如何授权RAM账号管理指定安全组

授权RAM账号管理指定安全组可以通过标签划分不同的安全组分组或者配置自定义策略授权实现：

{
"Statement": [
{
"Effect": "Allow",
"Action": "ecs:DescribeSecurityGroups",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ecs:ModifySecurityGroupRule",
"ecs:ModifySecurityGroupEgressRule",
"ecs:DescribeSecurityGroup*",
"ecs:AuthorizeSecurityGroup",
"ecs:RevokeSecurityGroup",
"ecs:RevokeSecurityGroupEgress"
],
"Resource": [
"acs:ecs:*:*:securitygroup/安全组id"
]
}
],
"Version": "1"
}