本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。
若要提供 AppStream 2.0 的完整管理或唯讀存取權，您必須將下列其中一個 AWS 受管政策連接至需要這些許可IAM的使用者或群組。「AWS 受管政策」為獨立的政策，由 AWS建立並管理。如需詳細資訊，請參閱IAM《 使用者指南》中的 AWS 受管政策。
- AmazonAppStreamFullAccess
-
此受管政策提供 AppStream 2.0 資源的完整管理存取權。若要透過 AWS 命令列界面 (AWS CLI) AWS SDK或 AWS 管理主控台管理 AppStream 2.0 資源並執行API動作，您必須擁有此政策中定義的許可。
如果您以 IAM使用者身分登入 AppStream 2.0 主控台，您必須將此政策連接至您的 AWS 帳戶。如果您是透過聯合身分登入，則必須將此政策連接至用於聯合的 IAM 角色。
{ "Version": "2012-10-17", "Statement": [ { "Action": [ "appstream:" ], "Effect": "Allow", "Resource": "" }, { "Action": [ "application-autoscaling:DeleteScalingPolicy", "application-autoscaling:DescribeScalableTargets", "application-autoscaling:DescribeScalingPolicies", "application-autoscaling:PutScalingPolicy", "application-autoscaling:RegisterScalableTarget", "application-autoscaling:DescribeScheduledActions", "application-autoscaling:PutScheduledAction", "application-autoscaling:DeleteScheduledAction" ], "Effect": "Allow", "Resource": "" }, { "Action": [ "cloudwatch:DeleteAlarms", "cloudwatch:DescribeAlarms", "cloudwatch:GetMetricStatistics", "cloudwatch:PutMetricAlarm" ], "Effect": "Allow", "Resource": "" }, { "Action": [ "ec2:DescribeRouteTables", "ec2:DescribeSecurityGroups", "ec2:DescribeSubnets", "ec2:DescribeVpcs", "ec2:DescribeVpcEndpoints" ], "Effect": "Allow", "Resource": "" }, { "Action": "iam:ListRoles", "Effect": "Allow", "Resource": "" }, { "Action": "iam:PassRole", "Effect": "Allow", "Resource": "arn:aws:iam:::role/service-role/ApplicationAutoScalingForAmazonAppStreamAccess", "Condition": { "StringLike": { "iam:PassedToService": "application-autoscaling.amazonaws.com" } } }, { "Action": "iam:CreateServiceLinkedRole", "Effect": "Allow", "Resource": "arn:aws:iam:::role/aws-service-role/appstream.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_AppStreamFleet (http://appstream.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_AppStreamFleet)", "Condition": { "StringLike": { "iam:AWSServiceName": "appstream.application-autoscaling.amazonaws.com" } } } ] } - AmazonAppStreamReadOnlyAccess
-
此受管政策提供對 AppStream 2.0 資源的唯讀存取權。
{ "Version": "2012-10-17", "Statement": [ { "Action": [ "appstream:Get*", "appstream:List*", "appstream:Describe*" ], "Effect": "Allow", "Resource": "*" } ] }
AppStream 2.0 主控台使用兩個額外的動作，提供 AWS CLI或 不提供的功能 AWS SDK。AmazonAppStreamFullAccess 和 AmazonAppStreamReadOnlyAccess政策都提供這些動作的許可。
| 動作 | 描述 | 存取層級 |
|---|---|---|
GetImageBuilders |
如果提供了映像建置器名稱，則會准許擷取說明一或多個指定的映像建置器清單。否則，帳戶中的所有映像建置器都會予以說明。 | 讀取 |
GetParametersForThemeAssetUpload |
授予可上傳自訂品牌主題資產的許可。如需詳細資訊，請參閱將自訂品牌新增至 Amazon AppStream 2.0。 | 寫入 |
- AmazonAppStreamPCAAccess
-
此受管政策提供您 AWS 帳戶中 Certificate Manager Private CA 資源的完整管理存取權， AWS 以進行憑證型身分驗證。
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "acm-pca:IssueCertificate", "acm-pca:GetCertificate", "acm-pca:DescribeCertificateAuthority" ], "Resource": "arn:*:acm-pca:*:*:*", "Condition": { "StringLike": { "aws:ResourceTag/euc-private-ca": "*" } } } ] } - AmazonAppStreamServiceAccess
-
此受管政策是 AppStream 2.0 服務角色的預設政策。
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "ec2:DescribeVpcs", "ec2:DescribeSubnets", "ec2:DescribeAvailabilityZones", "ec2:CreateNetworkInterface", "ec2:DescribeNetworkInterfaces", "ec2:DeleteNetworkInterface", "ec2:DescribeSubnets", "ec2:AssociateAddress", "ec2:DisassociateAddress", "ec2:DescribeRouteTables", "ec2:DescribeSecurityGroups", "ec2:DescribeVpcEndpoints", "s3:ListAllMyBuckets", "ds:DescribeDirectories" ], "Resource": "*" }, { "Effect": "Allow", "Action": [ "s3:CreateBucket", "s3:ListBucket", "s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:GetObjectVersion", "s3:DeleteObjectVersion", "s3:GetBucketPolicy", "s3:PutBucketPolicy", "s3:PutEncryptionConfiguration" ], "Resource": [ "arn:aws:s3:::appstream2-36fb080bb8-*", "arn:aws:s3:::appstream-app-settings-*", "arn:aws:s3:::appstream-logs-*" ] } ] } - ApplicationAutoScalingForAmazonAppStreamAccess
-
此受管政策可啟用 AppStream 2.0 的應用程式自動擴展。
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "appstream:UpdateFleet", "appstream:DescribeFleets" ], "Resource": [ "*" ] }, { "Effect": "Allow", "Action": [ "cloudwatch:DescribeAlarms" ], "Resource": [ "*" ] } ] } - AWSApplicationAutoscalingAppStreamFleetPolicy
-
此受管政策授予 Application Auto Scaling 存取 AppStream 2.0 和 的許可 CloudWatch 。
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "appstream:UpdateFleet", "appstream:DescribeFleets", "cloudwatch:PutMetricAlarm", "cloudwatch:DescribeAlarms", "cloudwatch:DeleteAlarms" ], "Resource": [ "*" ] } ] }
AppStream 受 AWS 管政策的 2.0 更新
檢視自此服務開始追蹤這些變更以來，針對 AppStream 2.0 受 AWS 管政策更新的詳細資訊。如需此頁面變更的自動提醒，請訂閱Amazon AppStream 2.0 的文件歷史記錄頁面上的RSS摘要。
| 變更 | 描述 | 日期 |
|---|---|---|
|
AppStream 2.0 已開始追蹤變更 |
AppStream 2.0 已開始追蹤其 AWS 受管政策的變更 |
2022 年 10 月 31 日 |
