RDS for PostgreSQL
RDS for PostgreSQL
Document
- Documentation
RDS for PostgreSQL User guideManaging accountsCross-service access authorization
Copy page
Download PDFManaging accounts
Cross-service access authorization
Copy pageDownload PDFCross-service access authorization
Before using RDS for PostgreSQL, you need to authorize cross-service access to allow RDS for PostgreSQL instances to access other services (such as VPC and EIP). This topic describes the procedure for cross-service access authorization.
Background information
Volcano Engine access control (IAM) supports policy management. You can associate the ServiceRoleForRDSPG role with the RDS for PostgreSQL account and attach the ServiceRoleForRDSPG policy to this role to access other services.
The definition statement of the ServiceRoleForRDSPG access policy is as follows:
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVpcs",
"vpc:DescribeSubnets",
"vpc:DescribeSecurityGroups",
"vpc:CreateNetworkInterface",
"vpc:DeleteNetworkInterface",
"vpc:DescribeNetworkInterfaces",
"vpc:CreateNetworkInterfacePermission",
"vpc:DeleteNetworkInterfacePermission",
"vpc:DescribeNetworkInterfacePermissions",
"vpc:AssociateEipAddress",
"vpc:DisassociateEipAddress",
"vpc:DescribeEipAddressAttributes"
],
"Resource": [
"*"
]
}
]
}
The trust relationship of the ServiceRoleForRDSPG role is as follows:
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"sts:AssumeRole"
],
"Principal": {
"Service": [
"rds_postgresql"
]
}
}
]
}
For more information about access control roles and policies, refer to Role management and Policy management.
Procedure
- Login to the RDS for PostgreSQL console.
- Go to the Cross-service access requests pop-up page, confirm the trust relationships of the associated role and policy, and then click Authorize.
tip
- The Instances page of the PostgreSQL instance is automatically returned once service authorization is completed.
- If you have performed the authorization, ignore it.
Next steps
After service authorization is completed, you can continue other operations on PostgreSQL instances.
Last updated: 2025.11.17 20:31:11
All rights reserved © Beijing Volcano Engine Technology Co., Ltd2024
