test-repo/docs/.vitepress/theme/components/appendix/cloud-iam/RolePolicyDemo.vue

<template>
  <div class="role-policy-demo">
    <div class="demo-header">
      <span class="icon">🎭</span>
      <span class="title">角色与策略</span>
      <span class="subtitle">策略叠加原理</span>
    </div>

    <div class="main-area">
      <div class="role-section">
        <div class="role-card" @click="showTrust = !showTrust">
          <span class="role-icon">🎭</span>
          <div class="role-info">
            <span class="role-name">CrossAccountS3AccessRole</span>
            <span class="role-type">跨账号访问角色</span>
          </div>
          <span class="expand-icon">{{ showTrust ? '▼' : '▶' }}</span>
        </div>
        <div class="trust-policy" v-if="showTrust">
          <div class="trust-title">🔐 信任策略</div>
          <div class="trust-item" v-for="(t, i) in trustPolicy" :key="i">
            <span class="principal">{{ t.principal }}</span>
            <span class="action">{{ t.action }}</span>
          </div>
        </div>
      </div>

      <div class="policies-section">
        <div
          v-for="(policy, index) in attachedPolicies"
          :key="index"
          class="policy-card"
          :class="{ selected: selectedPolicy === index }"
          @click="selectedPolicy = index"
        >
          <div class="policy-header">
            <span class="policy-icon">{{ policy.icon }}</span>
            <span class="policy-name">{{ policy.name }}</span>
          </div>
          <div class="policy-perms" v-if="selectedPolicy === index">
            <div class="perm" v-for="(p, i) in policy.permissions" :key="i">
              <span class="effect" :class="p.effect.toLowerCase()">{{ p.effect }}</span>
              <span class="action">{{ p.action }}</span>
            </div>
          </div>
        </div>
      </div>
    </div>

    <div class="info-box">
      <span class="icon">💡</span>
      <strong>核心思想：</strong>策略叠加——一个角色可附加多个策略，最终权限是所有策略的叠加结果。Deny 优先级高于 Allow。
    </div>
  </div>
</template>

<script setup>
import { ref } from 'vue'

const showTrust = ref(false)
const selectedPolicy = ref(0)

const trustPolicy = [
  { principal: '账号 A (123456789012)', action: 'sts:AssumeRole' },
  { principal: '特定 IAM 用户', action: 'sts:AssumeRole' }
]

const attachedPolicies = [
  {
    name: 'S3ReadWritePolicy',
    icon: '📦',
    permissions: [
      { effect: 'Allow', action: 's3:GetObject' },
      { effect: 'Allow', action: 's3:PutObject' }
    ]
  },
  {
    name: 'CloudWatchLogsPolicy',
    icon: '📊',
    permissions: [
      { effect: 'Allow', action: 'logs:CreateLogGroup' },
      { effect: 'Allow', action: 'logs:PutLogEvents' }
    ]
  },
  {
    name: 'DenySensitiveData',
    icon: '🚫',
    permissions: [
      { effect: 'Deny', action: 's3:GetObject (sensitive/*)' },
      { effect: 'Deny', action: 's3:DeleteObject' }
    ]
  }
]
</script>

<style scoped>
.role-policy-demo {
  border: 1px solid var(--vp-c-divider);
  background: var(--vp-c-bg-soft);
  border-radius: 6px;
  padding: 0.75rem;
  margin: 0.5rem 0;
}

.demo-header {
  display: flex;
  align-items: center;
  gap: 0.5rem;
  margin-bottom: 0.75rem;
}

.demo-header .icon { font-size: 1.25rem; }
.demo-header .title { font-weight: bold; font-size: 1rem; }
.demo-header .subtitle { color: var(--vp-c-text-2); font-size: 0.85rem; margin-left: 0.5rem; }

.main-area {
  display: grid;
  grid-template-columns: 1fr 1fr;
  gap: 0.75rem;
  margin-bottom: 0.75rem;
}

@media (max-width: 640px) {
  .main-area { grid-template-columns: 1fr; }
}

.role-section { display: flex; flex-direction: column; gap: 0.4rem; }

.role-card {
  display: flex;
  align-items: center;
  gap: 0.5rem;
  background: var(--vp-c-bg);
  border: 1px solid var(--vp-c-divider);
  border-radius: 6px;
  padding: 0.6rem;
  cursor: pointer;
  transition: all 0.2s;
}

.role-card:hover { border-color: var(--vp-c-brand); }

.role-icon { font-size: 1.5rem; }
.role-info { flex: 1; }
.role-name { display: block; font-weight: 600; font-size: 0.85rem; color: var(--vp-c-text-1); }
.role-type { display: block; font-size: 0.7rem; color: var(--vp-c-text-2); }
.expand-icon { font-size: 0.7rem; color: var(--vp-c-text-3); }

.trust-policy {
  background: var(--vp-c-bg);
  border: 1px solid var(--vp-c-divider);
  border-radius: 6px;
  padding: 0.5rem;
}

.trust-title { font-size: 0.75rem; font-weight: 600; margin-bottom: 0.4rem; color: var(--vp-c-text-1); }

.trust-item {
  background: var(--vp-c-bg-alt);
  border-radius: 4px;
  padding: 0.3rem 0.4rem;
  margin-bottom: 0.25rem;
  font-size: 0.7rem;
}

.trust-item .principal { font-weight: 600; color: var(--vp-c-brand-1); display: block; }
.trust-item .action { color: var(--vp-c-text-2); }

.policies-section { display: flex; flex-direction: column; gap: 0.4rem; }

.policy-card {
  background: var(--vp-c-bg);
  border: 1px solid var(--vp-c-divider);
  border-radius: 6px;
  padding: 0.5rem;
  cursor: pointer;
  transition: all 0.2s;
}

.policy-card:hover { border-color: var(--vp-c-brand); }
.policy-card.selected { border-color: var(--vp-c-brand); background: var(--vp-c-bg-alt); }

.policy-header { display: flex; align-items: center; gap: 0.4rem; }
.policy-icon { font-size: 1rem; }
.policy-name { font-weight: 600; font-size: 0.8rem; color: var(--vp-c-text-1); }

.policy-perms { margin-top: 0.4rem; padding-top: 0.4rem; border-top: 1px solid var(--vp-c-divider); }

.perm {
  display: flex;
  align-items: center;
  gap: 0.3rem;
  padding: 0.2rem 0;
  font-size: 0.7rem;
}

.effect {
  padding: 0.1rem 0.3rem;
  border-radius: 2px;
  font-weight: 600;
  font-size: 0.6rem;
}

.effect.allow { background: var(--vp-c-brand-soft); color: var(--vp-c-brand-1); }
.effect.deny { background: rgba(239, 68, 68, 0.15); color: #dc2626; }

.perm .action { font-family: var(--vp-font-family-mono); color: var(--vp-c-text-2); }

.info-box {
  background: var(--vp-c-bg-alt);
  padding: 0.6rem;
  border-radius: 6px;
  font-size: 0.85rem;
  color: var(--vp-c-text-2);
  display: flex;
  gap: 0.25rem;
}

.info-box .icon { flex-shrink: 0; }
.info-box strong { color: var(--vp-c-text-1); }
</style>