AliyunRDSFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunRDSFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunRDSFullAccess policy: Provides full access to ApsaraDB for RDS via Management Console.
Policy details
Type: service system policy
Creation time: 16:15:45 on April 28, 2015
Update time: 13:31:54 on September 25, 2025
Current version: v7
Policy content
{
"Version": "1",
"Statement": [
{
"Action": "rds:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "dbs:*",
"Resource": "acs:rds:*:*:*",
"Effect": "Allow"
},
{
"Action": "hdm:*",
"Resource": "acs:rds:*:*:*",
"Effect": "Allow"
},
{
"Action": "dms:LoginDatabase",
"Resource": "acs:rds:*:*:*",
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "backupencryption.rds.aliyuncs.com"
}
}
},
{
"Action": "bss:ModifyAgreementRecord",
"Resource": "*",
"Effect": "Allow"
},{
"Action": "rdsai:*",
"Resource": "*",
"Effect": "Allow"
}
]
}