访问管理 弹性 MapReduce

一、服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。

二、EMR_QCSLinkedRoleInNodeAutoscaling

·策略名称： QcloudAccessForEMRLinkedRolelnNodeAutoscaling

·策略内容：{
"statement": [
{
"action": [
"emr:ScaleOutInstance",
"emr:TerminateNodes",
"emr:Describe*"
],
"effect": "allow",
"resource": [
"*"
]
},
{
"action": [
"tke:DescribeClusters*",
"tke:DescribeClusterInstances",
"tke:DescribeVpcCniPodLimits"
],
"effect": "allow",
"resource": [
"*"
]
},
{
"action": [
"finance:trade"
],
"effect": "allow",
"resource": [
"qcs::cvm:::*"
]
}
],
"version": "2.0"
}

三、EMR_QCSLinkedRoleInApplicationDataAccess

使用场景： 当前角色为弹性MapReduce (EMR)服务相关角色，该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略

·策略名称： QcloudAccessForEMRLinkedRoleInApplicationDataAccess

·策略内容：{
"version": "2.0",
"statement": [
{
"action": [
"cos:GetService",
"cos:GetBucket",
"cos:ListMultipartUploads",
"cos:GetObject",
"cos:HeadObject",
"cos:OptionsObject",
"cos:ListParts",
"cos:DeleteObject",
"cos:PostObject",
"cos:PutObject",
"cos:InitiateMultipartUpload",
"cos:UploadPart",
"cos:UploadPartCopy",
"cos:CompleteMultipartUpload",
"cos:AbortMultipartUpload",
"cos:AppendObject",
"cos:HeadBucket",
"cos:RenameObject",
"cos:TruncateObject",
"cos:PutSymlink",
"cos:GetSymlink",
"tccatalog:DescribeCatalogs",
"tccatalog:DescribeSchemaNames",
"tccatalog:DescribeVolumeNames",
"tccatalog:CreateCatalog",
"tccatalog:CreateSchema",
"tccatalog:CreateVolume",
"tccatalog:DescribeCatalogsByNames",
"tccatalog:DescribeVolumes",
"tccatalog:DescribeCredentials",
"tccatalog:DropVolume",
"tccatalog:DescribeMetastoreInstance",
"tccatalog:DescribeRoles",
"tccatalog:DescribeRolePermissionList",
"tccatalog:GrantPermissionToRole",
"tccatalog:DescribeUsers",
"tccatalog:DescribeRolesPrivilegeList",
"tccatalog:GrantPermissionToUser"
],
"resource": "*",
"effect": "allow"
}
]
}

四、EMR_QCSLinkedRoleInApplicationCloudResource

使用场景： 当前角色为弹性MapReduce（EMR）服务相关角色，用于授权EMR访问容器资源，该角色将在已关联策略的权限范围内访问你的其他云服务资源权限策略

·策略名称： QcloudAccessForEMRLinkedRolelnCloudResource

·策略内容：{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"emr:CreateCloudNativeResource"
],
"resource": "*"
}
]
}