AliyunDNSFullAccess too wide

[panhaoyu]

Hello, nice work.

A suggestion. AliyunDNSFullAccess is too wide, for I will provide the website access permission to others. Could you please check the minimum permission required?

I'm trying, and after finish, I will provide my experience here.

[tengattack]

You may need custom RAM policy like:

{
    "Version": "1",
    "Statement": [
        {
            "Action": "*",
            "Resource": "acs:alidns:*:*:domain/example.com",
            "Effect": "Allow"
        }
    ]
}

to limit access only for one domain.

[Igotit]

@tengattack need to add another statement:

{
    "Action": [
        "alidns:DescribeSiteMonitorIspInfos",
        "alidns:DescribeSiteMonitorIspCityInfos",
        "alidns:DescribeSupportLines",
        "alidns:DescribeDomains",
        "alidns:DescribeDomainNs",
        "alidns:DescribeDomainGroups"
    ],
    "Resource": "acs:alidns:*:*:*",
    "Effect": "Allow"
}

ref: https://help.aliyun.com/document_detail/61723.html