perms *
|
Specifies a semi-colon-separated - ; - list of policies to be applied. You can pass an empty string
to remove all policies. The following ARN format must be specified for the policy:
MODULE::PERMISSIONS::RESOURCE;MODULE::PERMISSIONS::RESOURCE;...
The ARN string must be separated by double colons :: for the following sections:
-
MODULE:
Defines the name of the service module in all lowercase with spaces removed. For example, "Access
Keys" becomes "accesskeys," and "Data Spark-house" becomes "dataspark-house," and so on.
-
PERMISSIONS:
Defines a comma-separated list of permissions for the service module, all in lowercase. For example:
"list,delete,create". Alternatively, you can specify an asterisk (*) to grant all permissions.
-
RESOURCE:
Determines the resource to which this policy will be applied. Specify an asterisk (*) to apply the
policy to all resources in the selected service module, or provide a comma-separated list of
resource IDs to limit the policy's scope.
Here are some examples:
-
instances-cn::list,create,modify,delete,terminal::*
This policy allows listing, creating, editing, deleting, and starting a terminal session on any
Instances-cn container.
-
dataspark-solaris::list,terminal,application::V743c738aa-bacd-41ac-ae7a-de0f9c98d7b5
This policy permits listing, starting a terminal session, and starting an application session for a
specific Data Spark-solaris resource.
-
dataspark-house::*::V743c738aa-bacd-41ac-ae7a-de0f9c98d7b5,V7abc738aa-bacd-41ac-ae7a-de0f9c98d7ef
This policy grants all permissions for a specific Data Spark-house resource.
-
serverless-fx::*::*
This policy grants all permissions for any Serverless-fx resource.
-
perms string value
To set all the above example policies, the "perms" string value would look like this:
instances-cn::list,create,modify,delete,terminal::*;dataspark-solaris::list,terminal,application::V743c738aa-bacd-41ac-ae7a-de0f9c98d7b5;dataspark-house::*::V743c738aa-bacd-41ac-ae7a-de0f9c98d7b5,V743c738aa-bacd-41ac-ae7a-de0f9c98d7b5,V7abc738aa-bacd-41ac-ae7a-de0f9c98d7ef;serverless-fx::*::*
|