访问管理 业务监控

使用场景: 当前角色为访问管理(CSM)服务相关角色,该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略。

相关产品
访问管理 产品页,含版本规格、价格与购买入口。

一、服务(相关)角色是由腾讯云服务预定义,经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。

CAM中产品名 角色名称 角色类型 角色载体
服务迁移 CSM_QCSLinkedRoleInOnline 服务相关角色 online.csm.cloud.tencent.com

二、CSM_QCSLinkedRoleInOnline

·策略名称: QcloudAccessForCSMLinkedRoleInLiveMigrate

·策略内容:{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"cvm:ExitLiveMigrateInstance",
"cvm:LiveMigrateInstance",
"cvm:ModifyInstancesVpcAttribute",
"cvm:LiveMigrateInstance",
"cvm:ExitLiveMigrateInstance",
"cvm:DescribeInstances",
"cvm:DescribeInstanceConfigInfos",
"cvm:RunInstances",
"cvm:TerminateInstances",
"cvm:CreateImage",
"cvm:DescribeImages",
"cvm:AssociateSecurityGroups",
"cvm:DisassociateSecurityGroups",
"cvm:CreateDisks",
"cvm:AttachDisks",
"cvm:DetachDisks",
"cvm:DescribeDisks",
"cvm:TerminateDisks",
"vpc:CreateSecurityGroupWithPolicies",
"vpc:DescribeAddressTemplates",
"vpc:DescribeServiceTemplates",
"vpc:DescribeAddressTemplateGroups",
"vpc:DescribeServiceTemplateGroups",
"vpc:DescribeVpcs",
"vpc:CreateVpc",
"vpc:DescribeSubnets",
"vpc:CreateSubnet",
"vpc:DescribeVpcLimits",
"vpc:DescribeSecurityGroupPolicies",
"finance:DescribeAccountBalance",
"cvm:DescribeZones",
"cvm:DescribeUserInstanceQuota",
"cvm:DescribeZoneInstanceConfigInfos",
"cvm:StopInstances",
"cvm:StartInstances",
"cvm:ResetInstance",
"cvm:EnterRescueMode",
"cvm:ExitRescueMode",
"cvm:ImportImage",
"vpc:DescribeSecurityGroups",
"vpc:DescribeAddresses",
"cdc:DescribeDedicatedClusters",
"cdc:DescribeDedicatedClusterInstanceTypes",
"cdc:DescribeDedicatedClusterCbsStatistics",
"lighthouse:DescribeInstances",
"lighthouse:DescribeBlueprints",
"cos:PutObject",
"cos:GetObject",
"cos:InitiateMultipartUpload",
"cos:UploadPart",
"cos:CompleteMultipartUpload",
"cos:AbortMultipartUpload",
"cos:HeadObject",
"cos:ListParts",
"cos:ListMultipartUploads",
"cos:GetBucket"
],
"resource": "*"
}
]
}

赞 (0)
上一篇 4天前
下一篇 4天前