本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。 # AWSResilienceHubV2AssessmentExecutionPolicy **描述**：允许 R AWS esilience Hub 访问您账户中的资源以进行弹性发现、评估和管理。此策略授予通配符只读权限，这些权限可能在输出中包含敏感信息。 `AWSResilienceHubV2AssessmentExecutionPolicy` 是一项 [AWS 托管式策略](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)。 ## 使用此策略 您可以将 `AWSResilienceHubV2AssessmentExecutionPolicy` 附加到您的用户、组和角色。 ## 策略详细信息 + **类型**： AWS 托管策略 + **创建时间：世界标准时间** 2026 年 6 月 17 日 22:57 + **编辑时间：世界标准时间** 2026 年 6 月 17 日 22:57 + **ARN**: `arn:aws:iam::aws:policy/AWSResilienceHubV2AssessmentExecutionPolicy` ## 策略版本 **策略版本：**v1（默认） 此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时， AWS 会检查策略的默认版本以确定是否允许该请求。 ## JSON 策略文档 ``` { "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AWSResilienceHubV2ReadResourceConfigStatement", "Effect" : "Allow", "Action" : [ "acm:Describe*", "acm:List*", "application-autoscaling:Describe*", "application-autoscaling:GetPredictiveScalingForecast", "application-autoscaling:ListTagsForResource", "arc-region-switch:Get*", "arc-region-switch:List*", "arc-zonal-shift:Get*", "arc-zonal-shift:List*", "autoscaling:Describe*", "autoscaling:GetPredictiveScalingForecast", "backup:Describe*", "backup:GetBackupPlan", "backup:GetBackupSelection", "backup:GetBackupVaultAccessPolicy", "backup:GetBackupVaultNotifications", "backup:GetRestoreTestingPlan", "backup:GetRestoreTestingSelection", "backup:List*", "cloudformation:Describe*", "cloudformation:GetResource", "cloudformation:GetStackPolicy", "cloudformation:GetTemplate", "cloudformation:List*", "cloudfront:Get*", "cloudfront:List*", "cloudwatch:DescribeAlarms", "cloudwatch:GetMetricData", "cloudwatch:GetMetricStatistics", "config:Describe*", "config:GetStoredQuery", "config:List*", "datasync:Describe*", "datasync:List*", "dlm:Get*", "docdb-elastic:Get*", "docdb-elastic:List*", "drs:Describe*", "drs:Get*", "drs:List*", "ds:Describe*", "dsql:Get*", "dsql:List*", "dynamodb:Describe*", "dynamodb:GetResourcePolicy", "dynamodb:List*", "ec2:DescribeAddresses", "ec2:DescribeAvailabilityZones", "ec2:DescribeCapacityReservations", "ec2:DescribeClientVpnConnections", "ec2:DescribeClientVpnEndpoints", "ec2:DescribeCustomerGateways", "ec2:DescribeDhcpOptions", "ec2:DescribeFastSnapshotRestores", "ec2:DescribeFleets", "ec2:DescribeFlowLogs", "ec2:DescribeHosts", "ec2:DescribeImages", "ec2:DescribeInstances", "ec2:DescribeInstanceAttribute", "ec2:DescribeInternetGateways", "ec2:DescribeKeyPairs", "ec2:DescribeLaunchTemplates", "ec2:DescribeLaunchTemplateVersions", "ec2:DescribeManagedPrefixLists", "ec2:DescribeNatGateways", "ec2:DescribeNetworkAcls", "ec2:DescribeNetworkInsightsAnalyses", "ec2:DescribeNetworkInsightsPaths", "ec2:DescribeNetworkInterfaces", "ec2:DescribePlacementGroups", "ec2:DescribeRegions", "ec2:DescribeRouteTables", "ec2:DescribeSecurityGroups", "ec2:DescribeSnapshots", "ec2:DescribeSubnets", "ec2:DescribeTags", "ec2:DescribeTransitGatewayAttachments", "ec2:DescribeTransitGatewayPeeringAttachments", "ec2:DescribeTransitGatewayRouteTables", "ec2:DescribeTransitGateways", "ec2:DescribeTransitGatewayVpcAttachments", "ec2:DescribeVolumes", "ec2:DescribeVpcAttribute", "ec2:DescribeVpcEndpointConnectionNotifications", "ec2:DescribeVpcEndpointConnections", "ec2:DescribeVpcEndpoints", "ec2:DescribeVpcEndpointServiceConfigurations", "ec2:DescribeVpcEndpointServicePermissions", "ec2:DescribeVpcEndpointServices", "ec2:DescribeVpcPeeringConnections", "ec2:DescribeVpcs", "ec2:DescribeVpnConnections", "ec2:DescribeVpnGateways", "ec2:GetTransitGatewayRouteTableAssociations", "ecr:Describe*", "ecs:Describe*", "ecs:List*", "eks:Describe*", "eks:List*", "elasticache:Describe*", "elasticache:List*", "elasticfilesystem:Describe*", "elasticfilesystem:ListTagsForResource", "elasticloadbalancing:Describe*", "events:Describe*", "events:List*", "firehose:Describe*", "firehose:List*", "fis:Get*", "fis:List*", "fsx:Describe*", "fsx:List*", "globalaccelerator:Describe*", "globalaccelerator:List*", "iam:GetInstanceProfile", "iam:GetPolicy", "iam:GetPolicyVersion", "iam:GetRole", "iam:GetRolePolicy", "iam:ListAttachedRolePolicies", "iam:ListInstanceProfiles", "iam:ListRolePolicies", "iam:ListRoles", "iam:ListRoleTags", "kafka:Describe*", "kafka:GetClusterPolicy", "kafka:List*", "kafkaconnect:Describe*", "kafkaconnect:List*", "kinesis:Describe*", "kinesis:List*", "lambda:GetAlias", "lambda:GetCodeSigningConfig", "lambda:GetEventSourceMapping", "lambda:GetFunctionCodeSigningConfig", "lambda:GetFunctionConfiguration", "lambda:GetFunctionEventInvokeConfig", "lambda:GetFunctionRecursionConfig", "lambda:GetFunctionUrlConfig", "lambda:GetLayerVersion", "lambda:GetLayerVersionPolicy", "lambda:GetPolicy", "lambda:GetProvisionedConcurrencyConfig", "lambda:GetRuntimeManagementConfig", "lambda:List*", "memorydb:Describe*", "memorydb:List*", "network-firewall:Describe*", "network-firewall:List*", "qldb:Describe*", "qldb:List*", "ram:Get*", "ram:List*", "rds:Describe*", "rds:List*", "redshift:Describe*", "redshift:List*", "resource-groups:Get*", "resource-groups:List*", "resource-groups:Search*", "route53-recovery-cluster:Get*", "route53-recovery-cluster:List*", "route53-recovery-control-config:Describe*", "route53-recovery-control-config:Get*", "route53-recovery-control-config:List*", "route53-recovery-readiness:Get*", "route53-recovery-readiness:List*", "route53:Get*", "route53:List*", "route53domains:Check*", "route53domains:List*", "route53resolver:Get*", "route53resolver:List*", "s3:ListBucket", "secretsmanager:DescribeSecret", "secretsmanager:ListSecrets", "servicecatalog:GetApplication", "servicecatalog:ListAssociatedResources", "shield:Describe*", "shield:Get*", "shield:List*", "sns:GetDataProtectionPolicy", "sns:GetSubscriptionAttributes", "sns:GetTopicAttributes", "sns:List*", "sqs:GetQueueAttributes", "sqs:GetQueueUrl", "sqs:List*", "ssm:Describe*", "ssm:GetDefaultPatchBaseline", "ssm:GetDocument", "ssm:GetMaintenanceWindow", "ssm:GetParameters", "ssm:GetPatchBaseline", "ssm:GetResourcePolicies", "ssm:List*", "ssm-incidents:GetReplicationSet", "ssm-incidents:GetResponsePlan", "ssm-incidents:List*", "states:Describe*", "states:List*", "tag:GetResources", "vpc-lattice:Get*", "vpc-lattice:List*", "wafv2:Get*", "wafv2:List*" ], "Resource" : "*" }, { "Sid" : "AWSResilienceHubApiGatewayStatement", "Effect" : "Allow", "Action" : [ "apigateway:GET" ], "Resource" : [ "arn:aws:apigateway:*::/apis/*", "arn:aws:apigateway:*::/restapis/*", "arn:aws:apigateway:*::/usageplans", "arn:aws:apigateway:*::/domainnames/*" ] }, { "Sid" : "AWSResilienceHubS3AccessStatement", "Effect" : "Allow", "Action" : [ "s3:GetBucketLocation", "s3:GetBucketLogging", "s3:GetBucketObjectLockConfiguration", "s3:GetBucketPolicy", "s3:GetBucketPolicyStatus", "s3:GetBucketTagging", "s3:GetBucketVersioning", "s3:GetMultiRegionAccessPointRoutes", "s3:GetReplicationConfiguration", "s3:ListAllMyBuckets", "s3:ListMultiRegionAccessPoints" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } } ] } ``` ## 了解详情 + [在 IAM 身份中心使用 AWS 托管策略创建权限集](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html) + [添加和删除 IAM 身份权限](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html) + [了解 IAM policy 版本控制](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html) + [开始使用 AWS 托管策略，转向最低权限权限](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)