RDS for MySQL
RDS for MySQL
RDS for MySQL
Document
What's new
Announcement
Product introduction
Product billing
Billing method
Kernel functions
Feature
Stability
Performance
Quick start
User guide
Managing instances
Changing an instance configuration
Upgrading kernel versions
Managing tags
Managing disaster instances
Managing blue-green deployment
Migrating data
Managing connections
Database proxy
Connecting to an instance
Managing connection endpoints
Diagnosing connections
Managing connection pool modes
Managing access addresses and ports
Managing databases
Account and access authorization
Backup recovery
Backup data
Data recovery
Service availability
Managing logs
Managing data security
Managing allowlists
Configuring SSL encryption
Managing parameters
Monitoring and alerts
Task center
Operation and maintenance events
Backups of deleted instances
Managing cross-regional backups
API reference
V2（2022-01-01）
Global management
Managing instances
Managing connections
Managing accounts
Managing databases
Security encryption
Backup and recovery
Managing parameters
Managing tasks
Event management
Managing logs
Resource plan management
Appendix
SDK reference
Developer tools
Best practice
Performance document
Troubleshooting
- Documentation
RDS for MySQLUser guideAccount and access authorizationCross-service access authorization
Copy page
Download PDFAccount and access authorization
Cross-service access authorization
Copy pageDownload PDFCross-service access authorization
Before using RDS for MySQL, cross-service access authorization is needed to allow MySQL to access other services (such as VPC and EIP). This topic describes the procedure for authorizing cross-service access.
Background
Identity and Access Management (IAM) of Volcano Engine supports policy management. You can associate MySQL accounts with the ServiceRoleForRDSMySQL role and associate the role with the ServiceRoleForRDSMySQL policy to access other services.
The statements for defining the ServiceRoleForRDSMySQL access policy are as follows:
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVpcs",
"vpc:DescribeSubnets",
"vpc:DescribeSecurityGroups",
"vpc:CreateNetworkInterface",
"vpc:DeleteNetworkInterface",
"vpc:DescribeNetworkInterfaces",
"vpc:CreateNetworkInterfacePermission",
"vpc:DeleteNetworkInterfacePermission",
"vpc:DescribeNetworkInterfacePermissions",
"vpc:AssociateEipAddress",
"vpc:DisassociateEipAddress",
"vpc:DescribeEipAddressAttributes",
"vpc:AssociateEipAddress",
"vpc:DisassociateEipAddress",
"vpc:DescribeEipAddressAttributes",
"vpc:DescribeSecurityGroupAttributes",
"kms:CreateKeyring",
"kms:CreateKey",
"kms:GenerateDataKey"
],
"Resource": [
"*"
]
}
]
}
Procedure
- Log on to the RDS for MySQL console.
- On the Cross-service access requests page, confirm the access roles and associated policies, and click Authorize.
说明
- After service authorization is completed, the Instance list page of MySQL instances is automatically displayed. Please wait.
- If you have performed the authorization, ignore it.
Subsequent procedures
After service authorization is completed, you can continue other operations on MySQL instances.
Last updated: 2025.09.28 16:49:36
All rights reserved © Beijing Volcano Engine Technology Co., Ltd2024
