弹性伸缩
弹性伸缩
文档指南
请输入
- 文档首页
弹性伸缩用户指南访问控制弹性伸缩IAM策略类型
复制全文
下载 pdf弹性伸缩IAM策略类型
文档反馈
问问助手本文为您介绍IAM策略的类型及弹性伸缩相关的策略，以帮助您快速了解IAM策略。IAM策略支持系统预设策略和自定义策略两种类型，您可直接使用系统预设策略为IAM身份授权，但系统预设策略有限若无法满足您的需求，您可通过自定义策略精准授权，灵活管控账号资源。
系统预设策略
IAM平台已提前为您设置了关于弹性伸缩的默认策略，您可为直接为IAM身份（IAM用户、用户组或角色）授权系统预设策略。系统预设策略只能用于授权，不可编辑和修改。
弹性伸缩系统预设策略
系统预设策略名称 | 描述 |
AutoScalingFullAccess | 被授权该策略后的IAM身份（IAM用户、用户组、角色），可获得权限范围内弹性伸缩功能的 管理 权限，适用于通过API使用弹性伸缩的场景。 |
AutoScalingReadOnlyAccess | 被授权该策略后的IAM身份（IAM用户、用户组、角色），可获得权限范围内弹性伸缩功能的 只读 权限，适用于通过API使用弹性伸缩的场景。 |
AutoScalingConsoleFullAccess | 被授权该策略后的IAM身份（IAM用户、用户组、角色），可获得权限范围内弹性伸缩功能的 管理 权限、以及相关云产品在弹性伸缩控制台的 只读 权限，适用于通过控制台使用弹性伸缩的场景。 |
AutoScalingConsoleReadOnlyAccess | 被授权该策略后的IAM身份（IAM用户、用户组、角色），可获得权限范围内弹性伸缩功能的 只读 权限、以及相关云产品在弹性伸缩控制台的 只读 权限，适用于通过控制台使用弹性伸缩的场景。 |
弹性伸缩常用操作与系统策略的关系
说明
如果IAM身份只授予 只读 权限，则只可查看功能配置情况（例如查询伸缩组/伸缩配置来源详情等），不可对其进行任何操作。
操作 | AutoScalingFullAccess | AutoScalingReadOnlyAccess | AutoScalingConsoleFullAccess | AutoScalingConsoleReadOnlyAccess |
管理伸缩组 | √ | × | √ | × |
查询伸缩组 | √ | √ | √ | √ |
查询负载均衡/实例启动模版 | × | × | √ | √ |
管理伸缩配置来源 | √ | × | √ | × |
查询伸缩配置来源 | √ | √ | √ | √ |
查询伸缩配置所需的VPC等云产品 | × | × | √ | √ |
设置实例保护 | √ | × | √ | × |
添加/移出/删除实例 | √ | × | √ | × |
查询实例 | × | × | √ | √ |
管理伸缩规则 | √ | × | √ | × |
查询伸缩规则 | √ | √ | √ | √ |
管理生命周期挂钩 | √ | × | √ | × |
查询生命周期挂钩 | √ | √ | √ | √ |
管理消息通知 | √ | × | √ | × |
配置消息接收 | × | × | × | × |
查询伸缩日志 | √ | √ | √ | √ |
管理垂直伸缩 | √ | × | √ | × |
查询垂直伸缩 | √ | √ | √ | √ |
查询垂直伸缩所需的实例规格 | × | × | √ | √ |
弹性伸缩功能依赖的角色或策略
弹性伸缩产品系统预设策略详情
AutoScalingFullAccess
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"auto_scaling:*"
],
"Resource": [
"*"
]
}
]
}
AutoScalingReadOnlyAccess
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"auto_scaling:Get*",
"auto_scaling:*Describe*",
"auto_scaling:*List*"
],
"Resource": [
"*"
]
}
]
}
AutoScalingConsoleFullAccess
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:Get*",
"ecs:*Describe*",
"ecs:*List*",
"clb:Get*",
"clb:*Describe*",
"clb:*List*",
"vpc:Get*",
"vpc:*Describe*",
"vpc:*List*",
"storage_ebs:Get*",
"storage_ebs:*Describe*",
"storage_ebs:*List*",
"rds_mysql:Get*",
"rds_mysql:*Describe*",
"rds_mysql:*List*",
"volc_observe:Get*",
"volc_observe:*Describe*",
"volc_observe:*List*",
"auto_scaling:*"
],
"Resource": [
"*"
]
}
]
}
AutoScalingConsoleReadOnlyAccess
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:Get*",
"ecs:*Describe*",
"ecs:*List*",
"clb:Get*",
"clb:*Describe*",
"clb:*List*",
"vpc:Get*",
"vpc:*Describe*",
"vpc:*List*",
"storage_ebs:Get*",
"storage_ebs:*Describe*",
"storage_ebs:*List*",
"rds_mysql:Get*",
"rds_mysql:*Describe*",
"rds_mysql:*List*",
"volc_observe:Get*",
"volc_observe:*Describe*",
"volc_observe:*List*",
"auto_scaling:Get*",
"auto_scaling:*Describe*",
"auto_scaling:*List*"
],
"Resource": [
"*"
]
}
]
}
弹性伸缩产品跨服务授权策略详情
ServiceRoleForAutoScaling
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"ecs:DescribeInstances",
"ecs:GetInstance",
"ecs:CreateInstances",
"ecs:DeleteInstance",
"ecs:DeleteInstances",
"ecs:DescribeInstanceTypes",
"ecs:DescribeKeyPair",
"ecs:DescribeImages",
"ecs:DescribeZones",
"ecs:BindAssumeRole",
"ecs:ModifyInstanceSpec",
"ecs:StopInstance",
"ecs:StartInstance",
"ecs:DescribeAvailableResource",
"ecs:DescribeHpcCluster",
"ecs:CreateTags",
"ecs:DeleteTags",
"ecs:DescribeCommands",
"ecs:InvokeCommand",
"ecs:DescribeInvocations",
"ecs:DescribeLaunchTemplateVersions",
"ecs:CreateScheduledInstances",
"ecs:DescribeScheduledInstances",
"ecs:DescribeScheduledInstanceStock",
"vpc:AllocateEipAddress",
"vpc:AssociateEipAddress",
"vpc:DisassociateEipAddress",
"vpc:ReleaseEipAddress",
"vpc:DescribeVpcs",
"vpc:DescribeEipAddresses",
"vpc:DescribeSubnetAttributes",
"vpc:InnerGetLimitFromKeys",
"vpc:DescribeSubnets",
"vpc:DescribeBandwidthPackages",
"vpc:RemoveBandwidthPackageIp",
"clb:DescribeLoadBalancers",
"clb:DescribeServerGroups",
"clb:DescribeListenerHealth",
"clb:DescribeListeners",
"clb:AddServerGroupBackendServers",
"clb:RemoveServerGroupBackendServers",
"clb:DescribeServerGroupAttributes",
"alb:DescribeLoadBalancers",
"alb:DescribeServerGroups",
"alb:AddServerGroupBackendServers",
"alb:RemoveServerGroupBackendServers",
"alb:DescribeServerGroupAttributes",
"alb:DescribeListenerAttributes",
"alb:DescribeListeners",
"alb:DescribeListenerHealth",
"volc_observe:GetMetricData",
"rds_mysql:ListDBInstances",
"rds_mysql:DescribeDBInstance",
"rds_mysql:CreateDBInstanceIPList",
"rds_mysql:ListDBInstanceIPLists",
"rds_mysql:ModifyDBInstanceIPList",
"rds_mysql:DeleteDBInstanceIPList",
"rds_mysql:DescribeAllowLists",
"rds_mysql:DescribeAllowListDetail",
"rds_mysql:DeleteAllowList",
"rds_mysql:ModifyAllowList",
"rds_mysql:AssociateAllowList",
"rds_mysql:DisassociateAllowList",
"rds_mysql:CreateAllowList",
"volc_observe:CreateRule",
"volc_observe:DeleteRulesByIds",
"volc_observe:UpdateRule",
"volc_observe:ListRulesByIds",
"storage_ebs:DescribeVolumes"
],
"Resource": [
"*"
]
}
]
}
自定义策略
相关文档
最近更新时间：2025.08.05 20:27:32
这个页面对您有帮助吗？
有用
有用
无用
无用