本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
AWSServiceRolePolicyForBackupRestoreTesting
描述:此原則包含測試還原和清除測試期間建立之資源的權限。
AWSServiceRolePolicyForBackupRestoreTesting
是AWS 受管理的策略。
使用此政策
此原則附加至服務連結角色,可讓服務代表您執行動作。您無法將此政策連接至使用者、群組或角色。
政策詳情
-
類型:服務連結角色原則
-
創建時間:世界標準時間 2023 年 11 月 10 日 23:37
-
編輯時間:世界標準時間 2024 年 2 月 14 日 22:42
-
ARN:
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRolePolicyForBackupRestoreTesting
政策版本
策略版本:v2(預設值)
原則的預設版本是定義原則權限的版本。當具有策略的使用者或角色發出要求以存取 AWS 資源時,請 AWS 檢查原則的預設版本,以決定是否允許該要求。
政策文件
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "BackupActions", "Effect" : "Allow", "Action" : [ "backup:DescribeRecoveryPoint", "backup:DescribeRestoreJob", "backup:DescribeProtectedResource", "backup:GetRecoveryPointRestoreMetadata", "backup:ListBackupVaults", "backup:ListProtectedResources", "backup:ListProtectedResourcesByBackupVault", "backup:ListRecoveryPointsByBackupVault", "backup:ListRecoveryPointsByResource", "backup:ListTags", "backup:StartRestoreJob" ], "Resource" : "*" }, { "Sid" : "IamPassRole", "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : "*", "Condition" : { "StringEquals" : { "iam:PassedToService" : "backup.amazonaws.com" } } }, { "Sid" : "DescribeActions", "Effect" : "Allow", "Action" : [ "ec2:DescribeInstances", "ec2:DescribeSnapshotTierStatus", "ec2:DescribeTags", "ec2:DescribeVolumes", "elasticfilesystem:DescribeFileSystems", "elasticfilesystem:DescribeMountTargets", "fsx:DescribeFileSystems", "fsx:DescribeVolumes", "fsx:ListTagsForResource", "rds:DescribeDBInstances", "rds:DescribeDBClusters", "rds:DescribeDBInstanceAutomatedBackups", "rds:DescribeDBClusterAutomatedBackups", "rds:ListTagsForResource", "redshift:DescribeClusters" ], "Resource" : "*" }, { "Sid" : "DeleteActions", "Effect" : "Allow", "Action" : [ "ec2:DeleteVolume", "ec2:TerminateInstances", "elasticfilesystem:DeleteFilesystem", "elasticfilesystem:DeleteMountTarget", "rds:DeleteDBCluster", "rds:DeleteDBInstance", "fsx:DeleteFileSystem", "fsx:DeleteVolume" ], "Resource" : "*", "Condition" : { "Null" : { "aws:ResourceTag/awsbackup-restore-test" : "false" } } }, { "Sid" : "DdbDeleteActions", "Effect" : "Allow", "Action" : [ "dynamodb:DeleteTable", "dynamodb:DescribeTable" ], "Resource" : "arn:aws:dynamodb:*:*:table/awsbackup-restore-test-*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "RedshiftDeleteActions", "Effect" : "Allow", "Action" : "redshift:DeleteCluster", "Resource" : "arn:aws:redshift:*:*:cluster:awsbackup-restore-test-*" }, { "Sid" : "S3DeleteActions", "Effect" : "Allow", "Action" : [ "s3:DeleteBucket", "s3:GetLifecycleConfiguration", "s3:PutLifecycleConfiguration" ], "Resource" : "arn:aws:s3:::awsbackup-restore-test-*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "TimestreamDeleteActions", "Effect" : "Allow", "Action" : "timestream:DeleteTable", "Resource" : "arn:aws:timestream:*:*:database/*/table/awsbackup-restore-test-*" } ] }