授权信息 - 云数据库 RDS

访问控制（RAM）是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥，并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 云数据库 RDS 为 RAM 权限策略定义的操作（Action）、资源（Resource）和条件（Condition）。 云数据库 RDS 的 RAM 代码（RamCode）为 rds ，支持的授权粒度为 资源级 。

权限策略通用结构

权限策略支持 JSON 格式，其通用结构如下：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

各字段含义如下：

Effect：权限策略效果。取值：Allow（允许）、Deny（拒绝）。
Action：授予允许或拒绝权限的具体操作。具体信息，请参见操作（Action）。
Resource：受操作影响的具体对象，您可以使用资源 ARN 来描述指定资源。具体信息，请参见资源（Resource）。
Condition：指授权生效的条件。可选字段。具体信息，请参见条件（Condition）。
- Condition_operator：条件运算符，不同类型的条件对应不同的条件运算符。具体信息，请参见权限策略基本元素。
- Condition_key：条件关键字。
- Condition_value：条件关键字对应的值。

操作（Action）

下表是云数据库 RDS定义的操作，这些操作可以在 RAM 权限策略语句的Action元素中使用，用来授予执行该操作的权限。下面对表中的具体项提供说明：

操作：是指具体的权限点。
API：是指操作对应的 API 接口。
访问级别：是指每个操作的访问级别，取值为写入（Write）、读取（Read）或列出（List）。
资源类型：是指操作中支持授权的资源类型。具体说明如下：
- 对于必选的资源类型，用前面加 * 表示。
- 对于不支持资源级授权的操作，用全部资源表示。
条件关键字：是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。
关联操作：是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限，操作才能成功。

操作	API	访问级别	资源类型	条件关键字	关联操作
rds:AttachRCDisk	AttachRCDisk	none	全部资源 ``	无	无
rds:ValidateImportTask	ValidateImportTask	none	全部资源 ``	无	无
rds:ModifyImportTask	ModifyImportTask	update	全部资源 ``	无	无
rds:DescribeReplicationLinkLogs	DescribeReplicationLinkLogs	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeDBInstanceProxyConfiguration	DescribeDBInstanceProxyConfiguration	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeSQLServerUpgradeVersions	DescribeSQLServerUpgradeVersions	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:ModifyDBInstanceSpec	ModifyDBInstanceSpec	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DeleteRCSnapshot	DeleteRCSnapshot	delete	全部资源 ``	无	无
rds:UpgradeDBInstanceMajorVersionPrecheck	UpgradeDBInstanceMajorVersionPrecheck	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeCrossRegionBackupDBInstance	DescribeCrossRegionBackupDBInstance	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:CreateCloudMigrationPrecheckTask	CreateCloudMigrationPrecheckTask	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DeleteSecret	DeleteSecret	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:CheckRegionSupportBackupEncryption	CheckRegionSupportBackupEncryption	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:GrantOperatorPermission	GrantOperatorPermission	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateRCDisk	CreateRCDisk	create	全部资源 ``	无	无
rds:ModifyDBInstance	ModifyDBInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ModifyDBProxyEndpoint	ModifyDBProxyEndpoint	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBInstancePerformance	DescribeDBInstancePerformance	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeDBInstanceIpHostname	DescribeDBInstanceIpHostname	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeDBInstanceByTags	DescribeDBInstanceByTags	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DetachRCDisk	DetachRCDisk	update	全部资源 ``	无	无
rds:ModifyParameterTimedScheduleTask	ModifyParameterTimedScheduleTask	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:CreateDBInstanceSecurityGroupRule	CreateDBInstanceSecurityGroupRule	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeRCSnapshots	DescribeRCSnapshots	get	全部资源 ``	无	无
rds:DescribeCloudMigrationResult	DescribeCloudMigrationResult	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ModifyEventInfo	ModifyEventInfo	update	全部资源 ``	无	无
rds:DeleteDBNodes	DeleteDBNodes	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeSQLCollectorRetention	DescribeSQLCollectorRetention	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeActiveOperationMaintainConf	DescribeActiveOperationMaintainConf	get	全部资源 ``	无	无
rds:DeleteRCDeploymentSet	DeleteRCDeploymentSet	none	*CustomDeploymentSet `acs:rds:{#regionId}:{#accountId}:customdeploymentset/{#CustomDeploymentSetId}`	无	无
rds:DescribeDBInstanceReplication	DescribeDBInstanceReplication	get	全部资源 ``	无	无
rds:StopRCInstance	StopRCInstance	update	*Custom `acs:rds:{#regionId}:{#accountId}:custom/{#InstanceId}`	无	无
rds:RunRCInstances	RunRCInstances	update	Custom `acs:rds:{#regionId}:{#accountId}:custom/`	无	无
rds:UpdateUserBackupFile	UpdateUserBackupFile	update	全部资源 ``	无	无
rds:DescribeDBInstanceNetInfoForChannel	DescribeDBInstanceNetInfoForChannel	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescibeImportsFromDatabase	DescibeImportsFromDatabase	list	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeHistoryTasks	DescribeHistoryTasks	get	全部资源 ``	无	无
rds:DescribeVpcs	DescribeVpcs	get	全部资源 ``	无	无
rds:ReplaceRCInstanceSystemDisk	ReplaceRCInstanceSystemDisk	none	全部资源 ``	无	无
rds:ModifyRCInstance	ModifyRCInstance	update	全部资源 ``	无	无
rds:RebuildDBInstance	RebuildDBInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeRCInstanceVncUrl	DescribeRCInstanceVncUrl	none	全部资源 ``	无	无
rds:DescribeTags	DescribeTags	get	全部资源 ``	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyAccountMaskingPrivilege	ModifyAccountMaskingPrivilege	update	全部资源 ``	无	无
rds:DescribeInstanceKeywords	DescribeInstanceKeywords	get	全部资源 ``	无	无
rds:DescribeRCImageList	DescribeRCImageList	none	全部资源 ``	无	无
rds:DescribeRCDisks	DescribeRCDisks	get	*CustomDisk `acs:rds:{#regionId}:{#accountId}:customdisk/{#DiskId}`	无	无
rds:ModifyParameterGroup	ModifyParameterGroup	update	全部资源 ``	无	无
rds:ModifyMaskingRules	ModifyMaskingRules	update	全部资源 ``	无	无
rds:RestoreTable	RestoreTable	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:AttachRCInstances	AttachRCInstances	create	全部资源 ``	无	无
rds:ListTagResources	ListTagResources	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}` *Custom `acs:rds:{#regionId}:{#accountId}:custom/{#InstanceId}`	无	无
rds:MigrateDBNodes	MigrateDBNodes	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:CreateDBProxyEndpointAddress	CreateDBProxyEndpointAddress	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:DBProxyConnectStringNetType	无
rds:ModifyDBInstanceDescription	ModifyDBInstanceDescription	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:UpgradeDBInstanceMajorVersion	UpgradeDBInstanceMajorVersion	update	DBInstance `acs:rds::{#accountId}:dbinstance/{#DBInstanceId}`	无	无
rds:DescribeParameterGroup	DescribeParameterGroup	get	全部资源 ``	无	无
rds:DeleteDBInstance	DeleteDBInstance	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyInstanceAutoRenewalAttribute	ModifyInstanceAutoRenewalAttribute	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:ModifyResourceGroup	ModifyResourceGroup	update	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}` Custom `acs:rds:{#regionId}:{#accountId}:custom/{#InstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:AuthorizeRCSecurityGroupPermission	AuthorizeRCSecurityGroupPermission	update	全部资源 ``	无	无
rds:ModifyDBInstanceMetrics	ModifyDBInstanceMetrics	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:DescribeInstanceLinkedWhitelistTemplate	DescribeInstanceLinkedWhitelistTemplate	get	全部资源 ``	无	无
rds:CheckAccountNameAvailable	CheckAccountNameAvailable	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:RenewRCInstance	RenewRCInstance	create	全部资源 ``	无	无
rds:RecoveryDBInstance	RecoveryDBInstance	create	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeSQLLogRecords	DescribeSQLLogRecords	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:SwitchOverMajorVersionUpgrade	SwitchOverMajorVersionUpgrade	update	全部资源 ``	无	无
rds:DescribeModifyPGHbaConfigLog	DescribeModifyPGHbaConfigLog	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:AllocateInstancePublicConnection	AllocateInstancePublicConnection	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateImportTask	CreateImportTask	create	全部资源 ``	无	无
rds:DescribeSQLLogFiles	DescribeSQLLogFiles	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBInstancePromoteActivity	DescribeDBInstancePromoteActivity	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeUpgradeMajorVersionTasks	DescribeUpgradeMajorVersionTasks	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:CreateDBInstanceEndpoint	CreateDBInstanceEndpoint	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyDBProxyEndpointAddress	ModifyDBProxyEndpointAddress	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:DBProxyConnectStringNetType	无
rds:DescribeSecrets	DescribeSecrets	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DeleteDBInstanceSecurityGroupRule	DeleteDBInstanceSecurityGroupRule	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeResourceDetails	DescribeResourceDetails	get	全部资源 ``	无	无
rds:ModifyDBInstanceConfig	ModifyDBInstanceConfig	none	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ModifySQLCollectorPolicy	ModifySQLCollectorPolicy	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DeleteReplicationLink	DeleteReplicationLink	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeParameters	DescribeParameters	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyComputeBurstConfig	ModifyComputeBurstConfig	none	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:UpgradeDBInstanceKernelVersion	UpgradeDBInstanceKernelVersion	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateOrderForDeleteDBNodes	CreateOrderForDeleteDBNodes	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:CreateDBInstanceEndpointAddress	CreateDBInstanceEndpointAddress	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeCrossBackupMetaList	DescribeCrossBackupMetaList	get	全部资源 ``	无	无
rds:DescribeActionEventPolicy	DescribeActionEventPolicy	get	全部资源 ``	无	无
rds:DeleteParameterGroup	DeleteParameterGroup	delete	全部资源 ``	无	无
rds:CheckInstanceExist	CheckInstanceExist	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeSlowLogs	DescribeSlowLogs	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:PurgeDBInstanceLog	PurgeDBInstanceLog	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:AllocateReadWriteSplittingConnection	AllocateReadWriteSplittingConnection	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:RenewInstance	RenewInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeCrossRegionLogBackupFiles	DescribeCrossRegionLogBackupFiles	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CheckCloudResourceAuthorized	CheckCloudResourceAuthorized	get	全部资源 ``	rds:ResourceTag	无
rds:DescribePGHbaConfig	DescribePGHbaConfig	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateRCNodePool	CreateRCNodePool	create	全部资源 ``	无	无
rds:ResetAccountPassword	ResetAccountPassword	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeRenewalPrice	DescribeRenewalPrice	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:StartDBInstance	StartDBInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeInstanceAutoRenewalAttribute	DescribeInstanceAutoRenewalAttribute	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeHADiagnoseConfig	DescribeHADiagnoseConfig	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBInstanceAttribute	DescribeDBInstanceAttribute	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeHostWebShell	DescribeHostWebShell	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ModifyDBInstanceNetworkExpireTime	ModifyDBInstanceNetworkExpireTime	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:ModifyRCInstanceDescription	ModifyRCInstanceDescription	update	全部资源 ``	无	无
rds:DescribeMarketingActivity	DescribeMarketingActivity	get	全部资源 ``	无	无
rds:DescribeDBInstanceMonitor	DescribeDBInstanceMonitor	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeWhitelistTemplate	DescribeWhitelistTemplate	get	全部资源 ``	无	无
rds:DescribeDBInstanceHAConfig	DescribeDBInstanceHAConfig	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateReplicationLink	CreateReplicationLink	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	rds:ResourceTag	无
rds:TerminateMigrateTask	TerminateMigrateTask	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:UpgradeDBProxyInstanceKernelVersion	UpgradeDBProxyInstanceKernelVersion	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeReadDBInstanceDelay	DescribeReadDBInstanceDelay	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeRdsResourceSettings	DescribeRdsResourceSettings	get	全部资源 ``	无	无
rds:ModifyDBInstanceTDE	ModifyDBInstanceTDE	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:TDEStatus	无
rds:ModifyDbProxyInstanceSsl	ModifyDbProxyInstanceSsl	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:DbProxySslEnabled	无
rds:ImportUserBackupFile	ImportUserBackupFile	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeMigrateTasks	DescribeMigrateTasks	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:AuthorizeBackupEncryption	AuthorizeBackupEncryption	update	全部资源 ``	无	无
rds:CheckServiceLinkedRole	CheckServiceLinkedRole	get	全部资源 ``	无	无
rds:DeleteRCClusterNodes	DeleteRCClusterNodes	delete	全部资源 ``	无	无
rds:ModifySQLCollectorRetention	ModifySQLCollectorRetention	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeCloudMigrationPrecheckResult	DescribeCloudMigrationPrecheckResult	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:UntagResources	UntagResources	delete	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}` Custom `acs:rds:{#regionId}:{#accountId}:custom/{#InstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBProxyEndpoint	DescribeDBProxyEndpoint	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:QueryNotify	QueryNotify	get	全部资源 ``	无	无
rds:ModifyADInfo	ModifyADInfo	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeDBMiniEngineVersions	DescribeDBMiniEngineVersions	get	全部资源 ``	无	无
rds:ModifyRCDiskAttribute	ModifyRCDiskAttribute	update	全部资源 ``	无	无
rds:DescribeParameterTimedScheduleTask	DescribeParameterTimedScheduleTask	list	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DeleteDatabase	DeleteDatabase	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyDasInstanceConfig	ModifyDasInstanceConfig	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DeleteBackupFile	DeleteBackupFile	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:CreateTempDBInstance	CreateTempDBInstance	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeAvailableCrossRegion	DescribeAvailableCrossRegion	get	全部资源 ``	无	无
rds:AddTagsToResource	AddTagsToResource	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyDBInstanceSecurityGroupRule	ModifyDBInstanceSecurityGroupRule	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ActivateMigrationTargetInstance	ActivateMigrationTargetInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyParameter	ModifyParameter	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:TLSVersion	无
rds:CreatePostgresExtensions	CreatePostgresExtensions	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:MigrateDBInstance	MigrateDBInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ModifyDBDescription	ModifyDBDescription	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:CalculateDBInstanceWeight	CalculateDBInstanceWeight	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyDatabaseConfig	ModifyDatabaseConfig	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DeleteMaskingRules	DeleteMaskingRules	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeADInfo	DescribeADInfo	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeDBInstanceSSL	DescribeDBInstanceSSL	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyPGHbaConfig	ModifyPGHbaConfig	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeHistoryTasksStat	DescribeHistoryTasksStat	get	全部资源 ``	无	无
rds:RemoveTagsFromResource	RemoveTagsFromResource	delete	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}` DatabaseInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
rds:CreateCloudMigrationTask	CreateCloudMigrationTask	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeHistoryEventsStat	DescribeHistoryEventsStat	list	全部资源 ``	无	无
rds:CreateReadOnlyDBInstance	CreateReadOnlyDBInstance	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:MigrateToOtherZone	MigrateToOtherZone	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyActiveOperationTasks	ModifyActiveOperationTasks	update	全部资源 ``	无	无
rds:ModifyBackupPolicy	ModifyBackupPolicy	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:EnableBackupLog rds:BackupLog	无
rds:DescribeDBInstancesByExpireTime	DescribeDBInstancesByExpireTime	get	全部资源 ``	rds:ResourceTag	无
rds:PreCheckCreateOrderForDeleteDBNodes	PreCheckCreateOrderForDeleteDBNodes	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DeleteParameterTimedScheduleTask	DeleteParameterTimedScheduleTask	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ModifyInstanceCrossBackupPolicy	ModifyInstanceCrossBackupPolicy	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:BackupEnabled rds:LogBackupEnabled	无
rds:CreateMigrateTask	CreateMigrateTask	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyDBInstanceConnectionString	ModifyDBInstanceConnectionString	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeHostGroupElasticStrategyParameters	DescribeHostGroupElasticStrategyParameters	get	全部资源 ``	无	无
rds:DescribeHASwitchConfig	DescribeHASwitchConfig	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DeleteRCDisk	DeleteRCDisk	delete	*CustomDisk `acs:rds:{#regionId}:{#accountId}:customdisk/{#DiskId}`	无	无
rds:CreateAccount	CreateAccount	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CloneParameterGroup	CloneParameterGroup	create	全部资源 ``	rds:ResourceTag	无
rds:ResizeRCInstanceDisk	ResizeRCInstanceDisk	update	*CustomDisk `acs:rds:{#regionId}:{#accountId}:customdisk/{#DiskId}`	无	无
rds:DeleteDBInstanceEndpointAddress	DeleteDBInstanceEndpointAddress	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeHistoryEvents	DescribeHistoryEvents	list	全部资源 ``	无	无
rds:MigrateSecurityIPMode	MigrateSecurityIPMode	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:CancelActiveOperationTasks	CancelActiveOperationTasks	update	全部资源 ``	rds:ResourceTag	无
rds:CheckBackupEncryptionAuthorized	CheckBackupEncryptionAuthorized	get	全部资源 ``	rds:ResourceTag	无
rds:CreateParameterGroup	CreateParameterGroup	create	全部资源 ``	无	无
rds:ModifyDBInstanceVectorSupportStatus	ModifyDBInstanceVectorSupportStatus	update	全部资源 ``	无	无
rds:CreateRCSnapshot	CreateRCSnapshot	create	全部资源 ``	无	无
rds:GetDBInstanceTopology	GetDBInstanceTopology	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeMaskingRules	DescribeMaskingRules	list	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ReleaseInstancePublicConnection	ReleaseInstancePublicConnection	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:TagResources	TagResources	create	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}` *Custom `acs:rds:{#regionId}:{#accountId}:custom/{#InstanceId}`	无	无
rds:SwitchDBInstanceNetType	SwitchDBInstanceNetType	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:LockAccount	LockAccount	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeDatabases	DescribeDatabases	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:GetDbProxyInstanceSsl	GetDbProxyInstanceSsl	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeSlowLogRecords	DescribeSlowLogRecords	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyDBInstanceDelayedReplicationTime	ModifyDBInstanceDelayedReplicationTime	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:CreateMaskingRules	CreateMaskingRules	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:EvaluateLocalExtendDisk	EvaluateLocalExtendDisk	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeBackupPolicy	DescribeBackupPolicy	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:RebuildReplicationLink	RebuildReplicationLink	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	rds:ResourceTag	无
rds:ModifyDBInstanceNetworkType	ModifyDBInstanceNetworkType	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:InstanceNetworkType	无
rds:ModifyHASwitchConfig	ModifyHASwitchConfig	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBInstanceSwitchLog	DescribeDBInstanceSwitchLog	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeKmsAssociateResources	DescribeKmsAssociateResources	get	全部资源 ``	无	无
rds:ModifyDBInstanceEndpointAddress	ModifyDBInstanceEndpointAddress	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyDBInstanceCLS	ModifyDBInstanceCLS	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ReleaseInstanceConnection	ReleaseInstanceConnection	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ModifyDBInstanceReplicationSwitch	ModifyDBInstanceReplicationSwitch	update	全部资源 ``	无	无
rds:DescribeDBInstanceConnectivity	DescribeDBInstanceConnectivity	get	全部资源 ``	无	无
rds:ModifyReadonlyInstanceDelayReplicationTime	ModifyReadonlyInstanceDelayReplicationTime	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}`	无	无
rds:DescribeModifyParameterLog	DescribeModifyParameterLog	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DeleteSlot	DeleteSlot	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeResourceUsage	DescribeResourceUsage	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeVSwitches	DescribeVSwitches	get	全部资源 ``	无	无
rds:ReleaseReadWriteSplittingConnection	ReleaseReadWriteSplittingConnection	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DeleteDBProxyEndpointAddress	DeleteDBProxyEndpointAddress	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ModifyCustinsResource	ModifyCustinsResource	update	全部资源 ``	rds:ResourceTag	无
rds:ModifyActionEventPolicy	ModifyActionEventPolicy	update	全部资源 ``	rds:EnableEventLog	无
rds:DescribeUpgradeMajorVersionPrecheckTask	DescribeUpgradeMajorVersionPrecheckTask	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeSlots	DescribeSlots	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeRCInstanceIpAddress	DescribeRCInstanceIpAddress	get	全部资源 ``	无	无
rds:CreateRCImage	CreateRCImage	none	全部资源 ``	无	无
rds:ModifyAccountCheckPolicy	ModifyAccountCheckPolicy	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeAvailableRecoveryTime	DescribeAvailableRecoveryTime	get	全部资源 ``	无	无
rds:CopyDatabase	CopyDatabase	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeLocalAvailableRecoveryTime	DescribeLocalAvailableRecoveryTime	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyDBProxyInstance	ModifyDBProxyInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBProxyPerformance	DescribeDBProxyPerformance	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateDdrInstance	CreateDdrInstance	create	全部资源 ``	无	无
rds:DescribeDTCSecurityIpHostsForSQLServer	DescribeDTCSecurityIpHostsForSQLServer	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DeleteAccount	DeleteAccount	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeParameterTemplates	DescribeParameterTemplates	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:UnlockAccount	UnlockAccount	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyHADiagnoseConfig	ModifyHADiagnoseConfig	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateServiceLinkedRole	CreateServiceLinkedRole	create	全部资源 ``	无	无
rds:DescribeLogBackupFiles	DescribeLogBackupFiles	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:UpdatePostgresExtensions	UpdatePostgresExtensions	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ModifyTaskInfo	ModifyTaskInfo	update	全部资源 ``	无	无
rds:ModifyDBInstanceMonitor	ModifyDBInstanceMonitor	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateDBInstanceForRebuild	CreateDBInstanceForRebuild	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeActiveOperationTasks	DescribeActiveOperationTasks	get	全部资源 ``	无	无
rds:DescribeRCClusterConfig	DescribeRCClusterConfig	get	全部资源 ``	无	无
rds:DescribeDedicatedHosts	DescribeDedicatedHosts	get	全部资源 ``	无	无
rds:ResetAccount	ResetAccount	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeWhitelistTemplateLinkedInstance	DescribeWhitelistTemplateLinkedInstance	get	全部资源 ``	无	无
rds:RestoreDdrTable	RestoreDdrTable	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:PrecheckDuckDBDependency	PrecheckDuckDBDependency	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribePostgresExtensions	DescribePostgresExtensions	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:MigrateConnectionToOtherZone	MigrateConnectionToOtherZone	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DeleteBackup	DeleteBackup	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ModifyDBInstanceMaintainTime	ModifyDBInstanceMaintainTime	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:TransformDBInstancePayType	TransformDBInstancePayType	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeCurrentModifyOrder	DescribeCurrentModifyOrder	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ModifyDBInstanceAutoUpgradeMinorVersion	ModifyDBInstanceAutoUpgradeMinorVersion	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeSecurityGroupConfiguration	DescribeSecurityGroupConfiguration	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateBackup	CreateBackup	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBInstanceSecurityGroupRule	DescribeDBInstanceSecurityGroupRule	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DeleteADSetting	DeleteADSetting	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ModifyBackupSetExpireTime	ModifyBackupSetExpireTime	update	全部资源 ``	无	无
rds:ModifyDBInstanceSSL	ModifyDBInstanceSSL	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:SSLEnabled	无
rds:CloneDBInstance	CloneDBInstance	create	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeDBInstanceEncryptionKey	DescribeDBInstanceEncryptionKey	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeAvailableMetrics	DescribeAvailableMetrics	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeDBInstanceNetInfo	DescribeDBInstanceNetInfo	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifySecurityGroupConfiguration	ModifySecurityGroupConfiguration	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBInstanceMetrics	DescribeDBInstanceMetrics	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:EnableBackupEncryption	EnableBackupEncryption	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:DescribeTasks	DescribeTasks	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:StopDBInstance	StopDBInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeParameterGroups	DescribeParameterGroups	get	全部资源 ``	无	无
rds:DescribeBackupTasks	DescribeBackupTasks	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifySecurityIps	ModifySecurityIps	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CheckCreateDdrDBInstance	CheckCreateDdrDBInstance	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeAccountMaskingPrivilege	DescribeAccountMaskingPrivilege	list	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeRCInstanceAttribute	DescribeRCInstanceAttribute	get	全部资源 ``	无	无
rds:DescribeDedicatedHostGroups	DescribeDedicatedHostGroups	get	全部资源 ``	无	无
rds:DescribeRCMetricList	DescribeRCMetricList	none	全部资源 ``	无	无
rds:GrantAccountPrivilege	GrantAccountPrivilege	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:StartRCInstance	StartRCInstance	update	全部资源 ``	无	无
rds:CreateDBInstance	CreateDBInstance	create	全部资源 ``	rds:ResourceTag rds:Engine rds:EngineVersion rds:DBInstanceClass rds:DBInstanceStorage	无
rds:DescribeCustinsResourceInfo	DescribeCustinsResourceInfo	get	全部资源 ``	无	无
rds:CreateSecret	CreateSecret		*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeRCInstanceDdosCount	DescribeRCInstanceDdosCount	get	全部资源 ``	无	无
rds:DescribeImportTaskValidation	DescribeImportTaskValidation	get	全部资源 ``	无	无
rds:DescribeDBInstances	DescribeDBInstances	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CreateDBNodes	CreateDBNodes	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeDetachedBackups	DescribeDetachedBackups	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeComputeBurstConfig	DescribeComputeBurstConfig	none	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeAccounts	DescribeAccounts	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyRCInstanceChargeType	ModifyRCInstanceChargeType	none	全部资源 ``	无	无
rds:ModifyDBInstanceEndpoint	ModifyDBInstanceEndpoint	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DetachWhitelistTemplateToInstance	DetachWhitelistTemplateToInstance	delete	全部资源 ``	无	无
rds:RestartDBInstance	RestartDBInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:CreateOnlineDatabaseTask	CreateOnlineDatabaseTask	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeRCInstances	DescribeRCInstances	get	全部资源 ``	无	无
rds:DescribeRCNodePool	DescribeRCNodePool	list	全部资源 ``	无	无
rds:DescribeOssDownloads	DescribeOssDownloads	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeCrossRegionBackups	DescribeCrossRegionBackups	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:RevokeAccountPrivilege	RevokeAccountPrivilege	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DeleteRCInstances	DeleteRCInstances	delete	全部资源 ``	无	无
rds:DeleteUserBackupFile	DeleteUserBackupFile	delete	全部资源 ``	无	无
rds:DescribeDBInstancesByPerformance	DescribeDBInstancesByPerformance	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeSQLLogReportList	DescribeSQLLogReportList	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeDBInstanceIPArrayList	DescribeDBInstanceIPArrayList	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeDBInstanceEndpoints	DescribeDBInstanceEndpoints	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:AssociateEipAddressWithRCInstance	AssociateEipAddressWithRCInstance	none	全部资源 ``	无	无
rds:ListImportTasks	ListImportTasks	list	全部资源 ``	无	无
rds:SwitchDBInstanceVpc	SwitchDBInstanceVpc	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:SwitchReplicationLink	SwitchReplicationLink	update	全部资源 ``	无	无
rds:RevokeOperatorPermission	RevokeOperatorPermission	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyDBInstancePayType	ModifyDBInstancePayType	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeMetaList	DescribeMetaList	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:DescribeImportTask	DescribeImportTask	get	全部资源 ``	无	无
rds:DescribeInstanceCrossBackupPolicy	DescribeInstanceCrossBackupPolicy	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyCollationTimeZone	ModifyCollationTimeZone	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ConfirmNotify	ConfirmNotify	get	全部资源 ``	无	无
rds:UpgradeDBInstanceEngineVersion	UpgradeDBInstanceEngineVersion	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:CheckDBNameAvailable	CheckDBNameAvailable	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribeSQLCollectorPolicy	DescribeSQLCollectorPolicy	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:ModifyDBProxy	ModifyDBProxy	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:InstanceNetworkType	无
rds:ListUserBackupFiles	ListUserBackupFiles	get	全部资源 ``	无	无
rds:ModifyDTCSecurityIpHostsForSQLServer	ModifyDTCSecurityIpHostsForSQLServer	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeBackupDatabase	DescribeBackupDatabase	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:CreateYouhuiForOrder	CreateYouhuiForOrder	create	全部资源 ``	无	无
rds:DescribeErrorLogs	DescribeErrorLogs	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:SwitchDBInstanceHA	SwitchDBInstanceHA	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:ModifyAccountDescription	ModifyAccountDescription	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:DescribeBackups	DescribeBackups	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeEvents	DescribeEvents	get	全部资源 ``	无	无
rds:ModifyWhitelistTemplate	ModifyWhitelistTemplate	update	全部资源 ``	无	无
rds:DescribeDBInstanceCLS	DescribeDBInstanceCLS	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DescribePrice	DescribePrice	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DeletePostgresExtensions	DeletePostgresExtensions	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:CreateDatabase	CreateDatabase	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:DeleteDBInstanceEndpoint	DeleteDBInstanceEndpoint	delete	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeAllWhitelistTemplate	DescribeAllWhitelistTemplate	get	全部资源 ``	无	无
rds:DescribeAvailableClasses	DescribeAvailableClasses	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:CopyDatabaseBetweenInstances	CopyDatabaseBetweenInstances	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeDBInstancesAsCsv	DescribeDBInstancesAsCsv	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:ModifyReadWriteSplittingConnection	ModifyReadWriteSplittingConnection	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ModifyDBInstanceHAConfig	ModifyDBInstanceHAConfig	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:DescribeMigrateTaskById	DescribeMigrateTaskById	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:QueryRecommendByCode	QueryRecommendByCode	get	全部资源 ``	无	无
rds:DescribeDBInstancesForClone	DescribeDBInstancesForClone	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:ReceiveDBInstance	ReceiveDBInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:ModifyDBInstanceDeletionProtection	ModifyDBInstanceDeletionProtection	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag	无
rds:DescribeSupportOnlineResizeDisk	DescribeSupportOnlineResizeDisk	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeDBInstanceTDE	DescribeDBInstanceTDE	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无
rds:AttachWhitelistTemplateToInstance	AttachWhitelistTemplateToInstance	create	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DestroyDBInstance	DestroyDBInstance	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag	无
rds:ModifyAccountSecurityPolicy	ModifyAccountSecurityPolicy	update	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#DbInstanceId}`	无	无
rds:DescribeDBInstanceDetail	DescribeDBInstanceDetail	get	DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	无	无
rds:DescribeBinlogFiles	DescribeBinlogFiles	get	*DBInstance `acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId}`	rds:ResourceTag rds:ResourceTag rds:ResourceTag rds:ResourceTag	无

资源（Resource）

下表是云数据库 RDS定义的资源，这些资源可以在 RAM 权限策略语句的Resource元素中使用，用来授予对该资源执行具体操作的权限。其中，资源 ARN 是资源在阿里云上的唯一标识。具体说明如下：

{#}为变量标识，需要您替换为实际值。例如：{#ramcode}需要您替换为实际的云服务RAM代码。
*表示全部。例如：
- {#resourceType}为*时：表示全部资源。
- {#regionId}为*时：表示全部地域。
- {#accountId}为*时：表示全部阿里云账号。

资源类型	资源 ARN
DBInstance	acs:rds:{#regionId}:{#accountId}:dbinstance/{#dbinstanceId} acs:rds:{#regionId}:{#accountId}:dbinstance/* acs:rds::{#accountId}:dbinstance/{#DBInstanceId} acs:rds::{#accountId}:dbinstance/* acs:rds:{#Region}:{#AccountId}:dbinstance/{#DbInstanceId}
CustomDisk	acs:rds:{#regionId}:{#accountId}:customdisk/{#DiskId}
CustomDeploymentSet	acs:rds:{#regionId}:{#accountId}:customdeploymentset/{#CustomDeploymentSetId}
Custom	acs:rds:{#regionId}:{#accountId}:custom/{#InstanceId} acs:rds:{#regionId}:{#accountId}:custom/*
GadInstance	acs:rds::{#accountId}:gadinstance/* acs:rds::{#accountId}:gadinstance/{#GadInstanceName}
DatabaseInstance	acs:rds:{#regionId}:{#accountId}:dbinstance/{#DBInstanceId}

条件（Condition）

下表是云数据库 RDS 定义的产品级条件关键字，这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用，用来描述授予权限的条件。以下仅列举产品级的条件关键字，阿里云定义的通用条件关键字也同样适用云数据库 RDS。

其中，数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符，否则无法匹配策略语句，授权行为无效。数据类型与条件运算符的对应关系，请参见条件操作类型。

条件关键字	描述	类型
rds:ResourceTag	资源标签，与标签键组成条件关键字rds:ResourceTag/<tag-key>。示例值：假设标签为team:dev, 则此处条件关键字和值的写法 \\\\\\"rds:ResourceTag/team\\\\\\": \\\\\\"dev\\\\\\"。	STRING
rds:EnableEventLog	是否开启历史事件记录。	String
rds:DBInstanceStorage	磁盘大小	Numeric
rds:Engine	数据库引擎	String
rds:InstanceNetworkType	实例的网络类型。	String
rds:LogBackupEnabled	是否开启跨地域日志备份开关。	String
rds:TDEStatus	TDE状态。	String
rds:DBProxyConnectStringNetType	独享代理连接地址的网络类型。	String
rds:BackupLog	是否开启日志备份。	String
rds:DiskEncryptionRequired	磁盘是否加密。	String
rds:DbProxySslEnabled	SSL加密配置。	String
rds:EngineVersion	引擎版本	String
rds:DBInstanceClass	实例规格	String
rds:BackupEnabled	是否开启跨地域备份总开关。	String
rds:EnableBackupLog	是否开启日志备份。	String
rds:SSLEnabled	SSL是否开启	String
rds:TLSVersion	TLS版本，示例：TLSv1,TLSv1.1,TLSv1.2。	String

云数据库 RDS：授权信息

权限策略通用结构

操作（Action）

资源（Resource）

条件（Condition）

相关操作