This topic explains how to resolve the issue where the Monitoring and Alerting page in the ApsaraMQ for RabbitMQ console shows no monitoring data when you log on as a RAM user.
Cause
The RAM user does not have the AliyunCloudMonitorReadOnlyAccess policy attached. The Monitoring and Alerting page retrieves metrics from CloudMonitor. Without read access to CloudMonitor, the page cannot display any data.
This is the only known cause for missing monitoring data on this page.
Solution
Attach the AliyunCloudMonitorReadOnlyAccess policy to the RAM user. Only an Alibaba Cloud account (not a RAM user) can perform this operation.
Log on to the RAM console with your Alibaba Cloud account.
Attach the
AliyunCloudMonitorReadOnlyAccesspolicy to the RAM user. For detailed steps, see Grant permissions to RAM users.Log on to the ApsaraMQ for RabbitMQ console as the RAM user again and verify that monitoring data appears on the Monitoring and Alerting page.
Policy details
The AliyunCloudMonitorReadOnlyAccess policy grants read-only access to CloudMonitor query operations:
{
"Version": "1",
"Statement": [
{
"Action": "cms:QueryMetric*",
"Resource": "*",
"Effect": "Allow"
}
]
}The wildcard in cms:QueryMetric* covers all CloudMonitor query API operations. This is the minimum permission required to load monitoring data on the Monitoring and Alerting page in the ApsaraMQ for RabbitMQ console.
This policy only grants read access to monitoring metrics. It does not allow the RAM user to modify CloudMonitor configurations or alert rules.