资源类型 | 授权策略中的资源描述方法 |
NAT 网关实例 | qcs::vpc:{region_short_name}:uin/{Uin}:nat/{NatGatewayId} |
NAT 网关接口 | qcs::vpc:{region_short_name}:uin/{Uin}:nat/* |
{region_short_name}
应为某个 region 的 ID,可以为空。{Uin}
应为资源拥有者的 AccountId,或者“*”。{NatGatewayId}
应为某个 NAT 实例的 ID,或者“*”。API 操作 | 资源描述 | 接口说明 |
CreatePrivateNatGateway | 创建私网 NAT 网关 | qcs::vpc:$region:$account:intranat/* qcs::vpc:$region:$account:vpc/* |
DeletePrivateNatGateway | 删除私网 NAT 网关 | qcs::vpc:$region:$account:intranat/$intranatid |
ModifyPrivateNatGatewayAttribute | 修改私网 NAT 网关属性 | qcs::vpc:$region:$account:intranat/$intranatid |
DescribePrivateNatGateways | 查询私网 NAT 网关 | qcs::vpc:$region:$account:intranat/* |
DescribePrivateNatGatewayLimits | 查询可创建的私网 NAT 网关配额数量 | qcs::vpc:$region:$account:intranat/* qcs::vpc:$region:$account:vpc/$vpcid |
CreatePrivateNatGatewayTranslationNatRule | 创建私网 NAT 网关源端转换规则 | qcs::vpc:$region:$account:intranat/$intranatid |
DeletePrivateNatGatewayTranslationNatRule | 删除私网 NAT 网关源端转换规则 | qcs::vpc:$region:$account:intranat/$intranatid |
ModifyPrivateNatGatewayTranslationNatRule | 修改私网 NAT 网关源端转换规则 | qcs::vpc:$region:$account:intranat/$intranatid |
DescribePrivateNatGatewayTranslationNatRules | 查询私网 NAT 网关源端转换规则 | qcs::vpc:$region:$account:intranat/$intranatid |
CreatePrivateNatGatewayTranslationAclRule | 创建私网 NAT 网关源端转换访问控制规则 | qcs::vpc:$region:$account:intranat/$intranatid |
DeletePrivateNatGatewayTranslationAclRule | 删除私网 NAT 网关源端转换访问控制规则 | qcs::vpc:$region:$account:intranat/$intranatid |
ModifyPrivateNatGatewayTranslationAclRule | 修改私网 NAT 网关源端转换访问控制规则 | qcs::vpc:$region:$account:intranat/$intranatid |
DescribePrivateNatGatewayTranslationAclRules | 查询私网 NAT 网关源端转换访问控制规则 | qcs::vpc:$region:$account:intranat/$intranatid |
CreatePrivateNatGatewayDestinationIpPortTranslationNatRule | 创建私网 NAT 网关目的端口转换规则 | qcs::vpc:$region:$account:intranat/$intranatid |
DeletePrivateNatGatewayDestinationIpPortTranslationNatRule | 删除私网 NAT 网关目的端口转换规则 | qcs::vpc:$region:$account:intranat/$intranatid |
ModifyPrivateNatGatewayDestinationIpPortTranslationNatRule | 修改私网 NAT 网关目的端口转换规则 | qcs::vpc:$region:$account:intranat/$intranatid |
DescribePrivateNatGatewayDestinationIpPortTranslationNatRules | 查询私网 NAT 网关目的端口转换规则 | qcs::vpc:$region:$account:intranat/$intranatid |
DescribePrivateNatGatewayRegions | 查询私网 NAT 网关可支持地域 | qcs::vpc:$region:$account:intranat/* |
{"version": "2.0","statement": [{"action": ["vpc:*"],"resource": "qcs::vpc::$uin:nat/*","effect": "allow"}]}{"version": "2.0","statement": [{"action": ["vpc:*"],"resource": "qcs::vpc::$uin:intranat/*","effect": "allow"}]}
{"version": "2.0","statement": [{"action": ["vpc:Describe*"],"resource": "qcs::vpc::$uin:nat/*","effect": "allow" }]}{"version": "2.0","statement": [{"action": ["vpc:Describe*"],"resource": "qcs::vpc::$uin:intranat/*","effect": "allow"}]}
{"version":"2.0","statement":[{"effect":"allow","action":"*","resource":"*","condition":{"for_any_value:string_equal":{"qcs:tag":["tagkey&tagvalue"]}}}]}
本页内容是否解决了您的问题?