# RAM Permissions Required

## Summary Table

| Product | RAM Action | Resource Scope | Description |
|---------|-----------|----------------|-------------|
| SAS | yundun-sas:DescribeVersionConfig | * | Query SAS version and service configuration |
| SAS | yundun-sas:CreateFileDetectUploadUrl | * | Get file upload URL and check file existence |
| SAS | yundun-sas:CreateFileDetect | * | Submit file for malware detection |
| SAS | yundun-sas:GetFileDetectResult | * | Get file detection results |

## RAM Policy Document

```json
{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "yundun-sas:DescribeVersionConfig",
        "yundun-sas:CreateFileDetectUploadUrl",
        "yundun-sas:CreateFileDetect",
        "yundun-sas:GetFileDetectResult"
      ],
      "Resource": "*"
    }
  ]
}
```

## Permission Notes

- **yundun-sas:DescribeVersionConfig**: Read-only, used to check if malware detection service is enabled.
- **yundun-sas:CreateFileDetectUploadUrl**: Required to obtain file upload parameters (OSS presigned URL).
- **yundun-sas:CreateFileDetect**: Required to submit files for scanning.
- **yundun-sas:GetFileDetectResult**: Required to retrieve scan results.