授权信息

访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 云原生多模数据库 Lindorm 为 RAM 权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。 云原生多模数据库 Lindorm 的 RAM 代码(RamCode)为 lindorm ,支持的授权粒度为 资源级

权限策略通用结构

权限策略支持 JSON 格式,其通用结构如下:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

各字段含义如下:

  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。

  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)

  • Resource:受操作影响的具体对象,您可以使用资源 ARN 来描述指定资源。具体信息,请参见资源(Resource)

  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)

    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素

    • Condition_key:条件关键字。

    • Condition_value:条件关键字对应的值。

操作(Action)

下表是云原生多模数据库 Lindorm定义的操作,这些操作可以在 RAM 权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:

  • 操作:是指具体的权限点。

  • API:是指操作对应的 API 接口。

  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。

  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:

    • 对于必选的资源类型,用前面加 * 表示。

    • 对于不支持资源级授权的操作,用全部资源表示。

  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字

  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。

操作

API

访问级别

资源类型

条件关键字

关联操作

lindorm:GetLdfsDirectories GetLdfsDirectories get

*全部资源

*

lindorm:CreateLdpsComputeGroup CreateLdpsComputeGroup create

*全部资源

*

lindorm:GetInstanceIpWhiteList GetInstanceIpWhiteList get

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:ModifyLindormV2InstanceSecurityGroups ModifyLindormV2InstanceSecurityGroups update

*全部资源

*

lindorm:ListComputeEngineJob ListComputeEngineJob list

*全部资源

*

lindorm:ModifyActiveOperationMaintainConf ModifyActiveOperationMaintainConf update

*全部资源

*

lindorm:GetInstanceRestoreSummary GetInstanceRestoreSummary get

*全部资源

*

lindorm:GetLdpsManagedComponentInfo GetLdpsManagedComponentInfo get

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:DescribeLindormSpecInfo DescribeLindormSpecInfo get

*全部资源

*

lindorm:RelateVectorEngine RelateVectorEngine create

*全部资源

*

lindorm:GetEngineDefaultAuth GetEngineDefaultAuth get

*全部资源

*

lindorm:DeleteLtsDataSource DeleteLtsDataSource delete

*全部资源

*

lindorm:CheckCreateLindormInstance CheckCreateLindormInstance get

*全部资源

*

lindorm:GetVectorRelation GetVectorRelation get

*全部资源

*

lindorm:GrantInstanceUserAcl GrantInstanceUserAcl update

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:GetInstanceRestoreDetail GetInstanceRestoreDetail get

*全部资源

*

lindorm:DeleteInstanceUser DeleteInstanceUser delete

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:GetInstanceSecurityGroups GetInstanceSecurityGroups get

*全部资源

*

lindorm:DescribeActiveOperationTasks DescribeActiveOperationTasks get

*全部资源

*

lindorm:DescribeEventMetaInfo DescribeEventMetaInfo get

*全部资源

*

lindorm:OpenComputeHistoryServer OpenComputeHistoryServer update

*全部资源

*

lindorm:RestartLindormV2Engine RestartLindormV2Engine none

*全部资源

*

lindorm:CreateAutoScalingConfig CreateAutoScalingConfig create

*全部资源

*

lindorm:GetLindormSSLCertUrl GetLindormSSLCertUrl get

*全部资源

*

lindorm:ModifyLindormV2WhiteIpList ModifyLindormV2WhiteIpList none

*全部资源

*

lindorm:AddLtsDataSource AddLtsDataSource create

*全部资源

*

lindorm:ModifyInstancePayType ModifyInstancePayType update

*全部资源

*

lindorm:GetServerlessLindormEngineList GetServerlessLindormEngineList get

*全部资源

*

lindorm:UploadLdpsResource UploadLdpsResource none

*全部资源

*

lindorm:SwitchLSQLV3MySQLService SwitchLSQLV3MySQLService update

*全部资源

*

lindorm:CheckResourceDiscount CheckResourceDiscount list

*全部资源

*

lindorm:GetLindormInstance GetLindormInstance get

*全部资源

*

lindorm:GetComputeEngineJobList GetComputeEngineJobList get

*全部资源

*

lindorm:GetLindormStandaloneInstance GetLindormStandaloneInstance get

*全部资源

*

lindorm:CreateInstanceRestorePlan CreateInstanceRestorePlan create

*全部资源

*

lindorm:GetDownloadProgress GetDownloadProgress get

*全部资源

*

lindorm:ListInstanceUsersDetails ListInstanceUsersDetails list

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:GetCustomResourceDetail GetCustomResourceDetail get

*全部资源

*

lindorm:CreateServerlessLindormInstance CreateServerlessLindormInstance create

*全部资源

*

lindorm:CheckAllowCloseEngine CheckAllowCloseEngine update

*全部资源

*

lindorm:UpsertLindormV2Config UpsertLindormV2Config none

*全部资源

*

lindorm:CreateAutoScalingRule CreateAutoScalingRule create

*全部资源

*

lindorm:CreateServiceLinkedRole CreateServiceLinkedRole create

*全部资源

*

lindorm:OpenComputePreCheck OpenComputePreCheck update

*全部资源

*

lindorm:GetClientSourceIp GetClientSourceIp get

*全部资源

*

lindorm:UpdateUIProxyAccountPassword UpdateUIProxyAccountPassword update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetLindormTSDBInstanceDatabases GetLindormTSDBInstanceDatabases get

*全部资源

*

lindorm:GetLindormInstanceStatus GetLindormInstanceStatus get

*全部资源

*

lindorm:DeployLdpsSemiManagedComponent DeployLdpsSemiManagedComponent create

*全部资源

*

lindorm:CreateComputeEngineJob CreateComputeEngineJob create

*全部资源

*

lindorm:GetLdpsComputeGroup GetLdpsComputeGroup get

*全部资源

*

lindorm:UpdateLindormInstanceParameter UpdateLindormInstanceParameter update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetLindormPhoenixDetail GetLindormPhoenixDetail get

*全部资源

*

lindorm:ListServerlessRestorePlans ListServerlessRestorePlans list

*全部资源

*

lindorm:GetLindormFsUsedDetail GetLindormFsUsedDetail get

*全部资源

*

lindorm:GetLdpsShsLogPersistencePolicy GetLdpsShsLogPersistencePolicy get

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:ReleaseLindormInstance ReleaseLindormInstance delete

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:DeleteLdpsComputeGroup DeleteLdpsComputeGroup delete

*全部资源

*

lindorm:SwitchSSLEncryption SwitchSSLEncryption update

*全部资源

*

lindorm:ListCustomResource ListCustomResource list

*全部资源

*

lindorm:EnableLindormBackup EnableLindormBackup update

*全部资源

*

lindorm:UpdateInstanceSecurityGroups UpdateInstanceSecurityGroups update

*全部资源

*

lindorm:ListAutoScalingConfigs ListAutoScalingConfigs list

*全部资源

*

lindorm:GetAutoScalingRule GetAutoScalingRule get

*全部资源

*

lindorm:CreateLdfsDirectory CreateLdfsDirectory create

*全部资源

*

lindorm:OpenHiveMetaStore OpenHiveMetaStore update

*全部资源

*

lindorm:RestartLdpsComputeGroup RestartLdpsComputeGroup create

*全部资源

*

lindorm:GetInstanceBackupSummary GetInstanceBackupSummary get

*全部资源

*

lindorm:GetRecoverableTimeRange GetRecoverableTimeRange get

*全部资源

*

lindorm:GetLdpsResourceCost GetLdpsResourceCost get

*全部资源

*

lindorm:DescribeActiveOperationTaskType DescribeActiveOperationTaskType get

*全部资源

*

lindorm:CreateOrReplaceCustomResource CreateOrReplaceCustomResource create

*全部资源

*

lindorm:GetClusterInfo GetClusterInfo get

*全部资源

*

lindorm:CreateInstanceBackupPlan CreateInstanceBackupPlan create

*全部资源

*

lindorm:ChangeResourceGroup ChangeResourceGroup update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetOssAuth GetOssAuth get

*全部资源

*

lindorm:GetLindormInstanceForDMS GetLindormInstanceForDMS get

*全部资源

*

lindorm:GetLindormInstanceList GetLindormInstanceList get

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:DescribeHistoryEventsStat DescribeHistoryEventsStat get

*全部资源

*

lindorm:GetLindormV2Instance GetLindormV2Instance get

*全部资源

*

lindorm:UpdateTSDBUserConfig UpdateTSDBUserConfig update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:ReleaseRecycleInstance ReleaseRecycleInstance delete

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetComputeJobRecord GetComputeJobRecord get

*全部资源

*

lindorm:ListLdpsComputeGroups ListLdpsComputeGroups list

*全部资源

*

lindorm:CreateInstanceUser CreateInstanceUser create

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:GetLindormMultiZoneInstance GetLindormMultiZoneInstance get

*全部资源

*

lindorm:DeleteAutoScalingConfig DeleteAutoScalingConfig delete

*全部资源

*

lindorm:OpenComupteEngine OpenComupteEngine update

*全部资源

*

lindorm:UpdateInstanceIpWhiteList UpdateInstanceIpWhiteList update

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:GetSpecifiedLindormInstanceList GetSpecifiedLindormInstanceList get

*全部资源

*

lindorm:DescribeRdsVSwitchs DescribeRdsVSwitchs none

*全部资源

*

lindorm:UpdateClusterInfo UpdateClusterInfo update

*全部资源

*

lindorm:CreateLindormV2Instance CreateLindormV2Instance create

*全部资源

*

lindorm:ModifyAutoScalingConfig ModifyAutoScalingConfig update

*全部资源

*

lindorm:ListAutoScalingRules ListAutoScalingRules list

*全部资源

*

lindorm:ListInstanceNamespaces ListInstanceNamespaces list

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:ListAutoScalingRecords ListAutoScalingRecords list

*全部资源

*

lindorm:RenewLindormInstance RenewLindormInstance update

*全部资源

*

lindorm:UpdateLindormInstanceAttribute UpdateLindormInstanceAttribute update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:ModifyAutoScalingRule ModifyAutoScalingRule update

*全部资源

*

lindorm:GetLindormV2StorageUsage GetLindormV2StorageUsage get

*全部资源

*

lindorm:DeleteAutoScalingRule DeleteAutoScalingRule delete

*全部资源

*

lindorm:DescribeRdsVpcs DescribeRdsVpcs none

*全部资源

*

lindorm:GetLindormInstanceForDMSByConnStr GetLindormInstanceForDMSByConnStr get

*全部资源

*

lindorm:SubmitUsageExportTask SubmitUsageExportTask update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:IsGanosActivated IsGanosActivated get

*全部资源

*

lindorm:UpgradeLindormMultiZoneInstance UpgradeLindormMultiZoneInstance update

*全部资源

*

lindorm:UpgradeLindormMultiZoneInstanceVersion UpgradeLindormMultiZoneInstanceVersion none

*全部资源

*

lindorm:DescribeHistoryTasksStat DescribeHistoryTasksStat get

*全部资源

*

lindorm:DeleteCustomResource DeleteCustomResource delete

*全部资源

*

lindorm:GetLindormV2InstanceEngineList GetLindormV2InstanceEngineList get

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:ModifyLdpsShsLogPersistencePolicy ModifyLdpsShsLogPersistencePolicy update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:ModifyActiveOperationTasks ModifyActiveOperationTasks update

*全部资源

*

lindorm:ListInstanceNamespacedTables ListInstanceNamespacedTables list

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:EnableLindormMultiZoneBackup EnableLindormMultiZoneBackup update

*全部资源

*

lindorm:SwitchV2LProxyService SwitchV2LProxyService update

*全部资源

*

lindorm:GetLindormInstanceEngineList GetLindormInstanceEngineList get

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:SwitchLindormAuditLog SwitchLindormAuditLog update

*全部资源

*

lindorm:ModifyInstanceMaintainTime ModifyInstanceMaintainTime update

*全部资源

*

lindorm:GetTaskProgress GetTaskProgress get

*全部资源

*

lindorm:UpdateLindormV2InstanceParameter UpdateLindormV2InstanceParameter update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetLindormV2Topology GetLindormV2Topology get

*全部资源

*

lindorm:GetInstanceSummary GetInstanceSummary get

*全部资源

*

lindorm:SwitchLProxyService SwitchLProxyService update

*全部资源

*

lindorm:GetLindormV2InstanceDetails GetLindormV2InstanceDetails get

*全部资源

*

lindorm:GetLindormAIShareInstance GetLindormAIShareInstance get

*全部资源

*

lindorm:GetServerlessLindormInstance GetServerlessLindormInstance get

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:UpgradeLindormInstanceVersion UpgradeLindormInstanceVersion update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:UpdateLindormTSDBTimestamp UpdateLindormTSDBTimestamp update

*全部资源

*

lindorm:CheckLindormInstanceValidate CheckLindormInstanceValidate get

*全部资源

*

lindorm:StartComputeJob StartComputeJob create

*全部资源

*

lindorm:CheckEngineAccessPrivilege CheckEngineAccessPrivilege get

*全部资源

*

lindorm:OpenComputeEngine OpenComputeEngine update

*全部资源

*

lindorm:GetLdpsNamespacedQuota GetLdpsNamespacedQuota get

*全部资源

*

lindorm:ModifyLindormV2Instance ModifyLindormV2Instance create

*全部资源

*

lindorm:PreallocateLindormV2Resource PreallocateLindormV2Resource none

*全部资源

*

lindorm:RevokeInstanceUserAcl RevokeInstanceUserAcl update

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:GetLindormV2InstanceForTerraform GetLindormV2InstanceForTerraform get

*全部资源

*

lindorm:GetLindormInstanceListForInner GetLindormInstanceListForInner get

*全部资源

*

lindorm:ReleaseLindormComputeJob ReleaseLindormComputeJob delete

*全部资源

*

lindorm:SwitchInstancePublicNetwork SwitchInstancePublicNetwork update

*全部资源

*

lindorm:GetLindormSQLVersion GetLindormSQLVersion get

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetComputeEngineJobLog GetComputeEngineJobLog get

*全部资源

*

lindorm:GetComputeEngineJobDetail GetComputeEngineJobDetail get

*全部资源

*

lindorm:GetLindormV2InstanceSecurityGroups GetLindormV2InstanceSecurityGroups get

*全部资源

*

lindorm:CheckLdpsColumnarIndexStatus CheckLdpsColumnarIndexStatus update

*全部资源

*

lindorm:GetLdpsJobLog GetLdpsJobLog get

*全部资源

*

lindorm:UpdateInstanceBackupPlanConfig UpdateInstanceBackupPlanConfig update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:ActivateGanos ActivateGanos get

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:CreateLindormInstance CreateLindormInstance create

*全部资源

*

lindorm:UpdateComputeJobRecord UpdateComputeJobRecord update

*全部资源

*

lindorm:GetAutoScalingConfig GetAutoScalingConfig get

*全部资源

*

lindorm:SwitchLBlobService SwitchLBlobService update

*全部资源

*

lindorm:GetUploadProgress GetUploadProgress get

*全部资源

*

lindorm:UpgradeLindormV2EngineVersion UpgradeLindormV2EngineVersion update

*全部资源

*

lindorm:UpdateLindormTSDBInstanceDatabaseConfig UpdateLindormTSDBInstanceDatabaseConfig update

*全部资源

*

lindorm:UntagResources UntagResources update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetInstanceBackupPlanConfig GetInstanceBackupPlanConfig get

*全部资源

*

lindorm:GetUsageExportTask GetUsageExportTask get

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetLindormInstanceListForDMS GetLindormInstanceListForDMS get

*全部资源

*

lindorm:UpdateLindormStoreEntryPortStatus UpdateLindormStoreEntryPortStatus update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:CheckUpgradeLindormInstance CheckUpgradeLindormInstance get

*全部资源

*

lindorm:MigrateSingleZoneToMultiZone MigrateSingleZoneToMultiZone update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetCustomResource GetCustomResource get

*全部资源

*

lindorm:GetInstanceBackupDetail GetInstanceBackupDetail get

*全部资源

*

lindorm:RestartLindormInstance RestartLindormInstance update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetUserVswitches GetUserVswitches get

*全部资源

*

lindorm:GetLindormInstanceEngineInfo GetLindormInstanceEngineInfo get

*全部资源

*

lindorm:UpdateLdpsComputeGroup UpdateLdpsComputeGroup update

*全部资源

*

lindorm:GetLindormEngineLatestStableVersion GetLindormEngineLatestStableVersion get

*全部资源

*

lindorm:DescribeHistoryEvents DescribeHistoryEvents get

*全部资源

*

lindorm:UpgradeLindormV2StreamEngine UpgradeLindormV2StreamEngine update

*全部资源

*

lindorm:TagResources TagResources update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:UpdateTSDBInstanceTtl UpdateTSDBInstanceTtl

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetUserRamRoleAuthorization GetUserRamRoleAuthorization get

*全部资源

*

lindorm:ReleaseLindormV2Instance ReleaseLindormV2Instance delete

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:CloseComputeHistoryServer CloseComputeHistoryServer update

*全部资源

*

lindorm:ListTagResources ListTagResources get

*全部资源

*

lindorm:CancelActiveOperationTasks CancelActiveOperationTasks update

*全部资源

*

lindorm:CheckCustomResourceValid CheckCustomResourceValid create

*全部资源

*

lindorm:DescribeHistoryTasks DescribeHistoryTasks get

*全部资源

*

lindorm:DeleteVectorEngine DeleteVectorEngine delete

*全部资源

*

lindorm:GetLindormEngineConfig GetLindormEngineConfig get

*全部资源

*

lindorm:GetEmqxLicense GetEmqxLicense get

*全部资源

*

lindorm:OpenLdpsColumnarIndex OpenLdpsColumnarIndex update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:SetDefaultOlapComputeGroup SetDefaultOlapComputeGroup create

*全部资源

*

lindorm:ModifyInstanceUserPassword ModifyInstanceUserPassword update

*instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}

lindorm:DescribeActiveOperationMaintainConf DescribeActiveOperationMaintainConf get

*全部资源

*

lindorm:UpgradeLindormInstance UpgradeLindormInstance update

*Instance

acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}

lindorm:GetLtsDataSource GetLtsDataSource get

*全部资源

*

lindorm:EnableV2EngineCDCService EnableV2EngineCDCService update

*全部资源

*

lindorm:UpdateComputeResourceQuota UpdateComputeResourceQuota update

*全部资源

*

lindorm:UpdateUserVswitches UpdateUserVswitches update

*全部资源

*

lindorm:ListComputeGroupUsage ListComputeGroupUsage get

*全部资源

*

lindorm:GetLtsInstance GetLtsInstance get

*全部资源

*

资源(Resource)

下表是云原生多模数据库 Lindorm定义的资源,这些资源可以在 RAM 权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源 ARN 是资源在阿里云上的唯一标识。具体说明如下:

  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。

  • *表示全部。例如:

    • {#resourceType}*时:表示全部资源。

    • {#regionId}*时:表示全部地域。

    • {#accountId}*时:表示全部阿里云账号。

资源类型

资源 ARN

instance
  • acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
Instance
  • acs:lindorm:{#regionId}:{#accountId}:*
  • acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
  • acs:lindorm:{#Region}:{#AccountId}:instance/{#InstanceId}
  • acs:lindorm:{#regionId}:{#accountId}:instance/*
Bucket
  • acs:lindorm:{#regionId}:{#accountId}:*
VSwitch
  • acs:vpc:{#regionId}:{#accountId}:vswitch/*

条件(Condition)

云原生多模数据库 Lindorm未定义产品级别的条件关键字。如需查看适用于所有云产品的通用条件关键字,请参见通用条件关键字

相关操作

您可以创建自定义权限策略,并将权限策略授予 RAM 用户、RAM 用户组或 RAM 角色。具体操作如下: