预设策略名 | 授权范围描述 |
QcloudASFullAccess | 关联后,获得弹性伸缩(AS)全读写访问权限 |
QcloudASReadOnlyAccess | 关联后,获得弹性伸缩(AS)只读访问权限 |
资源类型 | 授权策略中的资源描述方法 |
启动配置相关 | qcs::as:$region:$account:launch-configuration/* |
伸缩组相关 | qcs::as:$region:$account:auto-scaling-group/* |
$region
、$account
、$LaunchConfigurationId
、$AutoScalingGroupId
等变量参数修改为您实际的参数信息,同时您也可以在路径中使用 *
通配符。
访问管理策略中的 region、action、account、resource 等相关概念请参见 资源描述方式。API 接口:action | 资源路径:resource |
CreateLaunchConfiguration | qcs::as:$region:$account:launch-configuration/* |
DeleteLaunchConfiguration | qcs::as:$region:$account:launch-configuration/$LaunchConfigurationId |
DescribeLaunchConfigurations | qcs::as:$region:$account:launch-configuration/* qcs::as:$region:$account:launch-configuration/$LaunchConfigurationId |
ModifyLaunchConfigurationAttributes | qcs::as:$region:$account:launch-configuration/$LaunchConfigurationId |
UpgradeLaunchConfiguration | qcs::as:$region:$account:launch-configuration/$LaunchConfigurationId |
CreateAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/* |
CreateAutoScalingGroupFromInstance | qcs::as:$region:$account:auto-scaling-group/* |
DeleteAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeAutoScalingGroups | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyLoadBalancers | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
EnableAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DisableAutoScalingGroup | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyDesiredCapacity | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeAutoScalingActivities | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
AttachInstances | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DetachInstances | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
RemoveInstances | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeAutoScalingInstances | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
SetInstancesProtection | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CreateScheduledAction | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DeleteScheduledAction | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeScheduledActions | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyScheduledAction | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CreateScalingPolicy | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DeleteScalingPolicy | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeScalingPolicies | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyScalingPolicy | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ExecuteScalingPolicy | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CreateNotificationConfiguration | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DeleteNotificationConfiguration | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeNotificationConfigurations | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
ModifyNotificationConfiguration | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CreateLifecycleHook | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DeleteLifecycleHook | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeLifecycleHooks | qcs::as:$region:$account:auto-scaling-group/* qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
UpgradeLifecycleHook | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
CompleteLifecycleAction | qcs::as:$region:$account:auto-scaling-group/$AutoScalingGroupId |
DescribeAccountLimits | * |
# 其中$account需要替换成账号信息{"version": "2.0","statement": [{"effect": "allow","action": ["name/as:*"],"resource": ["qcs::as:ap-guangzhou:$account:auto-scaling-group/*"]}]}
# 其中$account需要替换成账号信息, $AutoScalingGroupId 需要替换成相应的AutoScalingGroupId{"version": "2.0","statement": [{"effect": "deny","action": ["name/as:*"],"resource": ["qcs::as:ap-guangzhou:$account:auto-scaling-group/$AutoScalingGroupId"]}]}
{"version": "2.0","statement": [{"effect": "allow","action": ["name/as:Describe*"],"resource": ["*"]}]}
本页内容是否解决了您的问题?