访问管理 腾讯健康组学平台

一、服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。

二、Omics_QCSLinkedRoleInManageCloudResource

·策略名称： QcloudAccessForOmicsLinkedRoleInManageCloudResource

·策略内容：{
"version": "2.0",
"statement": [
{
"action": [
"vpc:DescribeVpcEx",
"vpc:DescribeVpcPrivateIpAddresses",
"vpc:DescribeSubnetEx",
"vpc:CreateVpc",
"vpc:CreateSubnet",
"vpc:CreateAddress",
"vpc:CreateAddressGroup",
"vpc:CreateAddressTemplate",
"vpc:CreateAddressTemplateGroup",
"vpc:DeleteSubnet",
"vpc:DeleteVpc",
"vpc:DeleteAddress",
"vpc:DeleteAddressTemplate",
"vpc:DeleteAddressGroup",
"vpc:DeleteAddressTemplateGroup",
"tke:CreateCluster",
"tke:DescribeClusters",
"tke:DeleteCluster",
"monitor:DescribeStatisticData",
"monitor:GetMonitorData",
"cvm:RunInstances",
"cvm:TerminateInstances",
"cvm:DescribeInstancesStatus",
"cvm:DescribeInstances",
"cvm:CreateSecurityGroup",
"cvm:CreateSecurityGroupPolicy",
"cvm:AssociateSecurityGroups",
"cvm:DescribeImages",
"cvm:ModifySingleSecurityGroupPolicy",
"cvm:ModifySecurityGroupPolicys",
"cvm:ModifySecurityGroupAttributes",
"cvm:DescribeSecurityGroupPolicys",
"cvm:DeleteSecurityGroup",
"cvm:DeleteSecurityGroupPolicy",
"cfs:CreateCfsFileSystem",
"cfs:DescribeCfsFileSystems",
"cfs:DescribeMountTargets",
"cfs:DeleteMountTarget",
"cfs:DeleteCfsFileSystem",
"cos:GetBucket",
"cos:GetBucketObjectVersions",
"cos:PutObject",
"cos:PutObjectCopy",
"cos:PostObject",
"cos:AppendObject",
"cos:GetObject",
"cos:HeadBucket",
"cos:HeadObject",
"cos:DeleteObject",
"cos:OptionsObject",
"cos:PostObjectRestore",
"cos:InitiateMultipartUpload",
"cos:UploadPart",
"cos:UploadPartCopy",
"cos:CompleteMultipartUpload",
"cos:AbortMultipartUpload",
"cos:ListMultipartUploads",
"cos:ListParts",
"cos:GetObjectTagging",
"cos:RenameObject",
"cos:GetObjectTagging",
"cos:GetService",
"cos:GetBucketCORS",
"cos:PutBucketCORS",
"cos:DeleteBucketCORS",
"cynosdb:CreateClusters",
"cynosdb:DescribeClusterDetail",
"cynosdb:CreateAccounts",
"cynosdb:DescribeAccounts",
"cynosdb:GrantAccountPrivileges",
"cynosdb:DescribeInstanceSlowQueries",
"cynosdb:DescribeResourcesByDealName",
"cynosdb:IsolateCluster",
"cynosdb:OfflineCluster",
"tat:RunCommand",
"tat:DescribeInvocations",
"tat:DescribeAutomationAgentStatus",
"tat:DescribeInvocationTasks",
"thpc:*",
"tke:CreateClusterNodePool",
"tke:DescribeClusterNodePools",
"tke:ModifyClusterNodePool",
"tke:ModifyNodePoolInstanceTypes",
"tke:ModifyNodePoolDesiredCapacityAboutAsg",
"tke:DeleteClusterNodePool",
"tke:InstallAddon",
"tke:DescribeAddon",
"tke:UpdateAddon",
"tke:DeleteAddon",
"tke:EnableClusterAudit",
"tke:DisableClusterAudit",
"tke:CreateClusterRelease",
"tke:UninstallClusterRelease",
"tke:UpgradeClusterRelease",
"tke:RollbackClusterRelease",
"tke:DescribeClusterReleases",
"tke:DescribeClusterReleaseDetails",
"tke:DescribeClusterReleaseHistory",
"tke:DescribeClusterPendingReleases",
"tke:CancelClusterRelease",
"as:DescribeAutoScalingInstances",
"as:CreateLaunchConfiguration",
"as:CreateAutoScalingGroup",
"as:DescribeLaunchConfigurations",
"as:DescribeAutoScalingGroups",
"as:ModifyAutoScalingGroup",
"as:DisableAutoScalingGroup",
"as:EnableAutoScalingGroup",
"as:DeleteAutoScalingGroup",
"as:DeleteLaunchConfiguration",
"as:DescribeAutoScalingActivities",
"as:DetachInstances",
"as:RemoveInstances",
"as:ModifyLaunchConfigurationAttributes",
"as:SetInstancesProtection",
"as:ClearLaunchConfigurationAttributes",
"cvm:Describe*",
"cvm:Inquiry*",
"cvm:CreateImage",
"cvm:DeleteImages",
"cvm:ResetInstance"
],
"resource": "*",
"effect": "allow"
},
{
"effect": "allow",
"action": [
"tke:AcquireClusterKubeConfigForProduct"
],
"resource": [
"qcs::tke::*:cluster\/*",
"qcs::tke::*:k8s\/*\/services\/*\/get",
"qcs::tke::*:k8s\/*\/services\/proxy\/*\/create"
]
},
{
"effect": "allow",
"action": "finance:*",
"resource": "qcs::cvm:::*"
},
{
"effect": "allow",
"action": [
"tag:TagResources",
"tag:UnTagResources"
],
"resource": "qcs::cvm:::*"
}
]
}