You need to enable JavaScript to run this app.
导航
基于访问身份标识(PrincipalTrn)控制权限
最近更新时间:2023.09.05 17:54:34首次发布时间:2023.09.05 17:54:34

场景: 限制仅能通过IAM角色sso-admin来访问NAT网关。
策略示例:

{
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "natgateway:*"
      ],
      "Resource": [
        "*"
      ],
      "Condition":{
          "StringEquals":{
                  "volc:PrincipalTrn":"trn:iam::20000123**:role/sso-admin"
          }
      }
    }
  ]
}