授权信息

访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 云原生数据库 PolarDB 为 RAM 权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。 云原生数据库 PolarDB 的 RAM 代码(RamCode)为 polardb ,支持的授权粒度为 资源级

权限策略通用结构

权限策略支持 JSON 格式,其通用结构如下:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

各字段含义如下:

  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。

  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)

  • Resource:受操作影响的具体对象,您可以使用资源 ARN 来描述指定资源。具体信息,请参见资源(Resource)

  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)

    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素

    • Condition_key:条件关键字。

    • Condition_value:条件关键字对应的值。

操作(Action)

下表是云原生数据库 PolarDB定义的操作,这些操作可以在 RAM 权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:

  • 操作:是指具体的权限点。

  • API:是指操作对应的 API 接口。

  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。

  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:

    • 对于必选的资源类型,用前面加 * 表示。

    • 对于不支持资源级授权的操作,用全部资源表示。

  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字

  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。

操作

API

访问级别

资源类型

条件关键字

关联操作

polardb:DescribeGlobalDataNetworkList DescribeGlobalDataNetworkList list
*全部资源
*
polardb:CreateDBEndpointAddress CreateDBEndpointAddress create
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:RevokeAccountPrivilege RevokeAccountPrivilege update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CloneDatabase CloneDatabase create
*全部资源
*
polardb:CreateDatabase CreateDatabase create
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:UpdateDBClusterProxyVersion UpdateDBClusterProxyVersion update
*全部资源
*
polardb:ResetAccountPassword ResetAccountPassword get
*全部资源
*
polardb:DescribeHistoryTasksStat DescribeHistoryTasksStat get
*全部资源
*
polardb:DescribeDBInstances DescribeDBInstances get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:UpgradeDBClusterMinorVersion UpgradeDBClusterMinorVersion update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeBackupLogs DescribeBackupLogs get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DisableDBClusterDocumentDB DisableDBClusterDocumentDB update
*全部资源
*
polardb:AddSQLRateLimitingRules AddSQLRateLimitingRules create
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyFirewallRules ModifyFirewallRules update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DeleteNetworkChannel DeleteNetworkChannel delete
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeBackupRegions DescribeBackupRegions get
*全部资源
*
polardb:DescribeDBClusterNetInfo DescribeDBClusterNetInfo get
*全部资源
*
polardb:CreateOrGetVirtualLicenseOrder CreateOrGetVirtualLicenseOrder create
*全部资源
*
polardb:CreateStoragePlan CreateStoragePlan create
*全部资源
*
polardb:CreateBackup CreateBackup create
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateExtensions CreateExtensions create
*全部资源
*
polardb:ModifyAccountType ModifyAccountType update
*全部资源
*
polardb:ModifyDBNodeHotReplicaMode ModifyDBNodeHotReplicaMode update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DeleteDBLink DeleteDBLink delete
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyActiveOperationTasks ModifyActiveOperationTasks update
*全部资源
*
polardb:DescribeUpgradeReport DescribeUpgradeReport get
*全部资源
*
polardb:ModifyDBNodeSccMode ModifyDBNodeSccMode update
*DBNode
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:UpgradeDBClusterVersion UpgradeDBClusterVersion update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DeleteDBNodes DeleteDBNodes delete
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ExecuteCrossCloudOpenAPI ExecuteCrossCloudOpenAPI none
*全部资源
*
polardb:CreatePolarFs CreatePolarFs create
*全部资源
*
polardb:AllocateMPPConnection AllocateMPPConnection create
*全部资源
*
polardb:DescribeTasks DescribeTasks get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDatabases DescribeDatabases get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyDBClusterPrimaryZone ModifyDBClusterPrimaryZone update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateFallBack CreateFallBack create
*全部资源
*
polardb:DeleteDBEndpointAddress DeleteDBEndpointAddress delete
*Endpoint
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:RemoveDBColdStorageTable RemoveDBColdStorageTable delete
*全部资源
*
polardb:ModifyGlobalDatabaseNetwork ModifyGlobalDatabaseNetwork update
*GlobalDatabaseNetwork
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:DeleteDBCluster DeleteDBCluster delete
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDBClusterAttribute DescribeDBClusterAttribute get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:AbortDBClusterMigration AbortDBClusterMigration update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ListOrders ListOrders list
*全部资源
*
polardb:SwitchOverGlobalDatabaseNetwork SwitchOverGlobalDatabaseNetwork update
*GlobalDatabaseNetwork
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:DescribeDBClusterUsage DescribeDBClusterUsage get
*DBCluster
acs:polardb:*:{#accountId}:{#resource-type}/*
polardb:DescribeSqlLogTimeDistribution DescribeSqlLogTimeDistribution get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyDBClusterArch ModifyDBClusterArch none
*全部资源
*
polardb:ModifyDBClusterMaintainTime ModifyDBClusterMaintainTime update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeAccountMaskingPrivilege DescribeAccountMaskingPrivilege none
*全部资源
*
polardb:ModifyDBDescription ModifyDBDescription update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateServiceLinkedRole CreateServiceLinkedRole none
*全部资源
*
polardb:CreateAuthenticate CreateAuthenticate create
*全部资源
*
polardb:DescribeActiveOperationTaskRegion DescribeActiveOperationTaskRegion get
*全部资源
*
polardb:ReactivateDBClusterBackup ReactivateDBClusterBackup none
*全部资源
*
polardb:ContinueDBClusterMigration ContinueDBClusterMigration get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeSqlLogTrialStatus DescribeSqlLogTrialStatus get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:LightQueryPricing LightQueryPricing get
*全部资源
*
polardb:DescribeMaskingRules DescribeMaskingRules get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeDBClusterPerformance DescribeDBClusterPerformance get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeSQLCollectorRetention DescribeSQLCollectorRetention get
*全部资源
*
polardb:GetPrice GetPrice get
*全部资源
*
polardb:DescribeDBClusterEncryptionKey DescribeDBClusterEncryptionKey get
*全部资源
*
polardb:DeleteAuthenticate DeleteAuthenticate delete
*全部资源
*
polardb:EnableSQLRateLimitingRules EnableSQLRateLimitingRules update
*全部资源
*
polardb:CreateDBNodes CreateDBNodes create
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDBClusterConnectivity DescribeDBClusterConnectivity get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:UpdateAuthenticate UpdateAuthenticate update
*全部资源
*
polardb:ModifyDBClusterParameters ModifyDBClusterParameters update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyScheduleTask ModifyScheduleTask update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeAIDBClusterAttribute DescribeAIDBClusterAttribute get
*全部资源
*
polardb:DescribeDBInitializeVariable DescribeDBInitializeVariable get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CheckMPPCondition CheckMPPCondition get
*全部资源
*
polardb:DescribeVpcs DescribeVpcs get
*全部资源
*
polardb:DescribeDBClusterAuditLogCollector DescribeDBClusterAuditLogCollector get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CheckAccountName CheckAccountName get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeFileSystems DescribeFileSystems list
*全部资源
*
polardb:DescribeVSwitchList DescribeVSwitchList none
*全部资源
*
polardb:DeleteSQLRateLimitingRules DeleteSQLRateLimitingRules delete
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DeleteGlobalDataNetwork DeleteGlobalDataNetwork delete
*全部资源
*
polardb:CheckKMSAuthorized CheckKMSAuthorized get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyMaskingRules ModifyMaskingRules update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeSQLLogRecords DescribeSQLLogRecords get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyAutoRenewAttribute ModifyAutoRenewAttribute update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:EnableDBClusterOrca EnableDBClusterOrca none
*全部资源
*
polardb:DescribeActivationCodes DescribeActivationCodes get
*全部资源
*
polardb:DescribeStoragePlan DescribeStoragePlan get
*全部资源
*
polardb:RestoreTable RestoreTable update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeRdsVpcs DescribeRdsVpcs get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*
polardb:DescribeDBClusterProxy DescribeDBClusterProxy get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifySQLExplorerRetention ModifySQLExplorerRetention update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeActiveOperationTaskCount DescribeActiveOperationTaskCount get
*全部资源
*
polardb:ModifyDBNodeClass ModifyDBNodeClass update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:EnableFirewallRules EnableFirewallRules update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeSqlLogTemplatesList DescribeSqlLogTemplatesList get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyBackupPolicy ModifyBackupPolicy update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyActiveOperationTask ModifyActiveOperationTask update
*全部资源
*
polardb:DescribeAnswer DescribeAnswer get
*全部资源
*
polardb:CreateActivationCode CreateActivationCode create
*全部资源
*
polardb:ModifyDBClusterStoragePerformance ModifyDBClusterStoragePerformance update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyDBClusterSSL ModifyDBClusterSSL update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:CloseAITask CloseAITask update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyDBNodeRouterWeight ModifyDBNodeRouterWeight update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ReleaseMPPConnection ReleaseMPPConnection delete
*全部资源
*
polardb:DescribeDBClusterSSL DescribeDBClusterSSL get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeHALogs DescribeHALogs get
*全部资源
*
polardb:DescribeSQLLogRecordsList DescribeSQLLogRecordsList get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeDetachedBackups DescribeDetachedBackups get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:ModifyDBClusterServerlessConf ModifyDBClusterServerlessConf update
*全部资源
*
polardb:DescribeDBClustersWithBackups DescribeDBClustersWithBackups get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*
polardb:ModifyBackupSetExpireTime ModifyBackupSetExpireTime update
*全部资源
*
polardb:ResetAccount ResetAccount update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateGlobalDataNetwork CreateGlobalDataNetwork create
*全部资源
*
polardb:ModifyDBClusterEndpoint ModifyDBClusterEndpoint update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeAIDBClusters DescribeAIDBClusters get
*全部资源
*
polardb:DeleteDBClusterEndpoint DeleteDBClusterEndpoint delete
*Endpoint
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:DescribePolarFs DescribePolarFs get
*全部资源
*
polardb:DescribeTemplateSqlDetail DescribeTemplateSqlDetail get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeAvailableCrossRegions DescribeAvailableCrossRegions get
*DBCluster
acs:polardb:*:{#accountId}:{#resource-type}/*
polardb:CheckSqlLogHistoryEnable CheckSqlLogHistoryEnable get
*全部资源
*
polardb:DescribeParameterTemplates DescribeParameterTemplates get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*
polardb:ModifyGlobalSecurityIPGroupName ModifyGlobalSecurityIPGroupName update
*全部资源
*
polardb:CreateNetworkChannel CreateNetworkChannel create
*全部资源
*
polardb:DescribeSQLCollectorVersion DescribeSQLCollectorVersion get
*全部资源
*
polardb:DescribeTableList DescribeTableList list
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyDBNodesParameters ModifyDBNodesParameters update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeEncryptionDBSecret DescribeEncryptionDBSecret none
*全部资源
*
polardb:DescribeDasConfig DescribeDasConfig get
*DBCluster
acs:polardb:{#regionId}:{#AccountId}:dbcluster/{#DbClusterId}
polardb:LockDBClusterDeletion LockDBClusterDeletion update
*全部资源
*
polardb:DescribeDBClusterParameters DescribeDBClusterParameters get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CheckDBClusterWhitelist CheckDBClusterWhitelist get
*全部资源
*
polardb:DescribeDBLinks DescribeDBLinks get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDBClusterExpireInfo DescribeDBClusterExpireInfo get
*全部资源
*
polardb:DescribeEventOverview DescribeEventOverview get
*全部资源
*
polardb:TransformDBClusterPayType TransformDBClusterPayType update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyDBClusterStorageSpace ModifyDBClusterStorageSpace update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeHistoryTasks DescribeHistoryTasks get
*全部资源
*
polardb:ModifyGlobalSecurityIPGroupRelation ModifyGlobalSecurityIPGroupRelation update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeDBClusterServerlessConf DescribeDBClusterServerlessConf get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeFirewallRules DescribeFirewallRules get
*DBCluster
acs:polardb:*:{#accountId}:dbcluster/{#dbclusterId}
polardb:ValidateOrder ValidateOrder get
*全部资源
*
polardb:EncryptionRequired
polardb:CreateParameterGroup CreateParameterGroup create
*全部资源
*
polardb:DescribeParameterGroups DescribeParameterGroups get
*全部资源
*
polardb:DescribeTaskInfo DescribeTaskInfo get
*全部资源
*
polardb:DescribePolarPGAPHealthStatus DescribePolarPGAPHealthStatus none
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyGlobalSecurityIPGroup ModifyGlobalSecurityIPGroup update
*全部资源
*
polardb:ModifyAccountPassword ModifyAccountPassword update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeModifyParameterLog DescribeModifyParameterLog none
*全部资源
*
polardb:DescribeNetworkChannel DescribeNetworkChannel get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyDBClusterConnectionString ModifyDBClusterConnectionString update
*全部资源
*
polardb:DescribeDBClusters DescribeDBClusters list
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeCronJobPolicyServerless DescribeCronJobPolicyServerless list
*全部资源
*
polardb:DescribeDBClusterBasicInfo DescribeDBClusterBasicInfo get
*全部资源
*
polardb:ModifyDBClusterAutoUpgradeMinorVersion ModifyDBClusterAutoUpgradeMinorVersion update
*全部资源
*
polardb:DescribeActivationCodeDetails DescribeActivationCodeDetails get
*全部资源
*
polardb:DeleteParameterGroup DeleteParameterGroup delete
*全部资源
*
polardb:DescribeMetaList DescribeMetaList get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:RestartDBLink RestartDBLink none
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:ListTagResourcesForRegion ListTagResourcesForRegion get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*
polardb:CreateOrder CreateOrder create
*全部资源
*
polardb:DescribeCrossCloudRegion DescribeCrossCloudRegion get
*全部资源
*
polardb:StartSqlLogDetailArchive StartSqlLogDetailArchive update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeSlowLogRecords DescribeSlowLogRecords get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDBNodesParameters DescribeDBNodesParameters get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:StartSqlLogTrail StartSqlLogTrail get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyAccountMaskingPrivilege ModifyAccountMaskingPrivilege none
*全部资源
*
polardb:GrantAccountPrivilege GrantAccountPrivilege update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:RefreshDBClusterStorageUsage RefreshDBClusterStorageUsage update
*全部资源
*
polardb:ModifyAccountDescription ModifyAccountDescription update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:GenerateUpgradeReportForSyncClone GenerateUpgradeReportForSyncClone create
*全部资源
*
polardb:ModifySQLCollectorRetention ModifySQLCollectorRetention update
*全部资源
*
polardb:DeleteFirewallRules DeleteFirewallRules delete
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:UnmountPolarFsOnAIDBCluster UnmountPolarFsOnAIDBCluster update
*全部资源
*
polardb:DescribeDBClusterIPArrayList DescribeDBClusterIPArrayList get
*全部资源
*
polardb:DeleteExtensions DeleteExtensions delete
*全部资源
*
polardb:DescribeVSwitches DescribeVSwitches get
*全部资源
*
polardb:ModifyDBNodesClass ModifyDBNodesClass update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:CreateDBLink CreateDBLink create
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeParameterGroup DescribeParameterGroup get
*全部资源
*
polardb:ManuallyStartDBCluster ManuallyStartDBCluster update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeDBClusterNodeInfo DescribeDBClusterNodeInfo get
*DBCluster
acs:polardb:*:{#accountId}:{#resource-type}/*
polardb:ModifyDBClusterMigrationEndpoint ModifyDBClusterMigrationEndpoint update
*全部资源
*
polardb:ModifyResourcePackage ModifyResourcePackage update
*全部资源
*
polardb:DescribeCrossCloudRegionMappingToAliyun DescribeCrossCloudRegionMappingToAliyun get
*全部资源
*
polardb:TagResources TagResources create
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeSQLRateLimitingRules DescribeSQLRateLimitingRules list
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeClassList DescribeClassList get
*全部资源
*
polardb:ModifyDBClusterAndNodesParameters ModifyDBClusterAndNodesParameters update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateDBClusterProxy CreateDBClusterProxy create
*全部资源
*
polardb:ModifyDBNodeConfig ModifyDBNodeConfig update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeReplicationSlots DescribeReplicationSlots get
*全部资源
*
polardb:CancelScheduleTasks CancelScheduleTasks update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DeleteBackup DeleteBackup delete
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeGlobalSecurityIPGroupRelation DescribeGlobalSecurityIPGroupRelation get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribePolarPGAPClusterPerformance DescribePolarPGAPClusterPerformance get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeSqlTemplatesConsumeAndScanRows DescribeSqlTemplatesConsumeAndScanRows get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeLicenseOrders DescribeLicenseOrders get
*全部资源
*
polardb:UnlockDBClusterDeletion UnlockDBClusterDeletion update
*全部资源
*
polardb:CreateCronJobPolicyServerless CreateCronJobPolicyServerless create
*全部资源
*
polardb:DescribeAccounts DescribeAccounts get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DeleteDBClusterProxy DeleteDBClusterProxy delete
*全部资源
*
polardb:ModifyDBClusterDescription ModifyDBClusterDescription update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifySQLExplorerPolicy ModifySQLExplorerPolicy update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeCrossCloudLevels DescribeCrossCloudLevels get
*全部资源
*
polardb:DescribeDBMiniEngineVersions DescribeDBMiniEngineVersions get
*全部资源
*
polardb:DescribeRecommendationList DescribeRecommendationList list
*全部资源
*
polardb:DescribeBackups DescribeBackups get
*Backup
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DBClusterId}
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifySecurityIps ModifySecurityIps update
*全部资源
*
polardb:DescribeLocalAvailableRecoveryTime DescribeLocalAvailableRecoveryTime get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:RestartDBNode RestartDBNode update
*DBNode
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:DescribeBackupPolicy DescribeBackupPolicy get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyEncryptionDBSecret ModifyEncryptionDBSecret update
*全部资源
*
polardb:DescribeRdsVSwitchs DescribeRdsVSwitchs get
*全部资源
*
polardb:ModifySQLRateLimitingRules ModifySQLRateLimitingRules update
*全部资源
*
polardb:DescribeSQLExplorerRetention DescribeSQLExplorerRetention get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DeleteGlobalSecurityIPGroup DeleteGlobalSecurityIPGroup delete
*全部资源
*
polardb:DescribeActiveOperationTasks DescribeActiveOperationTasks get
*全部资源
*
polardb:DescribeDBNodePerformance DescribeDBNodePerformance get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyDBClusterVpc ModifyDBClusterVpc update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeDBInstancePerformance DescribeDBInstancePerformance get
*DBCluster
acs:polardb:*:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeAutoRenewAttribute DescribeAutoRenewAttribute list
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeHotSpotQuestion DescribeHotSpotQuestion get
*全部资源
*
polardb:CreateColdStorageInstance CreateColdStorageInstance create
*ColdStorageInstance
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribeSQLExplorerVersion DescribeSQLExplorerVersion get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:FailoverDBCluster FailoverDBCluster update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:EnableDBClusterDocumentDB EnableDBClusterDocumentDB update
*全部资源
*
polardb:DescribeEncryptionDBRolePrivilege DescribeEncryptionDBRolePrivilege get
*全部资源
*
polardb:CreateGDNAddress CreateGDNAddress create
*全部资源
*
polardb:ModifyDBCluster ModifyDBCluster update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:DescribeSqlLogDumpStatus DescribeSqlLogDumpStatus get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeGlobalDatabaseNetworks DescribeGlobalDatabaseNetworks get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*
polardb:MountPolarFsOnAIDBCluster MountPolarFsOnAIDBCluster update
*全部资源
*
polardb:DeleteDatabase DeleteDatabase delete
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeLicenseOrderDetails DescribeLicenseOrderDetails get
*全部资源
*
polardb:TempModifyDBNode TempModifyDBNode update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:DescribePendingMaintenanceActions DescribePendingMaintenanceActions get
*全部资源
*
polardb:DisableDBClusterOrca DisableDBClusterOrca none
*全部资源
*
polardb:ModifyProtectedDBPassword ModifyProtectedDBPassword update
*全部资源
*
polardb:ModifyDBClusterAccessWhitelist ModifyDBClusterAccessWhitelist update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeSQLLogTemplates DescribeSQLLogTemplates get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateDBClusterEndpoint CreateDBClusterEndpoint create
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyLogBackupPolicy ModifyLogBackupPolicy update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeUserEncryptionKeyList DescribeUserEncryptionKeyList get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:AddEncryptionDBRolePrivilege AddEncryptionDBRolePrivilege create
*全部资源
*
polardb:EnableDBClusterServerless EnableDBClusterServerless update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeExtensions DescribeExtensions get
*全部资源
*
polardb:DescribePolarFsPerformance DescribePolarFsPerformance get
*全部资源
*
polardb:DescribePendingMaintenanceAction DescribePendingMaintenanceAction get
*全部资源
*
polardb:RefreshProxyLevel RefreshProxyLevel update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:ModifyPendingMaintenanceAction ModifyPendingMaintenanceAction update
*全部资源
*
polardb:DeleteGlobalDatabaseNetwork DeleteGlobalDatabaseNetwork delete
*GlobalDatabaseNetwork
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:ModifyDBNodeDescription ModifyDBNodeDescription update
*全部资源
*
polardb:DescribeAuthenticate DescribeAuthenticate get
*全部资源
*
polardb:ModifyEncryptionDBRolePrivilege ModifyEncryptionDBRolePrivilege update
*全部资源
*
polardb:EncryptionRequired
polardb:ModifyAccountLockState ModifyAccountLockState get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeSQLLogTemplatesTimeDistribution DescribeSqlLogTemplatesTimeDistribution get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyAIDBClusterDescription ModifyAIDBClusterDescription update
*全部资源
*
polardb:DisableDBClusterServerless DisableDBClusterServerless update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyDBClusterMonitor ModifyDBClusterMonitor update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDBProxyPerformance DescribeDBProxyPerformance get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribePolarSQLCollectorPolicy DescribePolarSQLCollectorPolicy get
*全部资源
*
polardb:CreateDBCluster CreateDBCluster create
*全部资源
*
polardb:EncryptionRequired
polardb:DescribeSQLExplorerPolicy DescribeSQLExplorerPolicy get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDBDefaultValueByGcLevel DescribeDBDefaultValueByGcLevel get
*全部资源
*
polardb:DescribeActiveOperationMaintainConf DescribeActiveOperationMaintainConf get
*全部资源
*
polardb:DescribeLogBackupPolicy DescribeLogBackupPolicy get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateProtectedDB CreateProtectedDB create
*全部资源
*
polardb:DeleteGDNAddress DeleteGDNAddress delete
*全部资源
*
polardb:ModifyCronJobPolicyServerless ModifyCronJobPolicyServerless update
*全部资源
*
polardb:DescribeSqlLogClusters DescribeSqlLogClusters get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeGlobalSecurityIPGroup DescribeGlobalSecurityIPGroup get
*全部资源
*
polardb:DescribeDBClusterTDE DescribeDBClusterTDE get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyDBClusterTDE ModifyDBClusterTDE update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeActiveOperationTask DescribeActiveOperationTask get
*全部资源
*
polardb:ModifyDBClusterResourceGroup ModifyDBClusterResourceGroup update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:CancelCronJobPolicyServerless CancelCronJobPolicyServerless delete
*全部资源
*
polardb:GetSpecifications GetSpecifications get
*全部资源
*
polardb:AddFirewallRules AddFirewallRules create
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeResourcePackages DescribeResourcePackages get
*全部资源
*
polardb:ListTagResources ListTagResources get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*
polardb:ModifyGDNAddress ModifyGDNAddress update
*全部资源
*
polardb:ModifyTaskInfo ModifyTaskInfo update
*全部资源
*
polardb:CreateGlobalSecurityIPGroup CreateGlobalSecurityIPGroup create
*全部资源
*
polardb:DescribeBackupTasks DescribeBackupTasks get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateAccount CreateAccount create
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CheckDBName CheckDBName get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CancelActiveOperationTasks CancelActiveOperationTasks delete
*全部资源
*
polardb:DescribeDBClusterMonitor DescribeDBClusterMonitor get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyPolarFsInstanceDescription ModifyPolarFsInstanceDescription update
*全部资源
*
polardb:DescribeSlowLogs DescribeSlowLogs get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeProtectedDBs DescribeProtectedDBs get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:UpdateExtensions UpdateExtensions update
*全部资源
*
polardb:DescribeGlobalDatabaseNetwork DescribeGlobalDatabaseNetwork get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeMPPCondition DescribeMPPCondition get
*全部资源
*
polardb:DescribeScheduleTasks DescribeScheduleTasks get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeDBClusterEndpoints DescribeDBClusterEndpoints get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CreateGlobalDatabaseNetwork CreateGlobalDatabaseNetwork create
*GlobalDatabaseNetwork
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:DescribeDBClusterMigration DescribeDBClusterMigration get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:CheckConnectionString CheckConnectionString get
*全部资源
*
polardb:CheckServiceLinkedRole CheckServiceLinkedRole none
*全部资源
*
polardb:UntagResources UntagResources delete
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeActiveOperationTaskType DescribeActiveOperationTaskType get
*全部资源
*
polardb:ModifyDBClusterDeletion ModifyDBClusterDeletion update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:CloseDBClusterMigration CloseDBClusterMigration update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DeleteEncryptionDBRolePrivilege DeleteEncryptionDBRolePrivilege delete
*全部资源
*
polardb:DeleteAccount DeleteAccount delete
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:OpenAITask OpenAITask update
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:ModifyDBEndpointAddress ModifyDBEndpointAddress update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDBClusterVersion DescribeDBClusterVersion get
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ModifyDBClusterMigration ModifyDBClusterMigration update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeDBClusterAccessWhitelist DescribeDBClusterAccessWhitelist get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeColdStorageInstance DescribeColdStorageInstance get
*全部资源
*
polardb:DescribeAITaskStatus DescribeAITaskStatus get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:ResetGlobalDatabaseNetwork ResetGlobalDatabaseNetwork update
*GlobalDatabaseNetwork
acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
polardb:DescribeDBLogFiles DescribeDBLogFiles list
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
polardb:DescribeQuestions DescribeQuestions list
*全部资源
*
polardb:DeleteMaskingRules DeleteMaskingRules delete
*DBCluster
acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
polardb:ModifyDBClusterProxyClass ModifyDBClusterProxyClass update
*全部资源
*
polardb:ModifyActiveOperationMaintainConf ModifyActiveOperationMaintainConf update
*全部资源
*
polardb:CreateAIDBCluster CreateAIDBCluster create
*全部资源
*
polardb:ModifyDBClusterAuditLogCollector ModifyDBClusterAuditLogCollector update
*dbcluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:RemoveDBClusterFromGDN RemoveDBClusterFromGDN delete
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
polardb:DescribeSqlLogDetailArchiveStatus DescribeSqlLogDetailArchiveStatus get
*DBCluster
acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

资源(Resource)

下表是云原生数据库 PolarDB定义的资源,这些资源可以在 RAM 权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源 ARN 是资源在阿里云上的唯一标识。具体说明如下:

  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。

  • *表示全部。例如:

    • {#resourceType}*时:表示全部资源。

    • {#regionId}*时:表示全部地域。

    • {#accountId}*时:表示全部阿里云账号。

资源类型

资源 ARN

dbcluster acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
DBCluster acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}
Account acs:polardb:*:{#accountId}:account/{#AccountId}
DBCluster acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
Backup acs:polardb:{#regionId}:{#accountId}:backup/{#DBClusterId}
DBCluster acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DBClusterId}
Account acs:polardb:*:{#accountId}:account/{#AccountName}/{#DBClusterId}
DBNode acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
Endpoint acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
GlobalDatabaseNetwork acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
DBCluster acs:polardb:*:{#accountId}:{#resource-type}/*
DBCluster acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*
dbcluster acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
DBCluster acs:polardb:*:{#accountId}:dbcluster/{#DbClusterId}
ParameterGroup acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
DBClusterParameter acs:polardb:*:{#accountId}:dbclusterparameter/{#ParameterGroupId}
dbcluster acs:polardb:{#regionId}:{#accountId}:dbcluster/*
Backup acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DBClusterId}
DBNode acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
DBCluster acs:polardb:*:{#accountId}:{#resource-type}/{#resource-id}
ColdStorageInstance acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
DBNode acs:polardb:{#regionId}:{#accountId}:dbnode/{#DBNodeId}
ColdStorageInstance acs:polardb:*:{#accountId}:coldstorageinstance/{#OssClusterId}

条件(Condition)

下表是云原生数据库 PolarDB 定义的产品级条件关键字,这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用,用来描述授予权限的条件。以下仅列举产品级的条件关键字,阿里云定义的通用条件关键字也同样适用云原生数据库 PolarDB

其中,数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符,否则无法匹配策略语句,授权行为无效。数据类型与条件运算符的对应关系,请参见条件操作类型

条件关键字

描述

类型

polardb:EncryptionRequired 创建时是否需要开启TDE Boolean

相关操作

您可以创建自定义权限策略,并将权限策略授予 RAM 用户、RAM 用户组或 RAM 角色。具体操作如下: