Resource Access Management (RAM) adalah layanan yang disediakan oleh Alibaba Cloud untuk mengelola identitas pengguna dan izin akses terhadap sumber daya. Anda dapat menggunakan RAM untuk mencegah pengguna RAM berbagi Pasangan Kunci Akses Akun Alibaba Cloud Anda serta memberikan izin minimum kepada mereka. RAM menggunakan kebijakan untuk menentukan izin tersebut.
Topik ini menjelaskan elemen-elemen seperti Action, Resource, dan Condition yang didefinisikan oleh Redis. Elemen-elemen tersebut dapat digunakan untuk membuat kebijakan di RAM. Kode (RamCode) di RAM yang merepresentasikan Redis adalah kvstore. Anda dapat memberikan izin untuk Redis pada tingkat RESOURCE.
Struktur umum kebijakan
Kebijakan dapat disimpan sebagai file JSON. Contoh struktur umum kebijakan adalah sebagai berikut:
{
"Version": "1",
"Statement": [
{
"Effect": "<Effect>",
"Action": "<Action>",
"Resource": "<Resource>",
"Condition": {
"<Condition_operator>": {
"<Condition_key>": [
"<Condition_value>"
]
}
}
}
]
}- Effect: menentukan efek otorisasi. Nilai yang valid: Allow, Deny.
- Action: menentukan satu atau beberapa Operasi API yang diizinkan atau ditolak. Untuk informasi selengkapnya, lihat bagian Action pada topik ini.
- Resource: menentukan satu atau beberapa sumber daya yang menjadi cakupan kebijakan. Anda dapat menggunakan Nama Sumber Daya Alibaba Cloud (ARN) untuk menentukan sumber daya. Untuk informasi selengkapnya, lihat bagian Resource pada topik ini.
- Condition: menentukan satu atau beberapa kondisi yang harus dipenuhi agar kebijakan berlaku. Bidang ini bersifat opsional. Untuk informasi selengkapnya, lihat bagian Condition pada topik ini.
- Condition_operator: menentukan operator kondisional. Jenis kondisi yang berbeda mendukung operator kondisional yang berbeda. Untuk informasi selengkapnya, lihat Policy elements.
- Condition_key: menentukan kunci kondisi.
- Condition_value: menentukan nilai kondisi.
Action
Redis mendefinisikan nilai-nilai yang dapat digunakan dalam elemenAction pernyataan kebijakan. Tabel berikut menjelaskan nilai-nilai tersebut.- Operation: nilai yang dapat digunakan dalam elemen Action untuk menentukan operasi pada sumber daya.
- API operation: Operasi API yang dapat dipanggil untuk menjalankan operasi tersebut.
- Access level: tingkat akses setiap operasi, yaitu read, write, dan list.
- Resource type: jenis sumber daya tempat Anda dapat memberikan izin kepada pengguna RAM atau peran RAM untuk menjalankan operasi. Perhatikan hal-hal berikut:
- Jenis sumber daya wajib ditandai dengan awalan * .
- Jika izin tidak dapat diberikan di tingkat sumber daya, kolom Resource type operasi tersebut menggunakan
All Resources.
- Condition key: kunci kondisi yang didefinisikan oleh layanan Alibaba Cloud. Kolom ini tidak mencantumkan kunci kondisi umum yang didefinisikan oleh Alibaba Cloud. Untuk informasi selengkapnya tentang kunci kondisi umum, lihat Generic Condition Keyword.
- Associated operation: operasi lain yang harus dimiliki izinnya oleh pengguna RAM atau peran RAM agar operasi utama dapat diselesaikan. Agar operasi berhasil, pengguna RAM atau peran RAM harus memiliki izin untuk menjalankan operasi terkait tersebut.
| Actions | API operation | Access level | Resource type | Condition key | Associated operation |
|---|---|---|---|---|---|
| kvstore:AddShardingNode | AddShardingNode | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:AllocateDirectConnection | AllocateDirectConnection | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:AllocateInstancePublicConnection | AllocateInstancePublicConnection | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:CancelActiveOperationTasks | CancelActiveOperationTasks | update | *All Resources * | None | None |
| kvstore:CheckCloudResourceAuthorized | CheckCloudResourceAuthorized | get | *All Resources * | None | None |
| kvstore:CreateAccount | CreateAccount | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:CreateBackup | CreateBackup | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:CreateCacheAnalysisTask | CreateCacheAnalysisTask | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:CreateGlobalDistributeCache | CreateGlobalDistributeCache | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:CreateGlobalSecurityIPGroup | CreateGlobalSecurityIPGroup | create | *All Resources * | None | None |
| kvstore:CreateInstance | CreateInstance | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/* | kvstore:InstanceClass kvstore:Appendonly kvstore:InstanceType | None |
| kvstore:CreateInstances | CreateInstances | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/* | kvstore:InstanceClass kvstore:InstanceType kvstore:Appendonly | None |
| kvstore:CreateParameterGroup | CreateParameterGroup | create | *All Resources * | None | None |
| kvstore:CreateTairInstance | CreateTairInstance | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/* | kvstore:InstanceClass kvstore:InstanceType | None |
| kvstore:CreateTairKVCacheVNode | CreateTairKVCacheVNode | create | *All Resources * | None | None |
| kvstore:DeleteAccount | DeleteAccount | delete | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DeleteBackup | DeleteBackup | delete | *All Resources * | None | None |
| kvstore:DeleteGlobalSecurityIPGroup | DeleteGlobalSecurityIPGroup | delete | *All Resources * | None | None |
| kvstore:DeleteInstance | DeleteInstance | delete | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DeleteParameterGroup | DeleteParameterGroup | delete | *All Resources * | None | None |
| kvstore:DeleteShardingNode | DeleteShardingNode | delete | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeAccounts | DescribeAccounts | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeActiveOperationMaintenanceConfig | DescribeActiveOperationMaintenanceConfig | get | *All Resources * | None | None |
| kvstore:DescribeActiveOperationTask | DescribeActiveOperationTask | get | *All Resources * | None | None |
| kvstore:DescribeActiveOperationTaskCount | DescribeActiveOperationTaskCount | get | *All Resources * | None | None |
| kvstore:DescribeActiveOperationTasks | DescribeActiveOperationTasks | get | *All Resources * | None | None |
| kvstore:DescribeAuditLogConfig | DescribeAuditLogConfig | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeAuditRecords | DescribeAuditRecords | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeAvailableResource | DescribeAvailableResource | get | *All Resources * | None | None |
| kvstore:DescribeBackupPolicy | DescribeBackupPolicy | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeBackupTasks | DescribeBackupTasks | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeBackups | DescribeBackups | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeCacheAnalysisReport | DescribeCacheAnalysisReport | get | *dbinstance acs:kvstore:{#regionId}:{#accountId}:dbinstance/{#dbInstanceId} | None | None |
| kvstore:DescribeCacheAnalysisReportList | DescribeCacheAnalysisReportList | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeClusterBackupList | DescribeClusterBackupList | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeClusterMemberInfo | DescribeClusterMemberInfo | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeDBInstanceMonitor | DescribeDBInstanceMonitor | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeDBInstanceNetInfo | DescribeDBInstanceNetInfo | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeDBNodeDirectVipInfo | DescribeDBNodeDirectVipInfo | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeDbInstanceConnectivity | DescribeDbInstanceConnectivity | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeDedicatedClusterInstanceList | DescribeDedicatedClusterInstanceList | get | *All Resources * | None | None |
| kvstore:DescribeEncryptionKey | DescribeEncryptionKey | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeEncryptionKeyList | DescribeEncryptionKeyList | get | *All Resources * | None | None |
| kvstore:DescribeEngineVersion | DescribeEngineVersion | get | *All Resources * | None | None |
| kvstore:DescribeGlobalDistributeCache | DescribeGlobalDistributeCache | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeGlobalSecurityIPGroup | DescribeGlobalSecurityIPGroup | get | *All Resources * | None | None |
| kvstore:DescribeGlobalSecurityIPGroupRelation | DescribeGlobalSecurityIPGroupRelation | get | *All Resources * | None | None |
| kvstore:DescribeHistoryEvents | DescribeHistoryEvents | create | *All Resources * | None | None |
| kvstore:DescribeHistoryEventsStat | DescribeHistoryEventsStat | get | *All Resources * | None | None |
| kvstore:DescribeHistoryMonitorValues | DescribeHistoryMonitorValues | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | kvstore:ResourceTag kvstore:ResourceTag kvstore:ResourceTag kvstore:ResourceTag | None |
| kvstore:DescribeHistoryTasks | DescribeHistoryTasks | get | *All Resources * | None | None |
| kvstore:DescribeHistoryTasksStat | DescribeHistoryTasksStat | get | *All Resources * | None | None |
| kvstore:DescribeInstanceAttribute | DescribeInstanceAttribute | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeInstanceAutoRenewalAttribute | DescribeInstanceAutoRenewalAttribute | get | *All Resources * | None | None |
| kvstore:DescribeInstanceConfig | DescribeInstanceConfig | get | *All Resources * | None | None |
| kvstore:DescribeInstanceSSL | DescribeInstanceSSL | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeInstanceTDEStatus | DescribeInstanceTDEStatus | get | *All Resources * | None | None |
| kvstore:DescribeInstances | DescribeInstances | list | DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/*DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeInstancesOverview | DescribeInstancesOverview | get | *All Resources * | None | None |
| kvstore:DescribeIntranetAttribute | DescribeIntranetAttribute | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeLogicInstanceTopology | DescribeLogicInstanceTopology | get | *All Resources * | None | None |
| kvstore:DescribeMonitorItems | DescribeMonitorItems | get | *All Resources * | None | None |
| kvstore:DescribeParameterGroup | DescribeParameterGroup | get | *All Resources * | None | None |
| kvstore:DescribeParameterGroupSupportParam | DescribeParameterGroupSupportParam | get | *All Resources * | None | None |
| kvstore:DescribeParameterGroupTemplateList | DescribeParameterGroupTemplateList | list | *All Resources * | None | None |
| kvstore:DescribeParameterGroups | DescribeParameterGroups | list | *All Resources * | None | None |
| kvstore:DescribeParameterModificationHistory | DescribeParameterModificationHistory | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} | None | None |
| kvstore:DescribeParameterTemplates | DescribeParameterTemplates | get | *All Resources * | None | None |
| kvstore:DescribeParameters | DescribeParameters | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} | None | None |
| kvstore:DescribePrice | DescribePrice | get | *All Resources * | None | None |
| kvstore:DescribeRoleZoneInfo | DescribeRoleZoneInfo | get | *All Resources * | None | None |
| kvstore:DescribeRunningLogRecords | DescribeRunningLogRecords | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeSecurityGroupConfiguration | DescribeSecurityGroupConfiguration | get | *dbinstance acs:kvstore:{#regionId}:{#accountId}:dbinstance/{#dbInstanceId} | None | None |
| kvstore:DescribeSecurityIps | DescribeSecurityIps | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:DescribeServiceLinkedRoleExists | DescribeServiceLinkedRoleExists | get | *All Resources * | None | None |
| kvstore:DescribeSlowLogRecords | DescribeSlowLogRecords | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:dbinstance/{#dbInstanceId} | None | None |
| kvstore:DescribeTags | DescribeTags | get | *All Resources * | None | None |
| kvstore:DescribeTairKVCacheInferInstances | DescribeTairKVCacheInferInstances | list | *All Resources * | None | None |
| kvstore:DestroyInstance | DestroyInstance | delete | *All Resources * | None | None |
| kvstore:EnableAdditionalBandwidth | EnableAdditionalBandwidth | update | *All Resources * | None | None |
| kvstore:FlushExpireKeys | FlushExpireKeys | delete | *DBInstance acs:kvstore:{#regionId}:{#accountId}:dbinstance/{#dbInstanceId} | None | None |
| kvstore:FlushInstance | FlushInstance | delete | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:FlushInstanceForDB | FlushInstanceForDB | delete | *All Resources * | None | None |
| kvstore:GrantAccountPrivilege | GrantAccountPrivilege | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:InitializeKvstorePermission | InitializeKvstorePermission | create | *All Resources * | None | None |
| kvstore:ListTagResources | ListTagResources | get | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/* | None | None |
| kvstore:LockDBInstanceWrite | LockDBInstanceWrite | update | *All Resources * | None | None |
| kvstore:MasterNodeShutDownFailOver | MasterNodeShutDownFailOver | none | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:MigrateToOtherZone | MigrateToOtherZone | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyAccountDescription | ModifyAccountDescription | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyAccountPassword | ModifyAccountPassword | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyActiveOperationMaintainConfig | ModifyActiveOperationMaintainConfig | update | *All Resources * | None | None |
| kvstore:ModifyActiveOperationTask | ModifyActiveOperationTask | update | *All Resources * | None | None |
| kvstore:ModifyActiveOperationTasks | ModifyActiveOperationTasks | update | *All Resources * | None | None |
| kvstore:ModifyAuditLogConfig | ModifyAuditLogConfig | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#InstanceId} | kvstore:DbAudit | None |
| kvstore:ModifyBackupExpireTime | ModifyBackupExpireTime | update | *All Resources * | None | None |
| kvstore:ModifyBackupPolicy | ModifyBackupPolicy | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | kvstore:EnableBackupLog | None |
| kvstore:ModifyDBInstanceAutoUpgrade | ModifyDBInstanceAutoUpgrade | update | *All Resources * | None | None |
| kvstore:ModifyDBInstanceConnectionString | ModifyDBInstanceConnectionString | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyDBInstanceMonitor | ModifyDBInstanceMonitor | update | *All Resources * | None | None |
| kvstore:ModifyEventInfo | ModifyEventInfo | update | *All Resources * | None | None |
| kvstore:ModifyGlobalSecurityIPGroup | ModifyGlobalSecurityIPGroup | update | *All Resources * | None | None |
| kvstore:ModifyGlobalSecurityIPGroupName | ModifyGlobalSecurityIPGroupName | update | *All Resources * | None | None |
| kvstore:ModifyGlobalSecurityIPGroupRelation | ModifyGlobalSecurityIPGroupRelation | update | *All Resources * | None | None |
| kvstore:ModifyInstanceAttribute | ModifyInstanceAttribute | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyInstanceAutoRenewalAttribute | ModifyInstanceAutoRenewalAttribute | update | *All Resources * | None | None |
| kvstore:ModifyInstanceBandwidth | ModifyInstanceBandwidth | update | *All Resources * | None | None |
| kvstore:ModifyInstanceConfig | ModifyInstanceConfig | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | kvstore:InstanceAofConfig kvstore:TLSVersion | None |
| kvstore:ModifyInstanceMaintainTime | ModifyInstanceMaintainTime | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyInstanceMajorVersion | ModifyInstanceMajorVersion | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyInstanceMinorVersion | ModifyInstanceMinorVersion | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyInstanceNetExpireTime | ModifyInstanceNetExpireTime | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyInstanceParameter | ModifyInstanceParameter | update | *All Resources * | None | None |
| kvstore:ModifyInstanceSSL | ModifyInstanceSSL | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | kvstore:SSLEnabled | None |
| kvstore:ModifyInstanceSpec | ModifyInstanceSpec | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyInstanceTDE | ModifyInstanceTDE | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | kvstore:TDEStatus | None |
| kvstore:ModifyInstanceVpcAuthMode | ModifyInstanceVpcAuthMode | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | kvstore:VpcAuthMode | None |
| kvstore:ModifyIntranetAttribute | ModifyIntranetAttribute | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyParameterGroup | ModifyParameterGroup | update | *All Resources * | None | None |
| kvstore:ModifyResourceGroup | ModifyResourceGroup | update | *All Resources * | None | None |
| kvstore:ModifySecurityGroupConfiguration | ModifySecurityGroupConfiguration | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:dbinstance/{#dbInstanceId} | None | None |
| kvstore:ModifySecurityIps | ModifySecurityIps | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ModifyTaskInfo | ModifyTaskInfo | update | *All Resources * | None | None |
| kvstore:RebootProxy | RebootProxy | update | *All Resources * | None | None |
| kvstore:ReleaseDirectConnection | ReleaseDirectConnection | delete | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ReleaseInstancePublicConnection | ReleaseInstancePublicConnection | delete | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:RemoveSubInstance | RemoveSubInstance | update | *All Resources * | None | None |
| kvstore:RenewAdditionalBandwidth | RenewAdditionalBandwidth | update | *All Resources * | None | None |
| kvstore:RenewInstance | RenewInstance | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:ResetAccountPassword | ResetAccountPassword | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:RestartInstance | RestartInstance | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:dbinstance/{#dbInstanceId} | None | None |
| kvstore:RestoreInstance | RestoreInstance | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:SwitchInstanceHA | SwitchInstanceHA | update | *All Resources * | None | None |
| kvstore:SwitchInstanceProxy | SwitchInstanceProxy | update | *All Resources * | None | None |
| kvstore:SwitchInstanceZoneFailOver | SwitchInstanceZoneFailOver | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:SwitchNetwork | SwitchNetwork | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:SyncDtsStatus | SyncDtsStatus | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:TagResources | TagResources | create | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:TransformInstanceChargeType | TransformInstanceChargeType | update | *All Resources * | None | None |
| kvstore:TransformToEcs | TransformToEcs | update | *All Resources * | None | None |
| kvstore:TransformToPrePaid | TransformToPrePaid | update | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:UnlockDBInstanceWrite | UnlockDBInstanceWrite | update | *All Resources * | None | None |
| kvstore:UntagResources | UntagResources | delete | *DBInstance acs:kvstore:{#regionId}:{#accountId}:instance/{#instanceId} | None | None |
| kvstore:UpgradeProxy | UpgradeProxy | update | *All Resources * | None | None |
Resource
Redis mendefinisikan nilai-nilai yang dapat digunakan dalamResource. Anda dapat menyambungkan kebijakan ke pengguna RAM atau peran RAM sehingga mereka dapat menjalankan operasi tertentu pada sumber daya tertentu.
ARN adalah pengidentifikasi unik sumber daya di Alibaba Cloud. Perhatikan hal-hal berikut:{#}menunjukkan variabel yang harus diganti dengan nilai aktual. Misalnya,{#ramcode}harus diganti dengan kode layanan Alibaba Cloud yang sesuai di RAM.- Tanda bintang (
*) digunakan sebagai wildcard. Contoh:{#resourceType}diatur ke*, semua sumber daya ditentukan.{#regionId}diatur ke*, semua wilayah ditentukan.{#accountId}diatur ke*, semua akun Alibaba Cloud ditentukan.
| Resource type | ARN |
|---|---|
| DBInstance |
|
| TairInstance |
|
| dbinstance |
|
Condition
Redis mendefinisikan nilai-nilai yang dapat digunakan dalam elemen
Condition pernyataan kebijakan. Tabel berikut menjelaskan kunci kondisi spesifik layanan tersebut. Kunci kondisi umum yang didefinisikan oleh Alibaba Cloud juga berlaku untuk Redis. Untuk informasi selengkapnya tentang kunci kondisi umum, lihat Generic Condition Keyword.Tipe data menentukan operator kondisional yang dapat digunakan untuk membandingkan nilai dalam permintaan dengan nilai dalam pernyataan kebijakan. Anda harus menggunakan operator kondisional yang didukung oleh tipe data tersebut. Jika tidak, perbandingan nilai tidak dapat dilakukan dan otorisasi menjadi tidak valid. Untuk informasi selengkapnya tentang operator kondisional yang didukung oleh setiap tipe data, lihat Policy elements.
| Condition key | Description | Data type |
|---|---|---|
| kvstore:Appendonly | Untuk konfigurasi AOF instans, yes untuk mengaktifkan Persistensi AOF; no untuk menonaktifkan Persistensi AOF | String |
| kvstore:DbAudit | Status fitur audit log diaktifkan | Boolean |
| kvstore:EnableBackupLog | Aktifkan fitur flashback data, 1: Aktifkan fitur flashback data; 0: Nonaktifkan fitur flashback data | String |
| kvstore:InstanceAofConfig | Konfigurasi parameter AOF instans | String |
| kvstore:InstanceClass | Tipe instans. Contoh: redis.master.small.default. Sumber nilai: nilai dari parameter permintaan InstanceClass. | String |
| kvstore:InstanceType | Tipe instans. Saat membuat instans Redis, nilainya adalah Redis atau Memcache. Saat membuat instans Tair, nilainya adalah tair_rdb, tair_scm, atau tair_essd. | String |
| kvstore:ResourceTag | Informasi tag Redis, digunakan bersama kunci tag, kvstore:ResourceTag/<tag-key>. Contoh: Jika tagnya adalah team:dev, maka kunci kondisi dan nilainya adalah "kvstore:ResourceTag/team": "dev" | String |
| kvstore:SSLEnabled | Apakah akan mengaktifkan enkripsi TLS (SSL) | String |
| kvstore:TDEStatus | Aktifkan Enkripsi Data Transparan (TDE) untuk instans | String |
| kvstore:TLSVersion | Versi protokol TLS yang digunakan | String |
| kvstore:VpcAuthMode | Dalam mode autentikasi jaringan pribadi, Open: Lulus autentikasi password; Close: Nonaktifkan autentikasi password, yaitu aktifkan akses tanpa password. | String |