一、服务(相关)角色是由腾讯云服务预定义,经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。
| CAM中产品名 | 角色名称 | 角色类型 | 角色载体 |
| 云原生 etcd | Cetcd_QCSLinkedRoleInDefault | 服务相关角色 | default.cetcd.cloud.tencent.com |
二、Cetcd_QCSLinkedRoleInDefault
·策略名称: QcloudAccessForCetcdLinkedRoleInDefault
·策略内容:{
"version": "2.0",
"statement": [
{
"action": [
"monitor:CreatePrometheusInstance",
"monitor:DescribeGrafanaInstances",
"monitor:UpgradeGrafanaDashboard",
"monitor:DescribePrometheusInstances",
"monitor:ModifyPrometheusInstanceAttributes",
"monitor:CreatePrometheusMultiTenantInstancePostPayMode",
"monitor:CreateGrafanaInstance",
"monitor:TerminatePrometheusInstances",
"monitor:DestroyPrometheusInstance",
"monitor:DeleteGrafanaInstance",
"tag:DescribeResourceTagsByResourceIds",
"tag:TagResources",
"tag:UnTagResources",
"tag:DescribeTagValues",
"tag:DescribeResourcesByTags",
"tag:DescribeResourceTags",
"tag:DescribeResourceTagsByTagKeys",
"tag:ModifyResourcesTagValue",
"tag:DescribeTags",
"cos:AbortMultipartUpload",
"cos:DeleteBucket",
"cos:DeleteMultipleObjects",
"cos:DeleteObject",
"cos:GetBucket",
"cos:GetObject",
"cos:HeadBucket",
"cos:HeadObject",
"cos:ListMultipartUploads",
"cos:PutBucket",
"cos:PutObject",
"cos:ListParts",
"cos:UploadPart",
"cvm:CreateSecurityGroup",
"cvm:DeleteSecurityGroup",
"cvm:DescribeSecurityGroups",
"cos:InitiateMultipartUpload",
"cos:CompleteMultipartUpload",
"monitor:DescribePrometheusInstanceInitStatus",
"monitor:RunPrometheusInstance",
"monitor:CreateExporterIntegration",
"monitor:UpdateExporterIntegration",
"monitor:DeleteExporterIntegration",
"monitor:DescribeExporterIntegrations",
"monitor:CreatePrometheusAlertGroup",
"monitor:CreatePrometheusConfig",
"monitor:DeletePrometheusConfig",
"cvm:DescribeZones"
],
"resource": "*",
"effect": "allow"
}
]
}