RAM authentication

更新时间:
复制 MD 格式

Before a RAM user can call a Database File System API, an Alibaba Cloud account must grant permissions to the RAM user by creating an authorization policy. This policy specifies the resources using an Alibaba Cloud Resource Name (ARN).

Authorizable Database File System resource types

When you grant permissions to a RAM user, describe the Database File System resources as follows:

Resource typeResource description method in an authorization policy
DbfsInstanceacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}

Authorizable Database File System APIs

The following table lists the authorizable Database File System APIs and how to describe them.

APIResource description
AttachDbfsacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}
CreateDbfsacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/*
DeleteDbfsacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}
DetachDbfsacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}
ResizeDbfsacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}
ListDbfsacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/*
GetDbfsacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}
RenameDbfsacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}
ListSnapshotacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/*
CreateSnapshotacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}
DeleteSnapshotacs:dbfs:{#regionId}:{#accountId}:dbfsinstance/{#dbfsInstanceId}