Currently, one type of resource, DBInstance, can be authorized in RAM. When performing authorization through RAM, the resource description method is as follows:

Resource type Resource description manner in an authorization policy
Instance

acs:dds:$regionid:$accountid:dbinstance/$dbinstanceid

acs:dds:$regionid:$accountid:dbinstance/

acs:dds:::dbinstance/

Specifically:

  • All $regionids must be the ID of a certain region or (*).
  • All $dbinstanceids must be the ID of a certain instance, or (*).
  • Similarly, $account-id is your cloud account numerical ID and can be replaced by (*).