授权信息

更新时间:
复制 MD 格式

访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 云原生数据库 PolarDB 为 RAM 权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。 云原生数据库 PolarDB 的 RAM 代码(RamCode)为 polardb ,支持的授权粒度为 资源级 。

权限策略通用结构

权限策略支持 JSON 格式,其通用结构如下:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

各字段含义如下:

  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。

  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)。

  • Resource:受操作影响的具体对象,您可以使用资源 ARN 来描述指定资源。具体信息,请参见资源(Resource)。

  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)。

    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素。

    • Condition_key:条件关键字。

    • Condition_value:条件关键字对应的值。

操作(Action)

下表是云原生数据库 PolarDB定义的操作,这些操作可以在 RAM 权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:

  • 操作:是指具体的权限点。

  • API:是指操作对应的 API 接口。

  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。

  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:

    • 对于必选的资源类型,用前面加 * 表示。

    • 对于不支持资源级授权的操作,用全部资源表示。

  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。

  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。

操作

API

访问级别

资源类型

条件关键字

关联操作

polardb:DescribeDBClusterPerformance DescribeDBClusterPerformance get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeLogBackupPolicy DescribeLogBackupPolicy get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:CreateKnowledgeBase CreateKnowledgeBase create

*全部资源

*

无 无
polardb:ModifyAIDBClusterModel ModifyAIDBClusterModel update

*AICluster

acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}

无 无
polardb:ModifyDBNodeClass ModifyDBNodeClass update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:DescribePendingMaintenanceAction DescribePendingMaintenanceAction get

*全部资源

*

无 无
polardb:DescribeActivationCodeDetails DescribeActivationCodeDetails get

*全部资源

*

无 无
polardb:UpdateKnowledgeBaseFileShardingStrategy UpdateKnowledgeBaseFileShardingStrategy update

*全部资源

*

无 无
polardb:DescribePolarFsObjects DescribePolarFsObjects none

*全部资源

*

无 无
polardb:CreateBatchTask CreateBatchTask none

*全部资源

*

无 无
polardb:DescribeDBClusterEndpoints DescribeDBClusterEndpoints get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:CreateBudgetPolicy CreateBudgetPolicy create

*全部资源

*

无 无
polardb:ModifyDBClusterAndNodesParameters ModifyDBClusterAndNodesParameters update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:AddPolarFsPathMapping AddPolarFsPathMapping none

*全部资源

*

无 无
polardb:DisablePolarClawChannel DisablePolarClawChannel update

*全部资源

*

无 无
polardb:DescribePolarFsMapping DescribePolarFsMapping none

*全部资源

*

无 无
polardb:CreateBackup CreateBackup create

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteFirewallRules DeleteFirewallRules delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteRateLimitPolicy DeleteRateLimitPolicy delete

*全部资源

*

无 无
polardb:DescribeBatchTask DescribeBatchTask none

*全部资源

*

无 无
polardb:CreateDBCluster CreateDBCluster create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

polardb:EncryptionRequired

无
polardb:DeleteAccountZonal DeleteAccountZonal delete

*全部资源

*

无 无
polardb:CreateCronJobPolicyServerless CreateCronJobPolicyServerless create

*全部资源

*

无 无
polardb:DescribePolarSQLCollectorPolicy DescribePolarSQLCollectorPolicy get

*全部资源

*

无 无
polardb:SearchPolarClawSkills SearchPolarClawSkills get

*全部资源

*

无 无
polardb:GetPolarClawConfig GetPolarClawConfig get

*全部资源

*

无 无
polardb:DisableDBClusterServerless DisableDBClusterServerless update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribePolarAgentChatRecords DescribePolarAgentChatRecords get

*全部资源

*

无 无
polardb:DescribeDBClusterPrice DescribeDBClusterPrice get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyAccountPasswordZonal ModifyAccountPasswordZonal update

*全部资源

*

无 无
polardb:DescribeDBClusterVersionZonal DescribeDBClusterVersionZonal get

*全部资源

*

无 无
polardb:DescribeUpgradeReport DescribeUpgradeReport get

*全部资源

*

无 无
polardb:DescribeGatewayList DescribeGatewayList get

*全部资源

*

无 无
polardb:DescribeApplicationPerformance DescribeApplicationPerformance get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyDBClusterServerlessConf ModifyDBClusterServerlessConf update

*DBCluster

acs:polardb:*:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeDBLinks DescribeDBLinks get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribePolarClawTask DescribePolarClawTask get

*全部资源

*

无 无
polardb:DescribeApplicationLogs DescribeApplicationLogs get

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:CreateAIDBCluster CreateAIDBCluster create

*全部资源

*

无 无
polardb:RevokeAccountPrivilegeZonal RevokeAccountPrivilegeZonal update

*全部资源

*

无 无
polardb:DescribeKnowledgeSpaceAttribute DescribeKnowledgeSpaceAttribute get

*全部资源

*

无 无
polardb:DescribeAccounts DescribeAccounts get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:UpdateExtensions UpdateExtensions update

*全部资源

*

无 无
polardb:DescribeKnowledgeBaseFiles DescribeKnowledgeBaseFiles get

*全部资源

*

无 无
polardb:DeleteAIDBClusterCustomModel DeleteAIDBClusterCustomModel delete

*AICluster

acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}

无 无
polardb:DisablePolarClawCronJob DisablePolarClawCronJob update

*全部资源

*

无 无
polardb:DescribeApplicationAttribute DescribeApplicationAttribute get

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:CreateAIDBClusterTask CreateAIDBClusterTask create

*全部资源

*

无 无
polardb:CheckServiceLinkedRole CheckServiceLinkedRole none

*全部资源

*

无 无
polardb:ListPolarClawDevicePairs ListPolarClawDevicePairs none

*全部资源

*

无 无
polardb:ModifyDBDescription ModifyDBDescription update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeRateLimitPolicy DescribeRateLimitPolicy get

*全部资源

*

无 无
polardb:DescribePolarClawAgentTools DescribePolarClawAgentTools get

*全部资源

*

无 无
polardb:UnbindPolarClawAgent UnbindPolarClawAgent delete

*全部资源

*

无 无
polardb:DescribePendingMaintenanceActions DescribePendingMaintenanceActions get

*全部资源

*

无 无
polardb:DescribeHistoryTasks DescribeHistoryTasks get

*全部资源

*

无 无
polardb:DescribeAIDBClusterTaskMetrics DescribeAIDBClusterTaskMetrics get

*全部资源

*

无 无
polardb:DescribeVSwitches DescribeVSwitches get

*全部资源

*

无 无
polardb:CreateGlobalSecurityIPGroup CreateGlobalSecurityIPGroup create

*全部资源

*

无 无
polardb:CheckDBName CheckDBName get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeBackupRegions DescribeBackupRegions get

*全部资源

*

无 无
polardb:SearchMemories SearchMemories none

*全部资源

*

无 无
polardb:DeleteKnowledgeBase DeleteKnowledgeBase delete

*全部资源

*

无 无
polardb:UpdatePolarClawAgent UpdatePolarClawAgent update

*全部资源

*

无 无
polardb:DescribeKnowledgeBaseAnswer DescribeKnowledgeBaseAnswer get

*全部资源

*

无 无
polardb:DeletePolarClawAgent DeletePolarClawAgent delete

*全部资源

*

无 无
polardb:DescribeAIDBClusterPerformance DescribeAIDBClusterPerformance get

*AICluster

acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}

无 无
polardb:ModifyGlobalSecurityIPGroup ModifyGlobalSecurityIPGroup update

*全部资源

*

无 无
polardb:ModifyApplicationServerlessConf ModifyApplicationServerlessConf update

*全部资源

*

无 无
polardb:DescribeDatabasesZonal DescribeDatabasesZonal list

*全部资源

*

无 无
polardb:CreateDatabase CreateDatabase create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyAccountDescription ModifyAccountDescription update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyBackupPolicy ModifyBackupPolicy update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:InstallPolarClawPlugin InstallPolarClawPlugin create

*全部资源

*

无 无
polardb:DeleteApplicationEndpointAddress DeleteApplicationEndpointAddress delete

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:SetPolarFsFileQuota SetPolarFsFileQuota none

*全部资源

*

无 无
polardb:DeleteAIDBCluster DeleteAIDBCluster delete

*AICluster

acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}

无 无
polardb:RefreshDBClusterStorageUsage RefreshDBClusterStorageUsage update

*全部资源

*

无 无
polardb:DescribeAIDBClusterApiKeys DescribeAIDBClusterApiKeys get

*全部资源

*

无 无
polardb:LoginPolarClawChannel LoginPolarClawChannel update

*全部资源

*

无 无
polardb:ModifyDBClusterMigration ModifyDBClusterMigration update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:CreateAIDBClusterDataset CreateAIDBClusterDataset create

*全部资源

*

无 无
polardb:RemoveDBClusterFromGDN RemoveDBClusterFromGDN delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyApplicationDescription ModifyApplicationDescription update

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:EnableDBClusterDynamoDB EnableDBClusterDynamoDB update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyDBClusterTDE ModifyDBClusterTDE update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ApprovePolarClawDevicePair ApprovePolarClawDevicePair update

*全部资源

*

无 无
polardb:CreateLakebaseS3Account CreateLakebaseS3Account none

*全部资源

*

无 无
polardb:ModifyDBClusterDescription ModifyDBClusterDescription update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeAgenticDBProjects DescribeAgenticDBProjects get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:RestartPolarClawGateway RestartPolarClawGateway update

*全部资源

*

无 无
polardb:DescribeEncryptionDBRolePrivilege DescribeEncryptionDBRolePrivilege get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeAvailableCrossRegions DescribeAvailableCrossRegions get

*DBCluster

acs:polardb:*:{#accountId}:{#resource-type}/*

无 无
polardb:DescribeDBClusterSSL DescribeDBClusterSSL get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeDatabases DescribeDatabases get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyBudgetPolicy ModifyBudgetPolicy update

*全部资源

*

无 无
polardb:ModifyApplicationWhitelist ModifyApplicationWhitelist none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:DescribeEncryptionDBSecret DescribeEncryptionDBSecret none

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:AddPolarOSSAuthorizedAccount AddPolarOSSAuthorizedAccount update

*全部资源

*

无 无
polardb:ModifyLogBackupPolicy ModifyLogBackupPolicy update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:UpdatePolarClawCronJob UpdatePolarClawCronJob update

*全部资源

*

无 无
polardb:ModifyConsumerGroup ModifyConsumerGroup update

*全部资源

*

无 无
polardb:CreateDBClusterEndpoint CreateDBClusterEndpoint create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeDBClusterParameters DescribeDBClusterParameters get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:UpgradePolarClawSkills UpgradePolarClawSkills none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:DescribeDBClusterServerlessConf DescribeDBClusterServerlessConf get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeRdsVSwitchs DescribeRdsVSwitchs get

*全部资源

*

无 无
polardb:ModifyDBEndpointAddress ModifyDBEndpointAddress update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteConsumer DeleteConsumer delete

*全部资源

*

无 无
polardb:DescribeBatchTasks DescribeBatchTasks none

*全部资源

*

无 无
polardb:DescribeAgenticDBClusters DescribeAgenticDBClusters list

*全部资源

*

无 无
polardb:ModifyApplicationPrompt ModifyApplicationPrompt update

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:ModifyDBClusterParameters ModifyDBClusterParameters update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyModelApi ModifyModelApi update

*全部资源

*

无 无
polardb:CreateDBEndpointAddress CreateDBEndpointAddress create

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeLocalAvailableRecoveryTime DescribeLocalAvailableRecoveryTime get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteAgenticDBComputeCluster DeleteAgenticDBComputeCluster delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:DescribeMetaList DescribeMetaList get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeAIDBClusterAttribute DescribeAIDBClusterAttribute get

*AICluster

acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}

无 无
polardb:DescribeDbClusterAttributeZonal DescribeDbClusterAttributeZonal get

*全部资源

*

无 无
polardb:DeletePolarFsObjects DeletePolarFsObjects none

*全部资源

*

无 无
polardb:DescribeGatewayAttribute DescribeGatewayAttribute get

*全部资源

*

无 无
polardb:DescribeDBClusterAuditLogCollector DescribeDBClusterAuditLogCollector get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeletePolarClawCronJob DeletePolarClawCronJob delete

*全部资源

*

无 无
polardb:ReactivateDBClusterBackup ReactivateDBClusterBackup none

*全部资源

*

无 无
polardb:DescribeSlowLogs DescribeSlowLogs get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteAINodes DeleteAINodes update

*全部资源

*

无 无
polardb:ListLakebaseS3Accounts ListLakebaseS3Accounts none

*全部资源

*

无 无
polardb:DescribeDBProxyPerformance DescribeDBProxyPerformance get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeDBClusterVersion DescribeDBClusterVersion get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeCostRules DescribeCostRules get

*全部资源

*

无 无
polardb:DeleteGlobalDataNetwork DeleteGlobalDataNetwork delete

*全部资源

*

无 无
polardb:DescribeDBInitializeVariable DescribeDBInitializeVariable get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeApplications DescribeApplications get

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:CreateColdStorageInstance CreateColdStorageInstance create

*ColdStorageInstance

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:GrantAccountPrivilegeZonal GrantAccountPrivilegeZonal update

*全部资源

*

无 无
polardb:DeleteSQLRateLimitingRules DeleteSQLRateLimitingRules delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteDatabaseZonal DeleteDatabaseZonal delete

*全部资源

*

无 无
polardb:CreateAIDBClusterApiKey CreateAIDBClusterApiKey create

*全部资源

*

无 无
polardb:ModifyDBClusterPrimaryZone ModifyDBClusterPrimaryZone update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeClassList DescribeClassList get

*全部资源

*

无 无
polardb:UpdatePolarClawSkill UpdatePolarClawSkill update

*全部资源

*

无 无
polardb:DescribeDetachedBackups DescribeDetachedBackups get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:DescribeLicenseOrders DescribeLicenseOrders get

*全部资源

*

无 无
polardb:CancelPolarFsFileQuota CancelPolarFsFileQuota none

*全部资源

*

无 无
polardb:GenerateUpgradeReportForSyncClone GenerateUpgradeReportForSyncClone create

*全部资源

*

无 无
polardb:ModifyDBCluster ModifyDBCluster update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:DescribeLicenseOrderDetails DescribeLicenseOrderDetails get

*全部资源

*

无 无
polardb:DescribeKnowledgeBaseFileShards DescribeKnowledgeBaseFileShards get

*全部资源

*

无 无
polardb:DescribePolarClawMCPServers DescribePolarClawMCPServers get

*全部资源

*

无 无
polardb:CancelCronJobPolicyServerless CancelCronJobPolicyServerless delete

*全部资源

*

无 无
polardb:DescribeParameterTemplates DescribeParameterTemplates get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*

无 无
polardb:DescribeRdsVpcs DescribeRdsVpcs get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*

无 无
polardb:DescribeDBClusterEncryptionKey DescribeDBClusterEncryptionKey get

*全部资源

*

无 无
polardb:DescribeCrossCloudLevels DescribeCrossCloudLevels get

*全部资源

*

无 无
polardb:ModifyDBClusterVpc ModifyDBClusterVpc update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DeletePolarOSSAuthorizedAccount DeletePolarOSSAuthorizedAccount update

*全部资源

*

无 无
polardb:UpgradePolarClawChannel UpgradePolarClawChannel update

*全部资源

*

无 无
polardb:DescribeDBClusterAttribute DescribeDBClusterAttribute get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:EnablePolarClawPlugin EnablePolarClawPlugin update

*全部资源

*

无 无
polardb:DeleteDBNodes DeleteDBNodes delete

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ListTagResources ListTagResources get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*

无 无
polardb:DescribePolarFs DescribePolarFs get

*LakeCache

acs:polardb:{#regionId}:{#accountId}:lakecache/*

无 无
polardb:ModifyDBClusterResourceGroup ModifyDBClusterResourceGroup update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DeleteModelApi DeleteModelApi delete

*全部资源

*

无 无
polardb:ModifyEncryptionDBRolePrivilege ModifyEncryptionDBRolePrivilege update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

polardb:EncryptionRequired

无
polardb:ModifyDBClusterArch ModifyDBClusterArch none

*全部资源

*

无 无
polardb:DescribeCrossCloudRegion DescribeCrossCloudRegion get

*全部资源

*

无 无
polardb:DescribeDBNodesParameters DescribeDBNodesParameters get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:RestartDBNode RestartDBNode update

*DBNode

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:ApplyApplicationPrompts ApplyApplicationPrompts update

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:DescribeBudgetPolicies DescribeBudgetPolicies get

*全部资源

*

无 无
polardb:DescribeGlobalSecurityIPGroup DescribeGlobalSecurityIPGroup get

*全部资源

*

无 无
polardb:DescribeBackupLogs DescribeBackupLogs get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:CloseAITask CloseAITask update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:CreateAgenticDBTenantApiKey CreateAgenticDBTenantApiKey create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:ModifyMaskingRules ModifyMaskingRules update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:ModifyDBClusterDescriptionZonal ModifyDBClusterDescriptionZonal update

*全部资源

*

无 无
polardb:DescribeApplicationSSL DescribeApplicationSSL none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:CreateApplicationAgentRelation CreateApplicationAgentRelation create

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:DeleteConsumerGroup DeleteConsumerGroup delete

*全部资源

*

无 无
polardb:DescribeGlobalSecurityIPGroupRelation DescribeGlobalSecurityIPGroupRelation get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:DeleteLakebaseS3Account DeleteLakebaseS3Account delete

*全部资源

*

无 无
polardb:DescribeDBClustersWithBackups DescribeDBClustersWithBackups get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*

无 无
polardb:DescribeDBClusterAccessWhitelist DescribeDBClusterAccessWhitelist get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeAgenticDBBranch DescribeAgenticDBBranch get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:DescribeDBMiniEngineVersions DescribeDBMiniEngineVersions get

*全部资源

*

无 无
polardb:RestartDBNodeZonal RestartDBNodeZonal update

*全部资源

*

无 无
polardb:ModifyPendingMaintenanceAction ModifyPendingMaintenanceAction update

*全部资源

*

无 无
polardb:CreateCostRule CreateCostRule create

*全部资源

*

无 无
polardb:RevokeAccountPrivilege RevokeAccountPrivilege update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyPolarFsMappingAuth ModifyPolarFsMappingAuth none

*全部资源

*

无 无
polardb:DescribeActiveOperationMaintainConf DescribeActiveOperationMaintainConf get

*全部资源

*

无 无
polardb:DescribeApplicationUsage DescribeApplicationUsage get

*全部资源

*

无 无
polardb:CreateApplicationPrompt CreateApplicationPrompt none

*全部资源

*

无 无
polardb:DeleteParameterGroup DeleteParameterGroup delete

*全部资源

*

无 无
polardb:DescribeAgenticDBBranchEndpoints DescribeAgenticDBBranchEndpoints get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:ModifyDBClusterMaintainTime ModifyDBClusterMaintainTime update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:RestartAIDBCluster RestartAIDBCluster none

*全部资源

*

无 无
polardb:DisablePolarClawPlugin DisablePolarClawPlugin update

*全部资源

*

无 无
polardb:ModifyGlobalSecurityIPGroupRelation ModifyGlobalSecurityIPGroupRelation update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:CreateConsumer CreateConsumer create

*全部资源

*

无 无
polardb:CancelScheduleTasks CancelScheduleTasks update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DeletePolarClawChannel DeletePolarClawChannel delete

*全部资源

*

无 无
polardb:DescribeApplicationServerlessConf DescribeApplicationServerlessConf get

*全部资源

*

无 无
polardb:DescribeParameterGroups DescribeParameterGroups get

*全部资源

*

无 无
polardb:BindPolarClawAgent BindPolarClawAgent create

*全部资源

*

无 无
polardb:DescribeSharedBackups DescribeSharedBackups get

*全部资源

*

无 无
polardb:DeleteApplicationPrompt DeleteApplicationPrompt none

*全部资源

*

无 无
polardb:DescribeTasks DescribeTasks get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeDBClusterConnectivity DescribeDBClusterConnectivity get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:ModifyDBNodesClass ModifyDBNodesClass update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:CheckKMSAuthorized CheckKMSAuthorized get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:EnablePolarClawCronJob EnablePolarClawCronJob update

*全部资源

*

无 无
polardb:CreateAccountZonal CreateAccountZonal create

*全部资源

*

无 无
polardb:ModifyActiveOperationTasks ModifyActiveOperationTasks update

*全部资源

*

无 无
polardb:UpdatePolarClawAgentSkills UpdatePolarClawAgentSkills update

*全部资源

*

无 无
polardb:DeleteResourceControl DeleteResourceControl delete

*全部资源

*

无 无
polardb:TagResources TagResources create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:DisableDBClusterOrca DisableDBClusterOrca none

*全部资源

*

无 无
polardb:DeleteDatabase DeleteDatabase delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyDBNodesParameters ModifyDBNodesParameters update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:DescribeDBInstancePerformance DescribeDBInstancePerformance get

*DBCluster

acs:polardb:*:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:ModifyDBDescriptionZonal ModifyDBDescriptionZonal update

*全部资源

*

无 无
polardb:GetPolarAgent GetPolarAgent get

*全部资源

*

无 无
polardb:DescribeModelApis DescribeModelApis none

*全部资源

*

无 无
polardb:DeleteMaskingRules DeleteMaskingRules delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:ModifyDBClusterStoragePerformance ModifyDBClusterStoragePerformance update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ResetGlobalDatabaseNetwork ResetGlobalDatabaseNetwork update

*GlobalDatabaseNetwork

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:CreateDBNodes CreateDBNodes create

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeAgenticDBBranches DescribeAgenticDBBranches get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:DescribeAgenticDBBranchLineage DescribeAgenticDBBranchLineage get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:AddPolarFsQuota AddPolarFsQuota none

*全部资源

*

无 无
polardb:RegisterKnowledgeBaseFile RegisterKnowledgeBaseFile update

*全部资源

*

无 无
polardb:DescribeApikeyAttribute DescribeApikeyAttribute get

*全部资源

*

无 无
polardb:DescribeSQLRateLimitingRules DescribeSQLRateLimitingRules list

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeExtensions DescribeExtensions get

*全部资源

*

无 无
polardb:DescribePolarClawSkillDetail DescribePolarClawSkillDetail get

*全部资源

*

无 无
polardb:CreateGlobalDatabaseNetwork CreateGlobalDatabaseNetwork create

*GlobalDatabaseNetwork

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:CreateApplicationEndpointAddress CreateApplicationEndpointAddress none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:DescribeAutoRenewAttribute DescribeAutoRenewAttribute list

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DeleteCostRule DeleteCostRule delete

*全部资源

*

无 无
polardb:ListPolarClawBindings ListPolarClawBindings none

*全部资源

*

无 无
polardb:UpdateKBSyncLink UpdateKBSyncLink update

*全部资源

*

无 无
polardb:DescribePolarClawPlugins DescribePolarClawPlugins get

*全部资源

*

无 无
polardb:ModifyAccountDescriptionZonal ModifyAccountDescriptionZonal update

*全部资源

*

无 无
polardb:CreatePolarClawCronJob CreatePolarClawCronJob create

*全部资源

*

无 无
polardb:ModifyAccountLockState ModifyAccountLockState get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeKBSyncLinks DescribeKBSyncLinks get

*全部资源

*

无 无
polardb:ContinueDBClusterMigration ContinueDBClusterMigration get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:RunPolarClawCronJob RunPolarClawCronJob update

*全部资源

*

无 无
polardb:DescribeDBClusterTDE DescribeDBClusterTDE get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeResourcePackages DescribeResourcePackages get

*全部资源

*

无 无
polardb:UpdateKnowledgeSpace UpdateKnowledgeSpace update

*全部资源

*

无 无
polardb:VerifyAgenticDBTenantApiKey VerifyAgenticDBTenantApiKey get

*全部资源

*

无 无
polardb:DescribeAIDBClusterTaskAttribute DescribeAIDBClusterTaskAttribute none

*全部资源

*

无 无
polardb:TriggerKnowledgeBaseSync TriggerKnowledgeBaseSync update

*全部资源

*

无 无
polardb:UpgradeDBClusterVersion UpgradeDBClusterVersion update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ManuallyStartDBCluster ManuallyStartDBCluster update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ResetAccount ResetAccount update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyScheduleTask ModifyScheduleTask update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:ClonePolarFsBasicSnapshot ClonePolarFsBasicSnapshot none

*全部资源

*

无 无
polardb:DeletePolarFsPathMapping DeletePolarFsPathMapping none

*全部资源

*

无 无
polardb:DescribeAgenticDBProject DescribeAgenticDBProject get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:CreateAgenticDBBranch CreateAgenticDBBranch create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:ResetAccountPassword ResetAccountPassword get

*全部资源

*

无 无
polardb:DescribeColdStorageInstance DescribeColdStorageInstance get

*全部资源

*

无 无
polardb:CancelActiveOperationTasks CancelActiveOperationTasks delete

*全部资源

*

无 无
polardb:CheckPolarFsQuotaConsistency CheckPolarFsQuotaConsistency none

*全部资源

*

无 无
polardb:DescribeApplicationSessionIds DescribeApplicationSessionIds get

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:RetrievalKnowledgeBase RetrievalKnowledgeBase get

*全部资源

*

无 无
polardb:DescribeFirewallRules DescribeFirewallRules get

*DBCluster

acs:polardb:*:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyDBClusterStorageSpace ModifyDBClusterStorageSpace update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:CreateKBSyncLink CreateKBSyncLink create

*全部资源

*

无 无
polardb:CloseDBClusterMigration CloseDBClusterMigration update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeApplicationPrompts DescribeApplicationPrompts none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:AbortDBClusterMigration AbortDBClusterMigration update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeModelServices DescribeModelServices get

*全部资源

*

无 无
polardb:TempModifyDBNode TempModifyDBNode update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:DeleteNetworkChannel DeleteNetworkChannel delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeKnowledgeBaseAttribute DescribeKnowledgeBaseAttribute get

*全部资源

*

无 无
polardb:DeleteAIDBClusterTask DeleteAIDBClusterTask none

*全部资源

*

无 无
polardb:CreateAgenticDBProject CreateAgenticDBProject create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:ModifyResourcePackage ModifyResourcePackage update

*全部资源

*

无 无
polardb:RestartDBLink RestartDBLink none

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:UpgradeDBClusterVersionZonal UpgradeDBClusterVersionZonal update

*全部资源

*

无 无
polardb:UpdateKnowledgeBase UpdateKnowledgeBase update

*全部资源

*

无 无
polardb:ModifyDBClusterAccessWhitelist ModifyDBClusterAccessWhitelist update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteAccount DeleteAccount delete

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeletePolarFs DeletePolarFs delete

*LakeCache

acs:polardb:{#regionId}:{#accountId}:lakecache/{#PolarFsInstanceId}

无 无
polardb:ModifyGlobalSecurityIPGroupName ModifyGlobalSecurityIPGroupName update

*全部资源

*

无 无
polardb:DescribeMaskingRules DescribeMaskingRules get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:DeleteAIDBClusterDataset DeleteAIDBClusterDataset delete

*全部资源

*

无 无
polardb:DescribeVSwitchList DescribeVSwitchList none

*全部资源

*

无 无
polardb:DeleteBackup DeleteBackup delete

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeHistoryEvents DescribeHistoryEvents none

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeDBClusterProxy DescribeDBClusterProxy get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeAIDBClusterDatasets DescribeAIDBClusterDatasets list

*全部资源

*

无 无
polardb:DescribePolarFsQuotaList DescribePolarFsQuotaList none

*LakeCache

acs:polardb:{#regionId}:{#accountId}:lakecache/{#PolarFsInstanceId}

无 无
polardb:DisableDBClusterDynamoDB DisableDBClusterDynamoDB update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DeleteKnowledgeBaseFile DeleteKnowledgeBaseFile delete

*全部资源

*

无 无
polardb:DescribeUserEncryptionKeyList DescribeUserEncryptionKeyList get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:CreatePolarFsObject CreatePolarFsObject none

*全部资源

*

无 无
polardb:DeleteDBEndpointAddress DeleteDBEndpointAddress delete

*Endpoint

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:DescribeAgenticDBTenantApiKeys DescribeAgenticDBTenantApiKeys get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:CreatePolarFs CreatePolarFs create

*LakeCache

acs:polardb:{#regionId}:{#accountId}:lakecache/*

无 无
polardb:CreatePolarClawAgent CreatePolarClawAgent create

*全部资源

*

无 无
polardb:CreateAccount CreateAccount create

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribePolarAgentSessionStatus DescribePolarAgentSessionStatus get

*全部资源

*

无 无
polardb:DescribeConsumerGroups DescribeConsumerGroups get

*全部资源

*

无 无
polardb:DescribeAccountsZonal DescribeAccountsZonal list

*全部资源

*

无 无
polardb:UntagResources UntagResources delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DeleteGlobalSecurityIPGroup DeleteGlobalSecurityIPGroup delete

*全部资源

*

无 无
polardb:DescribePolarFsAttribute DescribePolarFsAttribute get

*LakeCache

acs:polardb:{#regionId}:{#accountId}:lakecache/{#PolarFsInstanceId}

无 无
polardb:RemovePolarClawMCPServer RemovePolarClawMCPServer delete

*全部资源

*

无 无
polardb:DescribeNetworkChannel DescribeNetworkChannel get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribePolarFsQuota DescribePolarFsQuota none

*LakeCache

acs:polardb:{#regionId}:{#accountId}:lakecache/{#PolarFsInstanceId}

无 无
polardb:DeleteAgenticDBTenantApiKey DeleteAgenticDBTenantApiKey delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:ModifyConsumer ModifyConsumer update

*全部资源

*

无 无
polardb:FailoverDBClusterZonal FailoverDBClusterZonal update

*全部资源

*

无 无
polardb:CreateOrGetVirtualLicenseOrder CreateOrGetVirtualLicenseOrder create

*全部资源

*

无 无
polardb:UpgradePolarClawPlugin UpgradePolarClawPlugin update

*全部资源

*

无 无
polardb:EnablePolarClawChannel EnablePolarClawChannel update

*全部资源

*

无 无
polardb:DescribeGlobalDatabaseNetworks DescribeGlobalDatabaseNetworks get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*

无 无
polardb:CreateGateway CreateGateway create

*全部资源

*

无 无
polardb:ModifyApplicationParameter ModifyApplicationParameter none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:RegisterAIDBClusterCustomModel RegisterAIDBClusterCustomModel none

*AICluster

acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}

无 无
polardb:CreatePolarClawChannel CreatePolarClawChannel create

*全部资源

*

无 无
polardb:ModifyDBClusterDeletion ModifyDBClusterDeletion update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:SwitchOverGlobalDatabaseNetwork SwitchOverGlobalDatabaseNetwork update

*GlobalDatabaseNetwork

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:ModifyDBNodeConfig ModifyDBNodeConfig update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeDBClustersZonal DescribeDBClustersZonal list

*全部资源

*

无 无
polardb:DescribePolarAgentUserSessions DescribePolarAgentUserSessions get

*全部资源

*

无 无
polardb:DescribeDBNodePerformance DescribeDBNodePerformance get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyDBClusterEndpointZonal ModifyDBClusterEndpointZonal update

*全部资源

*

无 无
polardb:ModifyAccountPassword ModifyAccountPassword update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:FailoverDBCluster FailoverDBCluster update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteApplication DeleteApplication delete

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:ResetAccountZonal ResetAccountZonal update

*全部资源

*

无 无
polardb:AddEncryptionDBRolePrivilege AddEncryptionDBRolePrivilege create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeParameterGroup DescribeParameterGroup get

*全部资源

*

无 无
polardb:CreateRateLimitPolicy CreateRateLimitPolicy create

*全部资源

*

无 无
polardb:DescribeDBClusterEndpointsZonal DescribeDBClusterEndpointsZonal get

*全部资源

*

无 无
polardb:AnswerKnowledgeBase AnswerKnowledgeBase get

*全部资源

*

无 无
polardb:DeleteGlobalDatabaseNetwork DeleteGlobalDatabaseNetwork delete

*GlobalDatabaseNetwork

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:DeleteAgenticDBBranch DeleteAgenticDBBranch delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:OpenAITask OpenAITask update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyActiveOperationMaintainConf ModifyActiveOperationMaintainConf update

*全部资源

*

无 无
polardb:CreateAINodes CreateAINodes create

*全部资源

*

无 无
polardb:DescribeActiveOperationTasks DescribeActiveOperationTasks get

*全部资源

*

无 无
polardb:ListOrders ListOrders list

*全部资源

*

无 无
polardb:ModifyRateLimitPolicy ModifyRateLimitPolicy update

*全部资源

*

无 无
polardb:DeleteDBCluster DeleteDBCluster delete

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyAutoRenewAttribute ModifyAutoRenewAttribute update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeBackups DescribeBackups get

*Backup

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DBClusterId}

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyDBClusterMonitor ModifyDBClusterMonitor update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeVpcs DescribeVpcs get

*全部资源

*

无 无
polardb:CreateModelService CreateModelService create

*全部资源

*

无 无
polardb:DeleteEncryptionDBRolePrivilege DeleteEncryptionDBRolePrivilege delete

*全部资源

*

无 无
polardb:CreateStoragePlan CreateStoragePlan create

*全部资源

*

无 无
polardb:DescribeBackupTasks DescribeBackupTasks get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:UpdatePolarClawAgentTools UpdatePolarClawAgentTools update

*全部资源

*

无 无
polardb:DescribeScheduleTasks DescribeScheduleTasks get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeConsumers DescribeConsumers get

*全部资源

*

无 无
polardb:DescribeDBClusterMonitor DescribeDBClusterMonitor get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyAIDBClusterDescription ModifyAIDBClusterDescription update

*AICluster

acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}

无 无
polardb:MovePolarFsObjects MovePolarFsObjects none

*全部资源

*

无 无
polardb:DescribeDBClusterMigration DescribeDBClusterMigration get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ListTagResourcesForRegion ListTagResourcesForRegion get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*

无 无
polardb:CreateApplication CreateApplication get

*全部资源

*

无 无
polardb:AddSQLRateLimitingRules AddSQLRateLimitingRules create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DeleteKBSyncLink DeleteKBSyncLink delete

*全部资源

*

无 无
polardb:UpdateApplicationEnvironmentVariables UpdateApplicationEnvironmentVariables update

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:AttachApplicationPolarFS AttachApplicationPolarFS none

*全部资源

*

无 无
polardb:DescribeDBClusterNetInfo DescribeDBClusterNetInfo get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DBClusterId}

无 无
polardb:UpgradeApplicationVersion UpgradeApplicationVersion none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:ExecuteCrossCloudOpenAPI ExecuteCrossCloudOpenAPI none

*全部资源

*

无 无
polardb:DeleteDBLink DeleteDBLink delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:CreateExtensions CreateExtensions create

*全部资源

*

无 无
polardb:ModifyDBClusterEndpoint ModifyDBClusterEndpoint update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeAgenticDBComputeClusters DescribeAgenticDBComputeClusters get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:CreateParameterGroup CreateParameterGroup create

*全部资源

*

无 无
polardb:DescribePolarClawAgents DescribePolarClawAgents none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:CreateGlobalDataNetwork CreateGlobalDataNetwork create

*全部资源

*

无 无
polardb:DescribeKnowledgeBases DescribeKnowledgeBases get

*全部资源

*

无 无
polardb:DescribeAvailableModels DescribeAvailableModels none

*全部资源

*

无 无
polardb:DescribeCronJobPolicyServerless DescribeCronJobPolicyServerless list

*全部资源

*

无 无
polardb:ModifyCronJobPolicyServerless ModifyCronJobPolicyServerless update

*全部资源

*

无 无
polardb:CreateNetworkChannel CreateNetworkChannel create

*全部资源

*

无 无
polardb:ModifyModelService ModifyModelService update

*全部资源

*

无 无
polardb:DescribeLakebaseS3Account DescribeLakebaseS3Account get

*全部资源

*

无 无
polardb:CreateBatchConsumer CreateBatchConsumer create

*全部资源

*

无 无
polardb:ModifyApplicationEndpointAddress ModifyApplicationEndpointAddress none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:DescribeSlowLogRecords DescribeSlowLogRecords get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:CheckAccountNameZonal CheckAccountNameZonal get

*全部资源

*

无 无
polardb:CreateKnowledgeSpace CreateKnowledgeSpace create

*全部资源

*

无 无
polardb:DescribeApplicationParameters DescribeApplicationParameters get

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:CreateServiceLinkedRole CreateServiceLinkedRole none

*全部资源

*

无 无
polardb:RemoveApplicationEnvironmentVariables RemoveApplicationEnvironmentVariables delete

*全部资源

*

无 无
polardb:DescribeGlobalDatabaseNetwork DescribeGlobalDatabaseNetwork get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:OperateApplication OperateApplication none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:DeleteAIDBClusterApiKey DeleteAIDBClusterApiKey delete

*全部资源

*

无 无
polardb:ModifyDBNodeHotReplicaMode ModifyDBNodeHotReplicaMode update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DeleteModelService DeleteModelService create

*全部资源

*

无 无
polardb:DeleteAgenticDBProject DeleteAgenticDBProject delete

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:DeleteGateway DeleteGateway delete

*全部资源

*

无 无
polardb:CheckDBNameZonal CheckDBNameZonal get

*全部资源

*

无 无
polardb:TransformDBClusterPayType TransformDBClusterPayType update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:CreateDBLink CreateDBLink create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:ModifyDBNodeDescription ModifyDBNodeDescription update

*全部资源

*

无 无
polardb:EnableFirewallRules EnableFirewallRules update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:ResetConsumerApiKey ResetConsumerApiKey update

*全部资源

*

无 无
polardb:DescribePolarClawAgentFile DescribePolarClawAgentFile get

*全部资源

*

无 无
polardb:DescribeAIDBClusterTasks DescribeAIDBClusterTasks list

*全部资源

*

无 无
polardb:DeleteDBClusterEndpointZonal DeleteDBClusterEndpointZonal delete

*全部资源

*

无 无
polardb:DescribeModifyParameterLog DescribeModifyParameterLog none

*全部资源

*

无 无
polardb:RejectPolarClawDevicePair RejectPolarClawDevicePair update

*全部资源

*

无 无
polardb:RemovePolarClawDevicePair RemovePolarClawDevicePair delete

*全部资源

*

无 无
polardb:DescribeHALogs DescribeHALogs get

*全部资源

*

无 无
polardb:DescribePolarClawChannels DescribePolarClawChannels get

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:AddPolarClawMCPServer AddPolarClawMCPServer create

*全部资源

*

无 无
polardb:DescribeGatewayApikeyList DescribeGatewayApikeyList none

*全部资源

*

无 无
polardb:CreateDatabaseZonal CreateDatabaseZonal create

*全部资源

*

无 无
polardb:AddFirewallRules AddFirewallRules create

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:EnableDBClusterOrca EnableDBClusterOrca none

*全部资源

*

无 无
polardb:CreateDBClusterEndpointZonal CreateDBClusterEndpointZonal create

*全部资源

*

无 无
polardb:ModifyDBNodeSccMode ModifyDBNodeSccMode update

*DBNode

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:DescribeDBClusters DescribeDBClusters list

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyDBClusterSSL ModifyDBClusterSSL update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeDasConfig DescribeDasConfig get

*DBCluster

acs:polardb:{#regionId}:{#AccountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeActivationCodes DescribeActivationCodes get

*全部资源

*

无 无
polardb:CreateConsumerGroup CreateConsumerGroup create

*全部资源

*

无 无
polardb:CreateResourceControl CreateResourceControl create

*全部资源

*

无 无
polardb:ModifyEncryptionDBSecret ModifyEncryptionDBSecret update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:ModifyCostRule ModifyCostRule update

*全部资源

*

无 无
polardb:DeleteDBClusterEndpoint DeleteDBClusterEndpoint delete

*Endpoint

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:CreateActivationCode CreateActivationCode create

*全部资源

*

无 无
polardb:ModifyGlobalDatabaseNetwork ModifyGlobalDatabaseNetwork update

*GlobalDatabaseNetwork

acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

无 无
polardb:DeleteBudgetPolicy DeleteBudgetPolicy delete

*全部资源

*

无 无
polardb:DescribePolarClawCronJobs DescribePolarClawCronJobs none

*Application

acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}

无 无
polardb:DescribeAIDBClusters DescribeAIDBClusters get

*AICluster

acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}

无 无
polardb:DeletePolarFsQuota DeletePolarFsQuota none

*全部资源

*

无 无
polardb:DescribeBackupPolicy DescribeBackupPolicy get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:EnableDBClusterServerless EnableDBClusterServerless update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:RestoreTable RestoreTable update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:InstallPolarClawSkill InstallPolarClawSkill create

*全部资源

*

无 无
polardb:DescribeHistoryTasksStat DescribeHistoryTasksStat get

*全部资源

*

无 无
polardb:ModifyDBClusterAuditLogCollector ModifyDBClusterAuditLogCollector update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:ModifyFirewallRules ModifyFirewallRules update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:ModifyResourceControl ModifyResourceControl update

*全部资源

*

无 无
polardb:ModifySQLRateLimitingRules ModifySQLRateLimitingRules update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}

无 无
polardb:DeleteExtensions DeleteExtensions delete

*全部资源

*

无 无
polardb:DescribeDBLogFiles DescribeDBLogFiles list

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:CheckConnectionString CheckConnectionString get

*全部资源

*

无 无
polardb:ModifyDBClusterMigrationEndpoint ModifyDBClusterMigrationEndpoint update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DbClusterId}

无 无
polardb:DescribeAITaskStatus DescribeAITaskStatus get

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:GetLakebaseTenantToken GetLakebaseTenantToken none

*全部资源

*

无 无
polardb:UninstallPolarClawPlugin UninstallPolarClawPlugin delete

*全部资源

*

无 无
polardb:PatchPolarClawConfig PatchPolarClawConfig update

*全部资源

*

无 无
polardb:EnableSQLRateLimitingRules EnableSQLRateLimitingRules update

*全部资源

*

无 无
polardb:CreateModelApi CreateModelApi create

*全部资源

*

无 无
polardb:ResetAgenticDBTenantApiKey ResetAgenticDBTenantApiKey update

*DBCluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#DBClusterId}

无 无
polardb:DescribeAIDBClusterTaskLogFiles DescribeAIDBClusterTaskLogFiles get

*全部资源

*

无 无
polardb:RetryKnowledgeBaseFiles RetryKnowledgeBaseFiles update

*全部资源

*

无 无
polardb:GrantAccountPrivilege GrantAccountPrivilege update

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:CheckAccountName CheckAccountName get

*dbcluster

acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}

无 无
polardb:DescribeGlobalDataNetworkList DescribeGlobalDataNetworkList list

*全部资源

*

无 无
polardb:DescribeCrossCloudRegionMappingToAliyun DescribeCrossCloudRegionMappingToAliyun get

*全部资源

*

无 无

资源(Resource)

下表是云原生数据库 PolarDB定义的资源,这些资源可以在 RAM 权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源 ARN 是资源在阿里云上的唯一标识。具体说明如下:

  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。

  • *表示全部。例如:

    • {#resourceType}为*时:表示全部资源。

    • {#regionId}为*时:表示全部地域。

    • {#accountId}为*时:表示全部阿里云账号。

资源类型

资源 ARN

dbcluster
  • acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
  • acs:polardb:{#regionId}:{#accountId}:dbcluster/*
  • acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
AICluster
  • acs:polardb:{#regionId}:{#accountId}:aicluster/{#DBClusterId}
  • acs:polardb:{#regionId}:{#accountId}:aicluster/*
DBCluster
  • acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
  • acs:polardb:{#regionId}:{#accountId}:dbcluster/{#dbclusterId}
  • acs:polardb:*:{#accountId}:dbcluster/{#DbClusterId}
  • acs:polardb:*:{#accountId}:{#resource-type}/*
  • acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
  • acs:polardb:{#regionId}:{#accountId}:{#resource-type}/*
  • acs:polardb:*:{#accountId}:{#resource-type}/{#resource-id}
  • acs:polardb:{#regionId}:{#accountId}:*
LakeCache
  • acs:polardb:{#regionId}:{#accountId}:lakecache/{#PolarFsInstanceId}
  • acs:polardb:{#regionId}:{#accountId}:lakecache/{#PfsInstanceId}
  • acs:polardb:{#regionId}:{#accountId}:lakecache/*
Application
  • acs:polardb:{#regionId}:{#accountId}:application/{#ApplicationId}
Backup
  • acs:polardb:{#regionId}:{#accountId}:backup/{#DBClusterId}
  • acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DBClusterId}
ColdStorageInstance
  • acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
  • acs:polardb:*:{#accountId}:coldstorageinstance/{#OssClusterId}
DBNode
  • acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
  • acs:polardb:{#regionId}:{#accountId}:dbnode/{#DBNodeId}
  • acs:polardb:{#regionId}:{#accountId}:{#resource-type}/{#resource-id}
ParameterGroup
  • acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
DBClusterParameter
  • acs:polardb:*:{#accountId}:dbclusterparameter/{#ParameterGroupId}
GlobalDatabaseNetwork
  • acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}
Account
  • acs:polardb:*:{#accountId}:account/{#AccountId}
Endpoint
  • acs:polardb:{#regionId}:{#accountId}:DBCluster/{#DbClusterId}

条件(Condition)

下表是云原生数据库 PolarDB 定义的产品级条件关键字,这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用,用来描述授予权限的条件。以下仅列举产品级的条件关键字,阿里云定义的通用条件关键字也同样适用云原生数据库 PolarDB。

其中,数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符,否则无法匹配策略语句,授权行为无效。数据类型与条件运算符的对应关系,请参见条件操作类型。

条件关键字

描述

类型

polardb:EncryptionRequired 创建时是否需要开启TDE Boolean

相关操作

您可以创建自定义权限策略,并将权限策略授予 RAM 用户、RAM 用户组或 RAM 角色。具体操作如下: