授权信息

访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 云原生多模数据库 Lindorm 为 RAM 权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。 云原生多模数据库 Lindorm 的 RAM 代码(RamCode)为 lindorm ,支持的授权粒度为 资源级

权限策略通用结构

权限策略支持 JSON 格式,其通用结构如下:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

各字段含义如下:

  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。

  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)

  • Resource:受操作影响的具体对象,您可以使用资源 ARN 来描述指定资源。具体信息,请参见资源(Resource)

  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)

    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素

    • Condition_key:条件关键字。

    • Condition_value:条件关键字对应的值。

操作(Action)

下表是云原生多模数据库 Lindorm定义的操作,这些操作可以在 RAM 权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:

  • 操作:是指具体的权限点。

  • API:是指操作对应的 API 接口。

  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。

  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:

    • 对于必选的资源类型,用前面加 * 表示。

    • 对于不支持资源级授权的操作,用全部资源表示。

  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字

  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。

操作

API

访问级别

资源类型

条件关键字

关联操作

lindorm:RestartLdpsComputeGroup RestartLdpsComputeGroup create
*全部资源
*
lindorm:ChangeResourceGroup ChangeResourceGroup update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:DescribeHistoryTasksStat DescribeHistoryTasksStat get
*全部资源
*
lindorm:GetLdpsShsLogPersistencePolicy GetLdpsShsLogPersistencePolicy get
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetSpecifiedLindormInstanceList GetSpecifiedLindormInstanceList get
*全部资源
*
lindorm:UpdateComputeJobRecord UpdateComputeJobRecord update
*全部资源
*
lindorm:DescribeLindormSpecInfo DescribeLindormSpecInfo get
*全部资源
*
lindorm:ListComputeEngineJob ListComputeEngineJob list
*全部资源
*
lindorm:SwitchLindormAuditLog SwitchLindormAuditLog update
*全部资源
*
lindorm:OpenLdpsColumnarIndex OpenLdpsColumnarIndex update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:PreallocateLindormV2Resource PreallocateLindormV2Resource none
*全部资源
*
lindorm:CreateServerlessLindormInstance CreateServerlessLindormInstance create
*全部资源
*
lindorm:CreateServerlessRestorePlan CreateServerlessRestorePlan create
*全部资源
*
lindorm:UntagResources UntagResources update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:DescribeTSDBUserList DescribeTSDBUserList get
*全部资源
*
lindorm:CreateLdfsDirectory CreateLdfsDirectory create
*全部资源
*
lindorm:OpenComupteEngine OpenComupteEngine update
*全部资源
*
lindorm:ReleaseLindormComputeJob ReleaseLindormComputeJob delete
*全部资源
*
lindorm:DeleteInstanceUser DeleteInstanceUser delete
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:ModifyLindormV2WhiteIpList ModifyLindormV2WhiteIpList none
*全部资源
*
lindorm:GetClusterInfo GetClusterInfo get
*全部资源
*
lindorm:DeleteVectorEngine DeleteVectorEngine delete
*全部资源
*
lindorm:DescribeTSDBInstanceVersionInfo DescribeTSDBInstanceVersionInfo get
*全部资源
*
lindorm:GetLindormInstanceList GetLindormInstanceList get
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetInstanceBackupPlanConfig GetInstanceBackupPlanConfig get
*全部资源
*
lindorm:ReleaseRecycleInstance ReleaseRecycleInstance delete
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:CreateLdpsComputeGroup CreateLdpsComputeGroup create
*全部资源
*
lindorm:UpgradeLindormInstanceVersion UpgradeLindormInstanceVersion update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetUserRamRoleAuthorization GetUserRamRoleAuthorization get
*全部资源
*
lindorm:GetLtsStreams GetLtsStreams get
*全部资源
*
lindorm:GetLindormEngineLatestStableVersion GetLindormEngineLatestStableVersion get
*全部资源
*
lindorm:GetVectorRelation GetVectorRelation get
*全部资源
*
lindorm:CreateTSDBUser CreateTSDBUser
*全部资源
*
lindorm:ModifyActiveOperationMaintainConf ModifyActiveOperationMaintainConf update
*全部资源
*
lindorm:SwitchSSLEncryption SwitchSSLEncryption update
*全部资源
*
lindorm:UpgradeLindormMultiZoneInstance UpgradeLindormMultiZoneInstance update
*全部资源
*
lindorm:GetLindormInstanceForDMSByConnStr GetLindormInstanceForDMSByConnStr get
*全部资源
*
lindorm:GetLindormSSLCertUrl GetLindormSSLCertUrl get
*全部资源
*
lindorm:ExploreTSDBInstanceData ExploreTSDBInstanceData get
*全部资源
*
lindorm:ModifyInstanceUserPassword ModifyInstanceUserPassword update
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:GetLindormMultiZoneInstance GetLindormMultiZoneInstance get
*全部资源
*
lindorm:RelateVectorEngine RelateVectorEngine create
*全部资源
*
lindorm:DeleteLdpsComputeGroup DeleteLdpsComputeGroup delete
*全部资源
*
lindorm:ModifyAutoScalingRule ModifyAutoScalingRule update
*全部资源
*
lindorm:GetInstanceRestoreSummary GetInstanceRestoreSummary get
*全部资源
*
lindorm:UpdateLindormInstancePassword UpdateLindormInstancePassword update
*全部资源
*
lindorm:ExploreTSDBInstanceDeletionJobList ExploreTSDBInstanceDeletionJobList get
*全部资源
*
lindorm:DeleteTSDBInstanceData DeleteTSDBInstanceData
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:ListAutoScalingConfigs ListAutoScalingConfigs list
*全部资源
*
lindorm:UpdateLindormTSDBTimestamp UpdateLindormTSDBTimestamp update
*全部资源
*
lindorm:SwitchInstancePublicNetwork SwitchInstancePublicNetwork update
*全部资源
*
lindorm:GrantInstanceUserAcl GrantInstanceUserAcl update
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:DeleteLtsStream DeleteLtsStream delete
*全部资源
*
lindorm:UpsertLindormV2Config UpsertLindormV2Config none
*全部资源
*
lindorm:GetUploadProgress GetUploadProgress get
*全部资源
*
lindorm:GetComputeEngineJobDetail GetComputeEngineJobDetail get
*全部资源
*
lindorm:GetLindormInstanceStatus GetLindormInstanceStatus get
*全部资源
*
lindorm:DeleteAutoScalingRule DeleteAutoScalingRule delete
*全部资源
*
lindorm:IsGanosActivated IsGanosActivated get
*全部资源
*
lindorm:RenewLindormInstance RenewLindormInstance update
*全部资源
*
lindorm:CheckAllowCloseEngine CheckAllowCloseEngine update
*全部资源
*
lindorm:UpdateLindormStoreEntryPortStatus UpdateLindormStoreEntryPortStatus update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:ListServerlessRestorePlans ListServerlessRestorePlans list
*全部资源
*
lindorm:GetComputeJobRecord GetComputeJobRecord get
*全部资源
*
lindorm:GetLindormV2InstanceEngineList GetLindormV2InstanceEngineList get
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:WriteTSDBInstanceDemoData WriteTSDBInstanceDemoData
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:ExploreTSDBInstanceDataMetricList ExploreTSDBInstanceDataMetricList get
*全部资源
*
lindorm:ReleaseLindormV2Instance ReleaseLindormV2Instance delete
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:CheckLdfsUserPermission CheckLdfsUserPermission get
*全部资源
*
lindorm:ModifyActiveOperationTasks ModifyActiveOperationTasks update
*全部资源
*
lindorm:ExploreTSDBInstanceDataTagKeyList ExploreTSDBInstanceDataTagKeyList get
*全部资源
*
lindorm:GetLdpsResourceCost GetLdpsResourceCost get
*全部资源
*
lindorm:CreateOrReplaceCustomResource CreateOrReplaceCustomResource create
*全部资源
*
lindorm:GetLindormAIShareInstance GetLindormAIShareInstance get
*全部资源
*
lindorm:CreateAutoScalingConfig CreateAutoScalingConfig create
*全部资源
*
lindorm:EnableLindormMultiZoneBackup EnableLindormMultiZoneBackup update
*全部资源
*
lindorm:RestartLindormInstance RestartLindormInstance update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:OpenHiveMetaStore OpenHiveMetaStore update
*全部资源
*
lindorm:CancelActiveOperationTasks CancelActiveOperationTasks update
*全部资源
*
lindorm:GetLindormV2StorageUsage GetLindormV2StorageUsage get
*全部资源
*
lindorm:CreateLindormStandaloneInstance CreateLindormStandaloneInstance create
*全部资源
*
lindorm:ExploreTSDBInstanceDataBySQL ExploreTSDBInstanceDataBySQL get
*全部资源
*
lindorm:TagResources TagResources update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:CheckCreateLindormInstance CheckCreateLindormInstance get
*全部资源
*
lindorm:DescribeTSDBInstanceSimpleConfig DescribeTSDBInstanceSimpleConfig get
*全部资源
*
lindorm:DescribeActiveOperationMaintainConf DescribeActiveOperationMaintainConf get
*全部资源
*
lindorm:UpgradeLindormV2StreamEngine UpgradeLindormV2StreamEngine update
*全部资源
*
lindorm:CheckUpgradeLindormInstance CheckUpgradeLindormInstance get
*全部资源
*
lindorm:OpenComputeEngine OpenComputeEngine update
*全部资源
*
lindorm:GetInstanceRestoreDetail GetInstanceRestoreDetail get
*全部资源
*
lindorm:UpdateLindormTSDBInstanceDatabaseConfig UpdateLindormTSDBInstanceDatabaseConfig update
*全部资源
*
lindorm:SwitchLBlobService SwitchLBlobService update
*全部资源
*
lindorm:MigrateSingleZoneToMultiZone MigrateSingleZoneToMultiZone update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:ListAutoScalingRules ListAutoScalingRules list
*全部资源
*
lindorm:GetLdpsManagedComponentInfo GetLdpsManagedComponentInfo get
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:CloseComputeHistoryServer CloseComputeHistoryServer update
*全部资源
*
lindorm:GetDownloadProgress GetDownloadProgress get
*全部资源
*
lindorm:ExploreTSDBInstanceDataTagValueList ExploreTSDBInstanceDataTagValueList get
*全部资源
*
lindorm:ListTagResources ListTagResources get
*全部资源
*
lindorm:ListComputeGroupUsage ListComputeGroupUsage get
*全部资源
*
lindorm:UpgradeLindormInstance UpgradeLindormInstance update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:CreateInstanceRestorePlan CreateInstanceRestorePlan create
*全部资源
*
lindorm:GetClientSourceIp GetClientSourceIp get
*全部资源
*
lindorm:ListInstanceUsersDetails ListInstanceUsersDetails list
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:DeleteCustomResource DeleteCustomResource delete
*全部资源
*
lindorm:GetLindormInstanceEngineList GetLindormInstanceEngineList get
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:DeployLdpsSemiManagedComponent DeployLdpsSemiManagedComponent create
*全部资源
*
lindorm:SetDefaultOlapComputeGroup SetDefaultOlapComputeGroup create
*全部资源
*
lindorm:AddLtsDataSource AddLtsDataSource create
*全部资源
*
lindorm:ListInstanceNamespaces ListInstanceNamespaces list
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:DescribeHistoryTasks DescribeHistoryTasks get
*全部资源
*
lindorm:RevokeInstanceUserAcl RevokeInstanceUserAcl update
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:GetRecoverableTimeRange GetRecoverableTimeRange get
*全部资源
*
lindorm:ExploreTSDBInstanceDataFieldList ExploreTSDBInstanceDataFieldList get
*全部资源
*
lindorm:ListInstanceNamespacedTables ListInstanceNamespacedTables list
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:AddStreamTables AddStreamTables update
*全部资源
*
lindorm:DeleteLtsDataSource DeleteLtsDataSource delete
*全部资源
*
lindorm:ModifyInstancePayType ModifyInstancePayType update
*全部资源
*
lindorm:UpgradeLindormV2EngineVersion UpgradeLindormV2EngineVersion update
*全部资源
*
lindorm:UpdateTSDBInstanceTtl UpdateTSDBInstanceTtl
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetLindormInstanceForDMS GetLindormInstanceForDMS get
*全部资源
*
lindorm:DescribeEventMetaInfo DescribeEventMetaInfo get
*全部资源
*
lindorm:GetLdpsNamespacedQuota GetLdpsNamespacedQuota get
*全部资源
*
lindorm:DescribeHistoryEventsStat DescribeHistoryEventsStat get
*全部资源
*
lindorm:GetLindormInstance GetLindormInstance get
*全部资源
*
lindorm:ListCustomResource ListCustomResource list
*全部资源
*
lindorm:GetInstanceIpWhiteList GetInstanceIpWhiteList get
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:DescribeTSDBInstanceDataTtl DescribeTSDBInstanceDataTtl get
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetInstanceBackupDetail GetInstanceBackupDetail get
*全部资源
*
lindorm:GetLdpsJobLog GetLdpsJobLog get
*全部资源
*
lindorm:UpdateInstanceIpWhiteList UpdateInstanceIpWhiteList update
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:GetLindormPhoenixDetail GetLindormPhoenixDetail get
*全部资源
*
lindorm:UpdateUserVswitches UpdateUserVswitches update
*全部资源
*
lindorm:UpgradeLindormMultiZoneInstanceVersion UpgradeLindormMultiZoneInstanceVersion none
*全部资源
*
lindorm:GetLindormInstanceListForInner GetLindormInstanceListForInner get
*全部资源
*
lindorm:GetInstanceSummary GetInstanceSummary get
*全部资源
*
lindorm:GetOssAuth GetOssAuth get
*全部资源
*
lindorm:SwitchLSQLV3MySQLService SwitchLSQLV3MySQLService update
*全部资源
*
lindorm:CreateInstanceUser CreateInstanceUser create
*instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
lindorm:ReleaseLindormInstance ReleaseLindormInstance delete
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:DescribeActiveOperationTasks DescribeActiveOperationTasks get
*全部资源
*
lindorm:RedoLtsStream RedoLtsStream none
*全部资源
*
lindorm:CreateComputeEngineJob CreateComputeEngineJob create
*全部资源
*
lindorm:ModifyLindormV2Instance ModifyLindormV2Instance create
*全部资源
*
lindorm:SwitchV2LProxyService SwitchV2LProxyService update
*全部资源
*
lindorm:GetUserVswitches GetUserVswitches get
*全部资源
*
lindorm:GetLindormInstanceEngineInfo GetLindormInstanceEngineInfo get
*全部资源
*
lindorm:GetLdfsDirectories GetLdfsDirectories get
*全部资源
*
lindorm:UpdateLindormInstanceAttribute UpdateLindormInstanceAttribute update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:DescribeActiveOperationTaskType DescribeActiveOperationTaskType get
*全部资源
*
lindorm:UpdateClusterInfo UpdateClusterInfo update
*全部资源
*
lindorm:OpenComputeHistoryServer OpenComputeHistoryServer update
*全部资源
*
lindorm:GetCustomResourceDetail GetCustomResourceDetail get
*全部资源
*
lindorm:DeleteTSDBUser DeleteTSDBUser delete
*全部资源
*
lindorm:UpdateLindormV2InstanceParameter UpdateLindormV2InstanceParameter update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:OpenComputePreCheck OpenComputePreCheck update
*全部资源
*
lindorm:DescribeHistoryEvents DescribeHistoryEvents get
*全部资源
*
lindorm:UpdateLindormInstanceParameter UpdateLindormInstanceParameter update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetLtsDataSource GetLtsDataSource get
*全部资源
*
lindorm:CheckLindormInstanceValidate CheckLindormInstanceValidate get
*全部资源
*
lindorm:CreateServiceLinkedRole CreateServiceLinkedRole create
*全部资源
*
lindorm:DescribeRdsVSwitchs DescribeRdsVSwitchs none
*全部资源
*
lindorm:GetTaskProgress GetTaskProgress get
*全部资源
*
lindorm:GetLdpsComputeGroup GetLdpsComputeGroup get
*全部资源
*
lindorm:GetEmqxLicense GetEmqxLicense get
*全部资源
*
lindorm:UpdateLdpsComputeGroup UpdateLdpsComputeGroup update
*全部资源
*
lindorm:UpdateInstanceBackupPlanConfig UpdateInstanceBackupPlanConfig update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetLindormStandaloneInstance GetLindormStandaloneInstance get
*全部资源
*
lindorm:DescribeRdsVpcs DescribeRdsVpcs none
*全部资源
*
lindorm:GetInstanceSecurityGroups GetInstanceSecurityGroups get
*全部资源
*
lindorm:GetLindormV2Topology GetLindormV2Topology get
*全部资源
*
lindorm:CreateLindormInstance CreateLindormInstance create
*全部资源
*
lindorm:UpdateInstanceSecurityGroups UpdateInstanceSecurityGroups update
*全部资源
*
lindorm:CheckEngineAccessPrivilege CheckEngineAccessPrivilege get
*全部资源
*
lindorm:GetLindormV2Instance GetLindormV2Instance get
*全部资源
*
lindorm:GetAutoScalingConfig GetAutoScalingConfig get
*全部资源
*
lindorm:UpdateTSDBUserConfig UpdateTSDBUserConfig update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetLtsStreamDetails GetLtsStreamDetails get
*全部资源
*
lindorm:GetComputeEngineJobList GetComputeEngineJobList get
*全部资源
*
lindorm:SwitchLProxyService SwitchLProxyService update
*全部资源
*
lindorm:CheckCustomResourceValid CheckCustomResourceValid create
*全部资源
*
lindorm:GetLindormInstanceListForDMS GetLindormInstanceListForDMS get
*全部资源
*
lindorm:CreateInstanceBackupPlan CreateInstanceBackupPlan create
*全部资源
*
lindorm:GetCustomResource GetCustomResource get
*全部资源
*
lindorm:ListLdpsComputeGroups ListLdpsComputeGroups list
*全部资源
*
lindorm:GetLindormSQLVersion GetLindormSQLVersion get
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:ModifyInstanceMaintainTime ModifyInstanceMaintainTime update
*全部资源
*
lindorm:GetLindormTSDBInstanceDatabases GetLindormTSDBInstanceDatabases get
*全部资源
*
lindorm:GetComputeEngineJobLog GetComputeEngineJobLog get
*全部资源
*
lindorm:CheckLdpsColumnarIndexStatus CheckLdpsColumnarIndexStatus update
*全部资源
*
lindorm:GetServerlessLindormEngineList GetServerlessLindormEngineList get
*全部资源
*
lindorm:ModifyAutoScalingConfig ModifyAutoScalingConfig update
*全部资源
*
lindorm:GetLindormTables GetLindormTables get
*全部资源
*
lindorm:CreateAutoScalingRule CreateAutoScalingRule create
*全部资源
*
lindorm:GetLindormFsUsedDetail GetLindormFsUsedDetail get
*全部资源
*
lindorm:UpdateUIProxyAccountPassword UpdateUIProxyAccountPassword update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:UploadLdpsResource UploadLdpsResource none
*全部资源
*
lindorm:GetAutoScalingRule GetAutoScalingRule get
*全部资源
*
lindorm:GetUsageExportTask GetUsageExportTask get
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:ModifyLdpsShsLogPersistencePolicy ModifyLdpsShsLogPersistencePolicy update
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:UpdateComputeResourceQuota UpdateComputeResourceQuota update
*全部资源
*
lindorm:DeleteAutoScalingConfig DeleteAutoScalingConfig delete
*全部资源
*
lindorm:GetLtsInstance GetLtsInstance get
*全部资源
*
lindorm:RestartLindormV2Engine RestartLindormV2Engine none
*全部资源
*
lindorm:GetEngineDefaultAuth GetEngineDefaultAuth get
*全部资源
*
lindorm:ListAutoScalingRecords ListAutoScalingRecords list
*全部资源
*
lindorm:ActivateGanos ActivateGanos get
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:GetInstanceBackupSummary GetInstanceBackupSummary get
*全部资源
*
lindorm:CreateLindormV2Instance CreateLindormV2Instance create
*全部资源
*
lindorm:GetServerlessLindormInstance GetServerlessLindormInstance get
*Instance
acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
lindorm:StartComputeJob StartComputeJob create
*全部资源
*

资源(Resource)

下表是云原生多模数据库 Lindorm定义的资源,这些资源可以在 RAM 权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源 ARN 是资源在阿里云上的唯一标识。具体说明如下:

  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。

  • *表示全部。例如:

    • {#resourceType}*时:表示全部资源。

    • {#regionId}*时:表示全部地域。

    • {#accountId}*时:表示全部阿里云账号。

资源类型

资源 ARN

Instance acs:lindorm:{#regionId}:{#accountId}:instance/{#InstanceId}
instance acs:lindorm:{#regionId}:{#accountId}:instance/{#instanceId}
Instance acs:lindorm:{#regionId}:{#accountId}:instance/*
Instance acs:lindorm:{#regionId}:{#accountId}:*
Bucket acs:lindorm:{#regionId}:{#accountId}:*
Instance acs:lindorm:{#Region}:{#AccountId}:instance/{#InstanceId}
VSwitch acs:vpc:{#regionId}:{#accountId}:vswitch/*

条件(Condition)

云原生多模数据库 Lindorm未定义产品级别的条件关键字。如需查看适用于所有云产品的通用条件关键字,请参见通用条件关键字

相关操作

您可以创建自定义权限策略,并将权限策略授予 RAM 用户、RAM 用户组或 RAM 角色。具体操作如下: