Authorization rules for management operations
POP action | Action description | RAM action | Resource pattern |
ListApps | Queries all application versions. | opensearch:ListApp | apps/* |
CreateAppGroup | Creates an application. | opensearch:CreateAppGroup | app-groups/* |
DescribeAppGroupDataReport | Queries the data quality report of an application. | opensearch:DescribeApp | apps/$appGroupName |
RemoveAppGroup | Deletes an application. | opensearch:RemoveAppGroup | app-groups/$appGroupName |
ListAppGroupErrors | Queries the error logs of an application. | opensearch:ListAppGroupErrors | app-groups/$appGroupName |
ListAppGroups | Queries applications. | opensearch:ListAppGroup | app-groups/* |
ListAppGroupMetrics | Queries the data reports of an application. | opensearch:ListAppGroupMetric | app-groups/$appGroupName |
RenewAppGroup | Renews an application. | opensearch:UpdateApp | apps/$appGroupName |
DescribeAppGroup | Queries the details of an application. | opensearch:DescribeAppGroup | app-groups/$appGroupName |
ReplaceAppGroupCommodityCode | Converts a service-based application to an instance-based application. | opensearch:UpdateApp | apps/$appGroupName |
ModifyAppGroup | Modifies the attributes of an application or switches to an online application. | opensearch:ModifyAppGroup | app-groups/$appGroupName |
ModifyAppGroupQuota | Modifies the application quota. | opensearch:updateAppGroupQuota | app-groups/$appGroupName |
CreateApp | Creates an application version. | opensearch:CreateApp | app-groups/$appGroupName |
RemoveApp | Deletes an application version. | opensearch:RemoveApp | app-groups/$appGroupName |
DescribeApps | Queries application versions. | opensearch:ListApp | app-groups/$appGroupName |
DescribeApp | Queries the details of an application version. | opensearch:DescribeApp | app-groups/$appGroupName |
DescribeAppStatistics | Queries the statistical result of an application version. | opensearch:DescribeAppStatistics | app-groups/$appGroupName |
UpdateFetchFields | Updates the default display fields of an application version. | opensearch:UpdateApp | apps/$appGroupName |
CreateFirstRank | Creates a rough sort expression for an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
RemoveFirstRank | Deletes a rough sort expression of an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
ListFirstRanks | Queries the rough sort expressions of an application version. | opensearch:ListFirstRank | apps/$appGroupName |
DescribeFirstRank | Queries the details of a rough sort expression of an application version. | opensearch:DescribeFirstRank | apps/$appGroupName |
ModifyFirstRank | Modifies a rough sort expression of an application version. | opensearch:WriteFirstRank | apps/$appGroupName |
ListSlowQueryCategories | Queries the optimization suggestions for slow queries. | opensearch:ListOptimizerSlowQueryCategories | apps/$appGroupName |
StartSlowQueryAnalyzer | Immediately starts slow query analysis. | opensearch:WriteOptimizerSlowQueryCategories | apps/$appGroupName |
ListSlowQueryQueries | Queries slow queries. | opensearch:ListOptimizerSlowQueries | apps/$appGroupName |
DisableSlowQuery | Disables slow queries. | opensearch:WriteOptimizerSlowQuery | apps/$appGroupName |
EnableSlowQuery | Enables slow queries. | opensearch:WriteOptimizerSlowQuery | apps/$appGroupName |
DescribeSlowQueryStatus | Queries the status that indicates whether slow queries are enabled or disabled. | opensearch:DescribeOptimizerSlowQuery | apps/$appGroupName |
CreateScheduledTask | Creates a scheduled task for an application. | opensearch:CreateScheduledTask | app-groups/$appGroupName |
RemoveScheduledTask | Deletes a scheduled task of an application. | opensearch:RemoveScheduledTask | app-groups/$appGroupName |
ListScheduledTasks | Queries the scheduled tasks of an application. | opensearch:ListScheduledTask | app-groups/$appGroupName |
DescribeScheduledTask | Queries the details of a scheduled task of an application. | opensearch:DescribeScheduledTask | app-groups/$appGroupName |
ModifyScheduledTask | Modifies a scheduled task of an application. | opensearch:ModifyScheduledTask | app-groups/$appGroupName |
CreateSecondRank | Creates a fine sort expression for an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
RemoveSecondRank | Deletes a fine sort expression of an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
ListSecondRanks | Queries the fine sort expressions of an application version. | opensearch:ListSecondRank | apps/$appGroupName |
DescribeSecondRank | Queries the details of a fine sort expression of an application version. | opensearch:DescribeSecondRank | apps/$appGroupName |
ModifySecondRank | Modifies a fine sort expression of an application version. | opensearch:WriteSecondRank | apps/$appGroupName |
ListSortExpressions | Queries the sort expressions of an application version. | opensearch:ListSortExpression | apps/$appGroupName |
UpdateSummaries | Modifies the summary of an application version. | opensearch:WriteSummary | apps/$appGroupName |
PushUserAnalyzerEntries | Modifies the entries of a custom analyzer. | opensearch:WriteUserAnalyzer | user-analyzers/$analyzerName |
ListUserAnalyzerEntries | Queries the entries of a custom analyzer. | opensearch:DescribeUserAnalyzer | user-analyzers/$analyzerName |
CreateUserAnalyzer | Creates a custom analyzer. | opensearch:CreateUserAnalyzer | user-analyzers/$analyzerName |
DeleteUserAnalyzer | Deletes a custom analyzer. | opensearch:DeleteUserAnalyzer | user-analyzers/$analyzerName |
ListUserAnalyzers | Queries the custom analyzers of a user. | opensearch:ListUserAnalyzers | user-analyzers/* |
DescribeUserAnalyzer | Queries the details of a custom analyzer. | opensearch:DescribeUserAnalyzer | user-analyzers/$analyzerName |
Authorization rules for traffic operations
POP action | Action description | RAM action | Resource pattern |
PushDoc | Pushes documents. | opensearch:PushDoc | acs:opensearch:$regionId:$accountId:apps/$appGroupName |
SearchApp | Retrieves documents. | opensearch:SearchApp | acs:opensearch:$regionId:$accountId:apps/$appGroupName |