Application authorization rules
Authorization rules for management APIs
POP Action | Description | RAM Action | Resource Pattern |
CreateABTestGroup | Creates a test group. | opensearch:CreateApp | apps/$appGroupName |
DeleteABTestGroup | Deletes a test group. | opensearch:DeleteApp | apps/$appGroupName |
ListABTestGroups | Queries a list of test groups. | opensearch:ListApp | apps/$appGroupName |
ListABTestMetrics | Queries data reports. | opensearch:DescribeApp | apps/$appGroupName |
DescribeABTestGroup | Queries the details of a test group. | opensearch:DescribeApp | apps/$appGroupName |
UpdateABTestGroup | Modifies a test group. | opensearch:UpdateApp | apps/$appGroupName |
CreateABTestExperiment | Creates a test. | opensearch:CreateApp | apps/$appGroupName |
DeleteABTestExperiment | Deletes a test. | opensearch:DeleteApp | apps/$appGroupName |
ListABTestExperiments | Lists tests. | opensearch:ListApp | apps/$appGroupName |
DescribeABTestExperiment | Queries the details of a test. | opensearch:DescribeApp | apps/$appGroupName |
UpdateABTestExperiment | Modifies the parameters of a test. | opensearch:UpdateApp | apps/$appGroupName |
CreateABTestScene | Creates a test scenario. | opensearch:CreateApp | apps/$appGroupName |
DeleteABTestScene | Deletes a test scenario. | opensearch:DeleteApp | apps/$appGroupName |
ListABTestScenes | Lists test scenarios. | opensearch:ListApp | apps/$appGroupName |
DescribeABTestScene | Queries the details of a test scenario. | opensearch:DescribeApp | apps/$appGroupName |
UpdateABTestScene | Modifies a test scenario. | opensearch:UpdateApp | apps/$appGroupName |
ListABTestFixedFlowDividers | Queries the whitelist. | opensearch:ListApp | apps/$appGroupName |
UpdateABTestFixedFlowDividers | Updates whitelist data. | opensearch:UpdateApp | apps/$appGroupName |
UpdateSuggestionDictionary | Modifies the blacklists and whitelists of drop-down suggestions in batches. | opensearch:WriteSuggest | suggestions/$suggestionIdentity |
ListSuggestionModels | Queries the models of a drop-down suggestion. | opensearch:DescribeSuggest | suggestions/$suggestionIdentity |
ListDeployedAlgorithmModels | Queries the algorithm models that are successfully deployed. | opensearch:DescribeApp | apps/$appGroupName |
ListApps | Queries all application versions. | opensearch:ListApp | apps/* |
CreateAppGroup | Creates an application. | opensearch:CreateAppGroup | app-groups/* |
DescribeAppGroupDataReport | Queries the data quality report of an application. | opensearch:DescribeApp | apps/$appGroupName |
RemoveAppGroup | Deletes an application. | opensearch:RemoveAppGroup | app-groups/$appGroupName |
ListAppGroupErrors | Queries the error logs of an application. | opensearch:ListAppGroupErrors | app-groups/$appGroupName |
ListAppGroups | Queries a list of applications. | opensearch:ListAppGroup | app-groups/* |
ListAppGroupMetrics | Queries the data reports of an application. | opensearch:ListAppGroupMetric | app-groups/$appGroupName |
RenewAppGroup | Renews an application. | opensearch:UpdateApp | apps/$appGroupName |
DescribeAppGroup | Queries the details of an application. | opensearch:DescribeAppGroup | app-groups/$appGroupName |
ReplaceAppGroupCommodityCode | Changes an application from the service type to the instance type. | opensearch:UpdateApp | apps/$appGroupName |
ModifyAppGroup | Modifies the properties of an application or switches the online version. | opensearch:ModifyAppGroup | app-groups/$appGroupName |
ModifyAppGroupQuota | Modifies the quotas of an application. | opensearch:updateAppGroupQuota | app-groups/$appGroupName |
CreateApp | Creates an application version. | opensearch:CreateApp | app-groups/$appGroupName |
RemoveApp | Deletes an application version. | opensearch:RemoveApp | app-groups/$appGroupName |
DescribeApps | Queries the versions of an application. | opensearch:ListApp | app-groups/$appGroupName |
DescribeApp | Queries the details of an application version. | opensearch:DescribeApp | app-groups/$appGroupName |
DescribeAppStatistics | Queries the statistics of an application version. | opensearch:DescribeAppStatistics | app-groups/$appGroupName |
UpdateFetchFields | Updates the default display fields of an application version. | opensearch:UpdateApp | apps/$appGroupName |
CreateDataCollection | Enables data collection for an application. | opensearch:WriteDataCollection | apps/$appGroupName |
RemoveDataCollection | Disables data collection. | opensearch:WriteDataCollection | apps/$appGroupName |
ListDataCollections | Queries the data collection tasks of an application. | opensearch:ListDataCollections | apps/$appGroupName |
DescribeDataCollection | Queries the data collection details of an application. | opensearch:DescribeDataCollection | apps/$appGroupName |
CreateFirstRank | Creates a rough sort expression configuration for an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
RemoveFirstRank | Deletes a rough sort expression configuration of an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
ListFirstRanks | Queries the rough sort expression configurations of an application version. | opensearch:ListFirstRank | apps/$appGroupName |
DescribeFirstRank | Queries the details of a rough sort expression configuration of an application version. | opensearch:DescribeFirstRank | apps/$appGroupName |
ModifyFirstRank | Modifies a rough sort expression configuration of an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
PushInterventionDictionaryEntries | Receives changes to intervention entries. | opensearch:WriteInterventionDictionary | intervention-dictionaries/$dictionaryName |
ListInterventionDictionaryEntries | Queries a list of intervention entries. | opensearch:DescribeInterventionDictionary | intervention-dictionaries/$dictionaryName |
CreateInterventionDictionary | Creates an intervention dictionary. | opensearch:WriteInterventionDictionary | intervention-dictionaries/* |
RemoveInterventionDictionary | Deletes an intervention dictionary. | opensearch:WriteInterventionDictionary | intervention-dictionaries/$dictionaryName |
ListInterventionDictionaries | Queries the intervention dictionaries of a user. | opensearch:ListInterventionDictionaries | intervention-dictionaries/* |
ListInterventionDictionaryNerResults | Queries named entity recognition results. | opensearch:DescribeInterventionDictionary | intervention-dictionaries/$dictionaryName |
ListInterventionDictionaryRelatedEntities | Queries the resources associated with an intervention dictionary. | opensearch:DescribeInterventionDictionary | intervention-dictionaries/$dictionaryName |
DescribeInterventionDictionary | Queries the details of an intervention dictionary. | opensearch:DescribeInterventionDictionary | intervention-dictionaries/$dictionaryName |
ListSlowQueryCategories | Queries the slow query optimization suggestions provided by the optimizer. | opensearch:ListOptimizerSlowQueryCategories | apps/$appGroupName |
StartSlowQueryAnalyzer | Runs a slow query analysis immediately. | opensearch:WriteOptimizerSlowQueryCategories | apps/$appGroupName |
ListSlowQueryQueries | Lists the slow queries identified by the optimizer. | opensearch:ListOptimizerSlowQueries | apps/$appGroupName |
DisableSlowQuery | Disables the slow query service of the optimizer. | opensearch:WriteOptimizerSlowQuery | apps/$appGroupName |
EnableSlowQuery | Enables the slow query service of the optimizer. | opensearch:WriteOptimizerSlowQuery | apps/$appGroupName |
DescribeSlowQueryStatus | Queries whether the slow query service of the optimizer is enabled. | opensearch:DescribeOptimizerSlowQuery | apps/$appGroupName |
DeleteModel | Deletes a model. | opensearch:WriteAlgorithm | apps/$appGroupName |
DescribeModel | Queries the details of a model. | opensearch:DescribeAlgorithm | apps/$appGroupName |
ListModels | Queries a list of models. | opensearch:DescribeAlgorithm | apps/$appGroupName |
GetModelProgress | Queries the training progress of a model. | opensearch:DescribeAlgorithm | apps/$appGroupName |
GetValidationError | Queries the details of data validation errors. | opensearch:DescribeAlgorithm | apps/$appGroupName |
GetValidationReport | Queries a data validation report. | opensearch:DescribeAlgorithm | apps/$appGroupName |
CreateModel | Creates a model. | opensearch:WriteAlgorithm | apps/$appGroupName |
ModifyModel | Modifies the configurations of a model. | opensearch:WriteAlgorithm | apps/$appGroupName |
CreateQueryProcessor | Creates a query analysis rule. | opensearch:WriteQueryProcessor | apps/$appGroupName |
RemoveQueryProcessor | Deletes a query analysis rule. | opensearch:WriteQueryProcessor | apps/$appGroupName |
ListQueryProcessors | Queries a list of query analysis rules. | opensearch:ListQueryProcessor | apps/$appGroupName |
DescribeQueryProcessor | Queries the details of a query analysis rule. | opensearch:DescribeQueryProcessor | apps/$appGroupName |
ModifyQueryProcessor | Modifies a query analysis rule. | opensearch:WriteQueryProcessor | apps/$appGroupName |
RemoveQuotaReviewTask | Withdraws an application quota review ticket. | opensearch:UpdateApp | apps/$appGroupName |
ListQuotaReviewTasks | Queries a list of application quota review tickets. | opensearch:DescribeApp | apps/$appGroupName |
CreateScheduledTask | Creates a scheduled task for an application. | opensearch:CreateScheduledTask | app-groups/$appGroupName |
RemoveScheduledTask | Deletes a scheduled task of an application. | opensearch:RemoveScheduledTask | app-groups/$appGroupName |
ListScheduledTasks | Queries the scheduled tasks of an application. | opensearch:ListScheduledTask | app-groups/$appGroupName |
DescribeScheduledTask | Queries the details of a scheduled task of an application. | opensearch:DescribeScheduledTask | app-groups/$appGroupName |
ModifyScheduledTask | Modifies a scheduled task of an application. | opensearch:ModifyScheduledTask | app-groups/$appGroupName |
CreateSecondRank | Creates a fine sort expression configuration for an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
RemoveSecondRank | Deletes a fine sort expression configuration of an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
ListSecondRanks | Queries the fine sort expression configurations of an application version. | opensearch:ListSecondRank | apps/$appGroupName |
DescribeSecondRank | Queries the details of a fine sort expression configuration of an application version. | opensearch:DescribeSecondRank | apps/$appGroupName |
ModifySecondRank | Modifies a fine sort expression configuration of an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
ListSortExpressions | Queries the sort expressions of an application version. | opensearch:ListSortExpression | apps/$appGroupName |
CreateSuggestion | Creates a drop-down suggestion. | opensearch:WriteSuggest | suggestions/$suggestionIdentity |
DeleteSuggestion | Deletes a drop-down suggestion. | opensearch:WriteSuggest | suggestions/$suggestionIdentity |
ListSuggestions | Queries a list of drop-down suggestions. | opensearch:ListSuggest | suggestions/$suggestionIdentity |
ListSuggestionMetrics | Queries the reports of drop-down suggestions. | opensearch:DescribeSuggest | suggestions/$suggestionIdentity |
StartSuggestionTrainer | Trains a model immediately. | opensearch:WriteSuggest | suggestions/$suggestionIdentity |
DescribeSuggestion | Queries the details of a drop-down suggestion. | opensearch:DescribeSuggest | suggestions/$suggestionIdentity |
UpdateSuggestionCurrentModel | Switches the model that serves online. | opensearch:WriteSuggest | suggestions/$suggestionIdentity |
UpdateSummaries | Modifies the summary settings of an application version. | opensearch:WriteSummary | apps/$appGroupName |
PushUserAnalyzerEntries | Receives changes to custom analyzer entries. | opensearch:WriteUserAnalyzer | user-analyzers/$analyzerName |
ListUserAnalyzerEntries | Queries a list of custom analyzer entries. | opensearch:DescribeUserAnalyzer | user-analyzers/$analyzerName |
CreateUserAnalyzer | Creates a custom analyzer. | opensearch:CreateUserAnalyzer | user-analyzers/$analyzerName |
DeleteUserAnalyzer | Deletes a custom analyzer. | opensearch:DeleteUserAnalyzer | user-analyzers/$analyzerName |
ListUserAnalyzers | Queries the custom analyzers of a user. | opensearch:ListUserAnalyzers | user-analyzers/* |
DescribeUserAnalyzer | Queries the details of a custom analyzer. | opensearch:DescribeUserAnalyzer | user-analyzers/$analyzerName |
SearchHint
Hint retrieval
opensearch:SearchHint
acs:opensearch:$regionld:
$accountld:apps/ $appGro
upName
Authorization rules for traffic APIs
POP Action | Action Describe | RAM Action | Resource Pattern |
PushDoc | Pushes documents. | opensearch:PushDoc | acs:opensearch:$regionId:$accountId:apps/$appGroupName |
SearchApp | Document retrieval | opensearch:SearchApp | acs:opensearch:$regionId:$accountId:apps/$appGroupName |
SearchSuggest | Drop-down suggestion retrieval | opensearch:SearchSuggest | acs:opensearch:$regionId:$accountId:suggestions/$suggestionIdentity |
SearchHot | Top search retrieval | opensearch:SearchHot | acs:opensearch:$regionld:$accountld:apps/$appGroupName |
SearchHint | Hint retrieval | opensearch:SearchHint | acs:opensearch:$regionld:$accountld:apps/$appGroupName |