服务(相关)角色是由腾讯云服务预定义,经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。本文档介绍具体服务相关角色的使用场景及相关权限策略信息。
CAM中产品名 | 角色名称 | 角色类型 | 角色载体 |
---|---|---|---|
资源编排 TIC | TIC_QCSLinkedRoleInInfrastructureAsCode | 服务相关角色 | infrastructureascode.tic.cloud.tencent.com |
TIC_QCSLinkedRoleInInfrastructureAsCode
使用场景: 当前角色为资源编排(TIC)服务相关角色,用于授权 TIC 编排 CVM、VPC、COS 等腾讯云资源,无需用户托管密钥,操作更高效、更安全。该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略
- 策略名称: QcloudAccessForTICRoleInInfrastructureAsCode
- 策略内容:
{ "version": "2.0", "statement": [ { "action": [ "cvm:*", "vpc:*", "clb:*", "as:*", "cmqtopic:*", "cmqqueue:*", "ccs:*", "scf:*", "tag:*", "monitor:*", "cfs:*", "cos:*", "ckafka:*", "apigw:*", "cdb:*", "mongodb:*", "redis:*", "cynosdb:*", "dcdb:*", "tcaplusdb:*", "cdn:*", "gaap:*", "es:*", "gme:*", "sms:*", "ssl:*", "cam:*", "bgpip:*", "waf:*", "finance:*", "cloudaudit:*", "sqlserver:*", "postgres:*", "vod:*", "cls:*", "sls:*", "tcr:*", "ecdn:*", "kms:*" ], "resource": "*", "effect": "allow" } ] }