资源治理中心 RGC-必选控制策略:RGC-GR_SMN_CHANGE_PROHIBITED

时间：2024-05-11 17:30:08

资源治理中心 RGC 控制策略参考

RGC-GR_ SMN _CHANGE_PROHIBITED

实现：SCP

类型：Preventive

功能：防止更改RGC设置的SMN通知设置。

{
	"Version": "5.0",
	"Statement": [{
			"Sid": "SMN_CHANGE_PROHIBITED",
			"Effect": "Deny",
			"Action": [
				"smn:topic:update*",
				"smn:topic:delete*"
			],
			"Resource": [
				"*"
			],
			"Condition": {
				"StringNotMatch": {
					"g:PrincipalUrn": "sts::*:assumed-agency:RG CS erviceExecutionAgency/*"
				},
				"ForAnyValue:StringMatch": {
					"g:ResourceTag/rgcservice-managed": [
						"RGC-SecurityNotifications",
						"RGC-AllConfigNotifications",
						"RGC-AggregateSecurityNotifications"
					]
				}
			}
		},
		{
			"Sid": "SMN_TAG_CHANGE_PROHIBITED",
			"Effect": "Deny",
			"Action": [
				"smn:tag:create",
				"smn:tag:delete"
			],
			"Resource": [
				"*"
			],
			"Condition": {
				"StringNotMatch": {
					"g:PrincipalUrn": "sts::*:assumed-agency:RGCServiceExecutionAgency/*"
				},
				"ForAnyValue:StringMatch": {
					"g:TagKeys": "rgcservice-managed"
				}
			}
		}
	]
}

上一篇：资源治理中心 RGC-必选控制策略:RGC-GR_FUNCTIONGRAPH_CHANGE_PROHIBITED

下一篇：资源治理中心 RGC-必选控制策略:RGC-GR_CONFIG_ENABLED