All Products
Search
Document Center

Log Service (SLS)

Last Updated: Sep 30, 2021

Resource Access Management (RAM) users or RAM roles must be granted permissions before they can access cloud resources. RAM uses policies to define permissions. A cloud service defines elements that can be used in a policy statement, such as Action, Resource, and Condition. This topic describes the permissions on Log Service (SLS).

The code (RamCode) in RAM that is used to indicate Log Service is log. You can grant permissions on Log Service at the resource level.

Action

The following table describes the values that you can use in the Action element of a policy statement. The values are defined by Log Service. The following list describes the columns in the table:
  • Action: the value that you can use in the Action element to specify the operation on a resource.

  • API: the API operation that you can call to perform the action. In most cases, only one API operation of a cloud service is required to perform an action. In some cases, multiple API operations must be called to perform an action, or an API operation can be called to perform multiple actions.

  • Access level: the access level of each action. The levels are read, write, and list.

  • Resource type: the type of the resource on which you can authorize a RAM user or a RAM role to perform the operation. Take note of the following items:

    • The required resource types are displayed in bold characters.

    • If the permissions cannot be granted at the resource level, All resources is used in the Resource type column of the action.

  • Condition key: the condition keys that are defined by a cloud service. The Condition key column does not list the common condition keys that are defined by Alibaba Cloud. For more information about the common condition keys, see Policy elements.

  • Dependent action: other actions that a RAM user or a RAM role must have permissions to perform the action. To successfully call the action, a RAM user or a RAM role must have the permissions to perform the dependent action.

Actions

APIs

Access level

Resource types

Condition keys

Dependent actions

log:ApplyConfigToGroup

ApplyConfigToMachineGroup

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}


N/A

N/A

log:ClearLogStoreStorage

ClearLogStoreStorage

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:ConsumerGroupHeartBeat

HeartBeat

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}


N/A

N/A

log:ConsumerGroupUpdateCheckPoint

UpdateCheckPoint

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}


N/A

N/A

log:CreateChart

CreateChart

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{DashboardName}


N/A

N/A

log:CreateConfig

CreateConfig

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}


N/A

N/A

log:CreateConsumerGroup

CreateConsumerGroup

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}


N/A

N/A

log:CreateDashboard

CreateDashboard

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}


N/A

N/A

log:CreateDomain

CreateDomain

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/{#DomainName}


N/A

N/A

log:CreateEtlJob

CreateEtlJob

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/etljob/{#EtlJobName}


N/A

N/A

log:CreateExternalStore

CreateExternalStore

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/externalstore/{#ExternalStoreName}


N/A

N/A

log:CreateIndex

CreateIndex

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:CreateJob

CreateRebuildIndex

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:CreateJob

CreateExport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:CreateJob

CreateAlert

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:CreateJob

CreateETL

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:CreateJob

CreateIngestion

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:CreateLogStore

CreateLogstore

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:CreateLogging

CreateLogging

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging


N/A

N/A

log:CreateMachineGroup

CreateMachineGroup

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

log:CreateProject

CreateProject

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}


N/A

N/A

log:CreateSavedSearch

CreateSavedSearch

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}


N/A

N/A

log:CreateShipper

CreateShipper

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/{#ShipperName}


N/A

N/A

log:DeleteChart

DeleteChart

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}


N/A

N/A

log:DeleteConfig

DeleteConfig

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}


N/A

N/A

log:DeleteConsumerGroup

DeleteConsumerGroup

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}


N/A

N/A

log:DeleteDashboard

DeleteDashboard

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}//dashboard/{#DashboardName}


N/A

N/A

log:DeleteDomain

DeleteDomain

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/{#DomainName}


N/A

N/A

log:DeleteEtlJob

DeleteEtlJob

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/etljob/{#EtlJobName}


N/A

N/A

log:DeleteExternalStore

DeleteExternalStore

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/externalstore/{#ExternalStoreName}


N/A

N/A

log:DeleteIndex

DeleteIndex

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:DeleteJob

DeleteRebuildIndex

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:DeleteJob

DeleteIngestion

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:DeleteJob

DeleteReport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:DeleteJob

DeleteExport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:DeleteJob

DeleteAlert

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:DeleteJob

DeleteETL

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:DeleteLogging

DeleteLogging

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging


N/A

N/A

log:DeleteMachineGroup

DeleteMachineGroup

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

log:DeleteProject

DeleteProject

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}


N/A

N/A

log:DeleteSavedSearch

DeleteSavedSearch

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}


N/A

N/A

log:DeleteShipper

DeleteShipper

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/{#ShipperName}


N/A

N/A

log:DisableReport

DisableReport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:GetAppliedConfigs

GetAppliedConfigs

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

log:GetAppliedMachineGroups

GetAppliedMachineGroups

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}


N/A

N/A

log:GetChart

GetChart

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{DashboardName}


N/A

N/A

log:GetConfig

GetConfig

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}


N/A

N/A

log:GetConsumerGroupCheckPoint

GetCheckPoint

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{l#ogstoreName}/consumergroup/{#ConsumerGroup}


N/A

N/A

log:GetCursorOrData

GetCursorTime

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:GetCursorOrData

GetCursor

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:GetCursorOrData

PullLogs

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:GetCursorOrData

BatchGetLog

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:GetDashboard

GetDashboard

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}


N/A

N/A

log:GetEtlJob

GetEtlJob

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/etljob/{#EtlJobName}


N/A

N/A

log:GetExternalStore

GetExternalStore

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/externalstore/{#ExternalStoreName}


N/A

N/A

log:GetIndex

GetIndex

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:GetJob

GetIngestion

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:GetJob

GetExport

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:GetJob

GetRebuildIndex

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:GetJob

GetETL

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:GetJob

GetAlert

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:GetJob

GetReport

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:GetLogStoreContextLogs

GetContextLogs

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:GetLogStoreHistogram

GetHistograms

Read


LogStore


acs:log:*:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:GetLogStoreLogs

GetLogs

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:GetLogging

GetLogging

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging


N/A

N/A

log:GetMachineGroup

GetMachineGroup

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

log:GetProject

GetProject

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}


N/A

N/A

log:GetSavedSearch

GetSavedSearch

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}


N/A

N/A

log:GetShipperConfig

GetShipperConfig

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/{#ShipperName}


N/A

N/A

log:GetShipperStatus

GetShipperStatus

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/{#ShipperName}


N/A

N/A

log:GetShipperTasks

GetShipperTasks

Read


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/{#ShipperName}


N/A

N/A

log:ListConfig

ListConfig

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/*


N/A

N/A

log:ListConsumerGroup

ListConsumerGroup

List


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/consumergroup/*


N/A

N/A

log:ListDashboard

ListDashboard

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/*


N/A

N/A

log:ListDomains

ListDomains

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/*


N/A

N/A

log:ListEtlJob

ListEtlJob

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/etljob/*


N/A

N/A

log:ListExternalStore

ListExternalStore

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/externalstore/*


N/A

N/A

log:ListJobs

ListRebuildIndex

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/*


N/A

N/A

log:ListJobs

ListIngestion

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/*


N/A

N/A

log:ListJobs

ListExport

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/*


N/A

N/A

log:ListJobs

ListAlert

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:ListJobs

ListETL

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/*


N/A

N/A

log:ListLogStores

ListLogStores

List


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/*


N/A

N/A

log:ListMachineGroup

ListMachineGroup

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/*


N/A

N/A

log:ListMachines

ListMachines

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

log:ListProject

ListProject

List


Project


acs:log:{#regionId}:{#accountId}:project/*


N/A

N/A

log:ListReport

ListReport

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/*


N/A

N/A

log:ListSavedSearch

ListSavedSearch

List


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/*


N/A

N/A

log:ListShards

ListShards

List


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:ListShipper

ListShipper

List


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/*


N/A

N/A

log:MergeShards

MergeShards

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:PutWebtracking

PutWebtracking

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:RemoveConfigFromGroup

RemoveConfigFromMachineGroup

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}


N/A

N/A

log:RetryShipperTask

RetryShipperTasks

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/{#ShipperName}


N/A

N/A

log:RetryShipperTask

RetryShipperTask

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/{#ShipperName}


N/A

N/A

log:SplitShard

SplitShard

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:StartIngestion

StartIngestion

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateChart

UpdateChart

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{DashboardName}


N/A

N/A

log:UpdateConfig

UpdateConfig

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}


N/A

N/A

log:UpdateDashboard

UpdateDashboard

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{DashboardName}


N/A

N/A

log:UpdateEtlJob

UpdateEtlJob

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/etljob/{#EtlJobName}


N/A

N/A

log:UpdateExternalStore

UpdateExternalStore

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/externalstore/{#ExternalStoreName}


N/A

N/A

log:UpdateIndex

UpdateIndex

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:UpdateJob

EnableReport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

DisableAlert

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

StopIngestion

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

StartExport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

UpdateReport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

UpdateAlert

Read


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

StopExport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

UpdateETL

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

UpdateExport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

EnableAlert

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

UpdateIngestion

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateJob

StopRebuildIndex

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateLogStore

UpdateLogstore

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}


N/A

N/A

log:UpdateLogging

UpdateLogging

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging


N/A

N/A

log:UpdateMachineGroup

UpdateMachineGroup

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

log:UpdateMachineGroupMachine

AddMachineIntoMachineGroup

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

log:UpdateProject

UpdateProject

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}


N/A

N/A

log:UpdateSavedSearch

UpdateSavedSearch

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}


N/A

N/A

log:UpdateShipper

UpdateShipper

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/shipper/{#ShipperName}


N/A

N/A

log:ApproveMachineGroup

ApproveMachineGroup

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

log:CreateJob

CreateReport

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/job/{#JobName}


N/A

N/A

log:UpdateConsumerGroup

UpdateConsumerGroup

Write


LogStore


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}


N/A

N/A

log:UpdateMachineGroupMachine

DeleteMachineFromMachineGroup

Write


Project


acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}


N/A

N/A

Resource

The following table describes the values that you can use in the Resource element of a policy statement. The values are defined by Log Service.

The Alibaba Cloud Resource Name (ARN) is the unique identifier of the resource on Alibaba Cloud. Take note of the following items:

  • {#} indicates a variable. {#} must be replaced with an actual value. For example, {#regionId} must be replaced with the actual ID of the region where your resource resides.

  • An asterisk (*) is used as a wildcard. Examples:

    • If you specify {#resourceType}/*, all resources are specified.

    • If {#regionId} is set to *, all regions are specified.

    • If {#accountId} is set to *, all Alibaba Cloud accounts are specified.

Resource type

ARN

Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

Condition

Log Service does not define service-specific condition keys. For more information about common condition keys that are defined by Alibaba Cloud, see Policy elements.