AWS Storage Gateway
用户指南 (API Version 2013-06-30)
AWS 服务或AWS文档中描述的功能,可能因地区/位置而异。点 击 Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.

AWS Storage Gateway API 权限:操作、资源和条件参考

在设置访问控制和编写您可挂载到 IAM 身份的权限策略 (基于身份的策略) 时,可以使用下表作为参考。该表列出了每个 AWS Storage Gateway API 操作、您可为其授予执行该操作的权限的相应操作以及您可为其授予权限的 AWS 资源。您可以在策略的 Action 字段中指定这些操作,并在策略的 Resource 字段中指定资源值。

您可以在 AWS Storage Gateway 策略中使用 AWS 范围的条件键来表达条件。有关 AWS 范围内的密钥的完整列表,请参阅 IAM 用户指南 中的可用密钥

注意

要指定操作,请在 API 操作名称之前使用 storagegateway: 前缀 (例如,storagegateway:ActivateGateway)。对于每个 AWS Storage Gateway 操作,您可以指定一个通配符 (*) 作为资源。

如果看到表右上角处有扩展箭头 (),则您可以在新窗口中打开该表。要关闭窗口,请选择右下角处的关闭按钮 (X)。

有关 ARN 格式的 Storage Gateway 资源列表,请参阅AWS Storage Gateway 资源和操作

AWS Storage Gateway API 和必需的操作权限

Storage Gateway API 操作 所需权限 (API 操作) 资源

ActivateGateway

storagegateway:ActivateGateway

*

AddCache

storagegateway:AddCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddTagsToResource

storagegateway:AddTagsToResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

或者

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

或者

arn:aws:storagegateway:region:account-id:tape/tapebarcode

AddUploadBuffer

storagegateway:AddUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddWorkingStorage

storagegateway:AddWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CancelArchival

storagegateway:CancelArchival

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CancelRetrieval

storagegateway:CancelRetrieval

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CreateCachediSCSIVolume

storagegateway:CreateCachediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateNFSFileShare

storagegateway:CreateNFSFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateSnapshot

storagegateway:CreateSnapshot

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateSnapshotFromVolumeRecoveryPoint

storagegateway:CreateSnapshotFromVolumeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateStorediSCSIVolume

storagegateway:CreateStorediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateTapes

storagegateway:CreateTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteBandwidthRateLimit

storagegateway:DeleteBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteChapCredentials

storagegateway:DeleteChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DeleteFileShare

storagegateway:DeleteFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id/share/share-id

DeleteGateway

storagegateway:DeleteGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteSnapshotSchedule

storagegateway:DeleteSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DeleteTape

storagegateway:DeleteTape

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteTapeArchive

storagegateway:DeleteTapeArchive

*

DeleteVolume

storagegateway:DeleteVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeBandwidthRateLimit

storagegateway:DescribeBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCache

storagegateway:DescribeCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCachediSCSIVolumes

storagegateway:DescribeCachediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeChapCredentials

storagegateway:DescribeChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DescribeGatewayInformation

storagegateway:DescribeGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeMaintenanceStartTime

storagegateway:DescribeMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeNFSFileShares

storagegateway:DescribeNFSFileShares

arn:aws:storagegateway:region:account-id:gateway/gateway-id/share/share-id

DescribeSnapshotSchedule

storagegateway:DescribeSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeStorediSCSIVolumes

storagegateway:DescribeStorediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeTapeArchives

storagegateway:DescribeTapeArchives

*

DescribeTapeRecoveryPoints

storagegateway:DescribeTapeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeTapes

storagegateway:DescribeTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeUploadBuffer

storagegateway:DescribeUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeVTLDevices

storagegateway:DescribeVTLDevices

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeWorkingStorage

storagegateway:DescribeWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DisableGateway

storagegateway:DisableGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListFileShares

storagegateway:ListFileShares

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListGateways

storagegateway:ListGateways

*

ListLocalDisks

storagegateway:ListLocalDisks

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListTagsForResource

storagegateway:ListTagsForResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

或者

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

或者

arn:aws:storagegateway:region:account-id:tape/tapebarcode

ListTapes

storagegateway:ListTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumeInitiators

storagegateway:ListVolumeInitiators

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

ListVolumeRecoveryPoints

storagegateway:ListVolumeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumes

storagegateway:ListVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RefreshCache

storagegateway:RefreshCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id/share/share-id

RemoveTagsFromResource

storagegateway:RemoveTagsFromResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

或者

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

或者

arn:aws:storagegateway:region:account-id:tape/tapebarcode

ResetCache

storagegateway:ResetCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeArchive

storagegateway:RetrieveTapeArchive

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeRecoveryPoint

storagegateway:RetrieveTapeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ShutdownGateway

storagegateway:ShutdownGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

StartGateway

storagegateway:StartGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateBandwidthRateLimit

storagegateway:UpdateBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateChapCredentials

storagegateway:UpdateChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

UpdateGatewayInformation

storagegateway:UpdateGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateGatewaySoftwareNow

storagegateway:UpdateGatewaySoftwareNow

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateMaintenanceStartTime

storagegateway:UpdateMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateNFSFileShare

storagegateway:UpdateNFSFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id/share/share-id

UpdateSnapshotSchedule

storagegateway:UpdateSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

UpdateVTLDeviceType

storagegateway:UpdateVTLDeviceType

arn:aws:storagegateway:region:account-id:gateway/gateway-id/device/vtldevice

相关主题