自定义管控策略示例

管控策略提供如下示例：

禁止云企业网实例的操作权限

{
    "Statement":[
        {
            "Effect":"Deny",
            "Action":[
                "cen:CreateCen",
                "cen:DeleteCen",
                "cen:ModifyCenAttributes",
                "cen:DescribeCens",
                "cen:DescribeCenAttributes"
            ],
            "Resource":[
                "*"
            ]
        }
    ]
}

禁止安全组的操作权限

{
    "Statement":[
        {
            "Effect":"Deny",
            "Action":[
                "vpc:CreateSecurityGroup",
                "vpc:AuthorizeSecurityGroupIngress",
                "vpc:AuthorizeSecurityGroupEgress",
                "vpc:RevokeSecurityGroupIngress",
                "vpc:RevokeSecurityGroupEgress",
                "vpc:DescribeSecurityGroupAttributes",
                "vpc:DescribeSecurityGroups",
                "vpc:ModifySecurityGroupAttributes",
                "vpc:ModifySecurityGroupRuleDescriptionsEgress",
                "vpc:ModifySecurityGroupRuleDescriptionsIngress",
                "vpc:DeleteSecurityGroup"
            ],
            "Resource":[
                "*"
            ]
        }
    ]
}

禁止公网IP的操作权限

{
    "Statement":[
        {
            "Effect":"Deny",
            "Action":[
                "vpc:AllocateEipAddress",
                "vpc:DescribeEipAddresses",
                "vpc:AssociateEipAddress",
                "vpc:DisassociateEipAddress",
                "vpc:ReleaseEipAddress",
                "vpc:ModifyEipAddressAttributes",
                "vpc:DescribeEipAddressAttributes"
            ],
            "Resource":[
                "*"
            ]
        }
    ]
}