本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
AmazonECSInfrastructureRolePolicyForVolumes
描述:提供代表您管理与 ECS 工作负载关联的卷所需的其他 AWS 服务资源的访问权限。
AmazonECSInfrastructureRolePolicyForVolumes
是一个AWS 托管策略。
使用此策略
您可以将 AmazonECSInfrastructureRolePolicyForVolumes
附加到您的用户、组和角色。
策略详细信息
-
类型:服务角色策略
-
创建时间:世界标准时间 2024 年 1 月 10 日 22:56
-
编辑时间:世界标准时间 2024 年 1 月 10 日 22:56
-
ARN:
arn:aws:iam::aws:policy/service-role/AmazonECSInfrastructureRolePolicyForVolumes
策略版本
策略版本:v1(默认)
此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时, AWS 会检查策略的默认版本以确定是否允许该请求。
JSON 策略文档
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "CreateEBSManagedVolume", "Effect" : "Allow", "Action" : "ec2:CreateVolume", "Resource" : "arn:aws:ec2:*:*:volume/*", "Condition" : { "ArnLike" : { "aws:RequestTag/AmazonECSCreated" : "arn:aws:ecs:*:*:task/*" }, "StringEquals" : { "aws:RequestTag/AmazonECSManaged" : "true" } } }, { "Sid" : "TagOnCreateVolume", "Effect" : "Allow", "Action" : "ec2:CreateTags", "Resource" : "arn:aws:ec2:*:*:volume/*", "Condition" : { "ArnLike" : { "aws:RequestTag/AmazonECSCreated" : "arn:aws:ecs:*:*:task/*" }, "StringEquals" : { "ec2:CreateAction" : "CreateVolume", "aws:RequestTag/AmazonECSManaged" : "true" } } }, { "Sid" : "DescribeVolumesForLifecycle", "Effect" : "Allow", "Action" : [ "ec2:DescribeVolumes", "ec2:DescribeAvailabilityZones" ], "Resource" : "*" }, { "Sid" : "ManageEBSVolumeLifecycle", "Effect" : "Allow", "Action" : [ "ec2:AttachVolume", "ec2:DetachVolume" ], "Resource" : "arn:aws:ec2:*:*:volume/*", "Condition" : { "StringEquals" : { "aws:ResourceTag/AmazonECSManaged" : "true" } } }, { "Sid" : "ManageVolumeAttachmentsForEC2", "Effect" : "Allow", "Action" : [ "ec2:AttachVolume", "ec2:DetachVolume" ], "Resource" : "arn:aws:ec2:*:*:instance/*" }, { "Sid" : "DeleteEBSManagedVolume", "Effect" : "Allow", "Action" : "ec2:DeleteVolume", "Resource" : "arn:aws:ec2:*:*:volume/*", "Condition" : { "ArnLike" : { "aws:ResourceTag/AmazonECSCreated" : "arn:aws:ecs:*:*:task/*" }, "StringEquals" : { "aws:ResourceTag/AmazonECSManaged" : "true" } } } ] }