本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
AWSLicenseManagerUserSubscriptionsServiceRolePolicy
描述:允许 L AWS icense Manager 用户订阅服务代表您管理资源。
AWSLicenseManagerUserSubscriptionsServiceRolePolicy
是一项 AWS 托管式策略。
使用此策略
此附加到服务相关角色的策略允许服务代表您执行操作。您无法将此策略附加到您的用户、组或角色。
策略详细信息
-
类型:服务相关角色策略
-
创作时间:2022 年 7 月 30 日 01:17 UTC
-
编辑时间:2024 年 11 月 8 日 02:54 UTC
-
ARN:
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerUserSubscriptionsServiceRolePolicy
策略版本
策略版本:v4 (默认值)
此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时, AWS 会检查策略的默认版本以确定是否允许该请求。
JSON政策文件
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "DSReadPermissions",
"Effect" : "Allow",
"Action" : [
"ds:DescribeDirectories",
"ds:GetAuthorizedApplicationDetails"
],
"Resource" : "*"
},
{
"Sid" : "SSMReadPermissions",
"Effect" : "Allow",
"Action" : [
"ssm:GetInventory",
"ssm:GetCommandInvocation",
"ssm:ListCommandInvocations",
"ssm:DescribeInstanceInformation"
],
"Resource" : "*"
},
{
"Sid" : "EC2ReadPermissions",
"Effect" : "Allow",
"Action" : [
"ec2:DescribeInstances",
"ec2:DescribeVpcPeeringConnections"
],
"Resource" : "*"
},
{
"Sid" : "EC2WritePermissions",
"Effect" : "Allow",
"Action" : [
"ec2:TerminateInstances",
"ec2:CreateTags"
],
"Condition" : {
"StringEquals" : {
"ec2:productCode" : [
"bz0vcy31ooqlzk5tsash4r1ik",
"d44g89hc0gp9jdzm99rznthpw",
"77yzkpa7kvee1y1tt7wnsdwoc",
"a8jthu9h8pjsn4b8ylvfl6sfr",
"7at6der8hnlov1g347e6tdkde",
"3t0v0vuhvxjzm6m462f9v8iz4",
"4gs2prcp03ojilgkjx8m3ifh7"
]
}
},
"Resource" : [
"arn:aws:ec2:*:*:instance/*"
]
},
{
"Sid" : "SSMDocumentExecutionPermissions",
"Effect" : "Allow",
"Action" : [
"ssm:SendCommand"
],
"Resource" : [
"arn:aws:ssm:*::document/AWS-RunPowerShellScript"
]
},
{
"Sid" : "SSMInstanceExecutionPermissions",
"Effect" : "Allow",
"Action" : [
"ssm:SendCommand"
],
"Resource" : [
"arn:aws:ec2:*:*:instance/*"
],
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/AWSLicenseManager" : "UserSubscriptions"
}
}
},
{
"Sid" : "ReadHostedZonePermissions",
"Effect" : "Allow",
"Action" : [
"route53:GetHostedZone",
"route53:ListResourceRecordSets"
],
"Resource" : "*"
},
{
"Sid" : "ReadSecurityGroupRulePermissions",
"Effect" : "Allow",
"Action" : [
"ec2:DescribeSecurityGroupRules"
],
"Resource" : "*"
},
{
"Effect" : "Allow",
"Sid" : "DescribeSubnetsPermissions",
"Action" : [
"ec2:DescribeSubnets"
],
"Resource" : "*"
},
{
"Sid" : "DescribeNetworkInterfacePermissions",
"Effect" : "Allow",
"Action" : [
"ec2:DescribeNetworkInterfaces"
],
"Resource" : "*"
},
{
"Sid" : "ReadSecretPermissions",
"Effect" : "Allow",
"Action" : [
"secretsmanager:GetSecretValue"
],
"Resource" : "arn:aws:secretsmanager:*:*:secret:license-manager-user-*"
}
]
}