一、服务(相关)角色是由腾讯云服务预定义,经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。
| CAM中产品名 | 角色名称 | 角色类型 | 角色载体 |
| 数据安全治理中心 | DSGC_QCSLinkedRoleInApiSec | 服务相关角色 | apisec.dsgc.cloud.tencent.com |
二、DSGC_QCSLinkedRoleInApiSec
·策略名称: QcloudAccessForDSGCLinkedRoleInApiSec
·策略内容:{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"cvm:DescribeInstances",
"clb:CreateLoadBalancer",
"clb:DeleteLoadBalancer",
"clb:CreateListener",
"clb:DescribeListeners",
"clb:DeleteListener",
"clb:DeleteLoadBalancerListeners",
"clb:RegisterTargets",
"clb:DeregisterTargets",
"vpc:CreateVpcEndPointService",
"vpc:DescribeVpcEndPointService",
"vpc:ModifyVpcEndPointServiceAttribute",
"vpc:DeleteVpcEndPointService",
"vpc:CreateVpcEndPointServiceWhiteList",
"vpc:DescribeVpcEndPointServiceWhiteList",
"vpc:DeleteVpcEndPointServiceWhiteList",
"vpc:EnableVpcEndPointConnect",
"vpc:CheckVpcEndPointServiceExist",
"vpc:CreateVpcEndPoint",
"vpc:DescribeVpcEndPoint",
"vpc:ModifyVpcEndPointAttribute",
"vpc:DeleteVpcEndPoint",
"vpc:DeleteVpcEndPointAndServiceAll",
"tat:DescribeAutomationAgentStatus",
"tat:RunCommand",
"tat:DescribeInvocations",
"tat:DescribeInvocationTasks"
],
"resource": "*"
}
]
}