Help Center> Relational Database Service> API Reference> Permissions Policies and Supported Actions> RDS Actions
View PDF

RDS Actions

Table 1 Common information query

Permissions

API

Action

IAM Project

Enterprise Project

Querying the DB engine version

GET /v3/{projectId}/datastores/{database_name}

No authorization required

√

√

Querying database specifications

GET /v3/{project_id}/flavors/{database_name}?version_name={version_name}

No authorization required

√

√

Querying database storage information

GET /v3/{project_id}/storage-type/{database_name}?version_name={version_name}

No authorization required

√

√
Table 2 DB instance management

Permissions

API

Action

IAM Project

Enterprise Project

Creating a DB instance

POST /v3/{project_id}/instances

rds:instance:create

(To create an encryption DB instance, you need to configure the KMS Administrator permission in the project.)

√

√

Changing a DB instance name

PUT https://{Endpoint}/v3/{project_id}/instances/{instance_id}/name

rds:instance:modify

√

√

Changing a DB instance description

PUT

https://{Endpoint}/v3/{project_id}/instances/{instance_id}/alias

rds:instance:modify

√

√

Applying for a private domain name

POST

https://{Endpoint}/v3/{project_id}/instances/{instance_id}/create-dns

rds:instance:createDns

√

√

Modifying a private domain name

PUT

https://{Endpoint}/v3/{project_id}/instances/{instance_id}/modify-dns

rds:instance:modifyDns

√

√

Changing DB instance specifications

POST /v3/{project_id}/instances/{instance_id}/action

rds:instance:modifySpec

√

√

Scaling up storage space

POST /v3/{project_id}/instances/{instance_id}/action

rds:instance:extendSpace

√

√

Changing a DB instance type from single to primary/standby

POST /v3/{project_id}/instances/{instance_id}/action

rds:instance:singleToHa

(The KMS Administrator permission needs to be configured for the encrypted DB instance in the project.)

√

√

Rebooting a DB instance

POST /v3/{project_id}/instances/{instance_id}/action

rds:instance:restart

√

√

Deleting a DB instance

DELETE /v3/{project_id}/instances/{instance_id}

rds:instance:delete

√

√

Querying details about DB instances

GET /v3/{project_id}/instances

rds:instance:list

√

√

Querying information about DB instances for which cross-region backups are created

GET /v3/{project_id}/backups/offsite-backup-instance

rds:instance:list

√

√

Binding and Unbinding an EIP

PUT /v3/{project_id}/instances/{instance_id}/public-ip

rds:instance:modifyPublicAccess

√

√

Changing a DB instance password

PUT /v3/{project_id}/instances/{instance_id}/password

rds:password:update

√

√

Manual switchover

PUT /v3/{project_id}/instances/{instance_id}/failover

rds:instance:switchover

√

√

Changing a failover priority

PUT /v3/{project_id}/instances/{instance_id}/failover/strategy

rds:instance:modifyStrategy

√

√

Changing a synchronize model

PUT /v3/{project_id}/instances/{instance_id}/failover/mode

rds:instance:modifySynchronizeModel

√

√

Modifying a maintenance window

PUT

/v3/{project_id}/instances/{instance_id}/ops-window

rds:instance:modify

√

√

Migrating a standby DB instance to another AZ

POST /v3/{project_id}/instances/{instance_id}/migrateslave

rds:instance:create

√

√
Table 3 Database security

Permissions

API

Action

IAM Project

Enterprise Project

Configuring SSL

PUT /v3/{project_id}/instances/{instance_id}/ssl

rds:instance:modifySSL

√

√

Changing a database port

PUT /v3/{project_id}/instances/{instance_id}/port

rds:instance:modifyPort

√

√

Changing a private IP address

PUT /v3/{project_id}/instances/{instance_id}/ip

rds:instance:modifyIp

√

√

Changing a security group

PUT /v3/{project_id}/instances/{instance_id}/security-group

rds:instance:modifySecurityGroup

√

√
Table 4 Parameter configuration

Permissions

API

Action

IAM Project

Enterprise Project

Obtaining a parameter template list

GET /v3/{project_id}/configurations

rds:param:list

√

√

Creating a parameter template

POST /v3/{project_id}/configurations

rds:param:create

√

√

Modifying parameters in a parameter template

PUT /v3/{project_id}/configurations/{config_id}

rds:param:modify

√

√

Applying a parameter template

PUT /v3/{project_id}/configurations/{config_id}/apply

rds:param:apply

√

√

Modifying parameters of a specified DB instance

PUT /v3/{project_id}/instances/{instance_id}/configurations

rds:param:modify

√

√

Obtaining the parameter template of a specified DB instance

GET /v3/{project_id}/instances/{instance_id}/configurations

rds:param:list

√

√

Obtaining parameters of a specified parameter template

GET /v3/{project_id}/configurations/{config_id}

rds:param:list

√

√

Deleting a parameter template

DELETE /v3/{project_id}/configurations/{config_id}

rds:param:delete

√

√
Table 5 Backup and restoration

Permissions

API

Actions

IAM Project

Enterprise Project

Setting an automated backup policy

PUT /v3/{project_id}/instances/{instance_id}/backups/policy

rds:instance:modifyBackupPolicy

√

√

Setting a cross-region backup policy

PUT /v3/{project_id}/instances/{instance_id}/backups/offsite-policy

rds:instance:modifyBackupPolicy

√

√

Querying an automated backup policy

GET /v3/{project_id}/instances/{instance_id}/backups/policy

rds:instance:list

√

√

Querying information about a cross-region backup policy

GET /v3/{project_id}/instances/{instance_id}/backups/offsite-policy

rds:instance:list

√

√

Creating a manual backup

POST /v3/{project_id}/backups

rds:backup:create

√

√

Obtaining a backup list

GET /v3/{project_id}/backups?instance_id={instance_id}

rds:backup:list

√

√

Querying information about a cross-region backup list

GET /v3/{project_id}/offsite-backups?instance_id={instance_id}

rds:backup:list

√

√

Obtaining the link for downloading a backup file

GET /v3/{project_id}/backup-files?backup_id={backup_id}

rds:backup:download

√

√

Deleting a manual backup

DELETE /v3/{project_id}/backups/{backup_id}

rds:backup:delete

√

√

Querying the restoration time range

GET /v3/{project_id}/instances/{instance_id}/restore-time

rds:instance:list

√

√

Querying the restoration time range of a cross-region backup

GET /v3/{project_id}/instances/{instance_id}/offsite-restore-time

rds:instance:list

√

√

Restoring data to a new DB instance

POST /v3/{project_id}/instances

rds:instance:create

(The KMS Administrator permission needs to be configured for the encrypted DB instance in the project.)

√

√

Restoring data to an existing or original DB instance

POST /v3/{project_id}/instances/recovery

rds:instance:restoreInPlace

√

√
Table 6 Log information query

Permissions

API

Actions

IAM Project

Enterprise Project

Querying a database error log

GET /v3/{project_id}/instances/{instance_id}/errorlog?start_date={start_date}&end_date={end_date}

rds:log:list

√

√

Querying a database slow log

GET /v3/{project_id}/instances/{instance_id}/slowlog?start_date={start_date}&end_date={end_date}

rds:log:list

√

√

Setting a policy for audit logs

PUT

/v3/{project_id}/instances/{instance_id}/auditlog-policy

rds:auditlog:operate

√

√

Querying the policy for audit logs

GET

/v3/{project_id}/instances/{instance_id}/auditlog-policy

rds:auditlog:list

√

√

Obtaining an audit log list

GET

/v3/{project_id}/instances/{instance_id}/auditlog?start_time={start_time}&end_time={end_time}&offset={offset}&limit={limit}

rds:auditlog:list

√

√

Obtaining the link for downloading an audit log

POST

/v3/{project_id}/instances/{instance_id}/auditlog-links

rds:auditlog:download

√

√

Obtaining links for downloading slow query logs

POST

/v3/{project_id}/instances/{instance_id}/slowlog-download

rds:log:download

√

√
Table 7 Database and account management (MySQL)

Permissions

API

Actions

IAM Project

Enterprise Project

Creating a database

POST /v3/{project_id}/instances/{instance_id}/database

rds:database:create

√

√

Querying details about databases

GET /v3/{project_id}/instances/{instance_id}/database/detail?page={page}&limit={limit}

rds:database:list

√

√

Querying authorized databases of a specified account

GET /v3/{project_id}/instances/{instance_id}/db_user/database?user-name={user-name}&page={page}&limit={limit}

rds:database:list

√

√

Dropping a database

DELETE /v3/{project_id}/instances/{instance_id}/database/{db_name}

rds:database:drop

√

√

Creating a database account

POST /v3/{project_id}/instances/{instance_id}/db_user

rds:databaseUser:create

√

√

Querying details about database accounts

GET /v3/{project_id}/instances/{instance_id}/db_user/detail?page={page}&limit={limit}

rds:databaseUser:list

√

√

Querying authorized accounts of a specified database

GET /v3/{project_id}/instances/{instance_id}/database/db_user?db-name={db-name}&page={page}&limit={limit}

rds:databaseUser:list

√

√

Deleting a database account

DELETE /v3/{project_id}/instances/{instance_id}/db_user/{user_name}

rds:databaseUser:drop

√

√

Authorizing a database account

POST /v3/{project_id}/instances/{instance_id}/db_privilege

rds:databasePrivilege:grant

√

√

Changing the password for a database account

POST /v3/{project_id}/instances/{instance_id}/db_user/resetpwd

rds:password:update

√

√

Revoking permissions of a database account

DELETE /v3/{project_id}/instances/{instance_id}/db_privilege

rds:databasePrivilege:revoke

√

√
Table 8 Tag management

Permissions

API

Actions

IAM Project

Enterprise Project

Adding or deleting tags in batches

POST /v3/{project_id}/instances/{instance_id}/tags/action

rds:instance:dealTag

√

√

Querying project tags

GET

/v3/{project_id}/tags

rds:tag:list

√

√
Table 9 Service function

Permissions

API

Actions

IAM Project

Enterprise Project

Obtaining task information

GET /v3/{project_id}/jobs?id={id}

rds:task:list

√

√
Table 10 Database and account management (PostgreSQL)

Permissions

API

Actions

IAM Project

Enterprise Project

Creating a database

POST /v3/{project_id}/instances/{instance_id}/database

rds:database:create

√

√

Creating a database account

POST /v3/{project_id}/instances/{instance_id}/db_user

rds:databaseUser:create

√

√

Authorizing a database account

POST /v3/{project_id}/instances/{instance_id}/db_privilege

rds:databasePrivilege:grant

√

√

Creating a database schema

POST

/v3/{project_id}/instances/{instance_id}/schema

rds:database:create

√

√

Querying details about databases

GET

/v3/{project_id}/instances/{instance_id}/database/detail?page={page}&limit={limit}

rds:database:list

√

√

Querying details about database users

GET

/v3/{project_id}/instances/{instance_id}/db_user/detail?page={page}&limit={limit}

rds:databaseUser:list

√

√

Querying details about database schemas

GET

/v3/{project_id}/instances/{instance_id}/schema/detail?db_name={name}page={page}&limit={limit}

rds:database:list

√

√
Table 11 Database proxy (PostgreSQL)

Permissions

API

Actions

IAM Project

Enterprise Project

Enabling database proxy

POST

/v3/{project_id}/instances/{instance_id}/proxy

rds:instance:modifyProxy

√

√

Disabling database proxy

DELETE

/v3/{project_id}/instances/{instance_id}/proxy

rds:instance:modifyProxy

√

√

Querying information about database proxy

GET

/v3/{project_id}/instances/{instance_id}/proxy

rds:instance:list

√

√

Modifying read weight

PUT

/v3/{project_id}/instances/{instance_id}/proxy/weight

rds:instance:modifyProxy

√

√

Modifying the delay threshold of read/write splitting

PUT

/v3/{project_id}/instances/{instance_id}/proxy/delay-threshold

rds:instance:modifyProxy

√

√
Table 12 DR instances

Permissions

API

Actions

IAM Project

Enterprise Project

Configuring the DR capability for a primary DB instance

POST

/v3/{project_id}/instances/{instance_id}/action

rds:instance:buildDrRelation

√

√

Configuring the DR capability for a DR instance

POST

/v3/{project_id}/instances/{instance_id}/action

rds:instance:buildDrRelation

√

√

Promoting a DR instance to the primary DB instance

POST

/v3/{project_id}/instances/{instance_id}/action

rds:instance:modifyDRRole

√

√

Querying the cross-cloud DR replication status

GET /v3/{project_id}/instances/{instance_id}/disaster-recovery

rds:instance:list

√

√
Table 13 Recycle bin

Permissions

API

Actions

IAM Project

Enterprise Project

Modify recycling policy

PUT https://{Endpoint}/v3/{project_id}/instances/recycle-policy

rds:instance:setRecycleBin

√

√