Description
All Artificial Intelligence Recommendation (AIRec) instances that are created by using an Alibaba Cloud account are the resources that are owned by the account. By default, an Alibaba Cloud account has full access permissions on the resources that belong to the account.
Alibaba Cloud Resource Access Management (RAM) allows you to grant access and management permissions on resources of your AIRec instance to RAM users.
Authentication rules of API operations
If a RAM user requests access to AIRec by using an API operation, a request is sent to RAM for authentication. This ensures that the RAM user is authorized to access the resources. The permissions to be checked are determined by the resources used by an API operation and the API syntax. The following table describes the authentication rules of API operations.
Description | API | Action | Authentication rule |
---|---|---|---|
Query the details of one or more instances. | GET /instances | ListInstance | acs:airec:$regionId:$accountId:instance/* |
Create an AIRec instance. | POST /instances | CreateInstance | acs:airec:$regionId:$accountId:instance/* |
Query the details of an instance based on a specified instance ID. | GET /instances/{instanceId} | DescribeInstance | acs:airec:$regionId:$accountId:instance/$instanceId |
Delete an instance. | DELETE /instances/{instanceId} | DeleteInstance | acs:airec:$regionId:$accountId:instance/$instanceId |
Modify the configurations of a specified instance. | PUT /instances/{instanceId} | ModifyInstance | acs:airec:$regionId:$accountId:instance/$instanceId |
Increase quotas of a specified instance. | POST /instances/{instanceId}/actions/upgrade | UpgradeInstance | acs:airec:$regionId:$accountId:instance/$instanceId |
Run a specified instance to start a full data import task. | POST /instances/{instanceId}/actions/import | RunInstance | acs:airec:$regionId:$accountId:instance/$instanceId |
Verify the validity of information of a specified instance. | POST /instances/{instanceId}/actions/validate | ValidateInstance | acs:airec:$regionId:$accountId:instance/$instanceId |
Query datasets of a specified instance. | GET /instances/{instanceId}/dataSets | ListDataSet | acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/* |
Use a dataset of a specific version of a specified instance to provide online services. | POST /instances/{instanceId}/dataSets/{versionId}/actions/current | AttachDataSet | acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId |
Stop a dataset of a specified version for a specified instance. | POST /instances/{instanceId}/dataSets/{versionId}/actions/stop | StopDataSet | acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId |
Delete a dataset of a specified version for an instance. | POST /instances/{instanceId}/dataSets/{versionId} | DeleteDataSet | acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId |
Query the data quality report of a specified dataset version for a specified instance. | GET /instances/{instanceId}/dataSets/{versionId}/report | DescribeDataSetReport | acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId |
Query the error details of data in a specified dataset version of a specified instance. | GET /instances/{instanceId}/dataSets/{versionId}/messages | DescribeDataSetMessage | acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId |
Query the data sources of a specified instance. | GET /instances/{instanceId}/dataSources | ListDataSource | acs:airec:$regionId:$accountId:instance/$instanceId/dataSource/* |
Modify the information of a single data source in a specified table of a specified instance. | PUT /instances/{instanceId}/dataSources/{tableName} | ModifyDataSource | acs:airec:$regionId:$accountId:instance/$instanceId/dataSource/$tableName |
Create a discretization rule. | POST /instances/{instanceId}/diversifies | CreateDiversify | acs:airec:$regionId:$accountId:instance/$instanceId/diversify/* |
Query discretization rules. | GET /instances/{instanceId}/diversifies | ListDiversify | acs:airec:$regionId:$accountId:instance/$instanceId/diversify/* |
Query a discretization rule. | GET /instances/{instanceId}/diversifies/{name} | DescribeDiversify | acs:airec:$regionId:$accountId:instance/$instanceId/diversify/$name |
Modify a discretization rule. | PUT /instances/{instanceId}/diversifies/{name} | ModifyDiversify | acs:airec:$regionId:$accountId:instance/$instanceId/diversify/$name |
Delete a discretization rule. | DELETE /instances/{instanceId}/diversifies/{name} | DeleteDiversify | acs:airec:$regionId:$accountId:instance/$instanceId/diversify/$name |
Push documents to specified tables in a specified instance. | POST /instances/{instanceId}/tables/{tableName}/actions/bulk | PushDocument | acs:airec:$regionId:$accountId:instance/$instanceId/table/$tableName |
Query the recommendation results of a specified instance. | GET /instances/{instanceId}/actions/recommend | Recommend | acs:airec:$regionId:$accountId:instance/$instanceId |
Push intervention data. | POST /instances/{instanceId}/actions/intervene | PushIntervention | acs:airec:$regionId:$accountId:instance/$instanceId |
Create a mixed sorting rule. | POST /instances/{instanceId}/mixes | CreateMix | acs:airec:$regionId:$accountId:instance/$instanceId/mix/* |
Query mixed sorting rules. | GET /instances/{instanceId}/mixes | ListMix | acs:airec:$regionId:$accountId:instance/$instanceId/mix/* |
Query a mixed sorting rule. | GET /instances/{instanceId}/mixes/{name} | DescribeMix | acs:airec:$regionId:$accountId:instance/$instanceId/mix/$name |
Modify a mixed sorting rule. | PUT /instances/{instanceId}/mixes/{name} | ModifyMix | acs:airec:$regionId:$accountId:instance/$instanceId/mix/$name |
Delete a mixed sorting rule. | DELETE /instances/{instanceId}/mixes/{name} | DeleteMix | acs:airec:$regionId:$accountId:instance/$instanceId/mix/$name |
Query the quota of an instance based on a specified instance ID. | GET /instances/{instanceId}/quota | DescribeQuota | acs:airec:$regionId:$accountId:instance/$instanceId/quota |
Query channels and scenes of a specified instance. | GET /instances/{instanceId}/dashboard/parameters | ListDashboardParameters | acs:airec:$regionId:$accountId:instance/$instanceId/dashboard |
Query the statistics of a specified instance. | GET /instances/{instanceId}/dashboard/statistics | ListDashboard | acs:airec:$regionId:$accountId:instance/$instanceId/dashboard |
Query cross-channel users of a specified instance. | GET /instances/{instanceId}/dashboard/uid | ListDashboardUid | acs:airec:$regionId:$accountId:instance/$instanceId/dashboard |
Query all asynchronous tasks of a specified instance by using the instance ID. | GET /instances/{instanceId}/tasks | ListInstanceTask | acs:airec:$regionId:$accountId:instance/$instanceId/task |