访问管理 数据加速器 GooseFS

一、服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。

二、GooseFS_QCSLinkedRoleInManageCloudService

·策略名称： QcloudAccessForGooseFSLinkedRoleInManageCloudService

·策略内容：{
"version": "2.0",
"statement": [
{
"action": [
"vpc:DescribeVpcEx",
"vpc:DescribeVpcPrivateIpAddresses",
"vpc:DescribeSubnetEx",
"cvm:RunInstances",
"cvm:TerminateInstances",
"cvm:DescribeInstancesStatus",
"cvm:DescribeInstances",
"cvm:DescribeImages",
"tat:RunCommand",
"tat:DescribeInvocations",
"tat:DescribeAutomationAgentStatus",
"cos:GetBucket",
"cos:GetBucketObjectVersions",
"cos:PutObject",
"cos:PutObjectCopy",
"cos:PostObject",
"cos:AppendObject",
"cos:GetObject",
"cos:HeadBucket",
"cos:HeadObject",
"cos:DeleteObject",
"cos:OptionsObject",
"cos:PostObjectRestore",
"cos:InitiateMultipartUpload",
"cos:UploadPart",
"cos:UploadPartCopy",
"cos:CompleteMultipartUpload",
"cos:AbortMultipartUpload",
"cos:ListMultipartUploads",
"cos:ListParts",
"tat:DescribeInvocationTasks",
"cvm:DeleteSecurityGroup",
"cvm:CreateSecurityGroupWithPolicies",
"cvm:DescribeSecurityGroups",
"cvm:DescribeSecurityGroupAssociationStatistics",
"cvm:DescribeDisasterRecoverGroups",
"cvm:DescribeDisasterRecoverGroupQuota",
"cvm:CreateDisasterRecoverGroup",
"cvm:ModifyDisasterRecoverGroupAttribute",
"cvm:DeleteDisasterRecoverGroups",
"cvm:CreateSecurityGroup",
"cvm:CreateSecurityGroupPolicy",
"cvm:DeleteSecurityGroupPolicy",
"cos:PostBucketInventory",
"cos:GetBucketNotification",
"cos:PutBucketNotification",
"cvm:ModifyInstancesAttribute"
],
"resource": "*",
"effect": "allow"
},
{
"effect": "allow",
"action": "finance:*",
"resource": "qcs::cvm:::*"
}
]
}

三、GooseFSMountPoint_QCSLinkedRoleInManageCloudServic

使用场景： 当前角色为数据加速器GooseFS MountPoint 服务相关角色，用于授权GooseFS MountPoint 访问CVM、VPC、COS等腾讯云资源，无需用户托管密钥，操作更高效、更安全。该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略

·策略名称： QcloudAccessForGooseFSMountPointLinkedRoleInManageCloudService

·策略内容：{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"vpc:DescribeVpcEx",
"vpc:DescribeVpcPrivateIpAddresses",
"vpc:DescribeSubnetEx",
"tat:DescribeInvocationTasks",
"tat:RunCommand",
"tat:DescribeInvocations",
"tat:DescribeAutomationAgentStatus",
"cvm:RunInstances",
"cvm:TerminateInstances",
"cvm:DescribeInstancesStatus",
"cvm:DescribeInstances",
"cvm:DescribeImages",
"cos:GetBucket",
"cos:HeadBucket",
"cos:HeadObject"
],
"resource": "*"
}
]
}