Storage Gateway API 权限：操作、资源和条件参考

在设置访问控制和编写可附加到 IAM 身份的权限策略（基于身份的策略）时，您可以将下表作为参考。此表列出了每个 Storage Gateway API 操作、您可为其授予执行该操作的权限的相应操作，以及Amazon您可以授予权限的资源。您可以在策略的 Action 字段中指定这些操作，并在策略的 Resource 字段中指定资源值。

您可以使用Amazon在您的 Storage Gateway 策略中用于表达条件。有关 Amazon 范围内的键的完整列表，请参阅《IAM 用户指南》中的可用键。

注意

要指定操作，请在 API 操作名称之前使用 storagegateway: 前缀 (例如，storagegateway:ActivateGateway)。对于每个 Storage Gateway 操作，您可以指定通配符 (*) 作为资源。

使用滚动条查看表的其余部分。

有关包含 ARN 格式的 Storage Gateway 资源的列表，请参阅。Storage Gateway 资源和操作.

API Storage Gateway 和必需的操作权限
API Storage Gateway 操作	所需权限（API 操作）	Resources（资源）
ActivateGateway	`storagegateway:ActivateGateway`	`*`
AddCache	`storagegateway:AddCache`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
AddTagsToResource	`storagegateway:AddTagsToResource`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id` 或 `arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id` 或 `arn:aws:storagegateway:region:account-id:tape/tapebarcode`
AddUploadBuffer	`storagegateway:AddUploadBuffer`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
AddWorkingStorage	`storagegateway:AddWorkingStorage`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
CreateNFSFileShare	`storagegateway:CreateNFSFileShare`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
CreateSMBFileShare	`storagegateway:CreateSMBFileShare`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DeleteBandwidthRateLimit	`storagegateway:DeleteBandwidthRateLimit`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DeleteChapCredentials	`storagegateway:DeleteChapCredentials`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget`
DeleteFileShare	`storagegateway:DeleteFileShare`	`arn:aws:storagegateway:region:account-id:share/share-id`
DeleteGateway	`storagegateway:DeleteGateway`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
描述可用性监视器测试	`storagegateway:DescribeAvailabilityMonitorTest`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DescribeBandwidthRateLimit	`storagegateway:DescribeBandwidthRateLimit`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DescribeCache	`storagegateway:DescribeCache`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DescribeChapCredentials	`storagegateway:DescribeChapCredentials`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget`
DescribeGatewayInformation	`storagegateway:DescribeGatewayInformation`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DescribeMaintenanceStartTime	`storagegateway:DescribeMaintenanceStartTime`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DescribeNFSFileShares	`storagegateway:DescribeNFSFileShares`	`arn:aws:storagegateway:region:account-id:share/share-id`
描述 MBFileShares	`storagegateway:DescribeSMBFileShares`	`arn:aws:storagegateway:region:account-id:share/share-id`
描述 MB 设置	`storagegateway:DescribeSMBSettings`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DescribeWorkingStorage	`storagegateway:DescribeWorkingStorage`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
DisableGateway	`storagegateway:DisableGateway`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
取消关联文件系统	`storagegateway:API_DisassociateFileSystem`	`arn:aws:fsx:region:account-id:file-system/filesystem-id`
JoinDomain	`storagegateway:JoinDomain`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
ListFileShares	`storagegateway:ListFileShares`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
ListLocalDisks	`storagegateway:ListLocalDisks`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
ListTagsForResource	`storagegateway:ListTagsForResource`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id` 或 `arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id` 或 `arn:aws:storagegateway:region:account-id:tape/tapebarcode`
RefreshCache	`storagegateway:RefreshCache`	`arn:aws:storagegateway:region:account-id:share/share-id`
RemoveTagsFromResource	`storagegateway:RemoveTagsFromResource`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id` 或 `arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id` 或 `arn:aws:storagegateway:region:account-id:tape/tapebarcode`
ResetCache	`storagegateway:ResetCache`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
设置本地控制台密码	`storagegateway:SetLocalConsolePassword`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
设置 SMB Guest 密码	`storagegateway:SetSMBGuestPassword`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
ShutdownGateway	`storagegateway:ShutdownGateway`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
StartGateway	`storagegateway:StartGateway`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
开始可用性监视器测试	`storagegateway:StartAvailabilityMonitorTest`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
UpdateBandwidthRateLimit	`storagegateway:UpdateBandwidthRateLimit`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
UpdateChapCredentials
UpdateGatewayInformation	`storagegateway:UpdateGatewayInformation`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
UpdateGatewaySoftwareNow	`storagegateway:UpdateGatewaySoftwareNow`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
UpdateMaintenanceStartTime	`storagegateway:UpdateMaintenanceStartTime`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`
UpdateNFSFileShare	`storagegateway:UpdateNFSFileShare`	`arn:aws:storagegateway:region:account-id:share/share-id`
UpdateSMBFileShare	`storagegateway:UpdateSMBFileShare`	`arn:aws:storagegateway:region:account-id:share/share-id`
更新 MBS 安全策略	`storagegateway:UpdateSMBSecurityStrategy`	`arn:aws:storagegateway:region:account-id:gateway/gateway-id`