All Products
Search
Document Center

OpenSearch:Types of resources that can be authorized

Last Updated:Feb 07, 2023

Resource types and descriptions

Resource type

ARN format

app-groups

acs:opensearch:$regionId:$accountId:$appGroupName

suggestions

acs:opensearch:$regionId:$accountId:$suggestionIdentity

intervention-dictionaries

acs:opensearch:$regionId:$accountId:$dictionaryName

user-analyzers

acs:opensearch:$regionId:$accountId:$analyzerName

  • $regionId: the ID of the specified region. You can also enter an asterisk (*).

  • $accountId: the ID of your Alibaba Cloud account. You can also enter an asterisk (*).

  • $appGroupName: the name of the specified application. You can also enter an asterisk (*).

  • $suggestionIdentity: the ID of the specified drop-down suggestion. You can also enter an asterisk (*).

  • $dictionaryName: the name of the specified intervention dictionary. You can also enter an asterisk (*).

  • $analyzerName: the name of the specified custom analyzer. You can also enter an asterisk (*).

Supported regions

  • China (Hangzhou): regionId:cn-hangzhou

  • China (Shanghai): regionId:cn-shanghai

  • China (Qingdao): regionId:cn-qingdao

  • China (Beijing): regionId:cn-beijing

  • China (Shenzhen): regionId:cn-shenzhen

Note

Note:

  • Different from the old OpenSearch console, the new OpenSearch console refines the permission granularity of RAM users. To use the new OpenSearch console as a RAM user, you must re-configure the RAM authorization policy.

  • The RAM user feature is supported only for SDK V3 and later.

  • If you want to configure an ApsaraDB RDS data source as a RAM user in the OpenSearch console, you must be granted permissions to access the ApsaraDB RDS data source. Otherwise, an error message is returned to indicate that the connection to the ApsaraDB RDS data source fails and you must try again later. For more information, see Access authorization rules.