AliyunRDSGADFullAccess

AliyunRDSGADFullAccess 是阿里云管理的产品系统策略，您可以将 AliyunRDSGADFullAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理关系型数据库全球多活数据库的权限。

策略详情

• 类型：系统策略

• 创建时间：2021-12-29 07:54:11

• 更新时间：2021-12-29 07:54:11

• 当前版本：v1

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "rds:DescribeDBInstances",
        "rds:DescribeDBInstanceAttribute",
        "rds:ModifyDBInstanceDescription",
        "rds:DescribePrice",
        "rds:DescribeRdsVpcs",
        "rds:DescribeRegions",
        "rds:DescribeZones",
        "rds:CreateGADInstance",
        "rds:CreateGadInstanceMember",
        "rds:DescribeGadInstances",
        "rds:DetachGadInstanceMember",
        "rds:DeleteGadInstance",
        "rds:DescribeClassList",
        "rds:ListAvailableClasses",
        "rds:QueryInstanceConnection"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "rds:DeleteDBInstance",
        "rds:StopDBInstance"
      ],
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "rds:ResourceTag/gadinstance": "yes"
        }
      }
    },
    {
      "Action": [
        "dts:CreateJobMonitorRule",
        "dts:DescribeDtsJobDetail",
        "dts:DescribeDtsJobs",
        "dts:DescribeJobMonitorRule",
        "dts:StartSynchronizationJob",
        "dts:ModifyDtsJob"
      ],
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "acs:ResourceTag/gadinstance": "yes"
        }
      }
    },
    {
      "Action": [
        "dts:TransferInstanceClass",
        "dts:DescribeDtsInstancePrice",
        "dts:CheckDefaultRole",
        "dts:DescribeSchemaList",
        "dts:DescribeLinkConfig"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "gad.rds.aliyuncs.com"
        }
      }
    }
  ]
}

相关文档

• 权限策略基本元素

• 为RAM用户授权

• 为RAM用户组授权

• 为RAM角色授权