资源治理中心 RGC-必选控制策略:RGC-GR_FUNCTIONGRAPH_CHANGE_PROHIBITED

时间：2024-05-11 17:30:08

资源治理中心 RGC 控制策略参考

RGC-GR_FUNCTIONGRAPH_CHANGE_PROHIBITED

实现：SCP

类型：Preventive

功能：不允许更改RGC设置的FunctionGraph函数。

{
	"Version": "5.0",
	"Statement": [{
		"Sid": "FUNCTIONGRAPH_CHANGE_PROHIBITED",
		"Effect": "Deny",
		"Action": [
			"functiongraph:function:createFunction",
			"functiongraph:function:deleteFunction",
			"functiongraph:function:updateFunctionCode",
			"functiongraph:function:updateMaxInstanceConfig",
			"functiongraph:function:createVersion",
			"functiongraph:function:createEvent",
			"functiongraph:function:deleteEvent",
			"functiongraph:function:updateEvent",
			"functiongraph:function:updateReservedInstanceCount",
			"functiongraph:function:updateFunctionConfig"
		],
		"Resource": [
			"functiongraph:*:*:function:rgcservice-managed/RGC-NotificationForwarder"
		],
		"Condition": {
			"StringNotMatch": {
				"g:PrincipalUrn": "sts::*:assumed-agency:RG CS erviceExecutionAgency/*"
			}
		}
	}]
}

上一篇：资源治理中心 RGC-必选控制策略:RGC-GR_CONFIG_ENABLED

下一篇：资源治理中心 RGC-必选控制策略:RGC-GR_CONFIG_CHANGE_PROHIBITED