AWS Storage Gateway
用户指南 (API 版本 2013-06-30)
AWS 文档中描述的 AWS 服务或功能可能因区域而异。要查看适用于中国区域的差异,请参阅中国的 AWS 服务入门

Storage Gateway API 权限:操作、资源和条件参考

在设置访问控制和编写可附加到 IAM 身份的权限策略(基于身份的策略)时,您可以将下表作为参考。该表列出了每个 Storage Gateway API 操作、您可以授权执行的相应操作以及您可以授予权限的 AWS 资源。您可以在策略的 Action 字段中指定这些操作,并在策略的 Resource 字段中指定资源值。

您可以在 Storage Gateway 策略中使用 AWS 范围的条件键以表示条件。有关 AWS 范围内的密钥的完整列表,请参阅 IAM 用户指南 中的可用密钥

注意

要指定操作,请在 API 操作名称之前使用 storagegateway: 前缀(例如,storagegateway:ActivateGateway)。对于每个 Storage Gateway 操作,您可以指定一个通配符 (*) 以作为资源。

如果看到表右上角处有扩展箭头 (),则您可以在新窗口中打开该表。要关闭窗口,请选择右下角处的关闭按钮 (X)。

有关 Storage Gateway 资源及其 ARN 格式的列表,请参阅 AWS Storage Gateway 资源和操作

Storage Gateway API 和所需的操作权限

Storage Gateway API 操作 所需权限(API 操作) 资源

ActivateGateway

storagegateway:ActivateGateway

*

AddCache

storagegateway:AddCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddTagsToResource

storagegateway:AddTagsToResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

arn:aws:storagegateway:region:account-id:tape/tapebarcode

AddUploadBuffer

storagegateway:AddUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddWorkingStorage

storagegateway:AddWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CancelArchival

storagegateway:CancelArchival

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CancelRetrieval

storagegateway:CancelRetrieval

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CreateCachediSCSIVolume

storagegateway:CreateCachediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateNFSFileShare

storagegateway:CreateNFSFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateSnapshot

storagegateway:CreateSnapshot

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateSnapshotFromVolumeRecoveryPoint

storagegateway:CreateSnapshotFromVolumeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateStorediSCSIVolume

storagegateway:CreateStorediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateTapes

storagegateway:CreateTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteBandwidthRateLimit

storagegateway:DeleteBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteChapCredentials

storagegateway:DeleteChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DeleteFileShare

storagegateway:DeleteFileShare

arn:aws:storagegateway:region:account-id:share/share-id

DeleteGateway

storagegateway:DeleteGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteSnapshotSchedule

storagegateway:DeleteSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DeleteTape

storagegateway:DeleteTape

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteTapeArchive

storagegateway:DeleteTapeArchive

*

DeleteVolume

storagegateway:DeleteVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeBandwidthRateLimit

storagegateway:DescribeBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCache

storagegateway:DescribeCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCachediSCSIVolumes

storagegateway:DescribeCachediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeChapCredentials

storagegateway:DescribeChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DescribeGatewayInformation

storagegateway:DescribeGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeMaintenanceStartTime

storagegateway:DescribeMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeNFSFileShares

storagegateway:DescribeNFSFileShares

arn:aws:storagegateway:region:account-id:share/share-id

DescribeSnapshotSchedule

storagegateway:DescribeSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeStorediSCSIVolumes

storagegateway:DescribeStorediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeTapeArchives

storagegateway:DescribeTapeArchives

*

DescribeTapeRecoveryPoints

storagegateway:DescribeTapeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeTapes

storagegateway:DescribeTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeUploadBuffer

storagegateway:DescribeUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeVTLDevices

storagegateway:DescribeVTLDevices

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeWorkingStorage

storagegateway:DescribeWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DisableGateway

storagegateway:DisableGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListFileShares

storagegateway:ListFileShares

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListGateways

storagegateway:ListGateways

*

ListLocalDisks

storagegateway:ListLocalDisks

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListTagsForResource

storagegateway:ListTagsForResource

arn:aws:storagegateway:region:account-id:gateway/gateway-idarn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-idarn:aws:storagegateway:region:account-id:tape/tapebarcode

ListTapes

storagegateway:ListTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumeInitiators

storagegateway:ListVolumeInitiators

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

ListVolumeRecoveryPoints

storagegateway:ListVolumeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumes

storagegateway:ListVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RefreshCache

storagegateway:RefreshCache

arn:aws:storagegateway:region:account-id:share/share-id

RemoveTagsFromResource

storagegateway:RemoveTagsFromResource

arn:aws:storagegateway:region:account-id:gateway/gateway-idarn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-idarn:aws:storagegateway:region:account-id:tape/tapebarcode

ResetCache

storagegateway:ResetCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeArchive

storagegateway:RetrieveTapeArchive

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeRecoveryPoint

storagegateway:RetrieveTapeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ShutdownGateway

storagegateway:ShutdownGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

StartGateway

storagegateway:StartGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateBandwidthRateLimit

storagegateway:UpdateBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateChapCredentials

storagegateway:UpdateChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

UpdateGatewayInformation

storagegateway:UpdateGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateGatewaySoftwareNow

storagegateway:UpdateGatewaySoftwareNow

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateMaintenanceStartTime

storagegateway:UpdateMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateNFSFileShare

storagegateway:UpdateNFSFileShare

arn:aws:storagegateway:region:account-id:share/share-id

UpdateSnapshotSchedule

storagegateway:UpdateSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

UpdateVTLDeviceType

storagegateway:UpdateVTLDeviceType

arn:aws:storagegateway:region:account-id:gateway/gateway-id/device/vtldevice

相关主题