Storage Gateway API权限: 操作、资源和条件参考 - AWS Storage Gateway
AWS 文档中描述的 AWS 服务或功能可能因区域而异。要查看适用于中国区域的差异,请参阅中国的 AWS 服务入门

本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。

Storage Gateway API权限: 操作、资源和条件参考

在设置访问控制和编写可附加到 IAM 身份的权限策略(基于身份的策略)时,您可以将下表作为参考。该表列出了每个 Storage Gateway API 操作、您可以授权执行的相应操作以及您可以授予权限的 AWS 资源。您可以在策略的 Action 字段中指定这些操作,并在策略的 Resource 字段中指定资源值。

您可以在 Storage Gateway 策略中使用 AWS 范围的条件键来表达条件。有关 AWS 范围内的键的完整列表,请参阅 https://docs.amazonaws.cn/IAM/latest/UserGuide/reference_policies_elements.html#AvailableKeys 中的IAM 用户指南可用键

注意

要指定操作,请在 API 操作名称之前使用 storagegateway: 前缀 (例如,storagegateway:ActivateGateway)。对于每个 Storage Gateway 操作,您可以指定一个通配符 (*) 以作为资源。

使用滚动条查看表的其余部分。

有关 Storage Gateway 资源及其 ARN 格式的列表,请参阅 AWS Storage Gateway 的资源和操作

Storage Gateway API 和所需的操作权限
Storage Gateway API 操作 所需权限(API 操作) 资源

ActivateGateway

storagegateway:ActivateGateway

*

AddCache

storagegateway:AddCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddTagsToResource

storagegateway:AddTagsToResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

arn:aws:storagegateway:region:account-id:tape/tapebarcode

AddUploadBuffer

storagegateway:AddUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AddWorkingStorage

storagegateway:AddWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

AssignTapePool

storagegateway:AssignTapePool

arn:aws:storagegateway:region:account-id:tape/tapebarcode

AttachVolume

storagegateway:AttachVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CancelArchival

storagegateway:CancelArchival

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CancelRetrieval

storagegateway:CancelRetrieval

arn:aws:storagegateway:region:account-id:tape/tapebarcode

CreateCachediSCSIVolume

storagegateway:CreateCachediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateNFSFileShare

storagegateway:CreateNFSFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateSMBFileShare

storagegateway:CreateSMBFileShare

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateSnapshot

storagegateway:CreateSnapshot

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateSnapshotFromVolumeRecoveryPoint

storagegateway:CreateSnapshotFromVolumeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

CreateStorediSCSIVolume

storagegateway:CreateStorediSCSIVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateTapes

storagegateway:CreateTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

CreateTapeWithBarcode

storagegateway:CreateTapeWithBarcode

使用默认池或空池网关:

arn:aws:storagegateway:region:account-id:gateway/gateway-id

使用自定义池:

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:pool/pool-id

DeleteBandwidthRateLimit

storagegateway:DeleteBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteChapCredentials

storagegateway:DeleteChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DeleteFileShare

storagegateway:DeleteFileShare

arn:aws:storagegateway:region:account-id:share/share-id

DeleteGateway

storagegateway:DeleteGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteSnapshotSchedule

storagegateway:DeleteSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DeleteTape

storagegateway:DeleteTape

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DeleteTapeArchive

storagegateway:DeleteTapeArchive

*

DeleteVolume

storagegateway:DeleteVolume

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeAvailabilityMonitorTest

storagegateway:DescribeAvailabilityMonitorTest

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeBandwidthRateLimit

storagegateway:DescribeBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCache

storagegateway:DescribeCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeCachediSCSIVolumes

storagegateway:DescribeCachediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeChapCredentials

storagegateway:DescribeChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

DescribeGatewayInformation

storagegateway:DescribeGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeMaintenanceStartTime

storagegateway:DescribeMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeNFSFileShares

storagegateway:DescribeNFSFileShares

arn:aws:storagegateway:region:account-id:share/share-id

DescribeSMBFileShares

storagegateway:DescribeSMBFileShares

arn:aws:storagegateway:region:account-id:share/share-id

DescribeSMBSettings

storagegateway:DescribeSMBSettings

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeSnapshotSchedule

storagegateway:DescribeSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeStorediSCSIVolumes

storagegateway:DescribeStorediSCSIVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

DescribeTapeArchives

storagegateway:DescribeTapeArchives

*

DescribeTapeRecoveryPoints

storagegateway:DescribeTapeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeTapes

storagegateway:DescribeTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeUploadBuffer

storagegateway:DescribeUploadBuffer

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeVTLDevices

storagegateway:DescribeVTLDevices

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DescribeWorkingStorage

storagegateway:DescribeWorkingStorage

arn:aws:storagegateway:region:account-id:gateway/gateway-id

DetachVolume

storagegateway:DetachVolume

arn:aws:storagegateway:region:account-id:volume/volume-id

DisableGateway

storagegateway:DisableGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

JoinDomain

storagegateway:JoinDomain

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListFileShares

storagegateway:ListFileShares

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListGateways

storagegateway:ListGateways

*

ListLocalDisks

storagegateway:ListLocalDisks

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListTagsForResource

storagegateway:ListTagsForResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

arn:aws:storagegateway:region:account-id:tape/tapebarcode

ListTapes

storagegateway:ListTapes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumeInitiators

storagegateway:ListVolumeInitiators

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

ListVolumeRecoveryPoints

storagegateway:ListVolumeRecoveryPoints

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ListVolumes

storagegateway:ListVolumes

arn:aws:storagegateway:region:account-id:gateway/gateway-id

NotifyWhenUploaded

storagegateway:NotifyWhenUploaded

arn:aws:storagegateway:region:account-id:share/share-id

RefreshCache

storagegateway:RefreshCache

arn:aws:storagegateway:region:account-id:share/share-id

RemoveTagsFromResource

storagegateway:RemoveTagsFromResource

arn:aws:storagegateway:region:account-id:gateway/gateway-id

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

arn:aws:storagegateway:region:account-id:tape/tapebarcode

ResetCache

storagegateway:ResetCache

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeArchive

storagegateway:RetrieveTapeArchive

arn:aws:storagegateway:region:account-id:gateway/gateway-id

RetrieveTapeRecoveryPoint

storagegateway:RetrieveTapeRecoveryPoint

arn:aws:storagegateway:region:account-id:gateway/gateway-id

SetLocalConsolePassword

storagegateway:SetLocalConsolePassword

arn:aws:storagegateway:region:account-id:gateway/gateway-id

SetSMBGuestPassword

storagegateway:SetSMBGuestPassword

arn:aws:storagegateway:region:account-id:gateway/gateway-id

ShutdownGateway

storagegateway:ShutdownGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

StartGateway

storagegateway:StartGateway

arn:aws:storagegateway:region:account-id:gateway/gateway-id

StartAvailabilityMonitorTest

storagegateway:StartAvailabilityMonitorTest

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateBandwidthRateLimit

storagegateway:UpdateBandwidthRateLimit

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateChapCredentials

storagegateway:UpdateChapCredentials

arn:aws:storagegateway:region:account-id:gateway/gateway-id/target/iSCSItarget

UpdateGatewayInformation

storagegateway:UpdateGatewayInformation

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateGatewaySoftwareNow

storagegateway:UpdateGatewaySoftwareNow

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateMaintenanceStartTime

storagegateway:UpdateMaintenanceStartTime

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateNFSFileShare

storagegateway:UpdateNFSFileShare

arn:aws:storagegateway:region:account-id:share/share-id

UpdateSMBFileShare

storagegateway:UpdateSMBFileShare

arn:aws:storagegateway:region:account-id:share/share-id

UpdateSMBSecurityStrategy

storagegateway:UpdateSMBSecurityStrategy

arn:aws:storagegateway:region:account-id:gateway/gateway-id

UpdateSnapshotSchedule

storagegateway:UpdateSnapshotSchedule

arn:aws:storagegateway:region:account-id:gateway/gateway-id/volume/volume-id

UpdateVTLDeviceType

storagegateway:UpdateVTLDeviceType

arn:aws:storagegateway:region:account-id:gateway/gateway-id/device/vtldevice

相关主题