资源治理中心 RGC-必选控制策略:RGC-GR_CONFIG_CHANGE_PROHIBITED

时间：2025-02-18 09:20:55

资源治理中心 RGC 控制策略参考

RGC-GR_CONFIG_CHANGE_PROHIBITED

实现：SCP

类型：Preventive

功能：防止对Config进行配置更改。

{
	"Version": "5.0",
	"Statement": [{
		"Sid": "CONFIG_CHANGE_PROHIBITED",
		"Effect": "Deny",
		"Action": [
			"rms:trackerConfig:delete",
			"rms:trackerConfig:put"
		],
		"Resource": [
			"*"
		],
		"Condition": {
			"StringNotMatch": {
				"g:PrincipalUrn": "sts::*:assumed-agency:RG CS erviceExecutionAgency/*"
			}
		}
	}]
}

上一篇：资源治理中心 RGC-必选控制策略:RGC-GR_CT_AUDIT_BUCKET_ENCRYPTION_CHANGES_PROHIBITED

下一篇：资源治理中心 RGC-必选控制策略:RGC-GR_CT_AUDIT_BUCKET_LIFECYCLE_CONFIGURATION_CHANGES_PROHIBITED