408
阿里云
授权访问鉴权规则__如何使用RAM授权_API 参考_云数据库 RDS 版-阿里云
当子用户通过RDS Open API进行资源访问时,RDS后台向RAM进行权限检查,以确保调用者拥有响应权限。 每个不同的RDS API会根据涉及到的资源以及API的语义来确定需要检查哪些资源的权限。具体地,每个API的鉴权规则见下表
Action | 鉴权规则 |
---|---|
CreateDBInstance | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DeleteDBInstance | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeDBInstances | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
SwitchDBInstanceNetType | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifyDBInstanceDescription | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifyDBInstanceMaintainTime | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
PurgeDBInstanceLog | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DeleteDatabase | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifyDBDescription | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeFilesForSQLServer | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeImportsForSQLServer | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
CancelImport | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ResetAccountPassword | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
RevokeAccountPrivilege | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DeleteAccount | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
CreateBackup | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
CreateTempDBInstance | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifyBackupPolicy | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeDBInstancePerformance | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeSlowLogRecords | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeBinlogFiles | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeSQLLogRecords | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeOptimizeAdviceOnMissPK | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeOptimizeAdviceOnMissIndex | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeParameters | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
CreatePrepaidDBInstanceForChannel | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifyPrepaidDBInstanceSpec | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
CreatePostpaidDBInstanceForChannel | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifyPostpaidDBInstanceSpec | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeDBInstanceAttribute | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
RestartDBInstance | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifySecurityIps | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
UpgradeDBInstanceEngineVersion | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
CreateDatabase | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeDatabases | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
CreateUploadPathForSQLServer | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ImportDataForSQLServer | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ImportDataBaseBetweenInstances | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
CreateAccount | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
GrantAccountPrivilege | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeAccounts | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifyAccountDescription | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeBackups | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeBackupPolicy | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeResourceUsage | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeSlowLogs | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeErrorLogs | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeSQLLogReports | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeOptimizeAdviceOnStorage | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeOptimizeAdviceOnExcessIndex | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
DescribeOptimizeAdviceByDBA | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
ModifyeParameter | acs:rds:$regionid:$accountid:dbinstance/$dbinstanceid |
最后更新:2016-11-23 17:16:03
上一篇:
RAM中可对RDS资源进行授权的Action__如何使用RAM授权_API 参考_云数据库 RDS 版-阿里云
下一篇:
实例规格表__附表_API 参考_云数据库 RDS 版-阿里云
修改弹性公网 IP 属性__网络相关接口_API 参考_云服务器 ECS-阿里云
用户反馈__快速入门_消息服务-阿里云
计量计费相关问题__常见问题_专有网络 VPC-阿里云
预热时间设置__测试配置_Lite用户使用手册_性能测试-阿里云
可用类型__控制台使用指南_批量计算-阿里云
查看镜像列表__镜像与模板管理_用户指南_容器服务-阿里云
报警服务使用指南__监控服务_开发人员指南_对象存储 OSS-阿里云
查看云服务器实例的监控信息__监控相关接口_API 参考_云服务器 ECS-阿里云
刷新缓存__用户指南_CDN-阿里云
多线程上传示例__SDK示例_批量数据通道_大数据计算服务-阿里云
相关内容
常见错误说明__附录_大数据计算服务-阿里云
发送短信接口__API使用手册_短信服务-阿里云
接口文档__Android_安全组件教程_移动安全-阿里云
运营商错误码(联通)__常见问题_短信服务-阿里云
设置短信模板__使用手册_短信服务-阿里云
OSS 权限问题及排查__常见错误及排除_最佳实践_对象存储 OSS-阿里云
消息通知__操作指南_批量计算-阿里云
设备端快速接入(MQTT)__快速开始_阿里云物联网套件-阿里云
查询API调用流量数据__API管理相关接口_API_API 网关-阿里云
使用STS访问__JavaScript-SDK_SDK 参考_对象存储 OSS-阿里云