Storage Gateway API 权限:操作、资源和条件参考 - Amazon Storage Gateway
Amazon Web Services 文档中描述的 Amazon Web Services 服务或功能可能因区域而异。要查看适用于中国区域的差异,请参阅中国的 Amazon Web Services 服务入门

Amazon S3 文件网关文档已移至什么是 Amazon S3 文件网关

本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。

Storage Gateway API 权限:操作、资源和条件参考

在设置访问控制和编写可附加到 IAM 身份的权限策略(基于身份的策略)时,您可以将下表作为参考。该表列出每个 Storage Gateway API 操作、您可授予执行该操作的权限的相应操作,以及Amazon您可以授予权限的资源。您可以在策略的 Action 字段中指定这些操作,并在策略的 Resource 字段中指定资源值。

您可以使用Amazon用于表示条件的 Storage Gateway 策略中的范围的条件键。有关 Amazon 范围内的键的完整列表,请参阅《IAM 用户指南》https://docs.amazonaws.cn/IAM/latest/UserGuide/reference_policies_elements.html#AvailableKeys中的可用键

注意

要指定操作,请在 API 操作名称之前使用 storagegateway: 前缀 (例如,storagegateway:ActivateGateway)。对于每个 Storage Gateway 操作,您可以指定一个通配符 (*) 作为资源。

使用滚动条查看表的其余部分。

有关 Storage Gateway 资源及其 ARN 格式的列表,请参阅。资源和操作 Storage Gateway.

Storage Gateway API 和必需的操作权限
Storage Gateway API 操作 所需权限(API 操作) 资源

ActivateGateway

storagegateway:ActivateGateway

*

AddCache

storagegateway:AddCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddTagsToResource

storagegateway:AddTagsToResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

arn:aws:storagegateway:region:account-id:tape/tapebarcode

Amazon现在要求希望包含标签列表的用户拥有 StorageGateway: AddtagtoResource 权限。

AddUploadBuffer

storagegateway:AddUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddWorkingStorage

storagegateway:AddWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

分配 TapePool

storagegateway:AssignTapePool

arn:aws:storagegateway:region:account-id:tape/tapebarcode

AttachVolume

storagegateway:AttachVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CancelArchival

storagegateway:CancelArchival

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CancelRetrieval

storagegateway:CancelRetrieval

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CreateCachediSCSIVolume

storagegateway:CreateCachediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateNFSFileShare

storagegateway:CreateNFSFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateSMBFileShare

storagegateway:CreateSMBFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateSnapshot

storagegateway:CreateSnapshot

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateSnapshotFromVolumeRecoveryPoint

storagegateway:CreateSnapshotFromVolumeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateStorediSCSIVolume

storagegateway:CreateStorediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateTapes

storagegateway:CreateTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

使用条形码创建磁带

storagegateway:CreateTapeWithBarcode

使用默认池或空池网关:

arn:aws:storagegateway:region:account-id:gateway/gateway-id

使用自定义池:

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:pool/pool-id

DeleteBandwidthRateLimit

storagegateway:DeleteBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteChapCredentials

storagegateway:DeleteChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DeleteFileShare

storagegateway:DeleteFileShare

arn:aws:storagegateway:region:account-id:share/share-id

DeleteGateway

storagegateway:DeleteGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteSnapshotSchedule

storagegateway:DeleteSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DeleteTape

storagegateway:DeleteTape

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteTapeArchive

storagegateway:DeleteTapeArchive

*

DeleteVolume

storagegateway:DeleteVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

描述可用性监视器测试

storagegateway:DescribeAvailabilityMonitorTest

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeBandwidthRateLimit

storagegateway:DescribeBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCache

storagegateway:DescribeCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCachediSCSIVolumes

storagegateway:DescribeCachediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeChapCredentials

storagegateway:DescribeChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DescribeGatewayInformation

storagegateway:DescribeGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeMaintenanceStartTime

storagegateway:DescribeMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeNFSFileShares

storagegateway:DescribeNFSFileShares

arn:aws:storagegateway:region:account-id:share/share-id

描述 MBFileShares

storagegateway:DescribeSMBFileShares

arn:aws:storagegateway:region:account-id:share/share-id

描述 MB 设置

storagegateway:DescribeSMBSettings

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeSnapshotSchedule

storagegateway:DescribeSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeStorediSCSIVolumes

storagegateway:DescribeStorediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeTapeArchives

storagegateway:DescribeTapeArchives

*

DescribeTapeRecoveryPoints

storagegateway:DescribeTapeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeTapes

storagegateway:DescribeTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeUploadBuffer

storagegateway:DescribeUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeVTLDevices

storagegateway:DescribeVTLDevices

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeWorkingStorage

storagegateway:DescribeWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DetachVolume

storagegateway:DetachVolume

arn:aws:storagegateway:region:account-id:volume/volume-id

DisableGateway

storagegateway:DisableGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

JoinDomain

storagegateway:JoinDomain

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListFileShares

storagegateway:ListFileShares

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListGateways

storagegateway:ListGateways

*

ListLocalDisks

storagegateway:ListLocalDisks

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListTagsForResource

storagegateway:ListTagsForResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

arn:aws:storagegateway:region:account-id:tape/tapebarcode

ListTapes

storagegateway:ListTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumeInitiators

storagegateway:ListVolumeInitiators

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

ListVolumeRecoveryPoints

storagegateway:ListVolumeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumes

storagegateway:ListVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

NotifyWhenUploaded

storagegateway:NotifyWhenUploaded

arn:aws:storagegateway:region:account-id:share/share-id

RefreshCache

storagegateway:RefreshCache

arn:aws:storagegateway:region:account-id:share/share-id

RemoveTagsFromResource

storagegateway:RemoveTagsFromResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

arn:aws:storagegateway:region:account-id:tape/tapebarcode

ResetCache

storagegateway:ResetCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeArchive

storagegateway:RetrieveTapeArchive

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeRecoveryPoint

storagegateway:RetrieveTapeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id

设置本地控制台密码

storagegateway:SetLocalConsolePassword

arn:aws:storagegateway:region:account-id:gateway/gateway-id

设置 SMB Guest 密码

storagegateway:SetSMBGuestPassword

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ShutdownGateway

storagegateway:ShutdownGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

StartGateway

storagegateway:StartGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

开始可用性监视器测试

storagegateway:StartAvailabilityMonitorTest

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateBandwidthRateLimit

storagegateway:UpdateBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateChapCredentials

storagegateway:UpdateChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

UpdateGatewayInformation

storagegateway:UpdateGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateGatewaySoftwareNow

storagegateway:UpdateGatewaySoftwareNow

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateMaintenanceStartTime

storagegateway:UpdateMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateNFSFileShare

storagegateway:UpdateNFSFileShare

arn:aws:storagegateway:region:account-id:share/share-id

UpdateSMBFileShare

storagegateway:UpdateSMBFileShare

arn:aws:storagegateway:region:account-id:share/share-id

更新 MBS 安全策略

storagegateway:UpdateSMBSecurityStrategy

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateSnapshotSchedule

storagegateway:UpdateSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

UpdateVTLDeviceType

storagegateway:UpdateVTLDeviceType

arn:aws:storagegateway:region:account-id:gateway/gateway-id/device/vtldevice

相关主题