# 策略授权参考 本章节介绍RDS策略授权场景下支持的策略授权项。 #### 支持的授权项 策略包含系统策略和自定义策略，如果系统策略不满足授权要求，管理员可以创建自定义策略，并通过给用户组授予自定义策略来进行精细的访问控制。策略支持的操作与API相对应，授权项列表说明如下： - 权限：允许或拒绝某项操作。 - 对应API接口：自定义策略实际调用的API接口。 - 授权项：自定义策略中支持的Action，在自定义策略中的Action中写入授权项，可以实现授权项对应的权限功能。 - 依赖的授权项：部分Action存在对其他Action的依赖，需要将依赖的Action同时写入授权项，才能实现对应的权限功能。 - IAM项目(Project)/企业项目(Enterprise Project)：自定义策略的授权范围，包括IAM项目与企业项目。授权范围如果同时支持IAM项目和企业项目，表示此授权项对应的自定义策略，可以在IAM和企业管理两个服务中给用户组授权并生效。如果仅支持IAM项目，不支持企业项目，表示仅能在IAM中给用户组授权并生效，如果在企业管理中授权，则该自定义策略不生效。管理员可以在授权项列表中查看授权项是否支持IAM项目或企业项目，"√"表示支持，"×"表示暂不支持。关于IAM项目与企业项目的区别，详情请参见：[IAM与企业管理的区别](https://support.huaweicloud.com/iam_faq/iam_01_0101.html)。 RDS的支持自定义策略授权项如下所示： 表1公共查询 | 权限 | 对应API接口 | 授权项（Action） | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询数据库引擎版本 | GET /v3/{projectId}/datastores/{database_name} | rds:instance:listDatabaseVersion | √ | √ | | 查询数据库小版本号 | GET /v3/{project_id}/datastores/{database_name}/small-version | rds:instance:list | √ | √ | | 查询指定实例的风险版本信息 | GET /v3/{project_id}/instances/{instance_id}/show-risk-info | rds:instance:list | √ | √ | | 查询数据库规格 | GET /v3/{project_id}/flavors/{database_name}?version_name={version_name} | rds:instance:listFlavors | √ | √ | | 查询数据库存储规格 | GET /v3/{project_id}/storage-type/{database_name}?version_name={version_name} | rds:instance:listStorageType | √ | √ | | 查询版本支持特性（SQL Server） | GET /v3/{project_id}/major-version-feature | rds:instance:listAll | √ | √ | | 查询云商店服务商列表（SQL Server） | GET /v3/{project_id}/business-partners | rds:instance:listAll | √ | √ | | 查询云商店引擎商品列表（SQL Server） | GET /v3/{project_id}/business-partner/{bp_domain_id} | rds:instance:listAll | √ | √ | 表2v3.1接口 | 权限 | 对应API接口 | 授权项（Action） | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 应用参数模板 | PUT /v3.1/{project_id}/configurations/{config_id}/apply | rds:param:apply | √ | √ | | 修改指定实例的参数 | PUT /v3.1/{project_id}/instances/{instance_id}/configurations | rds:param:modify | √ | √ | | 恢复到已有实例或当前实例 | POST /v3.1/{project_id}/instances/recovery | rds:instance:restoreInPlace | √ | √ | | 表级时间点恢复（MySQL） | POST /v3.1/{project_id}/instances/{instance_id}/restore/tables | rds:instance:tableRestore | √ | √ | | 删除数据库（SQL Server） | DELETE /v3.1/{project_id}/instances/{instance_id}/database/{db_name} | rds:database:drop | √ | √ | | 查询慢日志统计信息 | POST /v3.1/{project_id}/instances/{instance_id}/slow-logs/statistics | rds:log:list | √ | √ | 表3实例管理 | API功能 | 对应API接口 | 授权项（Action） | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 创建数据库实例 | POST /v3/{project_id}/instances | rds:instance:create （创建加密实例需要在项目上配置KMS Administrator权限。） | √ | √ | | 停止实例 | POST /v3/{project_id}/instances/{instance_id}/action/shutdown | rds:instance:operateServer | √ | √ | | 开启实例 | POST /v3/{project_id}/instances/{instance_id}/action/startup | rds:instance:operateServer | √ | √ | | 修改实例名称 | PUT /v3/{project_id}/instances/{instance_id}/name | rds:instance:modify | √ | √ | | 修改实例备注 | PUT /v3/{project_id}/instances/{instance_id}/alias | rds:instance:modify | √ | √ | | 申请内网域名 | POST /v3/{project_id}/instances/{instance_id}/create-dns | rds:instance:createDns | √ | √ | | 修改内网域名 | PUT /v3/{project_id}/instances/{instance_id}/modify-dns | rds:instance:modifyDns | √ | √ | | 查询实例域名 | GET /v3/{project_id}/instances/{instance_id}/dns | rds:instance:list | √ | √ | | 查询实例IPv6域名 | GET /v3/{project_id}/instances/{instance_id}/dns-ipv6 | rds:instance:list | √ | √ | | 获取实例的复制状态 | GET /v3/{project_id}/instances/{instance_id}/replication/status | rds:instance:list | √ | √ | | 变更数据库实例的规格 | POST /v3/{project_id}/instances/{instance_id}/action | rds:instance:modifySpec | √ | √ | | 批量变更实例规格 | POST /v3/{project_id}/instances/batch/resize | rds:instance:modifySpec | √ | √ | | 扩容数据库实例的磁盘空间 | POST /v3/{project_id}/instances/{instance_id}/action | rds:instance:extendSpace | √ | √ | | 设置自动扩容策略 | PUT /v3/{project_id}/instances/{instance_id}/disk-auto-expansion | rds:instance:extendSpace | √ | √ | | 查询自动扩容策略 | GET /v3/{project_id}/instances/{instance_id}/disk-auto-expansion | rds:instance:list | √ | √ | | 单机转主备实例 | POST /v3/{project_id}/instances/{instance_id}/action | rds:instance:singleToHa （加密实例需要在项目上配置KMS Administrator权限。） | √ | √ | | 重启数据库实例 | POST /v3/{project_id}/instances/{instance_id}/action | rds:instance:restart | √ | √ | | 删除数据库实例 | DELETE /v3/{project_id}/instances/{instance_id} | rds:instance:delete | √ | √ | | 删除实例选择是否保留自动备份（SQL Server） | POST /v3/{project_id}/instances/{instance_id}/backups/delete-selection | rds:backup:delete | √ | √ | | 批量删除数据库实例 | POST /v3/{project_id}/instances/batch-delete | rds:instance:delete | √ | √ | | 查询数据库实例列表 | GET /v3/{project_id}/instances | rds:instance:list | √ | √ | | 绑定和解绑弹性公网IP | PUT /v3/{project_id}/instances/{instance_id}/public-ip | rds:instance:modifyPublicAccess | √ | √ | | 切换主备实例的倒换策略 | PUT /v3/{project_id}/instances/{instance_id}/failover/strategy | rds:instance:modifyStrategy | √ | √ | | 手动倒换主备 | PUT /v3/{project_id}/instances/{instance_id}/failover | rds:instance:switchover | √ | √ | | 更改主备实例的数据同步方式 | PUT /v3/{project_id}/instances/{instance_id}/failover/mode | rds:instance:modifySynchronizeModel | √ | √ | | 设置实例读写状态 | PUT /v3/{project_id}/instances/{instance_id}/readonly-status | rds:instance:openReadonly | √ | √ | | 迁移主备实例的备机 | POST /v3/{project_id}/instances/{instance_id}/migrateslave | rds:instance:create | √ | √ | | 设置可维护时间段 | PUT /v3/{project_id}/instances/{instance_id}/ops-window | rds:instance:modify | √ | √ | | 升级内核小版本 | POST /v3/{project_id}/instances/{instance_id}/db-upgrade | rds:instance:modify | √ | √ | | 设置秒级监控策略 | PUT /v3/{project_id}/instances/{instance_id}/second-level-monitor | rds:log:switch | √ | √ | | 查询秒级监控策略 | GET /v3/{project_id}/instances/{instance_id}/second-level-monitor | rds:log:list | √ | √ | | 备机顶替只读节点 | POST /v3/{project_id}/instances/{instance_id}/replace-node | rds:instance:update | √ | √ | | 查询TOP SQL相关信息 | GET /v3/{project_id}/instances/{instance_id}/top-sqls | rds:instance:listAll | √ | √ | | 查询自动变配策略 | GET /v3/{project_id}/instances/{instance_id}/auto-scaling/policy | rds:instance:list | √ | √ | | 重建从机 | PUT /v3/{project_id}/instances/{instance_id}/rebuild | rds:instance:modify | √ | √ | | 查询重建从机状态 | GET /v3/{project_id}/instances/{instance_id}/rebuild | rds:instance:list | √ | √ | | 查询自治限流规则 | GET /v3/{project_id}/instances/{instance_id}/ops/auto-sql-limiting | rds:instance:list | √ | √ | | 总览页面实例统计 | GET /v3/{project_id}/instances/statistic | rds:instance:list | √ | √ | | 查询资源利用率 | GET /v3/{project_id}/instances/{instance_id}/ops/resource-usage | rds:instance:list | √ | √ | | 查询指定实例的操作记录 | POST /v3/{project_id}/instances/{instance_id}/operate-record | rds:task:list | √ | √ | | 查询可收缩委托策略 | GET /v3/{project_id}/agency/{agency_name} | rds:instance:list | √ | √ | | 获取资源包详情 | GET /v3/{project_id}/resource-package | rds:instance:list | √ | √ | | 查询监控大盘列表 | GET /v3/{project_id}/instances/resource-monitoring | rds:instance:list | √ | √ | 表4灾备实例 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 配置主实例容灾能力 | POST /v3/{project_id}/instances/{instance_id}/action | rds:instance:buildDrRelation | √ | √ | | 配置灾备实例容灾能力 | POST /v3/{project_id}/instances/{instance_id}/action | rds:instance:buildDrRelation | √ | √ | | 灾备升主 | POST /v3/{project_id}/instances/{instance_id}/action | rds:instance:modifyDRRole | √ | √ | | 查询容灾复制状态 | GET /v3/{project_id}/instances/{instance_id}/disaster-recovery | rds:instance:list | √ | √ | | 批量查询容灾实例信息 | GET /v3/{project_id}/instances/disaster-recovery-relation | rds:instance:list | √ | √ | | 查询可用于搭建容灾的主实例或灾备实例 | GET /v3/{project_id}/instances/disaster-recovery-instance?type={type} | rds:instance:list | √ | √ | 表5冷热分离 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询冷热分离功能开启状态 | GET /v3/{project_id}/instances/{instance_id}/hot-cold-separation/status | rds:coldTable:query | √ | √ | 表6历史会话分析 | 权限 | 对应API接口 | 授权项（Action） | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询历史会话 | GET /v3/{project_id}/instances/{instance_id}/history-session?start_time={start_time}\&end_time={end_time} | rds:instance:list | √ | √ | | 查询历史等待事件 | GET /v3/{project_id}/instances/{instance_id}/history-wait-event?start_time={start_time}\&end_time={end_time} | rds:instance:list | √ | √ | | 查询历史TOP SQL（瞬时） | GET /v3/{project_id}/instances/{instance_id}/history-top-sql?start_time={start_time}\&end_time={end_time} | rds:instance:list | √ | √ | | 查询历史会话分析的下载信息 | GET /v3/{project_id}/instances/{instance_id}/history-session-analyse-upload?type={type} | rds:instance:list | √ | √ | | 上传历史会话分析 | POST /v3/{project_id}/instances/{instance_id}/history-session-analyse-upload | rds:instance:list | √ | √ | 表7数据迁移 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 创建DRS同步任务 | POST /v3/{project_id}/instances/{instance_id}/drs-job/create | rds:database:create | √ | √ | | 查询实例进行的DRS同步任务 | GET /v3/{project_id}/instances/{instance_id}/drs-job/name | rds:database:list | √ | √ | 表8数据库安全性 | API功能 | 对应API接口 | 授权项（Action） | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 设置SSL数据加密 | PUT /v3/{project_id}/instances/{instance_id}/ssl | rds:instance:modifySSL | √ | √ | | 获取SSL证书下载地址 | GET /v3/{project_id}/instances/{instance_id}/ssl-cert/download-link | rds:instance:modifySSL | √ | √ | | 修改数据库端口 | PUT /v3/{project_id}/instances/{instance_id}/port | rds:instance:modifyPort | √ | √ | | 修改安全组 | PUT /v3/{project_id}/instances/{instance_id}/security-group | rds:instance:modifySecurityGroup | √ | √ | | 修改内网地址 | PUT /v3/{project_id}/instances/{instance_id}/ip | rds:instance:modifyIp | √ | √ | | 弱密码校验 | POST /v3/{project_id}/weakpwd | rds:password:verify | √ | √ | | 查询可用VPC和子网列表 | GET /v3/{project_id}/instances/{instance_id}/available-vpcs | rds:instance:list | √ | √ | 表9Kill会话 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 一键Kill会话 | PUT /v3/{project_id}/instances/{instance_id}/ops/intelligent-kill-session | rds:instance:modify | √ | √ | | 查询一键Kill会话历史 | GET /v3/{project_id}/instances/{instance_id}/ops/intelligent-kill-session/history | rds:instance:list | √ | √ | | 查询一键kill会话实时统计信息（MySQL） | GET /v3/{project_id}/instances/{instance_id}/ops/intelligent-kill-session/statistic | rds:instance:list | √ | √ | 表10备份与恢复 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 设置自动备份策略 | PUT /v3/{project_id}/instances/{instance_id}/backups/policy | rds:instance:modifyBackupPolicy | √ | √ | | 设置跨区域备份策略 | PUT /v3/{project_id}/instances/{instance_id}/backups/offsite-policy | rds:instance:modifyBackupPolicy | √ | √ | | 查询自动备份策略 | GET /v3/{project_id}/instances/{instance_id}/backups/policy | rds:instance:list | √ | √ | | 查询跨区域备份策略 | GET /v3/0483b6b16e954cb88930a360d2c4e663/instances/dsfae23fsfdsae3435in01/backups/offsite-policy | rds:instance:list | √ | √ | | 修改实例稀疏备份策略 | POST /v3/{project_id}/instances/{instance_id}/backups/sparse-policy | rds:instance:modifyBackupPolicy | √ | √ | | 查询稀疏备份策略 | GET /v3/{project_id}/instances/{instance_id}/backups/sparse-policy | rds:instance:list | √ | √ | | 创建手动备份 | POST /v3/{project_id}/backups | rds:backup:create | √ | √ | | 查询实例备份方式 | GET /v3/{project_id}/instances/{instance_id}/backups/config | rds:instance:getBackupConfiguration | √ | √ | | 切换实例备份方式(PostgreSQL) | PUT /v3/{project_id}/instances/{instance_id}/backups/config | rds:instance:modifyBackupPolicy | √ | √ | | 获取备份列表 | GET /v3/{project_id}/backups?instance_id={instance_id}\&backup_id={backup_id}\&backup_type={backup_type}\&offset={offset}\&limit={limit}\&begin_time={begin _time}\&end_time={end_time} | rds:backup:list | √ | √ | | 查询跨区域备份列表 | GET /v3/{project_id}/offsite-backups?instance_id={instance_id}\&backup_id={backup_id}\&backup_type={backup_type}\&offset={offset}\&limit={limit}\&begin_time={begin _time}\&end_time={end_time} | rds:backup:list | √ | √ | | 查询跨区域备份实例列表 | GET /v3/backups/offsite-backup-instance?offset={offset}\&limit={limit} | rds:instance:list | √ | √ | | 获取备份下载链接 | GET /v3/{project_id}/backup-files?backup_id={backup_id} | rds:backup:download | √ | √ | | 删除手动备份 | DELETE /v3/{project_id}/backups/{backup_id} | rds:backup:delete | √ | √ | | 查询可恢复时间段 | GET /v3/{project_id}/instances/{instance_id}/restore-time?date=2020-12-26 | rds:instance:list | √ | √ | | 查询跨区域备份可恢复时间段 | GET /v3/{project_id}/instances/{instance_id}/offsite-restore-time?date=2020-12-26 | rds:instance:list | √ | √ | | 恢复到新实例 | POST /v3/{project_id}/instances | rds:instance:create （加密实例需要在项目上配置KMS Administrator权限。） | √ | √ | | 查询实例是否能在库表恢复时使用极速恢复（MySQL） | POST /v3/{project_id}/instances/fast-restore | rds:instance:tableRestore | √ | √ | | 查询指定时间点可恢复的库（MySQL） | POST /v3/{project_id}/{engine}/instances/history/databases | rds:backup:list | √ | √ | | 库级时间点恢复（MySQL） | POST /v3/{project_id}/instances/batch/restore/databases | rds:instance:tableRestore | √ | √ | | 查询Binlog合并下载文件 | GET /v3/{project_id}/instances/{instance_id}/packlog/infos | rds:binlog:get | √ | √ | | 查询备份用量总览 | GET /v3/{project_id}/backups/backup-usage | rds:instance:list | √ | √ | | 查询实例备份概览列表 | GET /v3/{project_id}/instances/backups/summary | rds:instance:list | √ | √ | | 查询共享备份列表 | GET /v3/{project_id}/share-backups | rds:backup:listSharedResources | √ | √ | | 修改增备策略 | PUT /v3/{project_id}/instances/{instance_id}/incre-backup/policy | rds:instance:modifyBackupPolicy | √ | √ | | 获取增备策略 | GET /v3/{project_id}/instances/{instance_id}/incre-backup/policy | rds:instance:getBackupPolicy | √ | √ | 表11大版本升级 | API功能 | 对应API接口 | 授权项（Action） | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询实例可升级的目标版本（PostgreSQL） | GET /v3/{project_id}/instances/{instance_id}/major-version/available-version | rds:instance:list | √ | √ | | 大版本升级检查（PostgreSQL） | POST /v3/{project_id}/instances/{instance_id}/major-version/inspection | rds:instance:list | √ | √ | | 查询大版本检查状态或升级状态（PostgreSQL） | GET /v3/{project_id}/instances/{instance_id}/major-version/status?action={current_action} | rds:instance:list | √ | √ | | 查询实例大版本升级检查历史（PostgreSQL） | GET /v3/{project_id}/instances/{instance_id}/major-version/inspection-histories?offset={offset}\&limit={limit}\&order={order}\&sort_field={sort_field}\&target_version={target_version}\&is_available={is_available} | rds:instance:list | √ | √ | | 大版本升级（PostgreSQL） | POST /v3/{project_id}/instances/{instance_id}/major-version/upgrade | rds:instance:modify | √ | √ | | 查询实例大版本升级历史（PostgreSQL） | GET /v3/{project_id}/instances/{instance_id}/major-version/upgrade-histories?offset={offset}\&limit={limit}\&order={order}\&sort_field={sort_field} | rds:instance:list | √ | √ | 表12获取日志信息 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询慢日志 | POST /v3/{project_id}/instances/{instance_id}/slow-logs | rds:log:list | √ | √ | | 查询错误日志 | POST /v3/{project_id}/instances/{instance_id}/error-logs | rds:log:list | √ | √ | | 开启和关闭慢日志明文显示 | PUT /v3/{project_id}/instances/{instance_id}/slowlog-sensitization/{status} | rds:log:switch | √ | √ | | 查询慢日志文件列表（SQL Server） | GET /v3/{project_id}/instances/{instance_id}/slowlog-files | rds:log:list | √ | √ | | 查询扩展日志（SQL Server） | GET /v3/{project_id}/instances/{instance_id}/xellog-files | rds:log:list | √ | √ | | 生成扩展日志链接（SQL Server） | POST /v3/{project_id}/instances/{instance_id}/xellog-download | rds:log:download | √ | √ | | 获取慢日志下载链接 | POST /v3/{project_id}/instances/{instance_id}/slowlog-download | rds:log:download | √ | √ | | 设置审计日志策略 | PUT /v3/{project_id}/instances/{instance_id}/auditlog-policy | rds:auditlog:operate | √ | √ | | 查询审计日志策略 | GET /v3/{project_id}/instances/{instance_id}/auditlog-policy | rds:auditlog:list | √ | √ | | 获取审计日志列表 | GET /v3/{project_id}/instances/{instance_id}/auditlog?start_time={start_time}\&end_time={end_time}\&offset={offset}\&limit={limit} | rds:auditlog:list | √ | √ | | 生成审计日志下载链接 | POST /v3/{project_id}/instances/{instance_id}/auditlog-links | rds:auditlog:download | √ | √ | | 强制轮转审计日志 | POST /v3/{project_id}/instances/{instance_id}/auditlog-rotate | rds:auditlog:rotate | √ | √ | | 设置Binlog本地保留时长 | PUT /v3/{project_id}/instances/{instance_id}/binlog/clear-policy | rds:binlog:setPolicy | √ | √ | | 获取Binlog本地保留时长 | GET /v3/{project_id}/instances/{instance_id}/binlog/clear-policy | rds:binlog:get | √ | √ | | 查询LTS配置列表 | GET /v3/{project_id}/{engine}/instances/logs/lts-configs | rds:instance:listAll | √ | √ | 表13监控与告警 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询当前用户自动告警配置 | GET /v3/{project_id}/auto-ces-alarm | rds:instance:list | √ | √ | 表14实例诊断 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 获取诊断后的实例数 | GET /v3/{project_id}/instances/diagnosis | rds:instance:list | √ | √ | | 获取指定诊断项的诊断结果 | GET /v3/{project_id}/instances/diagnosis/info | rds:instance:list | √ | √ | 表15数据库代理（MySQL） | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 开启数据库代理 | POST /v3/{project_id}/instances/{instance_id}/proxy/open | rds:instance:modifyProxy | √ | √ | | 查询数据库代理信息列表 | GET /v3/{project_id}/instances/{instance_id}/proxy-list | rds:instance:list | √ | √ | | 查询数据库代理规格信息 | GET /v3/{project_id}/instances/{instance_id}/proxy/flavors | rds:instance:list | √ | √ | | 关闭数据库代理 | DELETE /v3/{project_id}/instances/{instance_id}/proxy/{proxy_id} | rds:instance:modifyProxy | √ | √ | 表16管理数据库和用户（MySQL） | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 创建数据库 | POST /v3/{project_id}/instances/{instance_id}/database | rds:database:create | √ | √ | | 查询数据库列表 | GET /v3/{project_id}/instances/{instance_id}/database/detail?page={page}\&limit={limit} | rds:database:list | √ | √ | | 修改指定实例的数据库备注 | POST /v3/{project_id}/instances/{instance_id}/database/update | rds:database:create | √ | √ | | 删除数据库 | DELETE /v3/{project_id}/instances/{instance_id}/database/{db_name} | rds:database:drop | √ | √ | | 创建数据库用户 | POST /v3/{project_id}/instances/{instance_id}/db_user | rds:databaseUser:create | √ | √ | | 查询数据库用户列表 | GET /v3/{project_id}/instances/{instance_id}/db_user/detail?page={page}\&limit={limit} | rds:databaseUser:list | √ | √ | | 查询指定数据库的已授权用户 | GET /v3/{project_id}/instances/{instance_id}/database/db_user?db-name={db-name}\&page={page}\&limit={limit} | rds:databaseUser:list | √ | √ | | 修改数据库用户的备注 | PUT /v3/{project_id}/instances/{instance_id}/db-users/{user_name}/comment | rds:databaseUser:update | √ | √ | | 删除数据库用户 | DELETE /v3/{project_id}/instances/{instance_id}/db_user/{user_name} | rds:databaseUser:drop | √ | √ | | 设置数据库账号密码 | POST /v3/{project_id}/instances/{instance_id}/db_user/resetpwd | rds:password:update | √ | √ | | 授权数据库账号 | POST /v3/{project_id}/instances/{instance_id}/db_privilege | rds:databasePrivilege:grant | √ | √ | | 解除数据库账号权限 | DELETE /v3/{project_id}/instances/{instance_id}/db_privilege | rds:databasePrivilege:revoke | √ | √ | | 重置数据库root账号密码 | POST /v3/{project_id}/instances/{instance_id}/password | rds:password:update | √ | √ | 表17管理数据库和用户（PostgreSQL） | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 创建数据库 | POST /v3/{project_id}/instances/{instance_id}/database | rds:database:create | √ | √ | | 创建数据库用户 | POST /v3/{project_id}/instances/{instance_id}/db_user | rds:databaseUser:create | √ | √ | | 创建数据库SCHEMA | POST /v3/{project_id}/instances/{instance_id}/schema | rds:database:create | √ | √ | | 授权数据库账号的读写权限 | POST /v3/{project_id}/instances/{instance_id}/db_privilege | rds:databasePrivilege:grant | √ | √ | | 授权数据库账号的操作权限 | POST /v3/{project_id}/instances/{instance_id}/db-user-privilege | rds:databasePrivilege:grant | √ | √ | | 解除数据库账号权限 | DELETE /v3/{project_id}/instances/{instance_id}/db_privilege | rds:databasePrivilege:revoke | √ | √ | | 重置数据库账号密码 | POST /v3/{project_id}/instances/{instance_id}/db_user/resetpwd | rds:password:update | √ | √ | | 查询数据库列表 | GET /v3/{project_id}/instances/{instance_id}/database/detail?page={page}\&limit={limit} | rds:database:list | √ | √ | | 查询数据库用户列表 | GET /v3/{project_id}/instances/{instance_id}/db_user/detail?page={page}\&limit={limit} | rds:databaseUser:list | √ | √ | | 查询数据库SCHEMA列表 | GET /v3/{project_id}/instances/{instance_id}/schema/detail?db_name={name}\&page={page}\&limit={limit} | rds:database:list | √ | √ | | 设置数据库用户权限 | POST /v3/{project_id}/instances/{instance_id}/user-privilege | rds:databasePrivilege:grant | √ | √ | | 修改指定实例的数据库备注 | POST /v3/{project_id}/instances/{instance_id}/database/update | rds:database:create | √ | √ | | 修改数据库用户的备注 | PUT /v3/{project_id}/instances/{instance_id}/db-users/{user_name}/comment | rds:databaseUser:update | √ | √ | | 删除数据库 | DELETE /v3/{project_id}/instances/{instance_id}/database/{db_name} | rds:database:drop | √ | √ | | 删除数据库用户 | DELETE /v3/{project_id}/instances/{instance_id}/db_user/{user_name} | rds:databaseUser:drop | √ | √ | | 查询实例的pg_hba.conf文件配置 | GET /v3/{project_id}/instances/{instance_id}/hba-info | rds:databaseUser:list | √ | √ | | 修改pg_hba.conf文件的单个或多个配置 | PUT /v3/{project_id}/instances/{instance_id}/hba-info | rds:databaseUser:update | √ | √ | | 覆盖当前pg_hba.conf文件的配置 | POST /v3/{project_id}/instances/{instance_id}/hba-info | rds:databaseUser:create | √ | √ | | 删除pg_hba.conf文件的单个或多个配置 | DELETE /v3/{project_id}/instances/{instance_id}/hba-info | rds:databaseUser:drop | √ | √ | | 查询实例的pg_hba.conf文件修改历史 | GET /v3/{project_id}/instances/{instance_id}/hba-info/history | rds:databaseUser:list | √ | √ | 表18管理数据库和用户（SQL Server） | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询SQL Server可用字符集 | GET /v3/{project_id}/collations | rds:database:list | √ | √ | | 修改实例字符集 | PUT /v3/{project_id}/instances/{instance_id}/collations | rds:instance:modify | √ | √ | | 修改时区 | POST /v3/{project_id}/instances/{instance_id}/timezone/modify | rds:instance:modify | √ | √ | | 创建数据库 | POST /v3/{project_id}/instances/{instance_id}/database | rds:database:create | √ | √ | | 查询数据库列表 | GET /v3/{project_id}/instances/{instance_id}/database/detail?page={page}\&limit={limit}\&db-name={db-name}\&recover_model={recover_model} | rds:database:list | √ | √ | | 创建数据库用户 | POST /v3/{project_id}/instances/{instance_id}/db_user | rds:databaseUser:create | √ | √ | | 设置数据库账号密码 | POST /v3/{project_id}/instances/{instance_id}/db_user/resetpwd | rds:password:update | √ | √ | | 查询数据库用户列表 | GET /v3/{project_id}/instances/{instance_id}/db_user/detail?page={page}\&limit={limit} | rds:databaseUser:list | √ | √ | | 查询指定数据库的已授权用户 | GET /v3/{project_id}/instances/{instance_id}/database/db_user?db-name={db-name}\&page={page}\&limit={limit} | rds:databaseUser:list | √ | √ | | 删除数据库用户 | DELETE /v3/{project_id}/instances/{instance_id}/db_user/{user_name} | rds:databaseUser:drop | √ | √ | | 授权数据库账号 | POST /v3/{project_id}/instances/{instance_id}/db_privilege | rds:databasePrivilege:grant | √ | √ | | 解除数据库账号权限 | DELETE /v3/{project_id}/instances/{instance_id}/db_privilege | rds:databasePrivilege:revoke | √ | √ | | 获取MSDTC本机信息 | GET /v3/{project_id}/instances/{instance_id}/msdtc/local-host | rds:instance:getMsdtcHosts | √ | √ | | 添加MSDTC | POST /v3/{project_id}/instances/{instance_id}/msdtc/host | rds:instance:modify | √ | √ | | 查询MSDTC的hosts信息 | GET /v3/{project_id}/instances/{instance_id}/msdtc/hosts?offset={offset}\&limit={limit} | rds:instance:list | √ | √ | | 删除MSDTC | DELETE /v3/{project_id}/instances/{instance_id}/msdtc/host | rds:instance:modify | √ | √ | | 查询top对象信息 | GET /v3/{project_id}/instances/{instance_id}/ops/top/objects | rds:instance:get | √ | √ | 表19参数管理 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 获取参数模板列表 | GET /v3/{project_id}/configurations | rds:param:list | √ | √ | | 创建参数模板 | POST /v3/{project_id}/configurations | rds:param:create | √ | √ | | 修改参数模板参数 | PUT /v3/{project_id}/configurations/{config_id} | rds:param:modify | √ | √ | | 复制参数模板 | POST /v3/{project_id}/configurations/{config_id}/copy | rds:param:create | √ | √ | | 查询实例参数修改历史 | GET /v3/{project_id}/instances/{instance_id}/configuration-histories?offset={offset}\&limit={limit}\&start_time={start_time}\&end_time={end_time}\¶m_name={param_name} | rds:param:list | √ | √ | | 获取指定实例的参数模板 | GET /v3/{project_id}/instances/{instance_id}/configurations | rds:param:list | √ | √ | | 获取指定参数模板的参数 | GET /v3/{project_id}/configurations/{config_id} | rds:param:list | √ | √ | | 删除参数模板 | DELETE /v3/{project_id}/configurations/{config_id} | rds:param:delete | √ | √ | | 应用参数模板 | PUT /v3/{project_id}/configurations/{config_id}/apply | rds:param:apply | √ | √ | | 查询参数模板应用历史 | GET /v3/{project_id}/configurations/{config_id}/apply-histories | rds:param:list | √ | √ | | 查询应用参数模板的实例列表 | GET /v3/{project_id}/configurations/{config_id}/query-instances | rds:instance:list | √ | √ | | 修改指定实例的参数 | PUT /v3/{project_id}/instances/{instance_id}/configurations | rds:param:modify | √ | √ | | 比较参数模板 | PUT /v3/{project_id}/configurations/difference | rds:param:list | √ | √ | | 重置自定义参数模板 | PUT /v3/{project_id}/configurations/{config_id}/reset | rds:param:reset | √ | √ | 表20插件管理（PostgreSQL） | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 创建插件 | POST /v3/{project_id}/instances/{instance_id}/extensions | rds:database:create | √ | √ | | 查询插件 | GET /v3/{project_id}/instances/{instance_id}/extensions?database_name={database_name}\&offset={offset}\&limit={limit} | rds:database:list | √ | √ | | 删除插件 | DELETE /v3/{project_id}/instances/{instance_id}/extensions | rds:database:drop | √ | √ | | 修改实例指定参数的值 | PUT /v3/{project_id}/instances/{instance_id}/parameter/{name} | rds:param:modify | √ | √ | | 获取实例指定参数的值 | GET /v3/{project_id}/instances/{instance_id}/parameter/{name} | rds:param:list | √ | √ | 表21发布订阅（SQL Server） | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询订阅服务器实例列表 | GET /v3/{project_id}/instances/{instance_id}/replication/subscribers | rds:instance:modify | √ | √ | | 创建订阅 | POST /v3/{project_id}/instances/{instance_id}/replication/subscriptions | rds:instance:modify | √ | √ | | 查询实例发布信息 | GET /v3/{project_id}/instances/{instance_id}/replication/publications | rds:instance:modify | √ | √ | | 删除发布 | DELETE /v3/{project_id}/instances/{instance_id}/replication/publications | rds:instance:modify | √ | √ | | 查询分发服务器 | GET /v3/{project_id}/instances/{instance_id}/replication/distribution | rds:instance:modify | √ | √ | | 修改发布 | PUT /v3/{project_id}/instances/{instance_id}/replication/publications/{publication_id} | rds:instance:modify | √ | √ | | 查询分发服务器实例列表 | GET /v3/{project_id}/instances/{instance_id}/replication/distributors | rds:instance:modify | √ | √ | | 删除订阅 | DELETE /v3/{project_id}/instances/{instance_id}/replication/subscriptions | rds:instance:modify | √ | √ | | 删除分发服务器 | DELETE /v3/{project_id}/instances/{instance_id}/replication/distribution | rds:instance:modify | √ | √ | | 查询发布监控信息 | GET /v3/{project_id}/instances/{instance_id}/replication/publications/{publication_id}/monitor | rds:instance:modify | √ | √ | | 查询订阅监控信息 | GET /v3/{project_id}/instances/{instance_id}/replication/subscriptions/{subscription_id}/monitor | rds:instance:modify | √ | √ | | 登录测试 | POST /v3/{project_id}/instances/{instance_id}/replication/login-test | rds:instance:modify | √ | √ | | 查询实例订阅信息 | GET /v3/{project_id}/instances/{instance_id}/replication/subscriptions?offset={offset}\&limit={limit}\&publication_id={publication_id}\&is_cloud={is_cloud}\&publication_name={publication_name}\&subscription_db_name={subscription_db_name} | rds:instance:modify | √ | √ | | 查询发布订阅配置文件列表 | GET /v3/{project_id}/instances/{instance_id}/replication/profiles?offset={offset}\&limit={limit}\&agent_type={agent_type} | rds:instance:modify | √ | √ | | 批量修改订阅 | PUT /v3/{project_id}/instances/{instance_id}/replication/subscriptions | rds:instance:modify | √ | √ | | 查询实例可选发布 | POST /v3/{project_id}/instances/{instance_id}/replication/publication-candidates | rds:instance:modify | √ | √ | | 查询数据库代理作业列表 | GET /v3/{project_id}/instances/{instance_id}/db-jobs?offset={offset}\&limit={limit}\&job_type={job_type} | rds:instance:modify | √ | √ | | 查询数据库代理作业执行历史 | GET /v3/{project_id}/instances/{instance_id}/db-jobs/{job_id}/histories?offset={offset}\&limit={limit}\&run_status={run_status} | rds:instance:modify | √ | √ | | 重新生成发布快照 | POST /v3/{project_id}/instances/{instance_id}/replication/publications/{publication_id}/reinitialize | rds:instance:modify | √ | √ | | 重新生成订阅 | POST /v3/{project_id}/instances/{instance_id}/replication/subscriptions/{subscription_id}/reinitialize | rds:instance:modify | √ | √ | | 同步发布订阅元数据 | POST /v3/{project_id}/instances/{instance_id}/replication/metadata/sync | rds:instance:modify | √ | √ | | 查询数据库代理作业执行历史步骤 | GET /v3/{project_id}/instances/{instance_id}/db-jobs/histories/{history_id}/steps?offset={offset}\&limit={limit} | rds:instance:modify | √ | √ | | 修改数据库代理作业 | PUT /v3/{project_id}/instances/{instance_id}/db-jobs/{job_id} | rds:instance:modify | √ | √ | | 重启数据库代理作业 | POST /v3/{project_id}/instances/{instance_id}/db-jobs/{job_id}/restart | rds:instance:modify | √ | √ | | 禁用启动切换数据库代理作业 | POST /v3/{project_id}/instances/{instance_id}/db-jobs/{job_id}/switch | rds:instance:modify | √ | √ | | 查询数据库定时任务策略模板列表 | GET /v3/{project_id}/db-job/schedules | rds::listDbJobSchedules | √ | √ | | 创建数据库定时任务策略模板 | POST /v3/{project_id}/db-job/schedules | rds::createDbJobSchedules | √ | √ | | 修改数据库定时任务策略模板 | PUT /v3/{project_id}/db-job/schedules/{schedule_id} | rds::updateDbJobSchedules | √ | √ | | 删除数据库定时任务策略模板 | DELETE /v3/{project_id}/db-job/schedules/{schedule_id} | rds::deleteDbJobSchedules | √ | √ | 表22回收站 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 设置回收站策略 | PUT /v3/{project_id}/instances/recycle-policy | rds:instance:setRecycleBin | √ | √ | | 查询回收站策略 | GET /v3/{project_id}/instances/recycle-policy | rds:instance:list | √ | √ | | 查询回收站实例信息 | GET /v3/{project_id}/recycle-instances?offset={offset}\&limit={limit} | rds:instance:list | √ | √ | 表23标签管理 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 批量添加标签 | POST /v3/{project_id}/instances/{instance_id}/tags/action | rds:instance:dealTag | √ | √ | | 批量删除标签 | POST /v3/{project_id}/instances/{instance_id}/tags/action | rds:instance:dealTag | √ | √ | | 查询项目标签 | GET /v3/{project_id}/tags | rds:tag:list | √ | √ | 表24配额管理 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询配额 | GET /v3/{project_id}/quotas | rds:instance:list | √ | √ | 表25获取任务信息 | API功能 | 对应API接口 | 授权项 | **IAM**项目(Project) | 企业项目(Enterprise Project) | |:---|:---|:---|:---|:---| | 查询定时任务列表 | GET /v3/{project_id}/schedule-tasks | rds:task:listAll | √ | √ | | 查询即时任务列表 | GET /v3/{project_id}/tasklist | rds:task:listAll | √ | √ | | 获取指定ID的任务信息 | GET /v3/{project_id}/jobs?id={id} | rds:task:list | √ | √ | | 获取指定实例和时间范围的任务信息（SQL Server） | GET /v3/{project_id}/instances/{instance_id}/tasklist/detail?start_time={start_time}\&end_time={end_time} | rds:task:list | √ | √ | | 删除即时任务 | DELETE /v3/{project_id}/jobs | rds:task:delete | √ | √ |