本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
AmazonECSInfrastructureRolePolicyForVolumes
描述:提供代表您管理與 ECS 工作負載相關聯的磁碟區所需的其他 AWS 服務資源的存取權。
AmazonECSInfrastructureRolePolicyForVolumes
是AWS 受管政策。
使用此政策
您可以AmazonECSInfrastructureRolePolicyForVolumes
連接至您的使用者、群組和角色。
政策詳細資訊
-
類型:服務角色政策
-
建立時間:2024 年 1 月 10 日 22:56 UTC
-
編輯時間:2024 年 10 月 10 日 18:56 UTC
-
ARN:
arn:aws:iam::aws:policy/service-role/AmazonECSInfrastructureRolePolicyForVolumes
政策版本
政策版本:v2 (預設值)
政策的預設版本是定義政策許可的版本。當具有 政策的使用者或角色提出存取 AWS 資源的請求時, 會 AWS 檢查政策的預設版本,以決定是否允許請求。
JSON 政策文件
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "CreateEBSManagedVolume",
"Effect" : "Allow",
"Action" : "ec2:CreateVolume",
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"ArnLike" : {
"aws:RequestTag/AmazonECSCreated" : "arn:aws:ecs:*:*:task/*"
},
"StringEquals" : {
"aws:RequestTag/AmazonECSManaged" : "true"
}
}
},
{
"Sid" : "CreateEBSManagedVolumeFromSnapshot",
"Effect" : "Allow",
"Action" : "ec2:CreateVolume",
"Resource" : "arn:aws:ec2:*:*:snapshot/*"
},
{
"Sid" : "TagOnCreateVolume",
"Effect" : "Allow",
"Action" : "ec2:CreateTags",
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"ArnLike" : {
"aws:RequestTag/AmazonECSCreated" : "arn:aws:ecs:*:*:task/*"
},
"StringEquals" : {
"ec2:CreateAction" : "CreateVolume",
"aws:RequestTag/AmazonECSManaged" : "true"
}
}
},
{
"Sid" : "DescribeVolumesForLifecycle",
"Effect" : "Allow",
"Action" : [
"ec2:DescribeVolumes",
"ec2:DescribeAvailabilityZones"
],
"Resource" : "*"
},
{
"Sid" : "ManageEBSVolumeLifecycle",
"Effect" : "Allow",
"Action" : [
"ec2:AttachVolume",
"ec2:DetachVolume"
],
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/AmazonECSManaged" : "true"
}
}
},
{
"Sid" : "ManageVolumeAttachmentsForEC2",
"Effect" : "Allow",
"Action" : [
"ec2:AttachVolume",
"ec2:DetachVolume"
],
"Resource" : "arn:aws:ec2:*:*:instance/*"
},
{
"Sid" : "DeleteEBSManagedVolume",
"Effect" : "Allow",
"Action" : "ec2:DeleteVolume",
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"ArnLike" : {
"aws:ResourceTag/AmazonECSCreated" : "arn:aws:ecs:*:*:task/*"
},
"StringEquals" : {
"aws:ResourceTag/AmazonECSManaged" : "true"
}
}
}
]
}