This page lists the resource types you can specify in RAM authorization policies for OpenSearch, along with their ARN (Alibaba Cloud Resource Name) formats and the regions where OpenSearch is available.
Resource types and ARN formats
OpenSearch supports the following four resource types in RAM policies:
| Resource type | ARN format |
|---|---|
app-groups | acs:opensearch:$regionId:$accountId:$appGroupName |
suggestions | acs:opensearch:$regionId:$accountId:$suggestionIdentity |
intervention-dictionaries | acs:opensearch:$regionId:$accountId:$dictionaryName |
user-analyzers | acs:opensearch:$regionId:$accountId:$analyzerName |
Each ARN uses the following variables:
| Variable | Description |
|---|---|
$regionId | The region ID where the resource is located. Use * to match all regions. |
$accountId | Your Alibaba Cloud account ID. Use * to match all accounts. |
$appGroupName | The name of the OpenSearch application. Use * to match all applications. |
$suggestionIdentity | The ID of the drop-down suggestion. Use * to match all suggestions. |
$dictionaryName | The name of the intervention dictionary. Use * to match all dictionaries. |
$analyzerName | The name of the custom analyzer. Use * to match all analyzers. |
Supported regions
OpenSearch is available in the following regions:
| Region | Region ID |
|---|---|
| China (Hangzhou) | cn-hangzhou |
| China (Shanghai) | cn-shanghai |
| China (Qingdao) | cn-qingdao |
| China (Beijing) | cn-beijing |
| China (Shenzhen) | cn-shenzhen |
Usage notes
The new OpenSearch console refines the permission granularity for RAM users. To use the new OpenSearch console as a RAM user, you must reconfigure the RAM authorization policy.
The RAM user feature requires SDK V3 or later.
To configure an ApsaraDB RDS data source as a RAM user in the OpenSearch console, the RAM user must have permissions to access ApsaraDB RDS. Without these permissions, the console returns a connection error and you must try again later. For details, see Access authorization rules.