详情页标题前

阿里云RDS数据库授权信息-云淘科技

• 阿里云数据库
详情页1
访问控制（RAM）是阿里云提供的管理用户身份与资源访问权限的服务。使用RAM可以让您避免与其他用户共享阿里云账号密钥，并可按需为用户授予最小权限。RAM中使用权限策略描述授权的具体内容。本文为您介绍关系型数据库（RDS）为RAM权限策略定义的操作（Action）、资源（Resource）和条件（Condition）。关系型数据库（RDS）的RAM代码（RamCode）为rds，支持的授权粒度为RESOURCE。

权限策略通用结构

权限策略支持JSON格式，其通用结构如下：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "",
      "Action": "",
      "Resource": "",
      "Condition": {
        "": {
          "": [
            ""
          ]
        }
      }
    }
  ]
}

各字段含义如下：

  • Effect：权限策略效果。取值：Allow（允许）、Deny（拒绝）。
  • Action：授予允许或拒绝权限的具体操作。具体信息，请参见操作（Action）。
  • Resource：受操作影响的具体对象，您可以使用资源ARN来描述指定资源。具体信息，请参见资源（Resource）。
  • Condition：指授权生效的条件。可选字段。具体信息，请参见条件（Condition）。
    • Condition_operator：条件运算符，不同类型的条件对应不同的条件运算符。具体信息，请参见权限策略基本元素。
    • Condition_key：条件关键字。
    • Condition_value：条件关键字对应的值。

操作（Action）

下表是关系型数据库（RDS）定义的操作，这些操作可以在RAM权限策略语句的Action元素中使用，用来授予执行该操作的权限。下面对表中的具体项提供说明：

  • 操作：是指具体的权限点。
  • API：是指操作对应的API接口。
  • 访问级别：是指每个操作的访问级别，取值为写入（Write）、读取（Read）或列出（List）。
  • 资源类型：是指操作中支持授权的资源类型。具体说明如下：
    • 对于必选的资源类型，用背景高亮的方式表示。
    • 对于不支持资源级授权的操作，用全部资源表示。
  • 条件关键字：是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。
  • 关联操作：是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限，操作才能成功。
操作 API 访问级别 资源类型 条件关键字 关联操作
rds:ActivateMigrationTargetInstance ActivateMigrationTargetInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:AddTagsToResource AddTagsToResource Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:AllocateInstancePublicConnection AllocateInstancePublicConnection Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:AllocateReadWriteSplittingConnection AllocateReadWriteSplittingConnection Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:AttachWhitelistTemplateToInstance AttachWhitelistTemplateToInstance Write acs:rds:{#regionId}:{#accountId}:* 无 无
rds:CalculateDBInstanceWeight CalculateDBInstanceWeight Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CancelImport CancelImport Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:CheckAccountNameAvailable CheckAccountNameAvailable Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CheckCloudResourceAuthorized CheckCloudResourceAuthorized Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/*DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CheckCreateDdrDBInstance CheckCreateDdrDBInstance Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:CheckDBNameAvailable CheckDBNameAvailable Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CheckInstanceExist CheckInstanceExist Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CheckServiceLinkedRole CheckServiceLinkedRole Read DBInstanceacs:rds:*:{#accountId}:dbinstance/*DBInstanceacs:rds:*:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:CloneDBInstance CloneDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CloneParameterGroup CloneParameterGroup Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CopyDatabaseBetweenInstances CopyDatabaseBetweenInstances Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:CreateAccount CreateAccount Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateBackup CreateBackup Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateCloudMigrationPrecheckTask CreateCloudMigrationPrecheckTask Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateCloudMigrationTask CreateCloudMigrationTask Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateDBInstance CreateDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateDBInstanceEndpoint CreateDBInstanceEndpoint Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateDBInstanceEndpointAddress CreateDBInstanceEndpointAddress Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateDBInstanceForRebuild CreateDBInstanceForRebuild Write acs:rds:{#regionId}:{#accountId}:* 无 无
rds:CreateDBNodes CreateDBNodes Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateDBProxyEndpointAddress CreateDBProxyEndpointAddress Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:CreateDatabase CreateDatabase Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateDdrInstance CreateDdrInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:CreateGADInstance CreateGADInstance Write GadInstanceacs:rds:*:{#accountId}:gadinstance/{#GadInstanceName} 无 无
rds:CreateGadInstanceMember CreateGadInstanceMember Write 全部资源acs:rds::{#accountId}:* 无 无
rds:CreateMigrateTask CreateMigrateTask Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateOnlineDatabaseTask CreateOnlineDatabaseTask Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateParameterGroup CreateParameterGroup Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:CreatePostgresExtensions CreatePostgresExtensions Write acs:rds:{#regionId}:{#accountId}:* 无 无
rds:CreateReadOnlyDBInstance CreateReadOnlyDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:CreateServiceLinkedRole CreateServiceLinkedRole Write 无 无
rds:CreateTempDBInstance CreateTempDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DeleteADSetting DeleteADSetting Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:DeleteAccount DeleteAccount Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DeleteBackup DeleteBackup Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DeleteBackupFile DeleteBackupFile Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DeleteDBInstance DeleteDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DeleteDBInstanceEndpoint DeleteDBInstanceEndpoint Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DeleteDBInstanceEndpointAddress DeleteDBInstanceEndpointAddress Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DeleteDBNodes DeleteDBNodes Write DBInstanceacs:rds:{#Region}:{#AccountId}:dbinstance/{#DbInstanceId} 无 无
rds:DeleteDBProxyEndpointAddress DeleteDBProxyEndpointAddress Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DeleteDatabase DeleteDatabase Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DeleteGadInstance DeleteGadInstance Write 全部资源acs:rds:*:{#accountId}:* 无 无
rds:DeleteParameterGroup DeleteParameterGroup Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:DeletePostgresExtensions DeletePostgresExtensions Write acs:rds:{#regionId}:{#accountId}:* 无 无
rds:DeleteSlot DeleteSlot Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DeleteUserBackupFile DeleteUserBackupFile Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:DescibeImportsFromDatabase DescibeImportsFromDatabase List acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeADInfo DescribeADInfo Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeAccounts DescribeAccounts Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeActionEventPolicy DescribeActionEventPolicy Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeActiveOperationTasks DescribeActiveOperationTasks Read DBInstanceacs:rds:*:{#accountId}:dbinstance/{#DBInstanceId} 无 无
rds:DescribeAllWhitelistTemplate DescribeAllWhitelistTemplate Read acs:rds:{#regionId}:{#accountId}:* 无 无
rds:DescribeAnalyticdbByPrimaryDBInstance DescribeAnalyticdbByPrimaryDBInstance Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeAvailableClasses DescribeAvailableClasses Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeAvailableCrossRegion DescribeAvailableCrossRegion Read DBInstanceacs:rds:*:{#accountId}:dbinstance/* 无 无
rds:DescribeAvailableMetrics DescribeAvailableMetrics Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeAvailableRecoveryTime DescribeAvailableRecoveryTime Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeBackupDatabase DescribeBackupDatabase Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeBackupPolicy DescribeBackupPolicy Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeBackupTasks DescribeBackupTasks Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeBackups DescribeBackups Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeBinlogFiles DescribeBinlogFiles Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeCloudMigrationPrecheckResult DescribeCloudMigrationPrecheckResult Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeCloudMigrationResult DescribeCloudMigrationResult Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeCrossBackupMetaList DescribeCrossBackupMetaList Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeCrossRegionBackupDBInstance DescribeCrossRegionBackupDBInstance Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeCrossRegionBackups DescribeCrossRegionBackups Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeCrossRegionLogBackupFiles DescribeCrossRegionLogBackupFiles Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceAttribute DescribeDBInstanceAttribute Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeDBInstanceByTags DescribeDBInstanceByTags Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeDBInstanceDetail DescribeDBInstanceDetail Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeDBInstanceEncryptionKey DescribeDBInstanceEncryptionKey Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceEndpoints DescribeDBInstanceEndpoints Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceHAConfig DescribeDBInstanceHAConfig Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceIPArrayList DescribeDBInstanceIPArrayList Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceIpHostname DescribeDBInstanceIpHostname Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceMetrics DescribeDBInstanceMetrics Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceMonitor DescribeDBInstanceMonitor Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceNetInfo DescribeDBInstanceNetInfo Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceNetInfoForChannel DescribeDBInstanceNetInfoForChannel Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstancePerformance DescribeDBInstancePerformance Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceProxyConfiguration DescribeDBInstanceProxyConfiguration Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceSSL DescribeDBInstanceSSL Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstanceTDE DescribeDBInstanceTDE Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstances DescribeDBInstances Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstancesAsCsv DescribeDBInstancesAsCsv Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstancesByExpireTime DescribeDBInstancesByExpireTime Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBInstancesByPerformance DescribeDBInstancesByPerformance Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeDBInstancesForClone DescribeDBInstancesForClone Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:DescribeDBMiniEngineVersions DescribeDBMiniEngineVersions Read DBInstanceacs:rds:{#Region}:{#AccountId}:dbinstance/{#DbInstanceId} 无 无
rds:DescribeDBProxy DescribeDBProxy Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBProxyEndpoint DescribeDBProxyEndpoint Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDBProxyPerformance DescribeDBProxyPerformance Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDTCSecurityIpHostsForSQLServer DescribeDTCSecurityIpHostsForSQLServer Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDatabases DescribeDatabases Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeDedicatedHostGroups DescribeDedicatedHostGroups Read DBInstanceacs:rds:*:{#accountId}:dbinstance/*DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeDedicatedHosts DescribeDedicatedHosts Read DBInstanceacs:rds:*:{#accountId}:dbinstance/* 无 无
rds:DescribeDetachedBackups DescribeDetachedBackups Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeErrorLogs DescribeErrorLogs Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeEvents DescribeEvents Read DBInstanceacs:rds:*:{#accountId}:dbinstance/*DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeGadInstances DescribeGadInstances List 全部资源acs:rds::{#accountId}:* 无 无
rds:DescribeHADiagnoseConfig DescribeHADiagnoseConfig Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeHASwitchConfig DescribeHASwitchConfig Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeHistoryTasks DescribeHistoryTasks Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:DescribeHostWebShell DescribeHostWebShell Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeInstanceAutoRenewalAttribute DescribeInstanceAutoRenewalAttribute Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeInstanceCrossBackupPolicy DescribeInstanceCrossBackupPolicy Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeInstanceKeywords DescribeInstanceKeywords Read 无 无
rds:DescribeInstanceLinkedWhitelistTemplate DescribeInstanceLinkedWhitelistTemplate Read acs:rds:{#regionId}:{#accountId}:* 无 无
rds:DescribeLocalAvailableRecoveryTime DescribeLocalAvailableRecoveryTime Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeLogBackupFiles DescribeLogBackupFiles Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeMetaList DescribeMetaList Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeMigrateTaskById DescribeMigrateTaskById Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeMigrateTasks DescribeMigrateTasks Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeModifyPGHbaConfigLog DescribeModifyPGHbaConfigLog Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeModifyParameterLog DescribeModifyParameterLog Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeOssDownloads DescribeOssDownloads Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribePGHbaConfig DescribePGHbaConfig Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeParameterGroup DescribeParameterGroup Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeParameterGroups DescribeParameterGroups Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeParameters DescribeParameters Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribePostgresExtensions DescribePostgresExtensions Read acs:rds:{#regionId}:{#accountId}:* 无 无
rds:DescribeRdsResourceSettings DescribeRdsResourceSettings Read DBInstanceacs:rds:*:{#accountId}:dbinstance/*DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeReadDBInstanceDelay DescribeReadDBInstanceDelay Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeResourceUsage DescribeResourceUsage Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeSQLCollectorPolicy DescribeSQLCollectorPolicy Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeSQLCollectorRetention DescribeSQLCollectorRetention Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeSQLLogFiles DescribeSQLLogFiles Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeSQLLogRecords DescribeSQLLogRecords Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeSQLLogReportList DescribeSQLLogReportList Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeSecurityGroupConfiguration DescribeSecurityGroupConfiguration Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeSlots DescribeSlots Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:DescribeSlowLogRecords DescribeSlowLogRecords Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeSlowLogs DescribeSlowLogs Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeSupportOnlineResizeDisk DescribeSupportOnlineResizeDisk Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:DescribeTags DescribeTags Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/*DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeTasks DescribeTasks Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeUpgradeMajorVersionPrecheckTask DescribeUpgradeMajorVersionPrecheckTask Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeUpgradeMajorVersionTasks DescribeUpgradeMajorVersionTasks Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DescribeWhitelistTemplate DescribeWhitelistTemplate Read acs:rds:{#regionId}:{#accountId}:* 无 无
rds:DescribeWhitelistTemplateLinkedInstance DescribeWhitelistTemplateLinkedInstance Read acs:rds:{#regionId}:{#accountId}:* 无 无
rds:DestroyDBInstance DestroyDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:DetachGadInstanceMember DetachGadInstanceMember Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:DetachWhitelistTemplateToInstance DetachWhitelistTemplateToInstance Write acs:rds:{#regionId}:{#accountId}:* 无 无
rds:GetDBInstanceTopology GetDBInstanceTopology Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:GetDbProxyInstanceSsl GetDbProxyInstanceSsl Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:GrantAccountPrivilege GrantAccountPrivilege Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:GrantOperatorPermission GrantOperatorPermission Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ImportDatabaseBetweenInstances ImportDatabaseBetweenInstances Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ImportUserBackupFile ImportUserBackupFile Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:ListTagResources ListTagResources Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:LockAccount LockAccount Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:MigrateConnectionToOtherZone MigrateConnectionToOtherZone Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:MigrateDBInstance MigrateDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:MigrateSecurityIPMode MigrateSecurityIPMode Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:MigrateToOtherZone MigrateToOtherZone Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyADInfo ModifyADInfo Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:ModifyAccountDescription ModifyAccountDescription Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyActionEventPolicy ModifyActionEventPolicy Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ModifyActiveOperationTasks ModifyActiveOperationTasks Write DBInstanceacs:rds:*:{#accountId}:dbinstance/{#DBInstanceId} 无 无
rds:ModifyBackupPolicy ModifyBackupPolicy Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyCollationTimeZone ModifyCollationTimeZone Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ModifyDBDescription ModifyDBDescription Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceAutoUpgradeMinorVersion ModifyDBInstanceAutoUpgradeMinorVersion Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceConfig ModifyDBInstanceConfig Write acs:rds:{#regionId}:{#accountId}:* 无 无
rds:ModifyDBInstanceConnectionMode ModifyDBInstanceConnectionMode Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ModifyDBInstanceConnectionString ModifyDBInstanceConnectionString Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceDelayedReplicationTime ModifyDBInstanceDelayedReplicationTime Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceDeletionProtection ModifyDBInstanceDeletionProtection Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceDescription ModifyDBInstanceDescription Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceEndpoint ModifyDBInstanceEndpoint Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ModifyDBInstanceEndpointAddress ModifyDBInstanceEndpointAddress Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceHAConfig ModifyDBInstanceHAConfig Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceMaintainTime ModifyDBInstanceMaintainTime Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceMetrics ModifyDBInstanceMetrics Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceMonitor ModifyDBInstanceMonitor Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceNetworkExpireTime ModifyDBInstanceNetworkExpireTime Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceNetworkType ModifyDBInstanceNetworkType Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstancePayType ModifyDBInstancePayType Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceProxyConfiguration ModifyDBInstanceProxyConfiguration Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceSSL ModifyDBInstanceSSL Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceSpec ModifyDBInstanceSpec Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBInstanceTDE ModifyDBInstanceTDE Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBNode ModifyDBNode Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:ModifyDBProxy ModifyDBProxy Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBProxyEndpoint ModifyDBProxyEndpoint Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBProxyEndpointAddress ModifyDBProxyEndpointAddress Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDBProxyInstance ModifyDBProxyInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDTCSecurityIpHostsForSQLServer ModifyDTCSecurityIpHostsForSQLServer Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ModifyDasInstanceConfig ModifyDasInstanceConfig Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyDatabaseConfig ModifyDatabaseConfig Write acs:rds:{#regionId}:{#accountId}:* 无 无
rds:ModifyDbProxyInstanceSsl ModifyDbProxyInstanceSsl Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyHADiagnoseConfig ModifyHADiagnoseConfig Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyHASwitchConfig ModifyHASwitchConfig Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyInstanceAutoRenewalAttribute ModifyInstanceAutoRenewalAttribute Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyInstanceCrossBackupPolicy ModifyInstanceCrossBackupPolicy Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyPGHbaConfig ModifyPGHbaConfig Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyParameter ModifyParameter Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyParameterGroup ModifyParameterGroup Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ModifyReadWriteSplittingConnection ModifyReadWriteSplittingConnection Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ModifyReadonlyInstanceDelayReplicationTime ModifyReadonlyInstanceDelayReplicationTime Write DBInstanceacs:rds:*:{#accountId}:dbinstance/{#DBInstanceId} 无 无
rds:ModifyResourceGroup ModifyResourceGroup Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifySQLCollectorPolicy ModifySQLCollectorPolicy Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifySQLCollectorRetention ModifySQLCollectorRetention Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ModifySecurityGroupConfiguration ModifySecurityGroupConfiguration Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifySecurityIps ModifySecurityIps Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ModifyWhitelistTemplate ModifyWhitelistTemplate Write acs:rds:{#regionId}:{#accountId}:* 无 无
rds:PurgeDBInstanceLog PurgeDBInstanceLog Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:RebuildDBInstance RebuildDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ReceiveDBInstance ReceiveDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:RecoveryDBInstance RecoveryDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ReleaseInstanceConnection ReleaseInstanceConnection Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:ReleaseInstancePublicConnection ReleaseInstancePublicConnection Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ReleaseReadWriteSplittingConnection ReleaseReadWriteSplittingConnection Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:RemoveTagsFromResource RemoveTagsFromResource Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}DatabaseInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId} 无 无
rds:RenewInstance RenewInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ResetAccount ResetAccount Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:ResetAccountPassword ResetAccountPassword Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:RestartDBInstance RestartDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:RestoreDdrTable RestoreDdrTable Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:RestoreTable RestoreTable Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:RevokeAccountPrivilege RevokeAccountPrivilege Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:RevokeOperatorPermission RevokeOperatorPermission Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:StartDBInstance StartDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:StopDBInstance StopDBInstance Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:SwitchDBInstanceHA SwitchDBInstanceHA Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:SwitchDBInstanceNetType SwitchDBInstanceNetType Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:SwitchDBInstanceVpc SwitchDBInstanceVpc Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:TagResources TagResources Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:TerminateMigrateTask TerminateMigrateTask Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:TransformDBInstancePayType TransformDBInstancePayType Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:UnlockAccount UnlockAccount Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:UntagResources UntagResources Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:UpdatePostgresExtensions UpdatePostgresExtensions Write acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} 无 无
rds:UpdateUserBackupFile UpdateUserBackupFile Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId} 无 无
rds:UpgradeDBInstanceEngineVersion UpgradeDBInstanceEngineVersion Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:UpgradeDBInstanceKernelVersion UpgradeDBInstanceKernelVersion Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:UpgradeDBInstanceMajorVersion UpgradeDBInstanceMajorVersion Write DBInstanceacs:rds:*:{#accountId}:dbinstance/{#DBInstanceId} 无 无
rds:UpgradeDBInstanceMajorVersionPrecheck UpgradeDBInstanceMajorVersionPrecheck Read DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无
rds:UpgradeDBProxyInstanceKernelVersion UpgradeDBProxyInstanceKernelVersion Write DBInstanceacs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} rds:ResourceTag 无

资源（Resource）

下表是关系型数据库（RDS）定义的资源，这些资源可以在RAM权限策略语句的Resource元素中使用，用来授予对该资源执行具体操作的权限。 其中，资源ARN是资源在阿里云上的唯一标识。具体说明如下：

  • {#}为变量标识，需要您替换为实际值。例如：{#ramcode}需要您替换为实际的云服务RAM代码。
  • *表示全部。例如：
    • {#resourceType}为*时：表示全部资源。
    • {#regionId}为*时：表示全部地域。
    • {#accountId}为*时：表示全部阿里云账号。
资源类型 资源ARN
DBInstance acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}
GadInstance acs:{#ramcode}:*:{#accountId}:gadinstance/{#GadInstanceName}

条件（Condition）

下表是关系型数据库（RDS）定义的产品级条件关键字，这些条件关键字可以在RAM权限策略语句的Condition元素中使用，用来描述授予权限的条件。以下仅列举产品级的条件关键字，阿里云定义的通用条件关键字也同样适用关系型数据库（RDS）。其中，数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符，否则无法匹配策略语句，授权行为无效。数据类型与条件运算符的对应关系，请参见条件操作类型。

条件关键字 描述 类型
rds:ResourceTag 资源 tab 标签 STRING

相关操作

您可以创建自定义权限策略，并将权限策略授予RAM用户、RAM用户组或RAM角色。具体操作如下：

  • 创建自定义权限策略
  • 为RAM用户授权
  • 为RAM用户组授权
  • 为RAM角色授权

内容没看懂？ 不太想学习？想快速解决？ 有偿解决： 联系专家

阿里云企业补贴进行中： 马上申请

腾讯云限时活动1折起，即将结束： 马上收藏

同尘科技为腾讯云授权服务中心。

购买腾讯云产品享受折上折，更有现金返利:同意关联，立享优惠

转转请注明出处：https://www.yunxiaoer.com/167409.html

赞 (0)
0
上一篇 2023年12月10日
下一篇 2023年12月10日
详情页2

相关推荐

  • 阿里云RDS数据库包年包月转按量付费-云淘科技

    您可以根据业务需求，将RDS实例的计费方式由预付费（包年包月）转变为后付费（按量付费）。 前提条件 实例的计费方式为包年包月。计费方式详情请参见计费项。 实例状态为运行中。 实例规格不是历史规格。历史规格实例请变更规格之后再转按量付费。 费用 包年包月实例转为按量付费后，会将余款按之前的支付方式原路退回给您。 具体金额，请参见非五天无理由退订说明。 影响 本…

    阿里云数据库 2023年12月9日

  • 阿里云负载均衡ListListenerCertificates – 查询TCPSSL监听证书-云淘科技

    查询TCPSSL监听的服务器证书。 调试 您可以在OpenAPI Explorer中直接运行该接口，免去您计算签名的困扰。运行成功后，OpenAPI Explorer可以自动生成SDK代码示例。 调试调试授权信息下表是API对应的授权信息，可以在RAM权限策略语句的Action元素中使用，用来给RAM用户或RAM角色授予调用此API的权限。具体说明如下： 操…

    阿里云负载均衡 2023年12月10日
  • 信息流广告，信息流部分建议宽度830px，只针对默认列表样式，顺序随机

  • 阿里云日志服务SLS按使用功能计费-云淘科技

    日志服务默认使用按量付费，按量付费是一种先使用后付费的计费方式。日志服务按使用功能计费模式，按照您使用到的资源及功能颗粒度计费，有利于您基于实际需求精细化管理日志服务资源的费用。 特性 说明 计费说明 按量付费，即后付费，是指您购买的资源按照实际用量结算，在每个结算周期生成账单并从账户中扣除相应费用。 适用场景 按使用功能计费主要适用于以下业务场景： 业务用…

    阿里云日志服务SLS 2023年12月10日

  • 阿里云日志服务SLS调用函数清洗数据-云淘科技

    您可以通过日志服务数据加工函数清洗您所采集的海量日志数据，实现数据格式标准化。本文介绍调用函数清洗数据的常见场景和相关操作。 场景1：过滤日志（e_keep函数和e_drop函数） 您可以使用e_drop函数或e_keep函数过滤日志，也可以使用e_if函数与DROP参数、e_if_else函数与DROP参数过滤日志。 常用规则如下所示： e_keep(e_…

    阿里云日志服务SLS 2023年12月10日
  • 阿里云ECS云服务器经典网络实例全部迁移到VPC最佳实践-云淘科技 阿里云服务器

    阿里云ECS云服务器经典网络实例全部迁移到VPC最佳实践-云淘科技

    本文介绍如何将经典网络中的ECS实例和RDS实例全部迁移到VPC，并且在迁移完成后业务环境快速可用。 背景信息 您在经典网络中，已购买ECS实例（ECS_A和ECS_B）和RDS实例，其中ECS实例作为应用服务器，RDS实例作为数据库服务器，各实例之间通过内网连接。由于业务发展需要，需要将ECS实例和RDS实例全部迁移到VPC。为了保持业务稳定，希望不改变实…

    2023年12月9日

联系我们

400-800-8888

在线咨询： QQ交谈

邮件：admin@example.com

工作时间：周一至周五，9:30-18:30，节假日休息

关注微信
本站为广大会员提供阿里云、腾讯云、华为云、百度云等一线大厂的购买，续费优惠，保证底价，买贵退差。