Updated on 2023-08-29 GMT+08:00

DMS for RocketMQ Request Conditions

Request conditions are useful for fine tuning when a custom policy takes effect. A request condition consists of a condition key and operator. Condition keys are either global or service-level and are used in the Condition element of a policy statement. Global condition keys (starting with g:) are available for operations of all services, while service-level condition keys (starting with a service name such as dms:) are available only for operations of a specific service. An operator must be used together with a condition key to form a complete condition statement.

DMS for RocketMQ has a group of predefined condition keys that can be used in IAM. For example, to define an "Allow" permission, you can use the condition key dms:ssl to check whether SSL is enabled for a RocketMQ instance. The following table lists the predefined condition keys of DMS for RocketMQ.

Table 1 DMS for RocketMQ request conditions

Condition Key

Operator

Description

dms:publicIP

Bool

IsNullOrEmpty

BoolIfExists

Whether public access is enabled

dms:ssl

Bool

IsNullOrEmpty

BoolIfExists

Whether SSL is enabled