本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
AWSLicenseManagerUserSubscriptionsServiceRolePolicy
描述:允许 L AWS icense Manager 用户订阅服务代表您管理资源。
AWSLicenseManagerUserSubscriptionsServiceRolePolicy
是一个AWS 托管策略。
使用此策略
此附加到服务相关角色的策略允许服务代表您执行操作。您无法将此策略附加到您的用户、组或角色。
策略详细信息
-
类型:服务相关角色策略
-
创建时间:2022 年 7 月 30 日 01:17 UTC
-
编辑时间:2022 年 11 月 21 日 19:51 UTC
-
ARN:
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerUserSubscriptionsServiceRolePolicy
策略版本
策略版本:v3(默认)
此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时, AWS 会检查策略的默认版本以确定是否允许该请求。
JSON 策略文档
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "DSReadPermissions", "Effect" : "Allow", "Action" : [ "ds:DescribeDirectories", "ds:GetAuthorizedApplicationDetails" ], "Resource" : "*" }, { "Sid" : "SSMReadPermissions", "Effect" : "Allow", "Action" : [ "ssm:GetInventory", "ssm:GetCommandInvocation", "ssm:ListCommandInvocations", "ssm:DescribeInstanceInformation" ], "Resource" : "*" }, { "Sid" : "EC2ReadPermissions", "Effect" : "Allow", "Action" : [ "ec2:DescribeInstances", "ec2:DescribeVpcPeeringConnections" ], "Resource" : "*" }, { "Sid" : "EC2WritePermissions", "Effect" : "Allow", "Action" : [ "ec2:TerminateInstances", "ec2:CreateTags" ], "Condition" : { "StringEquals" : { "ec2:productCode" : [ "bz0vcy31ooqlzk5tsash4r1ik", "d44g89hc0gp9jdzm99rznthpw", "77yzkpa7kvee1y1tt7wnsdwoc" ] } }, "Resource" : [ "arn:aws:ec2:*:*:instance/*" ] }, { "Sid" : "SSMDocumentExecutionPermissions", "Effect" : "Allow", "Action" : [ "ssm:SendCommand" ], "Resource" : [ "arn:aws:ssm:*::document/AWS-RunPowerShellScript" ] }, { "Sid" : "SSMInstanceExecutionPermissions", "Effect" : "Allow", "Action" : [ "ssm:SendCommand" ], "Resource" : [ "arn:aws:ec2:*:*:instance/*" ], "Condition" : { "StringEquals" : { "aws:ResourceTag/AWSLicenseManager" : "UserSubscriptions" } } } ] }