Back to Details

tigris-iam

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Tigris IAM (Identity and Access Management)

Tigris IAM (身份与访问管理)

Policies

策略

Policies define permissions for access keys using AWS IAM-compatible JSON documents.
策略使用兼容AWS IAM的JSON文档为访问密钥定义权限。

tigris iam policies list
(alias: 
l
)

tigris iam policies list
（别名：
l
）

List all policies in the current organization.
bash
tigris iam policies list
tigris iam policies list --json
FlagAliasDescriptionDefault
--format
-f
Output format (
json
, 
table
, 
xml
)
table
--json
Output as JSON
列出当前组织中的所有策略。
bash
tigris iam policies list
tigris iam policies list --json
标志别名描述默认值
--format
-f
输出格式（
json
、
table
、
xml
）
table
--json
以JSON格式输出

tigris iam policies get [arn]
(alias: 
g
)

tigris iam policies get [arn]
（别名：
g
）

Show details for a policy including its document and attached users. If no ARN is provided, shows interactive selection.
bash
tigris iam policies get
tigris iam policies get arn:aws:iam::org_id:policy/my-policy
tigris iam policies get --json
FlagAliasDescriptionDefault
--format
-f
Output format (
json
, 
table
, 
xml
)
table
--json
Output as JSON
显示策略的详细信息，包括其文档和关联的用户。如果未提供ARN，则显示交互式选择界面。
bash
tigris iam policies get
tigris iam policies get arn:aws:iam::org_id:policy/my-policy
tigris iam policies get --json
标志别名描述默认值
--format
-f
输出格式（
json
、
table
、
xml
）
table
--json
以JSON格式输出

tigris iam policies create <name>
(alias: 
c
)

tigris iam policies create <name>
（别名：
c
）

Create a new policy with a name and policy document. The document can be provided via file path, inline JSON, or stdin.
bash
tigris iam policies create my-policy --document policy.json
tigris iam policies create my-policy --document '{"Version":"2012-10-17","Statement":[...]}'
cat policy.json | tigris iam policies create my-policy
FlagAliasDescription
--document
-d
Policy document (JSON file path or inline JSON). Reads from stdin if omitted
--description
Policy description
创建一个带有名称和策略文档的新策略。文档可以通过文件路径、内联JSON或标准输入提供。
bash
tigris iam policies create my-policy --document policy.json
tigris iam policies create my-policy --document '{"Version":"2012-10-17","Statement":[...]}'
cat policy.json | tigris iam policies create my-policy
标志别名描述
--document
-d
策略文档（JSON文件路径或内联JSON）。如果省略则从标准输入读取
--description
策略描述

tigris iam policies edit [arn]
(alias: 
e
)

tigris iam policies edit [arn]
（别名：
e
）

Update an existing policy's document. If no ARN is provided, shows interactive selection.
bash
tigris iam policies edit --document policy.json
tigris iam policies edit arn:aws:iam::org_id:policy/my-policy --document policy.json
cat policy.json | tigris iam policies edit arn:aws:iam::org_id:policy/my-policy
FlagAliasDescription
--document
-d
New policy document (JSON file path or inline JSON). Reads from stdin if omitted
--description
Update policy description
更新现有策略的文档。如果未提供ARN，则显示交互式选择界面。
bash
tigris iam policies edit --document policy.json
tigris iam policies edit arn:aws:iam::org_id:policy/my-policy --document policy.json
cat policy.json | tigris iam policies edit arn:aws:iam::org_id:policy/my-policy
标志别名描述
--document
-d
新的策略文档（JSON文件路径或内联JSON）。如果省略则从标准输入读取
--description
更新策略描述

tigris iam policies delete [arn]
(alias: 
d
)

tigris iam policies delete [arn]
（别名：
d
）

Delete a policy. If no ARN is provided, shows interactive selection.
bash
tigris iam policies delete
tigris iam policies delete arn:aws:iam::org_id:policy/my-policy --force
FlagDescription
--force
Skip confirmation prompt
删除策略。如果未提供ARN，则显示交互式选择界面。
bash
tigris iam policies delete
tigris iam policies delete arn:aws:iam::org_id:policy/my-policy --force
标志描述
--force
跳过确认提示

Policy Document Format

策略文档格式

Policies use AWS IAM JSON format:
json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject"],
      "Resource": ["arn:aws:s3:::my-bucket/*"]
    }
  ]
}
策略使用AWS IAM JSON格式：
json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject"],
      "Resource": ["arn:aws:s3:::my-bucket/*"]
    }
  ]
}

Example Policies

示例策略

Read-only access to a bucket:
json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject", "s3:ListBucket"],
      "Resource": ["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"]
    }
  ]
}
Write to a specific prefix:
json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:PutObject"],
      "Resource": ["arn:aws:s3:::my-bucket/uploads/*"]
    }
  ]
}
Full bucket admin:
json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:*"],
      "Resource": ["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"]
    }
  ]
}
对存储桶的只读访问权限：
json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject", "s3:ListBucket"],
      "Resource": ["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"]
    }
  ]
}
写入特定前缀：
json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:PutObject"],
      "Resource": ["arn:aws:s3:::my-bucket/uploads/*"]
    }
  ]
}
存储桶完全管理员权限：
json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:*"],
      "Resource": ["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"]
    }
  ]
}

Users

用户

Manage organization members and invitations.
管理组织成员和邀请。

tigris iam users list
(alias: 
l
)

tigris iam users list
（别名：
l
）

List all users and pending invitations in the organization.
bash
tigris iam users list
tigris iam users list --json
FlagAliasDescriptionDefault
--format
-f
Output format (
json
, 
table
, 
xml
)
table
--json
Output as JSON
列出组织中的所有用户和待处理的邀请。
bash
tigris iam users list
tigris iam users list --json
标志别名描述默认值
--format
-f
输出格式（
json
、
table
、
xml
）
table
--json
以JSON格式输出

tigris iam users invite <email>
(alias: 
i
)

tigris iam users invite <email>
（别名：
i
）

Invite users to the organization by email. Comma-separate for bulk invitations.
bash
tigris iam users invite user@example.com
tigris iam users invite user@example.com --role admin
tigris iam users invite user1@example.com,user2@example.com
FlagAliasDescriptionDefault
--role
-r
Role to assign (
admin
, 
member
)
member
通过电子邮件邀请用户加入组织。使用逗号分隔可批量邀请。
bash
tigris iam users invite user@example.com
tigris iam users invite user@example.com --role admin
tigris iam users invite user1@example.com,user2@example.com
标志别名描述默认值
--role
-r
分配的角色（
admin
、
member
）
member

tigris iam users revoke-invitation [id]
(alias: 
ri
)

tigris iam users revoke-invitation [id]
（别名：
ri
）

Revoke pending invitations. If no invitation ID is provided, shows interactive selection. Comma-separate for multiple.
bash
tigris iam users revoke-invitation
tigris iam users revoke-invitation invitation_id --force
tigris iam users revoke-invitation id1,id2,id3 --force
FlagDescription
--force
Skip confirmation prompt
撤销待处理的邀请。如果未提供邀请ID，则显示交互式选择界面。使用逗号分隔可撤销多个邀请。
bash
tigris iam users revoke-invitation
tigris iam users revoke-invitation invitation_id --force
tigris iam users revoke-invitation id1,id2,id3 --force
标志描述
--force
跳过确认提示

tigris iam users update-role [id]
(alias: 
ur
)

tigris iam users update-role [id]
（别名：
ur
）

Update user roles in the organization. If no user ID is provided, shows interactive selection. Comma-separate for multiple users.
bash
tigris iam users update-role --role admin
tigris iam users update-role user_id --role member
tigris iam users update-role id1,id2 --role admin
tigris iam users update-role id1,id2 --role admin,member
FlagAliasDescription
--role
-r
Role(s) to assign (
admin
, 
member
), comma-separated. Each role pairs with the corresponding user ID. If one role is given, it applies to all users
更新组织中的用户角色。如果未提供用户ID，则显示交互式选择界面。使用逗号分隔可批量更新多个用户。
bash
tigris iam users update-role --role admin
tigris iam users update-role user_id --role member
tigris iam users update-role id1,id2 --role admin
tigris iam users update-role id1,id2 --role admin,member
标志别名描述
--role
-r
分配的角色（
admin
、
member
），逗号分隔。每个角色与对应的用户ID配对。如果只提供一个角色，则应用于所有用户

tigris iam users remove [id]
(alias: 
rm
)

tigris iam users remove [id]
（别名：
rm
）

Remove users from the organization. If no user ID is provided, shows interactive selection. Comma-separate for multiple.
bash
tigris iam users remove
tigris iam users remove user@example.com --force
tigris iam users remove user@example.com,user@example.net --force
FlagDescription
--force
Skip confirmation prompt
将用户从组织中移除。如果未提供用户ID，则显示交互式选择界面。使用逗号分隔可批量移除多个用户。
bash
tigris iam users remove
tigris iam users remove user@example.com --force
tigris iam users remove user@example.com,user@example.net --force
标志描述
--force
跳过确认提示

Roles

角色

RoleDescription
admin
Full access to all organization resources and settings
member
Limited access — can use buckets and objects but cannot manage organization settings
角色描述
admin
拥有组织所有资源和设置的完全访问权限
member
有限访问权限——可以使用存储桶和对象，但无法管理组织设置