Resource list

Last Updated: Mar 31, 2017

Types of Log Service resources in RAM that can be authorized

The following table lists the types of resources that can be authorized in RAM and how they are described:

Resource type Resource description in authorization policy
Project/Logstore acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/logstore/${logstoreName}
Project/Logstore/Shipper acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/logstore/${logstoreName}/shipper/${shipperName}
acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/logstore/*
Project/Config acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/logtailconfig/${logtailconfig}
acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/logtailconfig/*
Project/MachineGroup acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/machinegroup/${machineGroupName}
acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/machinegroup/*
Project/ConsumerGroup acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/logstore/${logstoreName}/consumergroup/${consumerGroupName}
acs:log:${regionName}:${projectOwnerAliUid}:project/${projectName}/logstore/${logstoreName}/consumergroup/*
Generic mode acs:log:${regionName}:${projectOwnerAliUid}:*
acs:log:*:${projectOwnerAliUid}:*

NOTE: There is a hierarchical relationship among Log Service resources. Project is a top-level resource. LogStore, config, and machinegroup are at the same level and sub-resources of the project. LogShipper and consumergroup are sub-resources of the LogStore.

Wherein:

  • ${regionName} indicates the name of a region.
  • ${projectOwnerAliUid} indicates the user’s Alibaba Cloud account ID.
  • ${projectName} indicates the name of a Log Service project.
  • ${logstoreName} indicates the name of a LogStore.
  • ${logtailconfig} indicates the name of a config.
  • ${machineGroupName} indicates the name of a machinegroup.
  • ${shipperName} indicates the name of a LogShipper rule.
  • ${consumerGroupName} indicates the name of a consumer group.
Thank you! We've received your feedback.