DocsICP FilingConsole
官方文档
首页

RAM authorization

更新时间：
复制 MD 格式
我的收藏

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. Using RAM helps you avoid sharing your Alibaba Cloud account keys with other users and allows you to grant users the least privilege access. RAM uses permission policies to define authorizations. This topic describes the general structure of a RAM policy, and the policy statement elements (Action, Resource, and Condition) defined by AnalyticDB for MySQL for RAM permission policies. The RAM code (RamCode) for AnalyticDB for MySQL is adb , and the supported authorization granularity is RESOURCE .

General structure of a policy

Permission policies support JSON format with the following general structure:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

The following list describes the fields in the policy:

  • Version: Specifies the policy version number. It is fixed at 1.

  • Statement:

    • Effect: Specifies the authorization result. Valid values: Allow and Deny.

    • Action: Specifies one or more operations that are allowed or denied.

    • Resource: Specifies the specific objects affected by the operations. You can use Alibaba Cloud Resource Names (ARNs) to describe specific resources.

    • Condition: Specifies the conditions for the authorization to take effect. This field is optional.

      • Condition operator: Specifies the conditional operators. Different types of conditions support different conditional operators.

      • Condition_key: Specifies the condition keys.

      • Condition_value: Specifies the condition values.

Action

The following table lists the actions defined by AnalyticDB for MySQL. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that support authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding ARN in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys that are applicable across all RAM-integrated services. For more information, see Common condition keys.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

API

Access level

Resource type

Condition key

Dependent action
adb:DescribeSparkAppType DescribeSparkAppType get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DeleteBackups DeleteBackups delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeElasticPlanSpecifications DescribeElasticPlanSpecifications list

*All Resource

*

 None None
adb:CreateBackup CreateBackup create

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DeleteDBResourceGroup DeleteDBResourceGroup delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeSQLWebSocketDomain DescribeSQLWebSocketDomain get

*All Resource

*

 None None
adb:BatchApplyAdviceByIdList BatchApplyAdviceByIdList update

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAdbMySqlSchemas DescribeAdbMySqlSchemas list

*All Resource

*

 None None
adb:DescribeMVRecommendResults DescribeMVRecommendResults get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:getTableObjects GetTableObjects get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:SuspendApsJob SuspendApsJob none

*All Resource

*

 None None
adb:GetSparkAppInfo GetSparkAppInfo get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}

 None None
adb:ModifyAccountPrivileges ModifyAccountPrivileges update

*All Resource

*

 None None
adb:describeAllDataSource DescribeTables get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeTablePartitionDiagnose DescribeTablePartitionDiagnose get

DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DeleteLakeStorage DeleteLakeStorage delete

*All Resource

*

 None None
adb:DescribeLakeCacheSize DescribeLakeCacheSize get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeTableDetail DescribeTableDetail get

DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:GetSparkWarehouseBatchSQL GetSparkWarehouseBatchSQL get

*All Resource

*

 None None
adb:DescribeAbnormalPatternDetection DescribeAbnormalPatternDetection get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ConfigureResultExport ConfigureResultExport create

*All Resource

*

 None None
adb:GetSparkAppAttemptLog GetSparkAppAttemptLog get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}

 None None
adb:DownloadInstanceCACertificate DownloadInstanceCACertificate get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDBClusterHealthStatus DescribeDBClusterHealthStatus list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeSparkCodeLog DescribeSparkCodeLog list

*All Resource

*

 None None
adb:SubmitResultExportJob SubmitResultExportJob create

*All Resource

*

 None None
adb:UpgradeKernelVersion UpgradeKernelVersion none

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateApsSlsADBJob CreateApsSlsADBJob none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DetachUserENI DetachUserENI update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeControllerDetection DescribeControllerDetection get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:BindAccount BindAccount update

*AccountLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeComputeResourceUsage DescribeComputeResourceUsage get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyApsJob ModifyApsJob update

*All Resource

*

 None None
adb:DescribeJobResourceUsage DescribeJobResourceUsage get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:GetADBSparkNecessaryRAMPermissions GetADBSparkNecessaryRAMPermissions get

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:SubmitSparkLogAnalyzeTask SubmitSparkLogAnalyzeTask create

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:EnableElasticPlan EnableElasticPlan update

*All Resource

*

 None None
adb:GetSparkAppState GetSparkAppState get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}

 None None
adb:DeleteSparkTemplate DeleteSparkTemplateFile delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/template/{#TemplateId}

 None None
adb:ReleaseClusterPublicConnection ReleaseClusterPublicConnection delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DownloadDiagnosisRecords DownloadDiagnosisRecords create

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeStorageResourceUsage DescribeStorageResourceUsage get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeUserQuota DescribeUserQuota get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeClusterResourceUsage DescribeClusterResourceUsage get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateOssSubDirectory CreateOssSubDirectory none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:AllocateClusterPublicConnection AllocateClusterPublicConnection update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyDBResourceGroup ModifyDBResourceGroup update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ListSparkLogAnalyzeTasks ListSparkLogAnalyzeTasks list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:KillSparkEngine KillSparkSQLEngine delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}

 None None
adb:DescribeSQLPatterns DescribeSQLPatterns list

*All Resource

*

 None None
adb:ModifyPerformanceView ModifyPerformanceView update

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ListApsWebhook ListApsWebhook none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyClusterAccessWhiteList ModifyClusterAccessWhiteList update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CheckSampleDataSet CheckSampleDataSet get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyDBClusterMaintainTime ModifyDBClusterMaintainTime update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeCompactionServiceSwitch DescribeCompactionServiceSwitch update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeKernelVersion DescribeKernelVersion list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:describeAllDataSource DescribeColumns get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:SubmitSparkApp StartSparkReplSession none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#resourcegroup}

 None None
adb:ModifyDBClusterResourceGroup ModifyDBClusterResourceGroup update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeApsMigrationWorkloads DescribeApsMigrationWorkloads get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:SubmitSparkApp SubmitSparkApp create

*SparkApplication

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}

 None None
adb:CancelSparkWarehouseBatchSQL CancelSparkWarehouseBatchSQL update

*All Resource

*

 None None
adb:DescribeTableAccessCount DescribeTableAccessCount list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAvailableAdvices DescribeAvailableAdvices get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeSparkCodeOutput DescribeSparkCodeOutput list

*All Resource

*

 None None
adb:DescribeAuditLogRecords DescribeAuditLogRecords list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ListResultExportJobHistory ListResultExportJobHistory list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DeleteSparkTemplate DeleteSparkTemplate delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/template/{#TemplateId}

 None None
adb:DescribeApsActionLogs DescribeApsActionLogs none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:StartSparkEngine StartSparkSQLEngine create

*All Resource

*

 None None
adb:DescribeElasticPlans DescribeElasticPlans list

*All Resource

*

 None None
adb:DeleteApsJob DeleteApsJob none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeEnabledPrivileges DescribeEnabledPrivileges list

*All Resource

*

 None None
adb:ModifyApsDatasoure ModifyApsDatasoure update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:AttachUserENI AttachUserENI update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:GetCreateTableSQL GetCreateTableSQL get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DeleteAccount DeleteAccount delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifySqlTemplatePosition ModifySqlTemplatePosition get

*All Resource

*

 None None
adb:ModifyApsSlsADBJob ModifyApsSlsADBJob update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAutoRenewalAttribute DescribeAutoRenewalAttribute get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribePerformanceViews DescribePerformanceViews list

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDBClusterSSL DescribeDBClusterSSL get

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDiagnosisDimensions DescribeDiagnosisDimensions list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribePerformanceViewAttribute DescribePerformanceViewAttribute get

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeEssdCacheConfig DescribeEssdCacheConfig update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeSparkSQLDiagnosisAttribute DescribeSparkSQLDiagnosisAttribute get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateSparkTemplate CreateSparkTemplate create

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeApsProgress DescribeApsProgress none

*All Resource

*

 None None
adb:DeleteMaterializedViewRecommend DeleteMaterializedViewRecommend delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeSqlPattern DescribeSqlPattern list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:UnbindAccount UnbindAccount update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeSparkAuditLogRecords DescribeSparkAuditLogRecords list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateApsDatasoure CreateApsDatasoure none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDBClusterPerformance DescribeDBClusterPerformance list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeProcessList DescribeProcessList get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ListSparkWarehouseBatchSQL ListSparkWarehouseBatchSQL list

*All Resource

*

 None None
adb:DescribeApsJobDetail DescribeApsJobDetail none

*All Resource

*

 None None
adb:DisableElasticPlan DisableElasticPlan update

*All Resource

*

 None None
adb:ModifyAuditLogConfig ModifyAuditLogConfig update

DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeOperatorPermission DescribeOperatorPermission get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

 None None
adb:DeleteApsDatasoure DeleteApsDatasoure none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:ExecuteSparkReplStatement ExecuteSparkReplStatement none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbClusterId}/resourcegroup/{#resourceGroupName}/sparkapp/{#sparkAppId}

 None None
adb:GetSparkAppWebUiAddress GetSparkAppWebUiAddress get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}

 None None
adb:GrantOperatorPermission GrantOperatorPermission update

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

 None None
adb:DescribeAccountPrivileges DescribeAccountPrivileges list

*All Resource

*

 None None
adb:BindDBResourceGroupWithUser BindDBResourceGroupWithUser update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyElasticPlan ModifyElasticPlan update

*All Resource

*

 None None
adb:GetSparkReplSession GetSparkReplSession none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbClusterId}/resourcegroup/{#resourceGroupName}/sparkapp/{#sparkAppId}/{#sessionid}

 None None
adb:EnableAdviceService EnableAdviceService update

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeExcessivePrimaryKeys DescribeExcessivePrimaryKeys get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateAPSJob CreateAPSJob none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:KillSparkLogAnalyzeTask KillSparkLogAnalyzeTask delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/task/{#SparkTaskId}

 None None
adb:DescribeApsDatasources DescribeApsDatasources none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:UpdateApsWebhook UpdateApsWebhook none

*All Resource

*

 None None
adb:DisableAdviceService DisableAdviceService update

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:GetSparkAppMetrics GetSparkAppMetrics get

*SparkApplication

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}

 None None
adb:SetSparkAppLogRootPath SetSparkAppLogRootPath update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeHistoryTasks DescribeHistoryTasks get

*All Resource

*

 None None
adb:GetSparkTemplateFolderTree GetSparkTemplateFolderTree get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyDBCluster ModifyDBCluster update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeElasticPlanJobs DescribeElasticPlanJobs list

*All Resource

*

 None None
adb:CreatePerformanceView CreatePerformanceView create

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:PreloadSparkAppMetrics PreloadSparkAppMetrics create

*SparkApplication

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}

 None None
adb:describeAllDataSource DescribeAllDataSource get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDiagnosisSQLInfo DescribeDiagnosisSQLInfo list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateMaterializedViewRecommend CreateMaterializedViewRecommend create

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:getTable GetTable get

*All Resource

*

 None None
adb:DescribeElasticPlanAttribute DescribeElasticPlanAttribute list

*All Resource

*

 None None
adb:DescribeDBClusters DescribeDBClusters list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeResultExportConfig DescribeResultExportConfig get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:getTableColumns GetTableColumns get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:describeAllDataSource DescribeSchemas get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DeleteDBCluster DeleteDBCluster delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:KillSparkApp KillSparkApp delete

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}

 None None
adb:CancelSparkReplStatement CancelSparkReplStatement none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbClusterId}/resourcegroup/{#resourceGroupName}/sparkapp/{#sparkAppId}/{#sparkStatmentId}

 None None
adb:ModifyDBClusterDescription ModifyDBClusterDescription update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:getTableDDL GetTableDDL get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeWorkerDetection DescribeWorkerDetection get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAdbMySqlTableMeta DescribeAdbMySqlTableMeta get

*All Resource

*

 None None
adb:ModifyAutoRenewalAttribute ModifyAutoRenewalAttribute update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeBackups DescribeBackups get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DeleteApsWebhook DeleteApsWebhook delete

*All Resource

*

 None None
adb:DescribeInclinedTables DescribeInclinedTables get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyMaterializedView ModifyMaterializedView update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:GetLakeStorage GetLakeStorage get

*All Resource

*

 None None
adb:GetSparkLogAnalyzeTask GetSparkLogAnalyzeTask get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/task/{#SparkTaskId}

 None None
adb:GetActiveSparkSession GetSparkSQLEngineState get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}

 None None
adb:DescribeResourceGroupSpec DescribeResourceGroupSpec list

*All Resource

*

 None None
adb:ListLakeStorages ListLakeStorages list

*All Resource

*

 None None
adb:DeleteElasticPlan DeleteElasticPlan delete

*All Resource

*

 None None
adb:DescribeAdbMySqlColumns DescribeAdbMySqlColumns list

*All Resource

*

 None None
adb:DescribeSparkSQLDiagnosisList DescribeSparkSQLDiagnosisList get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeBackupPolicy DescribeBackupPolicy get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeApsDatasource DescribeApsDatasource none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDBClusterAttribute DescribeDBClusterAttribute get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeSparkAppDiagnosisInfo DescribeSparkAppDiagnosisInfo get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateLakeStorageBucket CreateLakeStorage create

*All Resource

*

 None None
adb:GetSparkTemplateFullTree GetSparkTemplateFullTree get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyEssdCacheConfig ModifyEssdCacheConfig update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateAccount CreateAccount create

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:getDatabaseObjectsByFilter GetDatabaseObjects get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyApsWorkloadName ModifyApsWorkloadName update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDBResourceGroup DescribeDBResourceGroup list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ExecuteSparkWarehouseBatchSQL ExecuteSparkWarehouseBatchSQL none

*All Resource

*

 None None
adb:GetSparkTemplateFileContent GetSparkTemplateFileContent get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyMaterializedViewRecommend ModifyMaterializedViewRecommend update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:getViewDDL GetViewDDL get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeApsJobs DescribeApsJobs list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:UpdateLakeStorage UpdateLakeStorage update

*All Resource

*

 None None
adb:DescribeExecutorDetection DescribeExecutorDetection get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:RevokeOperatorPermission RevokeOperatorPermission update

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

 None None
adb:DescribeSparkCodeWebUi DescribeSparkCodeWebUi list

*All Resource

*

 None None
adb:CreateApsCopyWorkload CreateApsCopyWorkload none

*All Resource

*

 None None
adb:CreateElasticPlan CreateElasticPlan create

*All Resource

*

 None None
adb:DescribePatternPerformance DescribePatternPerformance list

*All Resource

*

 None None
adb:StartApsJob StartApsJob none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeBadSqlDetection DescribeBadSqlDetection get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyBackupPolicy ModifyBackupPolicy update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAdbMySqlTables DescribeAdbMySqlTables list

*All Resource

*

 None None
adb:ModifyAccountDescription ModifyAccountDescription update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAccountAllPrivileges DescribeAccountAllPrivileges list

*All Resource

*

 None None
adb:ListSparkAppAttempts ListSparkAppAttempts list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyDBClusterVip ModifyDBClusterVip update

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:GetSparkReplStatement GetSparkReplStatement none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbClusterId}/resourcegroup/{#resourceGroupName}/sparkapp/{#sparkAppId}/{#sparkStatmentId}

 None None
adb:DescribeClusterAccessWhiteList DescribeClusterAccessWhiteList list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeClusterResourceDetail DescribeClusterResourceDetail get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:LoadSampleDataSet LoadSampleDataSet update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeTableStatistics DescribeTableStatistics get

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateApsKafkaHudiJob CreateApsKafkaHudiJob none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateDBResourceGroup CreateDBResourceGroup create

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeApsHiveWorkload DescribeApsHiveWorkload none

*All Resource

*

 None None
adb:ResetAccountPassword ResetAccountPassword update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyClickhouseEngine ModifyClickhouseEngine update

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAccounts DescribeAccounts list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateDBCluster CreateDBCluster create

*All Resource

*

adb:DiskEncryption

adb:EnableSSL

 None
adb:GetSparkAppLog GetSparkAppLog get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}

 None None
adb:GetSparkConfigLogPath GetSparkConfigLogPath get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDownloadRecords DescribeDownloadRecords list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeClusterNetInfo DescribeClusterNetInfo list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CheckBindRamUser CheckBindRamUser get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDiagnosisRecords DescribeDiagnosisRecords list

*All Resource

*

 None None
adb:DescribeOversizeNonPartitionTableInfos DescribeOversizeNonPartitionTableInfos get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:UnbindDBResourceGroupWithUser UnbindDBResourceGroupWithUser update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeApsResourceGroups DescribeApsResourceGroups none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateApsHiveJob CreateApsHiveJob none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAccountPrivilegeObjects DescribeAccountPrivilegeObjects list

*All Resource

*

 None None
adb:ModifyDBClusterSSL ModifyDBClusterSSL update

*DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:KillProcess KillProcess list

DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ListTagResources ListTagResources list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:UpdateSparkTemplateFile UpdateSparkTemplateFile update

*SparkTemplate

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/template/{#TemplateId}

 None None
adb:ModifyLakeCacheSize ModifyLakeCacheSize get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:GetActiveSparkSession ExistRunningSQLEngine get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}

 None None
adb:DescribeAppliedAdvices DescribeAppliedAdvices get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAdviceServiceEnabled DescribeAdviceServiceEnabled get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:CreateApsWebhook CreateApsWebhook none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAdbMySqlIndexes DescribeAdbMySqlIndexes get

*All Resource

*

 None None
adb:DeletePerformanceView DeletePerformanceView delete

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeInclinedNodes DescribeInclinedNodes get

DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ListSparkTemplateFileIds ListSparkTemplateFileIds list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyUserEniVswitchOptions ModifyUserEniVswitchOptions update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ListSparkApps ListSparkApps list

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ModifyCompactionServiceSwitch ModifyCompactionServiceSwitch update

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeMvRecommendSubTasks DescribeMvRecommendSubTasks get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeAPSADBInstances DescribeAPSADBInstances none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeMvRecommendTasks DescribeMvRecommendTasks get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeHistoryTasksStat DescribeHistoryTasksStat update

*All Resource

*

 None None
adb:getViewObjects GetViewObjects get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#AccountId}:dbcluster/{#DBClusterId}

 None None
adb:RunMaterializedViewRecommend RunMaterializedViewRecommend none

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:ApplyAdviceById ApplyAdviceById update

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeViewJobs DescribeViewJobs get

*DBClusterLakeVersion

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None
adb:DescribeDBClusterSpaceSummary DescribeDBClusterSpaceSummary get

DBCluster

acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

 None None

Resource

The following table lists the resources defined by AnalyticDB for MySQL. Specify them in the Resource element of RAM policy statements to grant permissions for specific operations. They are uniquely identified by ARNs. Format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

  • acs: The initialism of Alibaba Cloud service, which indicates the public cloud of Alibaba Cloud.

  • {#ramcode}: The code used in RAM to indicate an Alibaba Cloud service.

  • {#regionId}: The region ID. If the resource covers all regions, set it to an asterisk (*).

  • {#accountId}: The ID of the Alibaba Cloud account. If the resource covers all Alibaba Cloud accounts, set it to an asterisk (*).

  • {#resourceType}: The service-defined resource identifier. It supports a hierarchical structure, which is similar to a file path. If the statement covers global resources, set it to an asterisk (*).

Resource type

ARN
DBClusterLakeVersion
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}
  • acs:adb:{#regionId}:{#accountId}:DBClusterLakeVersion/*
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourceGroupName/{#ResrouceGroupName}/query/{#QueryId}
  • acs:adb:{#regionId}:{#accountId}:DBClusterLakeVersion/DBClusterLakeVersionId
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/template/{#TemplateId}
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}
  • acs:adb:{#Region}:{#AccountId}:dbcluster/{#DBClusterId}
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourceGroupName/{#ResrouceGroupName}
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbClusterId}/resourcegroup/{#resourceGroupName}/sparkapp/{#sparkAppId}
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbClusterId}/resourcegroup/{#resourceGroupName}/sparkapp/{#sparkAppId}/{#sessionid}
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/task/{#SparkTaskId}
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#dbClusterId}/resourcegroup/{#resourceGroupName}/sparkapp/{#sparkAppId}/{#sparkStatmentId}
DBCluster
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}
LakeAccount
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/account/{#AccountName}
AccountLakeVersion
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}
SparkApplication
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}/sparkapp/{#SparkAppId}
ResourceGroup
  • acs:adb:*:{#accountId}:dbcluster/{#DBClusterId}/resourcegroup/{#ResourceGroup}
SparkTemplate
  • acs:adb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}/template/{#TemplateId}

Condition

The following table lists the product-level condition keys defined by AnalyticDB for MySQL. You can also use Alibaba Cloud's Common condition keys. Specify these keys in the Condition element of RAM policy statements to define granular authorization rules. In the condition key, specify the condition values in the Condition_value element of the policy.

Each condition key has a specific data type, such as string, number, Boolean, or IP address. The data type determines which conditional operators can be used to compare the request values against policy values. You must specify the conditional operators compatible with the data type of the condition key. Mismatched operators will invalidate the policy. See Condition operator for valid combinations.

Condition key

Description

Data type
adb:DiskEncryption Whether to enable cloud disk encryption String
adb:EnableSSL Whether to enable SSL encryption link String

How to create custom RAM policies?

You can create custom policies and grant them to RAM users, RAM user groups, or RAM roles. For instructions, see:

Previous：EndpointsNext：Flow control information