This topic describes the authorization rules for management APIs and traffic APIs.
Management API authorization rules
POP Action | Description | RAM Action | Resource Pattern |
ListApps | Gets all application versions. | opensearch:ListApp | apps/* |
CreateAppGroup | Creates an application. | opensearch:CreateAppGroup | app-groups/* |
DescribeAppGroupDataReport | Queries the Data Quality report of an application. | opensearch:DescribeApp | apps/$appGroupName |
RemoveAppGroup | Deletes an application. | opensearch:RemoveAppGroup | app-groups/$appGroupName |
ListAppGroupErrors | Queries the error logs of an application. | opensearch:ListAppGroupErrors | app-groups/$appGroupName |
ListAppGroups | Gets the application list. | opensearch:ListAppGroup | app-groups/* |
ListAppGroupMetrics | Query application data reports | opensearch:ListAppGroupMetric | app-groups/$appGroupName |
RenewAppGroup | Renews an application. | opensearch:UpdateApp | apps/$appGroupName |
DescribeAppGroup | Gets the details of an application. | opensearch:DescribeAppGroup | app-groups/$appGroupName |
ReplaceAppGroupCommodityCode | Converts an application from service-based to instance-based. | opensearch:UpdateApp | apps/$appGroupName |
ModifyAppGroup | Modifies application properties or switches the online version. | opensearch:ModifyAppGroup | app-groups/$appGroupName |
ModifyAppGroupQuota | Modifies the quota of an application. | opensearch:updateAppGroupQuota | app-groups/$appGroupName |
CreateApp | Creates an application version. | opensearch:CreateApp | app-groups/$appGroupName |
RemoveApp | Deletes an application version. | opensearch:RemoveApp | app-groups/$appGroupName |
DescribeApps | Gets the version list of an application. | opensearch:ListApp | app-groups/$appGroupName |
DescribeApp | Views the details of an application version. | opensearch:DescribeApp | app-groups/$appGroupName |
DescribeAppStatistics | Gets the statistics of an application version. | opensearch:DescribeAppStatistics | app-groups/$appGroupName |
UpdateFetchFields | Updates the default display fields of an application version. | opensearch:UpdateApp | apps/$appGroupName |
CreateFirstRank | Creates the rough sort expression configuration for an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
RemoveFirstRank | Deletes the rough sort expression configuration of an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
ListFirstRanks | Gets the list of rough sort expression configurations for an application version. | opensearch:ListFirstRank | apps/$appGroupName |
DescribeFirstRank | Gets the details of the rough sort expression configuration for an application version. | opensearch:DescribeFirstRank | apps/$appGroupName |
ModifyFirstRank | Modifies the rough sort expression configuration of an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
ListSlowQueryCategories | Gets the checklist of slow query optimization suggestions from Query Optimizer. | opensearch:ListOptimizerSlowQueryCategories | apps/$appGroupName |
StartSlowQueryAnalyzer | Starts a slow query analysis immediately. | opensearch:WriteOptimizerSlowQueryCategories | apps/$appGroupName |
ListSlowQueryQueries | Lists the checklist of slow queries from Query Optimizer. | opensearch:ListOptimizerSlowQueries | apps/$appGroupName |
DisableSlowQuery | Disables the slow query service of Query Optimizer. | opensearch:WriteOptimizerSlowQuery | apps/$appGroupName |
EnableSlowQuery | Enables the slow query service of Query Optimizer. | opensearch:WriteOptimizerSlowQuery | apps/$appGroupName |
DescribeSlowQueryStatus | Gets the activation status of the slow query service of Query Optimizer. | opensearch:DescribeOptimizerSlowQuery | apps/$appGroupName |
CreateScheduledTask | Creates a scheduled task for an application. | opensearch:CreateScheduledTask | app-groups/$appGroupName |
RemoveScheduledTask | Deletes a scheduled task of an application. | opensearch:RemoveScheduledTask | app-groups/$appGroupName |
ListScheduledTasks | Gets the list of scheduled tasks for an application. | opensearch:ListScheduledTask | app-groups/$appGroupName |
DescribeScheduledTask | Gets the details of a scheduled task for an application. | opensearch:DescribeScheduledTask | app-groups/$appGroupName |
ModifyScheduledTask | Modifies a scheduled task of an application. | opensearch:ModifyScheduledTask | app-groups/$appGroupName |
CreateSecondRank | Creates the fine sort expression configuration for an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
RemoveSecondRank | Deletes the fine sort expression configuration of an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
ListSecondRanks | Gets the list of fine sort expression configurations for an application version. | opensearch:ListSecondRank | apps/$appGroupName |
DescribeSecondRank | Gets the details of the fine sort expression configuration for an application version. | opensearch:DescribeSecondRank | apps/$appGroupName |
ModifySecondRank | Modifies the fine sort expression configuration of an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
ListSortExpressions | Gets the list of sort expressions for an application version. | opensearch:ListSortExpression | apps/$appGroupName |
UpdateSummaries | Modifies the summary of an application version. | opensearch:WriteSummary | apps/$appGroupName |
PushUserAnalyzerEntries | Accepts changes to custom analyzer entries. | opensearch:WriteUserAnalyzer | user-analyzers/$analyzerName |
ListUserAnalyzerEntries | Gets the checklist of custom analyzer entries. | opensearch:DescribeUserAnalyzer | user-analyzers/$analyzerName |
CreateUserAnalyzer | Creates a custom analyzer. | opensearch:CreateUserAnalyzer | user-analyzers/$analyzerName |
DeleteUserAnalyzer | Deletes a custom analyzer. | opensearch:DeleteUserAnalyzer | user-analyzers/$analyzerName |
ListUserAnalyzers | Gets the list of custom tokenizers for a user. | opensearch:ListUserAnalyzers | user-analyzers/* |
DescribeUserAnalyzer | Gets the details of a custom analyzer. | opensearch:DescribeUserAnalyzer | user-analyzers/$analyzerName |
Traffic API authorization rules
POP Action | Action Description | RAM Action | Resource Pattern |
PushDoc | Push a document | opensearch:PushDoc | acs:opensearch:$regionId:$accountId:apps/$appGroupName |
SearchApp | Document Retrieval | opensearch:SearchApp | acs:opensearch:$regionId:$accountId:apps/$appGroupName |