# 权限策略的操作与资源 ### 网关组[​](#网关组 "网关组的直接链接") | 操作 | 资源 | API | | ---------------------------------- | ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetGatewayGroup | arn:api7:gateway:gatewaygroup/%s | [列出所有网关组](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/listGatewayGroups),[获取网关组](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/getGatewayGroup) | | gateway:CreateGatewayGroup | arn:api7:gateway:gatewaygroup/\* | [创建网关组](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/createGatewayGroup) | | gateway:UpdateGatewayGroup | arn:api7:gateway:gatewaygroup/%s | [更新网关组](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/putGatewayGroup), [为网关组生成管理员密钥](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/generateAdminKey) | | gateway:DeleteGatewayGroup | arn:api7:gateway:gatewaygroup/%s | [删除网关组](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/deleteGatewayGroup) | ### 已发布服务[​](#已发布服务 "已发布服务的直接链接") 备注 请注意[服务 ID 与服务模板 ID 之间的区别](https://docs.apiseven.com/api7-gateway/3.9.x/key-concepts/services#serviceid-vs-servicetemplateid). | 操作 | Resource | API | | -------------------------------------- | -------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetPublishedService | arn:api7:gateway:gatewaygroup/%s/publishedservice/%s | [列出网关组上的所有已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Published-Service/operation/listPublishedServices),[获取网关组上的已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Published-Service/operation/getPublishedService), [使用服务模板 ID 获取网关组上的已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/getPublishedServiceByServiceTemplateID),[获取网关组上已发布服务的服务运行时配置](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/getServiceRuntimeConfiguration), [按服务 ID 列出网关组上已发布服务的所有历史版本](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/listPublishedServiceVersions), [获取网关组上已发布服务的上游健康检查状态](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Published-Service/operation/getUpstreamHealthcheckStatus) | | gateway:CreatePublishedService | arn:api7:gateway:gatewaygroup/%s/publishedservice/%s | [在网关组上创建已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Published-Service/operation/createPublishedService) | | gateway:UpdatePublishedService | arn:api7:gateway:gatewaygroup/%s/publishedservice/%s | [更新已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Published-Service/operation/putPublishedService), [增量更新网关组上的已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Published-Service/operation/patchPublishedService), [增量更新网关组上已发布服务的服务运行时配置](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/patchServiceRuntimeConfiguration), [更新网关组上已发布服务的服务运行时配置](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Published-Service/operation/putServiceRuntimeConfiguration) | | gateway:DeletePublishedService | arn:api7:gateway:gatewaygroup/%s/publishedservice/%s | [删除网关组上的已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Published-Service/operation/deletePublishedService), [使用服务模板 ID 删除网关组上的已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/deletePublishedServiceByServiceTemplateID) | | gateway:PublishServices | arn:api7:gateway:gatewaygroup/%s/publishedservice/\* | [将服务模板发布到网关组](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/publishService) | ### 路由[​](#路由 "路由的直接链接") 备注 请注意[服务 ID 与服务模板 ID 之间的区别](https://docs.apiseven.com/api7-gateway/3.9.x/key-concepts/services#serviceid-vs-servicetemplateid). | 操作 | 资源 | API | | -------------------------------------- | -------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetPublishedService | arn:api7:gateway:gatewaygroup/%s/publishedservice/%s | [使用服务模板 ID 列出网关组上已发布服务中的所有路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/listPublishedServiceRoutesByServiceTemplateID), [列出网关组上已发布服务中的所有路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Route/operation/listPublishedServiceRoutes), [获取网关组上的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Route/operation/getPublishedServiceRoute), [使用服务模板 ID 获取网关组上已发布服务中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Route/operation/getPublishedServiceRouteByServiceTemplateID) | | gateway:UpdatePublishedService | arn:api7:gateway:gatewaygroup/%s/publishedservice/%s | [在网关组的已发布服务中创建路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Route/operation/createPublishedServiceRoute), [更新已发布服务中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Route/operation/putPublishedServiceRoute), [增量更新网关组上已发布服务中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Route/operation/patchPublishedServiceRoute), [删除网关组上已发布服务中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Route/operation/deletePublishedServiceRoute) | ### 4 层路由[​](#4-层路由 "4 层路由的直接链接") 备注 请注意[服务 ID 与服务模板 ID 之间的区别](https://docs.apiseven.com/api7-gateway/3.9.x/key-concepts/services#serviceid-vs-servicetemplateid). | 操作 | 资源 | API | | -------------------------------------- | -------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | gateway:GetPublishedService | arn:api7:gateway:gatewaygroup/%s/publishedservice/%s | [使用服务模板 ID 列出网关组上已发布服务中的所有四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/listPublishedServiceStreamRoutesByServiceTemplateID), [列出网关组上已发布服务中的所有四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Stream-Route/operation/listPublishedServiceStreamRoutes), [获取网关组上已发布服务中的四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Stream-Route/operation/getPublishedServiceStreamRoute), [获取网关组上已发布服务中的四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/getPublishedServiceStreamRouteByServiceTemplateID) | | gateway:UpdatePublishedService | arn:api7:gateway:gatewaygroup/%s/publishedservice/%s | [在网关组的已发布服务中创建四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Stream-Route/operation/createPublishedServiceStreamRoute), [更新网关组上已发布服务中的四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Stream-Route/operation/putPublishedServiceStreamRoute), [删除网关组上已发布服务中的四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Stream-Route/operation/deletePublishedServiceStreamRoute) | ### 网关实例[​](#网关实例 "网关实例的直接链接") | 操作 | 资源 | API | | -------------------------------------- | ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetGatewayInstance | arn:api7:gateway:gatewaygroup/%s | [列出所有网关组的所有网关实例](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/listAllGatewayInstances), [列出网关组的所有网关实例](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/listGatewayGroupGatewayInstances) , [计算网关组中不同状态实例的数量](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/countGatewayGroupGatewayInstancesStatus) | | gateway:GetGatewayInstanceCore | arn:api7:gateway:gatewaygroup/\* | [列出所有网关组的网关实例核心数](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/listAllGatewayInstancesCores),[导出网关实例核心数使用情况](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/exportGatewayInstancesCoresUsage) | | gateway:CreateGatewayInstance | arn:api7:gateway:gatewaygroup/%s | [在网关组上签发数据面证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/issueDataplaneCertificate) , [为网关组中的所有网关实例创建 Token](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/createGatewayInstanceToken) , [生成通过 Docker 安装网关实例的脚本](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/generateInstallScriptForDocker) , [生成通过 Helm 在 Kubernetes 中安装网关实例的脚本](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/generateInstallScriptForHelm) , [生成通过 Helm 在 Kubernetes 中安装网关实例的 values.yaml](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Instance/operation/generateInstallYamlForHelm) | ### 权限策略[​](#权限策略 "权限策略的直接链接") | 操作 | 资源 | API | | ---------------------------------- | ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | iam:GetPermissionPolicy | arn:api7:iam:permissionpolicy/%s | [列出所有权限策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Permission-Policy/operation/listPermissionPolicies), [获取权限策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Permission-Policy/operation/getPermissionPolicy) , [列出附加到角色的所有权限策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Permission-Policy/operation/listRolePermissionPolicies) | | iam:CreatePermissionPolicy | arn:api7:iam:permissionpolicy/\* | [创建权限策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Permission-Policy/operation/createPermissionPolicy) | | iam:UpdatePermissionPolicy | arn:api7:iam:permissionpolicy/%s | [更新权限策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Permission-Policy/operation/putPermissionPolicy) | | iam:DeletePermissionPolicy | arn:api7:iam:permissionpolicy/%s | [删除权限策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Permission-Policy/operation/deletePermissionPolicy) | ### 角色[​](#角色 "角色的直接链接") | 操作 | 资源 | API | | ---------------------------- | ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | iam:GetRole | arn:api7:iam:role/%s | [列出所有角色](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Role/operation/listRoles), [获取角色](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Role/operation/getRole) | | iam:CreateRole | arn:api7:iam:role/\* | [创建角色](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Role/operation/createRole) | | iam:UpdateRole | arn:api7:iam:role/%s | [将权限策略附加到角色](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Role/operation/attachPermissionPolicies), [从角色中分离权限策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Role/operation/detachPermissionPolicies), [更新角色](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Role/operation/putRole) | | iam:DeleteCustomRole | arn:api7:iam:role/%s | [删除角色](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Role/operation/deleteRole) | ### 用户[​](#用户 "用户的直接链接") | 操作 | 资源 | API | | -------------------------- | ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | iam:GetUser | arn:api7:iam:user/%s | [列出所有用户](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/User/operation/listUsers) , [获取用户](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/User/operation/getUser) | | iam:InviteUser | arn:api7:iam:user/\* | [邀请用户](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/User/operation/inviteUser) | | iam:UpdateUserRole | arn:api7:iam:user/%s | [更新用户分配的角色](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/User/operation/addAssignedRole) | | iam:ResetPassword | arn:api7:iam:user/%s | [将密码重置为特定值](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/User/operation/passwordReset) | | iam:DeleteUser | arn:api7:iam:user/%s | [删除用户](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/User/operation/deleteUser) | ### SSL 证书[​](#ssl-证书 "SSL 证书的直接链接") | 操作 | 资源 | API | | --------------------------------- | ------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetCertificate | arn:api7:gateway:gatewaygroup/%s | [列出网关组上的所有 SSL 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Certificate/operation/listCertificates) , [获取网关组上的 SSL 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Certificate/operation/getCertificate) | | gateway:CreateCertificate | arn:api7:gateway:gatewaygroup/%s | [在网关组上创建 SSL 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Certificate/operation/createCertificate) | | gateway:UpdateCertificate | arn:api7:gateway:gatewaygroup/%s | [更新网关组上的 SSL 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Certificate/operation/putCertificate) , [增量更新网关组上的 SSL 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Certificate/operation/patchCertificate) | | gateway:DeleteCertificate | arn:api7:gateway:gatewaygroup/%s | [删除网关组上的 SSL 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Certificate/operation/deleteCertificate) | ### CA 证书[​](#ca-证书 "CA 证书的直接链接") | 操作 | 资源 | API | | --------------------------------- | ------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetCertificate | arn:api7:gateway:gatewaygroup/%s | [列出网关组上的所有 CA 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/CACertificate/operation/listCACertificates) , [获取网关组上的 CA 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/CACertificate/operation/getCACertificate) | | gateway:CreateCertificate | arn:api7:gateway:gatewaygroup/%s | [在网关组上创建 CA 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/CACertificate/operation/createCACertificate) | | gateway:UpdateCertificate | arn:api7:gateway:gatewaygroup/%s | [更新网关组上的 CA 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/CACertificate/operation/putCACertificate) , [增量更新网关组上的 CA 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/CACertificate/operation/patchCACertificate) | | gateway:DeleteCertificate | arn:api7:gateway:gatewaygroup/%s | [删除网关组上的 CA 证书](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/CACertificate/operation/deleteCACertificate) | ### SNI[​](#sni "SNI的直接链接") | 操作 | 资源 | API | | ------------------------- | ------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetSNI | arn:api7:gateway:gatewaygroup/%s | [列出网关组上的所有 SNI](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/SNI/operation/listSNI) , [获取网关组上的 SNI](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/SNI/operation/getCertificate) | | gateway:CreateSNI | arn:api7:gateway:gatewaygroup/%s | [在网关组上创建 SNI](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/SNI/operation/createSNI) | | gateway:UpdateSNI | arn:api7:gateway:gatewaygroup/%s | [更新网关组上的 SNI](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/SNI/operation/putSNI) , [增量更新网关组上的 SNI](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/SNI/operation/patchSNI) | | gateway:DeleteSNI | arn:api7:gateway:gatewaygroup/%s | [删除网关组上的 SNI](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/SNI/operation/deleteSNI) | ### 全局规则[​](#全局规则 "全局规则的直接链接") | 操作 | 资源 | API | | -------------------------------------- | ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetGlobalPluginRule | arn:api7:gateway:gatewaygroup/%s | [列出网关组上的所有全局规则](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Global-Rule/operation/listGlobalRules), [获取网关组上的全局规则](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Global-Rule/operation/getGlobalRules) | | gateway:CreateGlobalPluginRule | arn:api7:gateway:gatewaygroup/%s | [在网关组上创建全局规则](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Global-Rule/operation/createGlobalRule) | | gateway:UpdateGlobalPluginRule | arn:api7:gateway:gatewaygroup/%s | [更新网关组上的全局规则](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Global-Rule/operation/putGlobalRule) | | gateway:DeleteGlobalPluginRule | arn:api7:gateway:gatewaygroup/%s | [删除网关组上的全局规则](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Global-Rule/operation/deleteGlobalRule) | ### 插件元数据[​](#插件元数据 "插件元数据的直接链接") | 操作 | 资源 | API | | ------------------------------------ | ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetPluginMetadata | arn:api7:gateway:gatewaygroup/%s | [列出网关组上的所有插件元数据](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Plugin-Metadata/operation/listPluginMetadata), [获取网关组上的插件元数据](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Plugin-Metadata/operation/getPluginMetadata) | | gateway:UpdatePluginMetadata | arn:api7:gateway:gatewaygroup/%s | [更新网关组上的插件元数据](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Plugin-Metadata/operation/putPluginMetadata) | | gateway:DeletePluginMetadata | arn:api7:gateway:gatewaygroup/%s | [删除网关组上的插件元数据](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Plugin-Metadata/operation/deletePluginMetadata) | ### 消费者[​](#消费者 "消费者的直接链接") | 操作 | 资源 | API | | ---------------------------------------- | ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetConsumer | arn:api7:gateway:gatewaygroup/%s/consumer/%s | [列出网关组上的所有消费者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/listConsumers), [获取网关组上的消费者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/getConsumer) | | gateway:CreateConsumer | arn:api7:gateway:gatewaygroup/%s/consumer/\* | [在网关组上创建消费者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/createConsumer) | | gateway:UpdateConsumer | arn:api7:gateway:gatewaygroup/%s/consumer/%s | [在网关组上创建或更新消费者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/upsertConsumer),[更新网关组上的消费者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/updateConsumer) | | gateway:DeleteConsumer | arn:api7:gateway:gatewaygroup/%s/consumer/%s | [删除网关组上的消费者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/deleteConsumer) | | gateway:GetConsumerCredential | arn:api7:gateway:gatewaygroup/%s/consumer/%s | [列出网关组上消费者的所有凭证](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/getConsumerCredential) | | gateway:CreateConsumerCredential | arn:api7:gateway:gatewaygroup/%s/consumer/%s | [为网关组上的消费者创建凭证](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/createConsumerCredential) | | gateway:UpdateConsumerCredential | arn:api7:gateway:gatewaygroup/%s/consumer/%s | [更新网关组上消费者的凭证](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/updateConsumerCredential) | | gateway:DeleteConsumerCredential | arn:api7:gateway:gatewaygroup/%s/consumer/%s | [删除网关组上消费者的凭证](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Consumer/operation/deleteConsumerCredential) | ### 密钥提供者[​](#密钥提供者 "密钥提供者的直接链接") | 操作 | 资源 | API | | ------------------------------------ | ------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetSecretProvider | arn:api7:gateway:gatewaygroup/%s | [列出所有密钥提供者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Secret-Provider/operation/listSecretProviders), [获取网关组上的密钥提供者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Secrets/operation/getSecret) | | gateway:PutSecretProvider | arn:api7:gateway:gatewaygroup/%s | [更新网关组上的密钥提供者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Secret-Provider/operation/putSecretProvider) | | gateway:DeleteSecretProvider | arn:api7:gateway:gatewaygroup/%s | [删除网关组上的密钥提供者](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Secret-Provider/operation/deleteSecretProvider) | ### 服务注册中心[​](#服务注册中心 "服务注册中心的直接链接") | 操作 | 资源 | API | | ----------------------------------------- | ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetServiceRegistry | arn:api7:gateway:gatewaygroup/%s | [列出网关组上的所有服务注册中心连接](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/listServiceRegistry), [获取网关组上的服务注册中心连接](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/getServiceRegistry), [列出连接到服务注册中心的所有已发布服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/listServiceRegistryConnectedServices) , [获取网关组上服务注册中心连接的健康检查历史记录](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/getServiceRegistryHealthCheckHistory) , [列出 Kubernetes 服务注册中心中的所有内部服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/listKubernetesInternalServices) , [列出 Nacos 服务注册中心中的所有命名空间](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/listNacosNamespaces) , [列出 Nacos 命名空间中的所有组](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/listNacosGroups), [列出 Nacos 组中的所有内部服务](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/listNacosInternalServices), [获取 Nacos 服务注册中心的所有实例元数据](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/getNacosInstancesMetadata) | | gateway:ConnectServiceRegistry | arn:api7:gateway:gatewaygroup/%s | [在网关组上创建服务注册中心连接](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/createServiceRegistry) | | gateway:UpdateServiceRegistry | arn:api7:gateway:gatewaygroup/%s | [更新网关组上的服务注册中心连接](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Registry/operation/putServiceRegistry) | | gateway:DisconnectServiceRegistry | arn:api7:gateway:gatewaygroup/%s | [删除网关组上的服务注册中心连接](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Gateway-Group/operation/deleteServiceRegistry) | ### 服务模板[​](#服务模板 "服务模板的直接链接") 备注 请注意[服务 ID 与服务模板 ID，路由 ID 与路由模板 ID，四层路由 ID 与四层路由模板 ID 之间的区别](https://docs.apiseven.com/api7-gateway/3.9.x/key-concepts/services#serviceid-vs-servicetemplateid). | 操作 | 资源 | API | | ------------------------------------- | --------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetServiceTemplate | arn:api7:gateway:servicetemplate/%s | [获取服务模板](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/getServiceTemplate), [列出服务模板中的所有路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/listServiceTemplateRoutes), [获取服务模板中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/getServiceTemplateRoute),[获取服务模板中的四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/getServiceTemplateStreamRoute), [获取历史版本](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/getServiceVersion), [列出历史版本中的所有路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/listRoutesInServiceVersion), [获取历史版本中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/getRouteInServiceVersion), [获取历史版本中的所有四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/listStreamRoutesInServiceVersion), [获取历史版本中的四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/getStreamRouteInServiceVersion) , [根据版本名称获取历史版本号](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/getServiceVersionByVersionName) | | gateway:CreateServiceTemplate | arn:api7:gateway:servicetemplate/\* | [基于 OpenAPI 规范导入服务模板](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/importServiceTemplateOpenAPISpec), [创建服务模板](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/createServiceTemplate) | | gateway:UpdateServiceTemplate | arn:api7:gateway:servicetemplate/%s | [更新服务模板](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/putServiceTemplate), [增量更新服务模板](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/ServiceTemplate/operation/patchServiceTemplate), [在服务模板中创建路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/createServiceTemplateRoute), [增量更新服务模板中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/patchServiceTemplateRoute), [更新服务模板中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/putServiceTemplateRoute), [删除服务模板中的路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/deleteServiceTemplateRoute), [在服务模板中创建四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/createServiceTemplateStreamRoute), [更新服务模板中的四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/putServiceTemplateStreamRoute), [删除服务模板中的四层路由](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/StreamRoutes/operation/deleteServiceTemplateStreamRoute) | | gateway:DeleteServiceTemplate | arn:api7:gateway:servicetemplate/%s | [删除服务模板](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Service-Template/operation/deleteServiceTemplate) | ### 系统设置[​](#系统设置 "系统设置的直接链接") | 操作 | 资源 | API | | --------------------------------------- | -------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:UpdateDeploymentSetting | arn:api7:gateway:gatewaysetting/\* | [更新部署设置](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/System-Settings/operation/putSystemSettings) | | iam:UpdateSCIMProvisioning | arn:api7:iam:organization/\* | [更新 SCIM 设置](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/System-Settings/operation/putSCIMSettings) , [生成 SCIM Token](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/System-Settings/operation/generateSCIMToken) | | iam:GetSCIMProvisioning | arn:api7:iam:organization/\* | [获取 SCIM 设置](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/System-Settings/operation/getSCIMSettings) | ### 通知渠道[​](#通知渠道 "通知渠道的直接链接") | 操作 | 资源 | API | | ------------------------------ | -------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | iam:GetContactPoint | arn:api7:iam:contactpoint/%s | [列出通知渠道](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Contact-Point/operation/listContactPoints), [获取通知渠道](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Contact-Point/operation/getContactPoint), [列出通知渠道的通知日志](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Contact-Point/operation/listContactPointNotificationLogs), [列出通知渠道的使用情况](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Contact-Point/operation/getContactPointUsages) | | iam:CreateContactPoint | arn:api7:iam:contactpoint/\* | [创建通知渠道](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Contact-Point/operation/createContactPoint) | | iam:UpdateContactPoint | arn:api7:iam:contactpoint/%s | [更新通知渠道](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Contact-Point/operation/putContactPoint) | | iam:DeleteContactPoint | arn:api7:iam:contactpoint/%s | [删除通知渠道](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Contact-Point/operation/deleteContactPoint) | ### 登录选项[​](#登录选项 "登录选项的直接链接") | 操作 | 资源 | API | | ----------------------------- | -------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | iam:GetLoginOption | arn:api7:iam:organization/\* | [获取登录选项](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Login-Option/operation/getLoginOption) | | iam:CreateLoginOption | arn:api7:iam:organization/\* | [创建登录选项](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Login-Option/operation/createLoginOption) | | iam:UpdateLoginOption | arn:api7:iam:organization/\* | [更新登录选项](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Login-Option/operation/putLoginOption), [增量更新登录选项](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Login-Option/operation/patchLoginOption) | | iam:DeleteLoginOption | arn:api7:iam:organization/\* | [删除登录选项](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Login-Option/operation/deleteLoginOption) | ### 自定义插件[​](#自定义插件 "自定义插件的直接链接") | 操作 | 资源 | API | | ---------------------------------- | -------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetCustomPlugin | arn:api7:gateway:gatewaysetting/\* | [列出所有自定义插件](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Custom-Plugin/operation/listCustomPlugins), [获取自定义插件](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Custom-Plugin/operation/getCustomPlugin) | | gateway:CreateCustomPlugin | arn:api7:gateway:gatewaysetting/\* | [创建自定义插件](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Custom-Plugin/operation/createCustomPlugin) | | gateway:UpdateCustomPlugin | arn:api7:gateway:gatewaysetting/\* | [更新自定义插件](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Custom-Plugin/operation/putCustomPlugin) | | gateway:DeleteCustomPlugin | arn:api7:gateway:gatewaysetting/\* | [删除自定义插件](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Custom-Plugin/operation/deleteCustomPlugin) | ### 告警[​](#告警 "告警的直接链接") | 操作 | 资源 | API | | --------------------------------- | ----------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gateway:GetAlertPolicy | arn:api7:gateway:alert/\* | [列出所有告警策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Alert/operation/listAlertPolicies), [获取告警策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Alert/operation/getAlertPolicy) , [列出所有告警历史](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Alert/operation/listAlertHistory) | | gateway:CreateAlertPolicy | arn:api7:gateway:alert/\* | [创建告警策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Alert/operation/createAlertPolicy) | | gateway:UpdateAlertPolicy | arn:api7:gateway:alert/\* | [更新告警策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Alert/operation/putAlertPolicy), [更新告警策略的触发器](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Alert/operation/putAlertPolicyTriggers),[增量更新告警策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Alert/operation/patchAlertPolicy) | | gateway:DeleteAlertPolicy | arn:api7:gateway:alert/\* | [删除告警策略](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Alert/operation/deleteAlertPolicy) | ### 许可证[​](#许可证 "许可证的直接链接") | 操作 | 资源 | API | | ------------------------- | -------------------------------------------- | ------------------------------------------------------------------------------------------------------------------ | | iam:UpdateLicense | arn:api7:iam:organization/\* | [更新 API7 许可证](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/License/operation/updateLicense) | ### 审计[​](#审计 "审计的直接链接") | 操作 | 资源 | API | | ------------------------ | -------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------- | | iam:GetAudit | arn:api7:iam:organization/\* | [列出所有审计日志](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Audit-Logs/operation/listAuditLogs) | | iam:ExportAudits | arn:api7:iam:organization/\* | [导出所有审计日志](https://docs.apiseven.com/api7-gateway/reference/admin-api#tag/Audit-Logs/operation/exportAuditLogs) |