阿里云自定义权限

例子：

单独授权安全组ID为 sg-wz94fh3qqfibqwfvp9ky 的操作权限

{
    "Version": "1",
    "Statement": [
        {
            "Action": "ecs:*SecurityGroup*",
            "Resource": "acs:ecs:*:*:securitygroup/sg-wz94fh3qqfibqwfvp9ky",
            "Effect": "Allow"
        }
    ]
}

参考

AuthorizeSecurityGroup
https://help.aliyun.com/document_detail/25554.html

管理阿里云账号下的ECS安全组
https://help.aliyun.com/document_detail/141695.html

权限策略基本元素
https://help.aliyun.com/document_detail/93738.html

鉴权规则(可在这里找到 Resource 怎么编写)
https://help.aliyun.com/document_detail/25497.html