Preset policy | Permissions granted |
QcloudASFullAccess | After association, full read-write access to Auto Scaling (AS) is obtained |
QcloudASReadOnlyAccess | After association, read-only access to Auto Scaling (AS) is obtained |
Resource type | Resource description method in authorization policy |
Launch configuration | qcs::as:$region:$account:launch-configuration/* |
Scaling group | qcs::as:$region:$account:auto-scaling-group/* |
$region
, $account
、$LaunchConfigurationId
, and $AutoScalingGroupId
according to your actual parameter information. You can also use *
in the path as a wildcard character.
For information about related concepts in CAM policies such as region, action, account, and resource, see Resource Description Method.API: action | Resource path: resource |
CreateLaunchConfiguration | qcs::as:$region:$account:launch-configuration/* |
DeleteLaunchConfiguration | qcs::as:$region:$account:launch-configuration/$LaunchConfigurationId |
DescribeLaunchConfigurations | qcs::as:$region:$account:launch-configuration/* qcs::as:$region:$account:launch-configuration/$LaunchConfigurationId |
ModifyLaunchConfigurationAttributes | qcs::as:$region:$account:launch-configuration/$LaunchConfigurationId |
UpgradeLaunchConfiguration | qcs::as:$region:$account:launch-configuration/$LaunchConfigurationId |
CreateAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/* |
CreateAutoScalingGroupFromInstance | qcs::as:$region:$account:auto-scaling-group/* |
DeleteAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeAutoScalingGroups | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyLoadBalancers | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
EnableAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DisableAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyDesiredCapacity | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeAutoScalingActivities | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
AttachInstances | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DetachInstances | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
RemoveInstances | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeAutoScalingInstances | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
SetInstancesProtection | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CreateScheduledAction | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DeleteScheduledAction | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeScheduledActions | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyScheduledAction | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CreateScalingPolicy | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DeleteScalingPolicy | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeScalingPolicies | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyScalingPolicy | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ExecuteScalingPolicy | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CreateNotificationConfiguration | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DeleteNotificationConfiguration | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeNotificationConfigurations | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyNotificationConfiguration | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CreateLifecycleHook | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DeleteLifecycleHook | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeLifecycleHooks | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
UpgradeLifecycleHook | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CompleteLifecycleAction | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeAccountLimits | * |
# In this example, `$account` must be substituted with the account information{"version": "2.0","statement": [{"effect": "allow","action": ["name/as:*"],"resource": ["qcs::as:ap-guangzhou:$account:auto-scaling-group/*"]}]}
# In this example, `$account` must be substituted with the account information, and `$AutoScalingGroupId` must be substituted with the corresponding AutoScalingGroupId.{"version": "2.0","statement": [{"effect": "deny","action": ["name/as:*"],"resource": ["qcs::as:ap-guangzhou:$account:auto-scaling-group/$AutoScalingGroupId"]}]}
{"version": "2.0","statement": [{"effect": "allow","action": ["name/as:Describe*"],"resource": ["*"]}]}
Was this page helpful?