This topic describes how to use Resource Access Management (RAM) to authorize PolarDB resources.

Description

All the PolarDB clusters that are created by using an Alibaba Cloud account are the resources that are owned by the account. By default, an Alibaba Cloud account has full access permissions on the resources in the account.

You can use RAM to grant RAM users the permissions to access and manage the PolarDB resources that are owned by your Alibaba Cloud account. For more information, see Grant permissions to a RAM user.

The following table lists the descriptions of PolarDB resources when you use RAM to grant permissions.

Request parameters

Resource type Resource description in an authorization policy
dbcluster

acs:polardb:$regionid:$accountid:dbcluster/

acs:polardb:*:*:dbcluster/

The following table describes the parameters.

Parameter Description
$regionid The ID of the region where the resource is available. You can specify this parameter as an asterisk (*).
$accountid The ID of your Alibaba Cloud account. You can specify this parameter as an asterisk (*).

Examples

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "polardb:Describe*"
      ],
      "Effect": "Allow",
      "Resource": [
        "acs:polardb:cn-hangzhou:12345678901234:dbcluster/*"
      ]
    },
    {
      "Action": "polardb:Describe*",
      "Effect": "Allow",
      "Resource": [
        "*"
      ]
    }
  ]
}