Application authorization rules

Updated at:

Authorization rules for management APIs

POP Action

Description

RAM Action

Resource Pattern

CreateABTestGroup

Creates a test group.

opensearch:CreateApp

apps/$appGroupName

DeleteABTestGroup

Deletes a test group.

opensearch:DeleteApp

apps/$appGroupName

ListABTestGroups

Queries a list of test groups.

opensearch:ListApp

apps/$appGroupName

ListABTestMetrics

Queries data reports.

opensearch:DescribeApp

apps/$appGroupName

DescribeABTestGroup

Queries the details of a test group.

opensearch:DescribeApp

apps/$appGroupName

UpdateABTestGroup

Modifies a test group.

opensearch:UpdateApp

apps/$appGroupName

CreateABTestExperiment

Creates a test.

opensearch:CreateApp

apps/$appGroupName

DeleteABTestExperiment

Deletes a test.

opensearch:DeleteApp

apps/$appGroupName

ListABTestExperiments

Lists tests.

opensearch:ListApp

apps/$appGroupName

DescribeABTestExperiment

Queries the details of a test.

opensearch:DescribeApp

apps/$appGroupName

UpdateABTestExperiment

Modifies the parameters of a test.

opensearch:UpdateApp

apps/$appGroupName

CreateABTestScene

Creates a test scenario.

opensearch:CreateApp

apps/$appGroupName

DeleteABTestScene

Deletes a test scenario.

opensearch:DeleteApp

apps/$appGroupName

ListABTestScenes

Lists test scenarios.

opensearch:ListApp

apps/$appGroupName

DescribeABTestScene

Queries the details of a test scenario.

opensearch:DescribeApp

apps/$appGroupName

UpdateABTestScene

Modifies a test scenario.

opensearch:UpdateApp

apps/$appGroupName

ListABTestFixedFlowDividers

Queries the whitelist.

opensearch:ListApp

apps/$appGroupName

UpdateABTestFixedFlowDividers

Updates whitelist data.

opensearch:UpdateApp

apps/$appGroupName

UpdateSuggestionDictionary

Modifies the blacklists and whitelists of drop-down suggestions in batches.

opensearch:WriteSuggest

suggestions/$suggestionIdentity

ListSuggestionModels

Queries the models of a drop-down suggestion.

opensearch:DescribeSuggest

suggestions/$suggestionIdentity

ListDeployedAlgorithmModels

Queries the algorithm models that are successfully deployed.

opensearch:DescribeApp

apps/$appGroupName

ListApps

Queries all application versions.

opensearch:ListApp

apps/*

CreateAppGroup

Creates an application.

opensearch:CreateAppGroup

app-groups/*

DescribeAppGroupDataReport

Queries the data quality report of an application.

opensearch:DescribeApp

apps/$appGroupName

RemoveAppGroup

Deletes an application.

opensearch:RemoveAppGroup

app-groups/$appGroupName

ListAppGroupErrors

Queries the error logs of an application.

opensearch:ListAppGroupErrors

app-groups/$appGroupName

ListAppGroups

Queries a list of applications.

opensearch:ListAppGroup

app-groups/*

ListAppGroupMetrics

Queries the data reports of an application.

opensearch:ListAppGroupMetric

app-groups/$appGroupName

RenewAppGroup

Renews an application.

opensearch:UpdateApp

apps/$appGroupName

DescribeAppGroup

Queries the details of an application.

opensearch:DescribeAppGroup

app-groups/$appGroupName

ReplaceAppGroupCommodityCode

Changes an application from the service type to the instance type.

opensearch:UpdateApp

apps/$appGroupName

ModifyAppGroup

Modifies the properties of an application or switches the online version.

opensearch:ModifyAppGroup

app-groups/$appGroupName

ModifyAppGroupQuota

Modifies the quotas of an application.

opensearch:updateAppGroupQuota

app-groups/$appGroupName

CreateApp

Creates an application version.

opensearch:CreateApp

app-groups/$appGroupName

RemoveApp

Deletes an application version.

opensearch:RemoveApp

app-groups/$appGroupName

DescribeApps

Queries the versions of an application.

opensearch:ListApp

app-groups/$appGroupName

DescribeApp

Queries the details of an application version.

opensearch:DescribeApp

app-groups/$appGroupName

DescribeAppStatistics

Queries the statistics of an application version.

opensearch:DescribeAppStatistics

app-groups/$appGroupName

UpdateFetchFields

Updates the default display fields of an application version.

opensearch:UpdateApp

apps/$appGroupName

CreateDataCollection

Enables data collection for an application.

opensearch:WriteDataCollection

apps/$appGroupName

RemoveDataCollection

Disables data collection.

opensearch:WriteDataCollection

apps/$appGroupName

ListDataCollections

Queries the data collection tasks of an application.

opensearch:ListDataCollections

apps/$appGroupName

DescribeDataCollection

Queries the data collection details of an application.

opensearch:DescribeDataCollection

apps/$appGroupName

CreateFirstRank

Creates a rough sort expression configuration for an application version.

opensearch:WriteFirstRank

apps/$appGroupName

RemoveFirstRank

Deletes a rough sort expression configuration of an application version.

opensearch:WriteFirstRank

apps/$appGroupName

ListFirstRanks

Queries the rough sort expression configurations of an application version.

opensearch:ListFirstRank

apps/$appGroupName

DescribeFirstRank

Queries the details of a rough sort expression configuration of an application version.

opensearch:DescribeFirstRank

apps/$appGroupName

ModifyFirstRank

Modifies a rough sort expression configuration of an application version.

opensearch:WriteFirstRank

apps/$appGroupName

PushInterventionDictionaryEntries

Receives changes to intervention entries.

opensearch:WriteInterventionDictionary

intervention-dictionaries/$dictionaryName

ListInterventionDictionaryEntries

Queries a list of intervention entries.

opensearch:DescribeInterventionDictionary

intervention-dictionaries/$dictionaryName

CreateInterventionDictionary

Creates an intervention dictionary.

opensearch:WriteInterventionDictionary

intervention-dictionaries/*

RemoveInterventionDictionary

Deletes an intervention dictionary.

opensearch:WriteInterventionDictionary

intervention-dictionaries/$dictionaryName

ListInterventionDictionaries

Queries the intervention dictionaries of a user.

opensearch:ListInterventionDictionaries

intervention-dictionaries/*

ListInterventionDictionaryNerResults

Queries named entity recognition results.

opensearch:DescribeInterventionDictionary

intervention-dictionaries/$dictionaryName

ListInterventionDictionaryRelatedEntities

Queries the resources associated with an intervention dictionary.

opensearch:DescribeInterventionDictionary

intervention-dictionaries/$dictionaryName

DescribeInterventionDictionary

Queries the details of an intervention dictionary.

opensearch:DescribeInterventionDictionary

intervention-dictionaries/$dictionaryName

ListSlowQueryCategories

Queries the slow query optimization suggestions provided by the optimizer.

opensearch:ListOptimizerSlowQueryCategories

apps/$appGroupName

StartSlowQueryAnalyzer

Runs a slow query analysis immediately.

opensearch:WriteOptimizerSlowQueryCategories

apps/$appGroupName

ListSlowQueryQueries

Lists the slow queries identified by the optimizer.

opensearch:ListOptimizerSlowQueries

apps/$appGroupName

DisableSlowQuery

Disables the slow query service of the optimizer.

opensearch:WriteOptimizerSlowQuery

apps/$appGroupName

EnableSlowQuery

Enables the slow query service of the optimizer.

opensearch:WriteOptimizerSlowQuery

apps/$appGroupName

DescribeSlowQueryStatus

Queries whether the slow query service of the optimizer is enabled.

opensearch:DescribeOptimizerSlowQuery

apps/$appGroupName

DeleteModel

Deletes a model.

opensearch:WriteAlgorithm

apps/$appGroupName

DescribeModel

Queries the details of a model.

opensearch:DescribeAlgorithm

apps/$appGroupName

ListModels

Queries a list of models.

opensearch:DescribeAlgorithm

apps/$appGroupName

GetModelProgress

Queries the training progress of a model.

opensearch:DescribeAlgorithm

apps/$appGroupName

GetValidationError

Queries the details of data validation errors.

opensearch:DescribeAlgorithm

apps/$appGroupName

GetValidationReport

Queries a data validation report.

opensearch:DescribeAlgorithm

apps/$appGroupName

CreateModel

Creates a model.

opensearch:WriteAlgorithm

apps/$appGroupName

ModifyModel

Modifies the configurations of a model.

opensearch:WriteAlgorithm

apps/$appGroupName

CreateQueryProcessor

Creates a query analysis rule.

opensearch:WriteQueryProcessor

apps/$appGroupName

RemoveQueryProcessor

Deletes a query analysis rule.

opensearch:WriteQueryProcessor

apps/$appGroupName

ListQueryProcessors

Queries a list of query analysis rules.

opensearch:ListQueryProcessor

apps/$appGroupName

DescribeQueryProcessor

Queries the details of a query analysis rule.

opensearch:DescribeQueryProcessor

apps/$appGroupName

ModifyQueryProcessor

Modifies a query analysis rule.

opensearch:WriteQueryProcessor

apps/$appGroupName

RemoveQuotaReviewTask

Withdraws an application quota review ticket.

opensearch:UpdateApp

apps/$appGroupName

ListQuotaReviewTasks

Queries a list of application quota review tickets.

opensearch:DescribeApp

apps/$appGroupName

CreateScheduledTask

Creates a scheduled task for an application.

opensearch:CreateScheduledTask

app-groups/$appGroupName

RemoveScheduledTask

Deletes a scheduled task of an application.

opensearch:RemoveScheduledTask

app-groups/$appGroupName

ListScheduledTasks

Queries the scheduled tasks of an application.

opensearch:ListScheduledTask

app-groups/$appGroupName

DescribeScheduledTask

Queries the details of a scheduled task of an application.

opensearch:DescribeScheduledTask

app-groups/$appGroupName

ModifyScheduledTask

Modifies a scheduled task of an application.

opensearch:ModifyScheduledTask

app-groups/$appGroupName

CreateSecondRank

Creates a fine sort expression configuration for an application version.

opensearch:WriteSecondRank

apps/$appGroupName

RemoveSecondRank

Deletes a fine sort expression configuration of an application version.

opensearch:WriteSecondRank

apps/$appGroupName

ListSecondRanks

Queries the fine sort expression configurations of an application version.

opensearch:ListSecondRank

apps/$appGroupName

DescribeSecondRank

Queries the details of a fine sort expression configuration of an application version.

opensearch:DescribeSecondRank

apps/$appGroupName

ModifySecondRank

Modifies a fine sort expression configuration of an application version.

opensearch:WriteSecondRank

apps/$appGroupName

ListSortExpressions

Queries the sort expressions of an application version.

opensearch:ListSortExpression

apps/$appGroupName

CreateSuggestion

Creates a drop-down suggestion.

opensearch:WriteSuggest

suggestions/$suggestionIdentity

DeleteSuggestion

Deletes a drop-down suggestion.

opensearch:WriteSuggest

suggestions/$suggestionIdentity

ListSuggestions

Queries a list of drop-down suggestions.

opensearch:ListSuggest

suggestions/$suggestionIdentity

ListSuggestionMetrics

Queries the reports of drop-down suggestions.

opensearch:DescribeSuggest

suggestions/$suggestionIdentity

StartSuggestionTrainer

Trains a model immediately.

opensearch:WriteSuggest

suggestions/$suggestionIdentity

DescribeSuggestion

Queries the details of a drop-down suggestion.

opensearch:DescribeSuggest

suggestions/$suggestionIdentity

UpdateSuggestionCurrentModel

Switches the model that serves online.

opensearch:WriteSuggest

suggestions/$suggestionIdentity

UpdateSummaries

Modifies the summary settings of an application version.

opensearch:WriteSummary

apps/$appGroupName

PushUserAnalyzerEntries

Receives changes to custom analyzer entries.

opensearch:WriteUserAnalyzer

user-analyzers/$analyzerName

ListUserAnalyzerEntries

Queries a list of custom analyzer entries.

opensearch:DescribeUserAnalyzer

user-analyzers/$analyzerName

CreateUserAnalyzer

Creates a custom analyzer.

opensearch:CreateUserAnalyzer

user-analyzers/$analyzerName

DeleteUserAnalyzer

Deletes a custom analyzer.

opensearch:DeleteUserAnalyzer

user-analyzers/$analyzerName

ListUserAnalyzers

Queries the custom analyzers of a user.

opensearch:ListUserAnalyzers

user-analyzers/*

DescribeUserAnalyzer

Queries the details of a custom analyzer.

opensearch:DescribeUserAnalyzer

user-analyzers/$analyzerName

SearchHint

Hint retrieval

opensearch:SearchHint

acs:opensearch:$regionld:

$accountld:apps/ $appGro

upName

Authorization rules for traffic APIs

POP Action

Action Describe

RAM Action

Resource Pattern

PushDoc

Pushes documents.

opensearch:PushDoc

acs:opensearch:$regionId:$accountId:apps/$appGroupName

SearchApp

Document retrieval

opensearch:SearchApp

acs:opensearch:$regionId:$accountId:apps/$appGroupName

SearchSuggest

Drop-down suggestion retrieval

opensearch:SearchSuggest

acs:opensearch:$regionId:$accountId:suggestions/$suggestionIdentity

SearchHot

Top search retrieval

opensearch:SearchHot

acs:opensearch:$regionld:$accountld:apps/$appGroupName

SearchHint

Hint retrieval

opensearch:SearchHint

acs:opensearch:$regionld:$accountld:apps/$appGroupName