授权信息

更新时间:
复制 MD 格式

访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 云原生数据仓库 AnalyticDB PostgreSQL版 为 RAM 权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。 云原生数据仓库 AnalyticDB PostgreSQL版 的 RAM 代码(RamCode)为 gpdb ,支持的授权粒度为 资源级 。

权限策略通用结构

权限策略支持 JSON 格式,其通用结构如下:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

各字段含义如下:

  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。

  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)。

  • Resource:受操作影响的具体对象,您可以使用资源 ARN 来描述指定资源。具体信息,请参见资源(Resource)。

  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)。

    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素。

    • Condition_key:条件关键字。

    • Condition_value:条件关键字对应的值。

操作(Action)

下表是云原生数据仓库 AnalyticDB PostgreSQL版定义的操作,这些操作可以在 RAM 权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:

  • 操作:是指具体的权限点。

  • API:是指操作对应的 API 接口。

  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。

  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:

    • 对于必选的资源类型,用前面加 * 表示。

    • 对于不支持资源级授权的操作,用全部资源表示。

  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。

  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。

操作

API

访问级别

资源类型

条件关键字

关联操作

gpdb:DescribeStreamingDataService DescribeStreamingDataService create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CheckHadoopDataSource CheckHadoopDataSource none

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListWorkspaces ListWorkspaces list

*Workspace

acs:gpdb:{#regionId}:{#accountId}:workspace/*

无 无
gpdb:DescribeDBClusterNode DescribeDBClusterNode get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifySaasServiceDeletionProtection ModifySaasServiceDeletionProtection update

*全部资源

*

无 无
gpdb:QueryCollectionData QueryCollectionData create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ModifyDBInstancePayType ModifyDBInstancePayType update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyStreamingJob ModifyStreamingJob create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:SetDataShareInstance SetDataShareInstance update

*全部资源

*

无 无
gpdb:GrantCollection GrantCollection create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:CreateBranch CreateBranch create

*全部资源

*

无 无
gpdb:CreateIndex CreateIndex create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ListStreamingJobs ListStreamingJobs delete

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateStreamingJob CreateStreamingJob create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DownloadDiagnosisRecords DownloadDiagnosisRecords none

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyCollection ModifyCollection update

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:TagSupabaseProject TagSupabaseProject update

*全部资源

*

无 无
gpdb:ListRemoteADBDataSources ListRemoteADBDataSources list

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDataSharePerformance DescribeDataSharePerformance get

*全部资源

*

无 无
gpdb:ListAIServices ListAIServices update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateDatabase CreateDatabase create

*全部资源

*

无 无
gpdb:CreateBackup CreateBackup create

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:PauseSaasService PauseSaasService update

*全部资源

*

无 无
gpdb:ListBranches ListBranches list

*全部资源

*

无 无
gpdb:ResetSupabaseProjectPassword ResetSupabaseProjectPassword update

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:ModifyExternalDataService ModifyExternalDataService update

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:GrantApiKey GrantApiKey update

*全部资源

*

无 无
gpdb:Rerank Rerank list

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeAvailableResources DescribeAvailableResources get

*全部资源

*

无 无
gpdb:CreateDBInstance CreateDBInstance create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/*

gpdb:EncryptionType

gpdb:SSLEnabled

无
gpdb:DescribeRdsVpcs DescribeRdsVpcs get

*全部资源

*

无 无
gpdb:DescribeSupportFeatures DescribeSupportFeatures get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifySupabaseProjectDescription ModifySupabaseProjectDescription update

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:ModifyDBInstanceMaintainTime ModifyDBInstanceMaintainTime update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListSupportModels ListSupportModels get

*全部资源

*

无 无
gpdb:GetSupabaseProjectDashboardAccount GetSupabaseProjectDashboardAccount get

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:GetGraphRAGJob GetGraphRAGJob get

*全部资源

*

无 无
gpdb:DeleteSecret DeleteSecret delete

*全部资源

*

无 无
gpdb:SwitchDBInstanceNetType SwitchDBInstanceNetType update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UpdateDBInstancePlan UpdateDBInstancePlan get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:DescribeCollection DescribeCollection create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceSSL DescribeDBInstanceSSL get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDatabase DescribeDatabase get

*全部资源

*

无 无
gpdb:UntagResources UntagResources update

*全部资源

*

无 无
gpdb:DeleteAccount DeleteAccount none

*全部资源

*

无 无
gpdb:UpdateCollectionDataMetadata UpdateCollectionDataMetadata create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:DeleteDocument DeleteDocument create

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:DescribeModelOperatorUsage DescribeModelOperatorUsage get

*全部资源

*

无 无
gpdb:ListDocuments ListDocuments create

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:CreateStreamingDataService CreateStreamingDataService create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:RestoreBranch RestoreBranch update

*Branch

acs:gpdb:{#regionId}:{#accountId}:branch/{#BranchId}

无 无
gpdb:CancelCreateIndexJob CancelCreateIndexJob update

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ListModelServices ListModelServices get

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeHealthStatus DescribeHealthStatus get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateDBInstanceIPArray CreateDBInstanceIPArray create

*全部资源

*

无 无
gpdb:ModifyStreamingDataSource ModifyStreamingDataSource update

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListInstanceExtensions ListInstanceExtensions list

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteAIService DeleteAIService update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDownloadSQLLogs DescribeDownloadSQLLogs get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:CreateSnapshot CreateSnapshot create

*全部资源

*

无 无
gpdb:ListInstanceDatabases ListInstanceDatabases list

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteDBInstancePlan DeleteDBInstancePlan get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListDocumentCollections ListDocumentCollections create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:CheckJDBCSourceNetConnection CheckJDBCSourceNetConnection none

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeSQLLogCount DescribeSQLLogCount get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeModelService DescribeModelService get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:RevokeApiKey RevokeApiKey update

*全部资源

*

无 无
gpdb:GetSupabaseProjectApiKeys GetSupabaseProjectApiKeys get

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:DescribeBranch DescribeBranch get

*Branch

acs:gpdb:{#regionId}:{#accountId}:branch/{#BranchId}

无 无
gpdb:DescribeParameters DescribeParameters get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeSampleData DescribeSampleData get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteModelService DeleteModelService delete

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifySecurityIps ModifySecurityIps update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeIMVInfos DescribeIMVInfos get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UpsertCollectionDataAsync UpsertCollectionDataAsync create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceDataBloat DescribeDBInstanceDataBloat get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:EnableCollectionGraphRAG EnableCollectionGraphRAG update

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ModifyJDBCDataSource ModifyJDBCDataSource update

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:GetStatementResult GetStatementResult get

*全部资源

*

无 无
gpdb:CreateModelService CreateModelService create

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyAIServiceSecurityIps ModifyAIServiceSecurityIps update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyVectorConfiguration ModifyVectorConfiguration get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:DeleteSnapshot DeleteSnapshot delete

*全部资源

*

无 无
gpdb:DescribeHadoopClustersInSameNet DescribeHadoopClustersInSameNet list

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteApiKey DeleteApiKey delete

*全部资源

*

无 无
gpdb:AllocateInstancePublicConnection AllocateInstancePublicConnection update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:InitVectorDatabase InitVectorDatabase create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateSaasService CreateSaasService create

*全部资源

*

无 无
gpdb:ListStreamingDataSources ListStreamingDataSources list

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeSQLLogs DescribeSQLLogs get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateServiceLinkedRole CreateServiceLinkedRole create

*全部资源

*

无 无
gpdb:DescribeWaitingSQLInfo DescribeWaitingSQLInfo get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeIndex DescribeIndex get

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ResetBranch ResetBranch update

*Branch

acs:gpdb:{#regionId}:{#accountId}:branch/{#BranchId}

无 无
gpdb:GetUpsertCollectionDataJob GetUpsertCollectionDataJob create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ResetAccountPassword ResetAccountPassword update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribePrivateRAGService DescribePrivateRAGService get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifySupabaseProjectResource ModifySupabaseProjectResource update

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:DeleteCollection DeleteCollection create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceIndexUsage DescribeDBInstanceIndexUsage get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeRoles DescribeRoles get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListModelOperatorApiKeys ListModelOperatorApiKeys update

*全部资源

*

无 无
gpdb:ListModelOperatorServices ListModelOperatorServices get

*全部资源

*

无 无
gpdb:PauseInstance PauseInstance get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeStreamingDataSource DescribeStreamingDataSource get

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:TagResources TagResources update

*全部资源

*

无 无
gpdb:QueryKnowledgeBasesContent QueryKnowledgeBasesContent create

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:RebalanceDBInstance RebalanceDBInstance get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:CancelUploadDocumentJob CancelUploadDocumentJob update

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:ListIndices ListIndices get

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:UpgradeDBInstance UpgradeDBInstance update

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateModelOperatorApiKey CreateModelOperatorApiKey update

*全部资源

*

无 无
gpdb:ModifyDBInstanceSSL ModifyDBInstanceSSL update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateDBResourceGroup CreateDBResourceGroup create

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteNamespace DeleteNamespace create

Namespace

acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}

无 无
gpdb:ListDatabases ListDatabases list

*全部资源

*

无 无
gpdb:DeleteBackup DeleteBackup delete

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeBackupPolicy DescribeBackupPolicy get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBResourceManagementMode DescribeDBResourceManagementMode get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyParameters ModifyParameters update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:RestartSupabaseProject RestartSupabaseProject update

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:DescribeDownloadRecords DescribeDownloadRecords get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeAIService DescribeAIService update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UpsertCollectionData UpsertCollectionData create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:GetUploadDocumentJob GetUploadDocumentJob create

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:DescribeDBInstances DescribeDBInstances get

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/*

无 无
gpdb:DeleteDBInstanceIPArray DeleteDBInstanceIPArray delete

*全部资源

*

无 无
gpdb:SetDBInstancePlanStatus SetDBInstancePlanStatus get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:ChatWithKnowledgeBaseStream ChatWithKnowledgeBaseStream get

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteDBResourceGroup DeleteDBResourceGroup delete

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UpdateSaasServiceVersion UpdateSaasServiceVersion update

*全部资源

*

无 无
gpdb:DescribeDiagnosisSQLInfo DescribeDiagnosisSQLInfo get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBVersionInfos DescribeDBVersionInfos get

*全部资源

*

无 无
gpdb:DeleteExtension DeleteExtension delete

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:SetAsDefaultBranch SetAsDefaultBranch update

*Branch

acs:gpdb:{#regionId}:{#accountId}:branch/{#BranchId}

无 无
gpdb:EnableDBResourceGroup EnableDBResourceGroup create

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UnbindDBResourceGroupWithRole UnbindDBResourceGroupWithRole update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:GetBranchSchema GetBranchSchema get

*Branch

acs:gpdb:{#regionId}:{#accountId}:branch/{#BranchId}

无 无
gpdb:ListNamespaces ListNamespaces create

*Namespace

acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}

无 无
gpdb:ModifyRemoteADBDataSource ModifyRemoteADBDataSource update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyDBResourceGroup ModifyDBResourceGroup update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:TextEmbedding TextEmbedding none

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListExternalDataSources ListExternalDataSources list

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:GetAccount GetAccount get

*全部资源

*

无 无
gpdb:CreateStreamingDataSource CreateStreamingDataSource create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyDBInstanceConnectionString ModifyDBInstanceConnectionString update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ResumeDataRedistribute ResumeDataRedistribute update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteDocumentCollection DeleteDocumentCollection create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:DescribeDataReDistributeInfo DescribeDataReDistributeInfo get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:ListCollections ListCollections create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:DeleteStreamingDataService DeleteStreamingDataService create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:AddAINode AddAINode update

*全部资源

*

无 无
gpdb:ListSaasService ListSaasService list

*全部资源

*

无 无
gpdb:CreateAccount CreateAccount create

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeletePrivateRAGService DeletePrivateRAGService update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDiagnosisRecords DescribeDiagnosisRecords get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateCollection CreateCollection create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:DescribeJDBCDataSource DescribeJDBCDataSource get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceSupportMaxPerformance DescribeDBInstanceSupportMaxPerformance get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeLogBackups DescribeLogBackups get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:RestartDBInstance RestartDBInstance none

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateRemoteADBDataSource CreateRemoteADBDataSource create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateDocumentCollection CreateDocumentCollection create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ModifyAccountDescription ModifyAccountDescription update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:GetApiKey GetApiKey get

*全部资源

*

无 无
gpdb:DescribeDocument DescribeDocument create

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:DescribeCreateIndexJob DescribeCreateIndexJob get

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ModifyBackupPolicy ModifyBackupPolicy update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceDataSkew DescribeDBInstanceDataSkew get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBClusterPerformance DescribeDBClusterPerformance get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UpgradeDBVersion UpgradeDBVersion update

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateSecret CreateSecret create

*全部资源

*

无 无
gpdb:ModifyStreamingDataService ModifyStreamingDataService create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:BindDBResourceGroupWithRole BindDBResourceGroupWithRole update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceErrorLog DescribeDBInstanceErrorLog get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CheckSaasServiceVersion CheckSaasServiceVersion get

*全部资源

*

无 无
gpdb:DescribeExternalDataService DescribeExternalDataService get

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeWaitingSQLRecords DescribeWaitingSQLRecords get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyDBInstanceNetworkType ModifyDBInstanceNetworkType update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBInstancePlans DescribeDBInstancePlans get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:DeleteAINode DeleteAINode update

*全部资源

*

无 无
gpdb:ListDatabaseExtensions ListDatabaseExtensions list

*全部资源

*

无 无
gpdb:CreateDBInstancePlan CreateDBInstancePlan get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:DownloadSlowSQLRecords DownloadSlowSQLRecords get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyDBInstanceResourceGroup ModifyDBInstanceResourceGroup update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDataBackups DescribeDataBackups get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyDBInstanceDeploymentMode ModifyDBInstanceDeploymentMode update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateNamespace CreateNamespace create

*Namespace

acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}

无 无
gpdb:ListAINodePools ListAINodePools get

*全部资源

*

无 无
gpdb:UnloadSampleData UnloadSampleData get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeHadoopConfigs DescribeHadoopConfigs get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeBackupJob DescribeBackupJob get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteSupabaseProject DeleteSupabaseProject delete

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:DescribeNamespace DescribeNamespace create

*Namespace

acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceAttribute DescribeDBInstanceAttribute get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListTagResources ListTagResources get

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/*

无 无
gpdb:ModifySQLCollectorPolicy ModifySQLCollectorPolicy update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListSupabaseProjectTags ListSupabaseProjectTags get

*全部资源

*

无 无
gpdb:CheckHadoopNetConnection CheckHadoopNetConnection none

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeRdsVSwitchs DescribeRdsVSwitchs get

*全部资源

*

无 无
gpdb:DescribeDBResourceGroup DescribeDBResourceGroup get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeStreamingJob DescribeStreamingJob delete

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:HandleActiveSQLRecord HandleActiveSQLRecord get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeTags DescribeTags get

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/*

无 无
gpdb:DeleteJDBCDataSource DeleteJDBCDataSource delete

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UpdateBranch UpdateBranch update

*Branch

acs:gpdb:{#regionId}:{#accountId}:branch/{#BranchId}

无 无
gpdb:ResetIMVMonitorData ResetIMVMonitorData get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CheckServiceLinkedRole CheckServiceLinkedRole get

*全部资源

*

无 无
gpdb:DescribeDBVersion DescribeDBVersion get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ResumeSupabaseProject ResumeSupabaseProject update

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:CreateSampleData CreateSampleData get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ExecuteStatement ExecuteStatement create

*全部资源

*

无 无
gpdb:DescribeModifyParameterLog DescribeModifyParameterLog get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:GetSecretValue GetSecretValue get

*全部资源

*

无 无
gpdb:CreateExtensions CreateExtensions create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifySupabaseAutoScalePolicy ModifySupabaseAutoScalePolicy update

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:DescribeHadoopDataSource DescribeHadoopDataSource get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeZonesPrivateRAGService DescribeZonesPrivateRAGService get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListSecrets ListSecrets list

*全部资源

*

无 无
gpdb:DeleteSaasService DeleteSaasService delete

*全部资源

*

无 无
gpdb:DescribeActiveSQLRecords DescribeActiveSQLRecords get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeRebalanceStatus DescribeRebalanceStatus get

*全部资源

*

无 无
gpdb:ResumeSaasService ResumeSaasService delete

*全部资源

*

无 无
gpdb:DescribeExtension DescribeExtension get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyHadoopDataSource ModifyHadoopDataSource update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateWorkspace CreateWorkspace create

*Workspace

acs:gpdb:{#regionId}:{#accountId}:workspace/*

无 无
gpdb:ModifyDBInstanceDescription ModifyDBInstanceDescription update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UntagSupabaseProject UntagSupabaseProject update

*全部资源

*

无 无
gpdb:DeployPrivateRAGService DeployPrivateRAGService update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeModelOperatorApiKey DescribeModelOperatorApiKey get

*全部资源

*

无 无
gpdb:CreateExternalDataService CreateExternalDataService create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifySupabaseProjectSecurityIps ModifySupabaseProjectSecurityIps update

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:DescribeDiagnosisMonitorPerformance DescribeDiagnosisMonitorPerformance get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateHadoopDataSource CreateHadoopDataSource create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeSQLLogsV2 DescribeSQLLogsV2 get

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListSlowSQLRecords ListSlowSQLRecords get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteBranch DeleteBranch delete

*Branch

acs:gpdb:{#regionId}:{#accountId}:branch/{#BranchId}

无 无
gpdb:DescribeDataShareInstances DescribeDataShareInstances get

*全部资源

*

无 无
gpdb:DeleteStreamingDataSource DeleteStreamingDataSource delete

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ModifyDBInstanceConfig ModifyDBInstanceConfig get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:DeleteStreamingJob DeleteStreamingJob delete

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteExternalDataService DeleteExternalDataService delete

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateJDBCDataSource CreateJDBCDataSource create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ReleaseInstancePublicConnection ReleaseInstancePublicConnection update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UpsertChunks UpsertChunks create

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:PauseDataRedistribute PauseDataRedistribute update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListApiKeys ListApiKeys list

*全部资源

*

无 无
gpdb:DeleteWorkspace DeleteWorkspace delete

*全部资源

*

无 无
gpdb:DescribeDBInstanceIPArrayList DescribeDBInstanceIPArrayList get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteRemoteADBDataSource DeleteRemoteADBDataSource delete

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:QueryContent QueryContent create

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:ModifyMasterSpec ModifyMasterSpec update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDiagnosisDimensions DescribeDiagnosisDimensions get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UpgradeExtensions UpgradeExtensions update

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeTable DescribeTable get

*全部资源

*

无 无
gpdb:DeleteDatabase DeleteDatabase delete

*全部资源

*

无 无
gpdb:CloneDBInstance CloneDBInstance update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateSupabaseProject CreateSupabaseProject create

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/*

无 无
gpdb:ChatWithKnowledgeBase ChatWithKnowledgeBase create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceDiagnosisSummary DescribeDBInstanceDiagnosisSummary get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteHadoopDataSource DeleteHadoopDataSource delete

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListSchemas ListSchemas list

*全部资源

*

无 无
gpdb:DeleteIndex DeleteIndex delete

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:PauseSupabaseProject PauseSupabaseProject update

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:DeleteCollectionData DeleteCollectionData delete

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:DownloadSQLLogsRecords DownloadSQLLogsRecords get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#dbinstanceId}

无 无
gpdb:DescribeDBInstancePerformance DescribeDBInstancePerformance get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteVectorIndex DeleteVectorIndex create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:GetSupabaseProject GetSupabaseProject get

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}

无 无
gpdb:ResumeInstance ResumeInstance update

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DeleteDBInstance DeleteDBInstance delete

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:UploadDocumentAsync UploadDocumentAsync create

*Document

acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}

无 无
gpdb:CreateAIService CreateAIService update

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:RestoreSnapshot RestoreSnapshot update

*全部资源

*

无 无
gpdb:DescribeAccounts DescribeAccounts get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:CreateVectorIndex CreateVectorIndex create

*Collection

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:CancelUpsertCollectionDataJob CancelUpsertCollectionDataJob create

*Document

acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}

无 无
gpdb:ListSupabaseProjects ListSupabaseProjects list

*SupabaseProject

acs:gpdb:{#regionId}:{#accountId}:supabaseproject/*

无 无
gpdb:CreateApiKey CreateApiKey create

*全部资源

*

无 无
gpdb:ListExternalDataServices ListExternalDataServices list

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:GetServiceAccessInfo GetServiceAccessInfo get

*全部资源

*

无 无
gpdb:GetApiEndpoints GetApiEndpoints list

*全部资源

*

无 无
gpdb:GetSaasService GetSaasService get

*全部资源

*

无 无
gpdb:ListTables ListTables list

*全部资源

*

无 无
gpdb:DisableDBResourceGroup DisableDBResourceGroup delete

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListBackupJobs ListBackupJobs get

*DBInstance

acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:DescribeDBInstanceNetInfo DescribeDBInstanceNetInfo get

*DBInstance

acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:ListStreamingDataServices ListStreamingDataServices create

*DBInstance

acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

无 无
gpdb:GetWorkspace GetWorkspace get

*全部资源

*

无 无
gpdb:DescribeUserEncryptionKeyList DescribeUserEncryptionKeyList get

*全部资源

*

无 无

资源(Resource)

下表是云原生数据仓库 AnalyticDB PostgreSQL版定义的资源,这些资源可以在 RAM 权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源 ARN 是资源在阿里云上的唯一标识。具体说明如下:

  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。

  • *表示全部。例如:

    • {#resourceType}为*时:表示全部资源。

    • {#regionId}为*时:表示全部地域。

    • {#accountId}为*时:表示全部阿里云账号。

资源类型

资源 ARN

DBInstance
  • acs:gpdb:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}
  • acs:gpdb::{#accountId}:dbinstance/{#DBInstanceId}
  • acs:gpdb:*:{#accountId}:dbinstance/{#DBInstanceId}
  • acs:gpdb:{#regionId}:{#accountId}:dbinstance/*
Workspace
  • acs:gpdb:{#regionId}:{#accountId}:workspace/*
Collection
  • acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}
Branch
  • acs:gpdb:{#regionId}:{#accountId}:branch/*
  • acs:gpdb:{#regionId}:{#accountId}:branch/{#BranchId}
SupabaseProject
  • acs:gpdb:{#regionId}:{#accountId}:supabaseproject/{#ProjectId}
  • acs:gpdb:{#regionId}:{#accountId}:supabaseproject/*
Document
  • acs:gpdb:{#regionId}:{#accountId}:instance/{#DBInstanceId}/document/{#Document}
  • acs:gpdb:{#regionId}:{#accountId}:document/{#DBInstanceId}
  • acs:gpdb:{#regionId}:{#accountId}:collection/{#DBInstanceId}
Secret
  • acs:gpdb:{#regionId}:{#accountId}:secret/*
Snapshot
  • acs:gpdb:{#regionId}:{#accountId}:snapshot/*
DataAPI
  • acs:gpdb:{#regionId}:{#accountId}:dataapi/*
Namespace
  • acs:gpdb:{#regionId}:{#accountId}:namespace/{#DBInstanceId}
dbInstance
  • acs:gpdb:{#regionId}:{#accountId}:dbInstance/*

条件(Condition)

下表是云原生数据仓库 AnalyticDB PostgreSQL版 定义的产品级条件关键字,这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用,用来描述授予权限的条件。以下仅列举产品级的条件关键字,阿里云定义的通用条件关键字也同样适用云原生数据仓库 AnalyticDB PostgreSQL版。

其中,数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符,否则无法匹配策略语句,授权行为无效。数据类型与条件运算符的对应关系,请参见条件操作类型。

条件关键字

描述

类型

gpdb:EncryptionType 加密类型。Off:不启用加密;CloudDisk:开通云盘加密,并通过EncryptionKey参数指定密钥 String
gpdb:SSLEnabled SSL加密状态 String
gpdb:EnableSSL 是否开启SSL Boolean

相关操作

您可以创建自定义权限策略,并将权限策略授予 RAM 用户、RAM 用户组或 RAM 角色。具体操作如下: