alibaba-live-ram-policy-change-guard

【数据与研究】Gate RAM policy/role mutations against the Alibaba Cloud account hierarchy. RAM AdministratorAccess assignment, policy deletion with active STS tokens, and Resource Directory Control Policy changes carry account-wide or org-wide blast radius. This guard enforces blast-radius assessment, STS token impact analysis, and explicit authority approval befor…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准