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTableId}
FlowLogServiceacs:vpc:{#regionId}:{#accountId}:flowlog/*
PublicIpAddressPoolacs:vpc:{#regionId}:{#accountId}:publicipaddresspool/*
SslVpnClientCertacs:vpc:{#regionId}:{#accountId}:sslvpnclientcert/*
VpnGatewayacs:vpc:{#regionId}:{#accountId}:vpngateway/*
BandwidthPackageacs:vpc:{#regionId}:{#accountId}:combandwidthpackage/*
VSwitchCidrReservationacs:vpc:{#regionId}:{#accountId}:vswitchcidrreservation/{#VSwitchCidrReservationId}
NatIpacs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
GatewayInfoacs:vpc:{#regionId}:{#accountId}:eip/*
IPv6Translatoracs:vpc:{#regionId}:{#accountId}:ipv6trans/*
IPv6Translatoracs:vpc:{#regionId}:{#accountId}:ipv6trans/{#IPv6TranslatorId}
NatIpCidracs:vpc:{#regionId}:{#accountId}:natgateway/{#NatGatewayId}
RouteTableacs:vpc:{#regionId}:{#accountId}:routetable/*
CustomerGatewayacs:vpc:{#Region}:{#AccountId}:customergateway/{#CustomerGatewayId}
VpnAttachmentacs:vpc:{#Region}:{#AccountId}:vpnattachment/{#VpnConnectionId}
VpnConnectionacs:vpc:{#Region}:{#AccountId}:vpnconnection/{#VpnConnectionId}
SslVpnServeracs:vpc:{#Region}:{#AccountId}:sslvpnserver/{#SslVpnServerId}
PrefixListacs:vpc:{#regionId}:{#accountId}:prefixlist/*
VPCacs:vpc:{#regionId}:{#accountId}:vpc/{#vpcId}
PhysicalConnectionacs:vpc:*:{#accountId}:physicalconnection/{#PhysicalConnectionId}
VirtualBorderRouteracs:vpc:*:{#AccountId}:virtualborderrouter/{#VbrId}
RouterInterfaceacs:vpc:*:{#AccountId}:routerinterface/{#RouterInterfaceId}
Instanceacs:ecs:{#regionId}:{#accountId}:instance/*
Ipv4Gatewayacs:vpc:{#regionId}:{#accountId}:ipv4gateway/*
Associationacs:vpc:{#regionId}:{#accountId}:havip/{#HaVipId}
CommonBandwidthPackageacs:vpc:{#regionId}:{#accountId}:combandwidthpackage/{#CommonBandwidthPackageId}
FlowLogacs:vpc:{#regionId}:{#accountId}:flowlog/*
VPCacs:vpc:{#regionId}:{#accountId}:vpc/{#VPCId}
RouterInterfaceacs:vpc:{#regionId}:{#accountId}:routerinterface/*
VirtualBorderRouteracs:vpc:{#regionId}:{#accountId}:virtualborderrouter/*
VpnConnectionacs:vpc:{#regionId}:{#accountId}:vpnconnection/*
RouteTableacs:vpc:{#regionId}:{#accountId}:routetable/{#RouteTable}
VSwitchacs:vpc:{#regionId}:{#accountId}:vswitch/*
Ipv6Gatewayacs:vpc:{#regionId}:{#accountId}:ipv6gateway/*
Ipv6Addressacs:vpc:{#regionId}:{#accountId}:ipv6address/*
VirtualBorderRouteracs:vpc:{#regionId}:{#accountId}:virtualborderrouter/{#InstanceId}
GrantRuleToCenacs:vpc:{#regionId}:{#accountId}:vpc/{#InstanceId}
HaVipacs:vpc:{#regionId}:{#accountId}:havip/*
FullNatacs:vpc:{#regionId}:{#accountId}:vpcfullnattable/{#FullNatTableId}
Ipv6EgressRuleacs:vpc:{#regionId}:{#accountId}:ipv6gateway/{#Ipv6GatewayId}
Eipacs:vpc:{#regionId}:{#accountId}:eip/{#EipId}
physicalconnectionacs:vpc:{#regionId}:{#accountId}:physicalconnection/*
VpnGatewayacs:vpc:{#regionId}:{#accountId}:
VSwitchacs:vpc:{#regionid}:{#accountId}:vswitch/{#VSwitchId}
GlobalAccelerationInstanceacs:vpc:{#regionId}:{#accountId}:GlobalAccelerationInstance/*
VirtualBorderRouteracs:vpc:{#regionId}:{#AccountId}:virtualborderrouter/*
Instanceacs:ecs:{#regionId}:{#accountId}:instance/{#BackendServerId}
VRouteracs:vpc:{#regionId}:{#accountId}:vrouter/{#VRouterId}
SegmentAddressacs:vpc:{#regionId}:{#accountId}:eip/{#AllocationId}
Instanceacs:ecs:{#regionId}:{#accountId}:instance/{#InstanceId}
VRouteracs:vpc:{#regionId}:{#accountId}:vrouter/*

条件(Condition)

下表是专有网络VPC(VPC)定义的产品级条件关键字,这些条件关键字可以在RAM权限策略语句的Condition元素中使用,用来描述授予权限的条件。以下仅列举产品级的条件关键字,阿里云定义的通用条件关键字也同样适用专有网络VPC(VPC)
其中,数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符,否则无法匹配策略语句,授权行为无效。数据类型与条件运算符的对应关系,请参见条件操作类型
条件关键字描述类型
vpc:PhysicalConnection物理专线信息String
vpc:VBR边界路由器信息String
vpc:VPCVPC信息String
vpc:VRouter路由器信息String
vpc:tagVPC的标签String
vpc:TargetAccountRDId对端用户资源目录ID信息String

相关操作

您可以创建自定义权限策略,并将权限策略授予RAM用户、RAM用户组或RAM角色。具体操作如下: