AliyunRDSGADFullAccess 是阿里云管理的產品系統策略，您可以將 AliyunRDSGADFullAccess 授權給 RAM 身份（RAM 用戶、RAM 用戶組和 RAM 角色），本策略定義了管理關系型數據庫全球多活數據庫的權限。

策略詳情

• 類型：系統策略

• 創建時間：2021-12-29 07:54:11

• 更新時間：2021-12-29 07:54:11

• 當前版本：v1

策略內容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "rds:DescribeDBInstances",
        "rds:DescribeDBInstanceAttribute",
        "rds:ModifyDBInstanceDescription",
        "rds:DescribePrice",
        "rds:DescribeRdsVpcs",
        "rds:DescribeRegions",
        "rds:DescribeZones",
        "rds:CreateGADInstance",
        "rds:CreateGadInstanceMember",
        "rds:DescribeGadInstances",
        "rds:DetachGadInstanceMember",
        "rds:DeleteGadInstance",
        "rds:DescribeClassList",
        "rds:ListAvailableClasses",
        "rds:QueryInstanceConnection"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "rds:DeleteDBInstance",
        "rds:StopDBInstance"
      ],
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "rds:ResourceTag/gadinstance": "yes"
        }
      }
    },
    {
      "Action": [
        "dts:CreateJobMonitorRule",
        "dts:DescribeDtsJobDetail",
        "dts:DescribeDtsJobs",
        "dts:DescribeJobMonitorRule",
        "dts:StartSynchronizationJob",
        "dts:ModifyDtsJob"
      ],
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "acs:ResourceTag/gadinstance": "yes"
        }
      }
    },
    {
      "Action": [
        "dts:TransferInstanceClass",
        "dts:DescribeDtsInstancePrice",
        "dts:CheckDefaultRole",
        "dts:DescribeSchemaList",
        "dts:DescribeLinkConfig"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "gad.rds.aliyuncs.com"
        }
      }
    }
  ]
}

相關文檔

• 權限策略基本元素

• 為RAM用戶授權

• 為RAM用戶組授權

• 為RAM角色授權