RAM授权支持的操作资源和条件列表-云原生数据仓库AnalyticDB-阿里云-云原生数据仓库AnalyticDB(AnalyticDB)-阿里云帮助中心

访问控制（RAM）是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥，并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 云原生数据仓库 AnalyticDB PostgreSQL版 为 RAM 权限策略定义的操作（Action）、资源（Resource）和条件（Condition）。 云原生数据仓库 AnalyticDB PostgreSQL版 的 RAM 代码（RamCode）为 gpdb ，支持的授权粒度为 资源级 。

权限策略通用结构

权限策略支持 JSON 格式，其通用结构如下：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

各字段含义如下：

Effect：权限策略效果。取值：Allow（允许）、Deny（拒绝）。
Action：授予允许或拒绝权限的具体操作。具体信息，请参见操作（Action）。
Resource：受操作影响的具体对象，您可以使用资源 ARN 来描述指定资源。具体信息，请参见资源（Resource）。
Condition：指授权生效的条件。可选字段。具体信息，请参见条件（Condition）。
- Condition_operator：条件运算符，不同类型的条件对应不同的条件运算符。具体信息，请参见权限策略基本元素。
- Condition_key：条件关键字。
- Condition_value：条件关键字对应的值。

操作（Action）

下表是云原生数据仓库 AnalyticDB PostgreSQL版定义的操作，这些操作可以在 RAM 权限策略语句的Action元素中使用，用来授予执行该操作的权限。下面对表中的具体项提供说明：

操作：是指具体的权限点。
API：是指操作对应的 API 接口。
访问级别：是指每个操作的访问级别，取值为写入（Write）、读取（Read）或列出（List）。
资源类型：是指操作中支持授权的资源类型。具体说明如下：
- 对于必选的资源类型，用前面加 * 表示。
- 对于不支持资源级授权的操作，用全部资源表示。
条件关键字：是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。
关联操作：是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限，操作才能成功。

操作	API	访问级别	资源类型	条件关键字	关联操作
gpdb:ListModelServices	ListModelServices	get	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyJDBCDataSource	ModifyJDBCDataSource	update	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteCollectionData	DeleteCollectionData	delete	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:UpgradeDBVersion	UpgradeDBVersion	update	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBVersionInfos	DescribeDBVersionInfos	get	全部资源 ``	无	无
gpdb:InitVectorDatabase	InitVectorDatabase	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeSupportFeatures	DescribeSupportFeatures	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GetSupabaseProject	GetSupabaseProject	get	*SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}`	无	无
gpdb:DescribeTags	DescribeTags	get	DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/`	无	无
gpdb:UnloadSampleData	UnloadSampleData	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteStreamingDataService	DeleteStreamingDataService	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateNamespace	CreateNamespace	create	*Namespace `acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstanceSSL	DescribeDBInstanceSSL	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GetUploadDocumentJob	GetUploadDocumentJob	create	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:DescribeZonesPrivateRAGService	DescribeZonesPrivateRAGService	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBClusterPerformance	DescribeDBClusterPerformance	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DownloadSQLLogsRecords	DownloadSQLLogsRecords	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:TagResources	TagResources	update	全部资源 ``	无	无
gpdb:DescribeDataSharePerformance	DescribeDataSharePerformance	get	全部资源 ``	无	无
gpdb:DescribeRoles	DescribeRoles	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CheckHadoopDataSource	CheckHadoopDataSource	none	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeModelService	DescribeModelService	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyVectorConfiguration	ModifyVectorConfiguration	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:CreateServiceLinkedRole	CreateServiceLinkedRole	create	全部资源 ``	无	无
gpdb:UpgradeExtensions	UpgradeExtensions	update	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateExternalDataService	CreateExternalDataService	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstanceIndexUsage	DescribeDBInstanceIndexUsage	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateDBResourceGroup	CreateDBResourceGroup	create	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:PauseSupabaseProject	PauseSupabaseProject	update	*SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}`	无	无
gpdb:DescribeIndex	DescribeIndex	get	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:ModifyDBResourceGroup	ModifyDBResourceGroup	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ResumeInstance	ResumeInstance	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyDBInstanceMaintainTime	ModifyDBInstanceMaintainTime	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeJDBCDataSource	DescribeJDBCDataSource	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstanceAttribute	DescribeDBInstanceAttribute	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstanceDataBloat	DescribeDBInstanceDataBloat	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeWaitingSQLRecords	DescribeWaitingSQLRecords	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteAccount	DeleteAccount	none	全部资源 ``	无	无
gpdb:CreateHadoopDataSource	CreateHadoopDataSource	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListAINodePools	ListAINodePools	get	全部资源 ``	无	无
gpdb:ListDocuments	ListDocuments	create	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:ListExternalDataServices	ListExternalDataServices	list	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteDBInstanceIPArray	DeleteDBInstanceIPArray	delete	全部资源 ``	无	无
gpdb:DescribeDiagnosisSQLInfo	DescribeDiagnosisSQLInfo	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyCollection	ModifyCollection	update	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:ListSecrets	ListSecrets	list	全部资源 ``	无	无
gpdb:ListSchemas	ListSchemas	list	全部资源 ``	无	无
gpdb:DeletePrivateRAGService	DeletePrivateRAGService	update	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeTable	DescribeTable	get	全部资源 ``	无	无
gpdb:DescribeDBResourceManagementMode	DescribeDBResourceManagementMode	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyDBInstanceSSL	ModifyDBInstanceSSL	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteJDBCDataSource	DeleteJDBCDataSource	delete	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DownloadDiagnosisRecords	DownloadDiagnosisRecords	none	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:AddAINode	AddAINode	update	全部资源 ``	无	无
gpdb:DescribeDBInstancePerformance	DescribeDBInstancePerformance	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyDBInstanceConfig	ModifyDBInstanceConfig	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:UnbindDBResourceGroupWithRole	UnbindDBResourceGroupWithRole	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDataShareInstances	DescribeDataShareInstances	get	全部资源 ``	无	无
gpdb:CreateBackup	CreateBackup	create	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBResourceGroup	DescribeDBResourceGroup	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CheckHadoopNetConnection	CheckHadoopNetConnection	none	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListExternalDataSources	ListExternalDataSources	list	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstancePlans	DescribeDBInstancePlans	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:ModifyAccountDescription	ModifyAccountDescription	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ResetSupabaseProjectPassword	ResetSupabaseProjectPassword	update	*SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}`	无	无
gpdb:ChatWithKnowledgeBaseStream	ChatWithKnowledgeBaseStream	get	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteVectorIndex	DeleteVectorIndex	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:ResetIMVMonitorData	ResetIMVMonitorData	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyDBInstanceDeploymentMode	ModifyDBInstanceDeploymentMode	update	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CancelUpsertCollectionDataJob	CancelUpsertCollectionDataJob	create	*Document `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DescribeDiagnosisMonitorPerformance	DescribeDiagnosisMonitorPerformance	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ChatWithKnowledgeBase	ChatWithKnowledgeBase	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeHadoopConfigs	DescribeHadoopConfigs	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeActiveSQLRecords	DescribeActiveSQLRecords	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:UpgradeDBInstance	UpgradeDBInstance	update	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyRemoteADBDataSource	ModifyRemoteADBDataSource	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeUserEncryptionKeyList	DescribeUserEncryptionKeyList	get	全部资源 ``	无	无
gpdb:CreateDBInstance	CreateDBInstance	create	DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/`	gpdb:EncryptionType gpdb:SSLEnabled	无
gpdb:SwitchDBInstanceNetType	SwitchDBInstanceNetType	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeAvailableResources	DescribeAvailableResources	get	全部资源 ``	无	无
gpdb:DescribeHadoopClustersInSameNet	DescribeHadoopClustersInSameNet	list	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:TextEmbedding	TextEmbedding	none	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListStreamingDataServices	ListStreamingDataServices	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:PauseDataRedistribute	PauseDataRedistribute	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListInstanceDatabases	ListInstanceDatabases	list	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDataBackups	DescribeDataBackups	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:UntagResources	UntagResources	update	全部资源 ``	无	无
gpdb:RebalanceDBInstance	RebalanceDBInstance	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:DescribeParameters	DescribeParameters	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListTagResources	ListTagResources	get	DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/`	无	无
gpdb:SetDataShareInstance	SetDataShareInstance	update	全部资源 ``	无	无
gpdb:ListDatabaseExtensions	ListDatabaseExtensions	list	全部资源 ``	无	无
gpdb:UpdateDBInstancePlan	UpdateDBInstancePlan	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:ListIndices	ListIndices	get	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:ResetAccountPassword	ResetAccountPassword	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeExtension	DescribeExtension	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:HandleActiveSQLRecord	HandleActiveSQLRecord	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListDatabases	ListDatabases	list	全部资源 ``	无	无
gpdb:DownloadSlowSQLRecords	DownloadSlowSQLRecords	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyDBInstanceDescription	ModifyDBInstanceDescription	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDownloadRecords	DescribeDownloadRecords	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyParameters	ModifyParameters	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateRemoteADBDataSource	CreateRemoteADBDataSource	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateDBInstancePlan	CreateDBInstancePlan	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:DeleteSupabaseProject	DeleteSupabaseProject	delete	*SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}`	无	无
gpdb:DeleteModelService	DeleteModelService	delete	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GetSupabaseProjectDashboardAccount	GetSupabaseProjectDashboardAccount	get	*SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}`	无	无
gpdb:DescribeSampleData	DescribeSampleData	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GetAccount	GetAccount	get	全部资源 ``	无	无
gpdb:ListBackupJobs	ListBackupJobs	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteHadoopDataSource	DeleteHadoopDataSource	delete	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyBackupPolicy	ModifyBackupPolicy	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeHealthStatus	DescribeHealthStatus	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GetStatementResult	GetStatementResult	get	全部资源 ``	无	无
gpdb:ModifySecurityIps	ModifySecurityIps	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateModelService	CreateModelService	create	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListNamespaces	ListNamespaces	create	*Namespace `acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}`	无	无
gpdb:CreateStreamingDataSource	CreateStreamingDataSource	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeBackupJob	DescribeBackupJob	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteRemoteADBDataSource	DeleteRemoteADBDataSource	delete	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteBackup	DeleteBackup	delete	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteExternalDataService	DeleteExternalDataService	delete	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GrantCollection	GrantCollection	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:CloneDBInstance	CloneDBInstance	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DisableDBResourceGroup	DisableDBResourceGroup	delete	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeCreateIndexJob	DescribeCreateIndexJob	get	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DescribePrivateRAGService	DescribePrivateRAGService	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateDocumentCollection	CreateDocumentCollection	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:CheckJDBCSourceNetConnection	CheckJDBCSourceNetConnection	none	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:UploadDocumentAsync	UploadDocumentAsync	create	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:UpsertCollectionDataAsync	UpsertCollectionDataAsync	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:ResumeSupabaseProject	ResumeSupabaseProject	update	*SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}`	无	无
gpdb:CreateDBInstanceIPArray	CreateDBInstanceIPArray	create	全部资源 ``	无	无
gpdb:DescribeHadoopDataSource	DescribeHadoopDataSource	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GetSupabaseProjectApiKeys	GetSupabaseProjectApiKeys	get	*SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}`	无	无
gpdb:ResumeDataRedistribute	ResumeDataRedistribute	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListStreamingDataSources	ListStreamingDataSources	list	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:QueryCollectionData	QueryCollectionData	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DeleteAINode	DeleteAINode	update	全部资源 ``	无	无
gpdb:DescribeDBInstanceDiagnosisSummary	DescribeDBInstanceDiagnosisSummary	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeAccounts	DescribeAccounts	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstanceErrorLog	DescribeDBInstanceErrorLog	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:EnableCollectionGraphRAG	EnableCollectionGraphRAG	update	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DescribeStreamingDataSource	DescribeStreamingDataSource	get	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateCollection	CreateCollection	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:UpsertCollectionData	UpsertCollectionData	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:ListCollections	ListCollections	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DeleteDBInstance	DeleteDBInstance	delete	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteDBResourceGroup	DeleteDBResourceGroup	delete	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeWaitingSQLInfo	DescribeWaitingSQLInfo	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeStreamingDataService	DescribeStreamingDataService	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ExecuteStatement	ExecuteStatement	create	全部资源 ``	无	无
gpdb:DeleteDocument	DeleteDocument	create	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:DescribeModifyParameterLog	DescribeModifyParameterLog	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CancelCreateIndexJob	CancelCreateIndexJob	update	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstanceSupportMaxPerformance	DescribeDBInstanceSupportMaxPerformance	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GetUpsertCollectionDataJob	GetUpsertCollectionDataJob	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:BindDBResourceGroupWithRole	BindDBResourceGroupWithRole	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeSQLLogsV2	DescribeSQLLogsV2	get	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifySupabaseProjectSecurityIps	ModifySupabaseProjectSecurityIps	update	*SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}`	无	无
gpdb:ModifyMasterSpec	ModifyMasterSpec	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDocument	DescribeDocument	create	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:ListStreamingJobs	ListStreamingJobs	delete	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBClusterNode	DescribeDBClusterNode	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteCollection	DeleteCollection	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DeployPrivateRAGService	DeployPrivateRAGService	update	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstanceIPArrayList	DescribeDBInstanceIPArrayList	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeSQLLogs	DescribeSQLLogs	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteStreamingDataSource	DeleteStreamingDataSource	delete	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteDocumentCollection	DeleteDocumentCollection	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:CreateAccount	CreateAccount	create	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListSupportModels	ListSupportModels	get	全部资源 ``	无	无
gpdb:DeleteIndex	DeleteIndex	delete	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:UpdateCollectionDataMetadata	UpdateCollectionDataMetadata	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:Rerank	Rerank	list	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListSlowSQLRecords	ListSlowSQLRecords	get	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteExtension	DeleteExtension	delete	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CancelUploadDocumentJob	CancelUploadDocumentJob	update	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:DescribeBackupPolicy	DescribeBackupPolicy	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeRdsVpcs	DescribeRdsVpcs	get	全部资源 ``	无	无
gpdb:ListSupabaseProjects	ListSupabaseProjects	list	SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/`	无	无
gpdb:ModifyDBInstanceConnectionString	ModifyDBInstanceConnectionString	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeLogBackups	DescribeLogBackups	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeRebalanceStatus	DescribeRebalanceStatus	get	全部资源 ``	无	无
gpdb:DescribeRdsVSwitchs	DescribeRdsVSwitchs	get	全部资源 ``	无	无
gpdb:DeleteDBInstancePlan	DeleteDBInstancePlan	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:SetDBInstancePlanStatus	SetDBInstancePlanStatus	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:DeleteSecret	DeleteSecret	delete	全部资源 ``	无	无
gpdb:ModifyDBInstanceNetworkType	ModifyDBInstanceNetworkType	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:RestartDBInstance	RestartDBInstance	none	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifySQLCollectorPolicy	ModifySQLCollectorPolicy	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDownloadSQLLogs	DescribeDownloadSQLLogs	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:EnableDBResourceGroup	EnableDBResourceGroup	create	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateSampleData	CreateSampleData	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ReleaseInstancePublicConnection	ReleaseInstancePublicConnection	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeCollection	DescribeCollection	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:CreateVectorIndex	CreateVectorIndex	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DescribeNamespace	DescribeNamespace	create	*Namespace `acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}`	无	无
gpdb:ModifyStreamingJob	ModifyStreamingJob	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:GetSecretValue	GetSecretValue	get	全部资源 ``	无	无
gpdb:DescribeDatabase	DescribeDatabase	get	全部资源 ``	无	无
gpdb:DescribeStreamingJob	DescribeStreamingJob	delete	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListDocumentCollections	ListDocumentCollections	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:ModifyHadoopDataSource	ModifyHadoopDataSource	update	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateStreamingDataService	CreateStreamingDataService	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateJDBCDataSource	CreateJDBCDataSource	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListTables	ListTables	list	全部资源 ``	无	无
gpdb:GetGraphRAGJob	GetGraphRAGJob	get	全部资源 ``	无	无
gpdb:CreateSupabaseProject	CreateSupabaseProject	create	SupabaseProject `acs:gpdb:{#regionId}:{#accountId}:supabaseproject/`	无	无
gpdb:DescribeSQLLogCount	DescribeSQLLogCount	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CheckServiceLinkedRole	CheckServiceLinkedRole	get	全部资源 ``	无	无
gpdb:ModifyExternalDataService	ModifyExternalDataService	update	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:AllocateInstancePublicConnection	AllocateInstancePublicConnection	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DeleteStreamingJob	DeleteStreamingJob	delete	*DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateSecret	CreateSecret	create	全部资源 ``	无	无
gpdb:DescribeDBInstanceNetInfo	DescribeDBInstanceNetInfo	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateDatabase	CreateDatabase	create	全部资源 ``	无	无
gpdb:DescribeDBInstanceDataSkew	DescribeDBInstanceDataSkew	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListRemoteADBDataSources	ListRemoteADBDataSources	list	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:PauseInstance	PauseInstance	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyStreamingDataSource	ModifyStreamingDataSource	update	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:QueryKnowledgeBasesContent	QueryKnowledgeBasesContent	create	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:QueryContent	QueryContent	create	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:DeleteNamespace	DeleteNamespace	create	Namespace `acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}`	无	无
gpdb:DeleteDatabase	DeleteDatabase	delete	全部资源 ``	无	无
gpdb:DescribeDataReDistributeInfo	DescribeDataReDistributeInfo	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#dbinstanceId}`	无	无
gpdb:DescribeIMVInfos	DescribeIMVInfos	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyDBInstancePayType	ModifyDBInstancePayType	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeExternalDataService	DescribeExternalDataService	get	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:UpsertChunks	UpsertChunks	create	*Document `acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}`	无	无
gpdb:ModifyStreamingDataService	ModifyStreamingDataService	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ModifyDBInstanceResourceGroup	ModifyDBInstanceResourceGroup	update	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:ListInstanceExtensions	ListInstanceExtensions	list	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDiagnosisRecords	DescribeDiagnosisRecords	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:DescribeDBInstances	DescribeDBInstances	get	DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/`	无	无
gpdb:CreateExtensions	CreateExtensions	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateStreamingJob	CreateStreamingJob	create	*DBInstance `acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
gpdb:CreateIndex	CreateIndex	create	*Collection `acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}`	无	无
gpdb:DescribeDiagnosisDimensions	DescribeDiagnosisDimensions	get	DBInstance `acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}`	无	无

资源（Resource）

下表是云原生数据仓库 AnalyticDB PostgreSQL版定义的资源，这些资源可以在 RAM 权限策略语句的Resource元素中使用，用来授予对该资源执行具体操作的权限。其中，资源 ARN 是资源在阿里云上的唯一标识。具体说明如下：

{#}为变量标识，需要您替换为实际值。例如：{#ramcode}需要您替换为实际的云服务RAM代码。
*表示全部。例如：
- {#resourceType}为*时：表示全部资源。
- {#regionId}为*时：表示全部地域。
- {#accountId}为*时：表示全部阿里云账号。

资源类型	资源 ARN
DBInstance	acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId} acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId} acs:gpdb:{#regionId}:{#accountId}:dbinstance/ acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}
Collection	acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}
dbInstance	acs:gpdb:{#regionId}:{#accountId}:dbInstance/*
SupabaseProject	acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId} acs:gpdb:{#regionId}:{#accountId}:supabaseproject/*
Namespace	acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}
Document	acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId} acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId} acs:gpdb:{#regionId}:{#accountId}:instance/{#DBInstanceId}/document/{#Document}
Secret	acs:gpdb:{#regionId}:{#accountId}:secret/*
DataAPI	acs:gpdb:{#regionId}:{#accountId}:dataapi/*

条件（Condition）

下表是云原生数据仓库 AnalyticDB PostgreSQL版 定义的产品级条件关键字，这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用，用来描述授予权限的条件。以下仅列举产品级的条件关键字，阿里云定义的通用条件关键字也同样适用云原生数据仓库 AnalyticDB PostgreSQL版。

其中，数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符，否则无法匹配策略语句，授权行为无效。数据类型与条件运算符的对应关系，请参见条件操作类型。

条件关键字	描述	类型
gpdb:EncryptionType	加密类型。Off：不启用加密；CloudDisk：开通云盘加密，并通过EncryptionKey参数指定密钥	String
gpdb:SSLEnabled	SSL加密状态	String
gpdb:EnableSSL	是否开启SSL	Boolean

授权信息

权限策略通用结构

操作（Action）

资源（Resource）

条件（Condition）

相关操作