{
    "Statement":
    [
        {
            "Action":
            [
                "bss:GetPayAsYouGoPrice",
                "bss:GetSubscriptionPrice"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "cs:*",
                "cms:DescribeAlertingMetricRuleResources"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "ecs:AddTags",
                "ecs:AllocatePublicIpAddress",
                "ecs:AuthorizeSecurityGroup",
                "ecs:AuthorizeSecurityGroupEgress",
                "ecs:ConfigureSecurityGroupPermissions",
                "ecs:*Instance*",
                "ecs:*TerminalSession*",
                "ecs:RunCommand",
                "ecs:CreateSecurityGroup",
                "ecs:DeleteSecurityGroup",
                "ecs:Describe*",
                "ecs:JoinResourceGroup",
                "ecs:ModifySecurityGroupEgressRule",
                "ecs:ModifySecurityGroupRule",
                "ecs:RemoveTags",
                "ecs:ReplaceSystemDisk",
                "ecs:TagResources",
                "ecs:UntagResources"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "kvstore:AllocateDirectConnection",
                "kvstore:AllocateInstancePublicConnection",
                "kvstore:CreateInstances",
                "kvstore:CreateTairInstance",
                "kvstore:DeleteInstance",
                "kvstore:Describe*",
                "kvstore:DestroyInstance",
                "kvstore:Modify*",
                "kvstore:ReleaseDirectConnection",
                "kvstore:ReleaseInstancePublicConnection",
                "kvstore:TagResources",
                "kvstore:UntagResources"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "oos:GetParameter",
                "oos:GetSecretParameter",
                "oos:StartExecution",
                "oos:ListExecutions"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "oss:AbortMultipartUpload",
                "oss:DeleteBucket",
                "oss:DeleteBucketEncryption",
                "oss:DeleteBucketTagging",
                "oss:DeleteObject",
                "oss:GetBucket*",
                "oss:ListMultipartUploads",
                "oss:ListObjects",
                "oss:PutBucket*"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "quotas:ListProductQuotas"
            ],
            "Effect": "Allow",
            "Resource": "acs:quotas:*:*:*"
        },
        {
            "Action":
            [
                "ram:AddUserToGroup",
                "ram:AttachPolicyToRole",
                "ram:AttachPolicyToUser",
                "ram:CreateAccessKey",
                "ram:CreateAppSecret",
                "ram:CreateApplication",
                "ram:CreateLoginProfile",
                "ram:CreatePolicy",
                "ram:CreateRole",
                "ram:CreateUser",
                "ram:DeleteAccessKey",
                "ram:DeleteAppSecret",
                "ram:DeleteApplication",
                "ram:DeletePolicy",
                "ram:DeleteRole",
                "ram:DeleteUser",
                "ram:DetachPolicyFromRole",
                "ram:DetachPolicyFromUser",
                "ram:GetGroup",
                "ram:GetLoginProfile",
                "ram:GetPolicy",
                "ram:GetRole",
                "ram:GetUser",
                "ram:ListAccessKeys",
                "ram:ListGroupsForUser",
                "ram:ListPoliciesForRole",
                "ram:ListPoliciesForUser",
                "ram:RemoveUserFromGroup",
                "ram:UpdateApplication",
                "ram:UpdateRole",
                "ram:UpdateUser"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "rds:AllocateInstancePublicConnection",
                "rds:CreateAccount",
                "rds:CreateDBInstance",
                "rds:CreateDatabase",
                "rds:CreateBackup",
                "rds:DeleteAccount",
                "rds:DeleteDBInstance",
                "rds:Describe*",
                "rds:GrantAccountPrivilege",
                "rds:ListTagResources",
                "rds:ModifyBackupPolicy",
                "rds:ModifyDBInstance*",
                "rds:ModifySQLCollectorPolicy",
                "rds:ModifySecurityGroupConfiguration",
                "rds:ModifySecurityIps",
                "rds:QueryPrice",
                "rds:ResetAccountPassword",
                "rds:TagResources",
                "rds:UntagResources"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "slb:DescribeLoadBalancerAttribute"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "vpc:AllocateEipAddress",
                "vpc:AssociateEipAddress",
                "vpc:DeletionProtection",
                "vpc:Describe*",
                "vpc:ModifyEipAddressAttribute",
                "vpc:ReleaseEipAddress",
                "vpc:TagResources",
                "vpc:UnTagResources",
                "vpc:UnassociateEipAddress"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "ros:*Stack",
                "ros:Get*",
                "ros:Describe*",
                "ros:List*"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action":
            [
                "computenest:UpgradeServiceInstance"
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ],
    "Version": "1"
}