Table: alicloud_ram_policy

Permissions are specified by a statement within a policy that allows or denies access to a specific Alibaba Cloud resource.

A policy defines a set of permissions that are described based on the policy structure and syntax. A policy can accurately describe the authorized resource sets, authorized operation sets, and authorization conditions.

Examples

Basic info

select
  policy_name,
  policy_type,
  description,
  default_version,
  policy_document
from
  alicloud_ram_policy;

List system policies

select
  policy_name,
  policy_type,
  description,
  default_version,
  policy_document
from
  alicloud_ram_policy
where
  policy_type = 'System';

List custom policies

select
  policy_name,
  policy_type,
  description,
  default_version,
  policy_document
from
  alicloud_ram_policy
where
  policy_type = 'Custom';

List policies with statements granting full access

select
  policy_name,
  policy_type,
  action,
  s ->> 'Effect' as effect
from
  alicloud_ram_policy,
  jsonb_array_elements(policy_document_std -> 'Statement') as s,
  jsonb_array_elements_text(s -> 'Action') as action
where
  action in ('*', '*:*')
  and s ->> 'Effect' = 'Allow';

Query examples

.inspect alicloud_ram_policy

Alibaba Cloud RAM Policy

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The Alicloud Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
attachment_count	bigint	The number of references to the policy.
create_date	timestamp with time zone	Policy creation date
default_version	text	Deafult version of the policy
description	text	The policy description
policy_document	jsonb	Contains the details about the policy.
policy_document_std	jsonb	Contains the policy document in a canonical form for easier searching.
policy_name	text	The name of the policy.
policy_type	text	The type of the policy. Valid values: System and Custom.
region	text	The Alicloud region in which the resource is located.
title	text	Title of the resource.
update_date	timestamp with time zone	Last time when policy got updated

turbot/alicloud