RAM authorization reference of actions resources and conditions - Application Real-Time Monitoring Service - Alibaba Cloud - Application Real-Time Monitoring Service

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. Using RAM helps you avoid sharing your Alibaba Cloud account keys with other users and allows you to grant users the least privilege access. RAM uses permission policies to define authorizations. This topic describes the general structure of a RAM policy, and the policy statement elements (Action, Resource, and Condition) defined by Application Real-Time Monitoring Service for RAM permission policies. The RAM code (RamCode) for Application Real-Time Monitoring Service is arms,xtrace , and the supported authorization granularity is RESOURCE .

General structure of a policy

Permission policies support JSON format with the following general structure:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

The following list describes the fields in the policy:

Version: Specifies the policy version number. It is fixed at 1.
Statement:
- Effect: Specifies the authorization result. Valid values: Allow and Deny.
- Action: Specifies one or more operations that are allowed or denied.
- Resource: Specifies the specific objects affected by the operations. You can use Alibaba Cloud Resource Names (ARNs) to describe specific resources.
- Condition: Specifies the conditions for the authorization to take effect. This field is optional.
  - Condition operator: Specifies the conditional operators. Different types of conditions support different conditional operators.
  - Condition_key: Specifies the condition keys.
  - Condition_value: Specifies the condition values.

Action

The following table lists the actions defined by Application Real-Time Monitoring Service. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that support authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding ARN in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys that are applicable across all RAM-integrated services. For more information, see Common condition keys.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action	API	Access level	Resource type	Condition key	Dependent action
arms:GetAgentDownloadUrl	GetAgentDownloadUrlV2	none	All Resource ``	None	None
arms:DeleteSourceMap	DeleteSourceMap	delete	All Resource ``	None	None
arms:GetAppJVMConfig	GetAppJVMConfig	none	All Resource ``	None	None
arms:UpgradeAddonRelease	UpgradeAddonRelease	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:CreateAlertRules	CreateOrUpdateAlertRule	create	*AlertRule `acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}`	None	None
arms:DelAuthToken	DelAuthToken	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DescribeEnvCustomJob	DescribeEnvCustomJob	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetSyntheticTask	GetSyntheticTaskMonitors	none	All Resource ``	None	None
arms:EnableMetric	EnableMetric	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId}`	None	None
arms:SaveTraceAppConfig	SaveTraceAppConfig	none	*TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}`	None	None
arms:UpdatePrometheusMonitoring	UpdatePrometheusMonitoring	update	All Resource ``	None	None
arms:CheckServiceStatus	CheckServiceStatus	none	All Resource ``	None	None
arms:GetClusterAllUrl	GetClusterAllUrl	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ListPrometheusAlertRules	ListPrometheusAlertRules	list	All Resource ``	None	None
arms:CheckCommercialStatus	CheckCommercialStatus	none	All Resource ``	None	None
arms:ListEventBridgeIntegrations	ListEventBridgeIntegrations	none	All Resource ``	None	None
arms:DescribeEnvPodMonitor	DescribeEnvPodMonitor	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DeleteAlertRules	DeleteAlertRule	delete	*AlertRule `acs:arms:{#regionId}:{#accountId}:AlertRule/{#AlertRuled}`	None	None
arms:ListScenario	ListScenario	none	All Resource ``	None	None
arms:UpdateAlertContactGroup	UpdateAlertContactGroup	none	All Resource ``	None	None
arms:SyncRecordingRules	SyncRecordingRules	none	All Resource ``	None	None
arms:CreateDispatchRule	CreateOrUpdateSilencePolicy	none	All Resource ``	None	None
arms:UpdatePrometheusGlobalView	UpdatePrometheusGlobalView	update	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteAddonRelease	DeleteAddonRelease	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListPrometheusGlobalView	ListPrometheusGlobalView	none	All Resource ``	None	None
arms:GetRetcodeLogstore	GetRetcodeLogstore	none	All Resource ``	None	None
arms:UpdateDispatchRule	UpdateDispatchRule	none	All Resource ``	None	None
arms:DeleteContactGroup	DeleteContactGroup	none	All Resource ``	None	None
arms:UpdateSourceMap	Upload	update	All Resource ``	None	None
arms:CreateGrafanaWorkspace	CreateGrafanaWorkspace	create	GrafanaWorkspace `acs:arms:{#regionId}:{#AccountId}:grafanaworkspace/`	None	None
arms:DeleteAlertContactGroup	DeleteAlertContactGroup	none	All Resource ``	None	None
arms:CreateIntegration	CreateIntegration	none	All Resource ``	None	None
arms:UninstallManagedPrometheus	UninstallManagedPrometheus	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:UpdateIntegration	UpdateIntegration	none	All Resource ``	None	None
arms:GetPrometheusInstance	GetPrometheusInstance	get	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ListDispatchRule	ListDispatchRule	none	All Resource ``	None	None
arms:DeleteEnvPodMonitor	DeleteEnvPodMonitor	delete	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:SearchTraceAppByName	SearchTraceAppByName	get	*TraceApp `acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}`	None	None
arms:ListEnvironmentFeatures	ListEnvironmentFeatures	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:QueryPromInstallStatus	QueryPromInstallStatus	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:RemoveAliClusterIdsFromPrometheusGlobalView	RemoveAliClusterIdsFromPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:CreateAlertRules	ImportAppAlertRules	none	*AlertRule `acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}`	None	None
arms:DeleteTraceApp	DeleteTraceApp	none	*TraceApp `acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}`	None	None
arms:ListDashboards	ListDashboards	none	All Resource ``	None	None
arms:GetRumData	GetRumDataForPage	get	All Resource ``	None	None
arms:UpdateAlertRule	UpdateAlertRule	none	*AlertRule `acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}`	None	None
arms:UpdateWebhook	UpdateWebhook	none	All Resource ``	None	None
arms:ConfigApp	ConfigApp	none	All Resource ``	None	None
arms:DeleteSyntheticTask	DeleteSyntheticTask	none	All Resource ``	None	None
arms:DeleteContact	DeleteContact	none	All Resource ``	None	None
arms:ListGrafanaWorkspace	ListGrafanaWorkspace	list	GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/`	None	None
arms:GetCloudClusterAllUrl	GetCloudClusterAllUrl	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:GetSyntheticTask	SwitchSyntheticTaskStatus	none	All Resource ``	None	None
arms:CreateTimingSyntheticTask	CreateTimingSyntheticTask	create	SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/`	None	None
arms:ListDispatchRule	ListNotificationPolicies	none	All Resource ``	None	None
arms:ListPrometheusInstanceByTagAndResourceGroupId	ListPrometheusInstanceByTagAndResourceGroupId	list	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/`	None	None
arms:ListIntegration	ListIntegration	none	All Resource ``	None	None
arms:ListEnvCustomJobs	ListEnvCustomJobs	list	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:QueryCommercialUsage	QueryCommercialUsage	get	All Resource ``	None	None
arms:UpdateEnvPodMonitor	UpdateEnvPodMonitor	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListDispatchRule	ListSilencePolicies	none	All Resource ``	None	None
arms:DeleteEnvironmentFeature	DeleteEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DescribeEnvironmentFeature	DescribeEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetPrometheusIntegration	ListPrometheusIntegration	none	All Resource ``	None	None
arms:GetAlertRules	GetAlertRules	get	All Resource ``	None	None
arms:CreateWebhook	CreateWebhook	none	All Resource ``	None	None
arms:AppendInstancesToPrometheusGlobalView	AppendInstancesToPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeletePrometheusGlobalView	DeletePrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:QueryReleaseMetric	QueryReleaseMetric	none	All Resource ``	None	None
arms:ListClusterFromGrafana	ListClusterFromGrafana	none	All Resource ``	None	None
arms:SearchContact	DescribeIMRobots	none	All Resource ``	None	None
arms:ListRetcodeApps	ListRetcodeApps	none	RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/`	None	None
arms:DeleteSilencePolicy	DeleteSilencePolicy	none	All Resource ``	None	None
arms:QueryMetricByPage	QueryMetricByPage	get	All Resource ``	None	None
arms:DescribeTraceLicenseKey	DescribeTraceLicenseKey	get	All Resource ``	None	None
arms:UpdatePrometheusAlertRule	UpdatePrometheusAlertRule	update	All Resource ``	None	None
arms:GetTimingSyntheticTask	GetTimingSyntheticTask	get	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:UpdatePrometheusIntegration	UpdatePrometheusIntegration	none	All Resource ``	None	None
arms:GetRecordingRule	GetRecordingRule	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteIntegration	DeleteIntegration	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:UpdateMetricDrop	UpdateMetricDrop	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId}`	None	None
arms:AddPrometheusInstance	AddPrometheusInstance	none	All Resource ``	None	None
arms:DeleteContact	DeleteWebhookContact	none	All Resource ``	None	None
arms:ListAddonReleases	ListAddonReleases	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:CreateContact	CreateOrUpdateContact	none	All Resource ``	None	None
arms:OpenArmsDefaultSLR	OpenArmsDefaultSLR	none	All Resource ``	None	None
arms:SearchAlertContactGroup	SearchAlertContactGroup	none	All Resource ``	None	None
arms:AddTagToFlinkCluster	AddTagToFlinkCluster	create	All Resource ``	None	None
arms:GetAgentDownloadUrl	GetAgentDownloadUrl	none	All Resource ``	None	None
arms:UpdateRumApp	UpdateRumFileStatus	update	All Resource ``	None	None
arms:StopTimingSyntheticTask	StopTimingSyntheticTask	update	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:DeleteGrafanaResource	DeleteGrafanaResource	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ChangeResourceGroup	ChangeResourceGroup	update	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}` RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}` TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}` Environment `acs:arms:{#regionId}:{#accountId}:environment/{#EnvironmentId}` GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}` XTraceApp `acs:arms:{#regionId}:{#accountId}:xtraceapp/{#Pid}`	None	None
arms:CreateAlertContactGroup	CreateAlertContactGroup	none	All Resource ``	None	None
arms:ListPrometheusInstances	ListPrometheusInstances	none	All Resource ``	None	None
arms:DeleteEventBridgeIntegration	DeleteEventBridgeIntegration	none	All Resource ``	None	None
arms:ListDispatchRule	ListEscalationPolicies	none	All Resource ``	None	None
arms:InstallCmsExporter	InstallCmsExporter	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:QueryTopology	QueryAppTopology	get	All Resource ``	None	None
arms:ListPrometheusMonitoring	ListPrometheusMonitoring	list	All Resource ``	None	None
arms:GetPrometheusMonitoring	GetPrometheusMonitoring	get	All Resource ``	None	None
arms:CreateEnvServiceMonitor	CreateEnvServiceMonitor	create	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:RemoveSourcesFromPrometheusGlobalView	RemoveSourcesFromPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:OpenXtraceDefaultSLR	OpenXtraceDefaultSLR	none	All Resource ``	None	None
arms:DeleteRumApp	DeleteRumApp	delete	All Resource ``	None	None
arms:GetRetcodeApp	GetRetcodeAppByPid	none	*RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId}`	None	None
arms:DescribeAddonMetrics	DescribeAddonMetrics	none	All Resource ``	None	None
arms:GetSyntheticMonitors	GetSyntheticMonitors	none	All Resource ``	None	None
arms:DoInsightsAction	DoInsightsAction	get	All Resource ``	None	None
arms:InitEnvironment	InitEnvironment	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:RestartEnvironmentFeature	RestartEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetOnCallSchedulesDetail	GetOnCallSchedulesDetail	none	All Resource ``	None	None
arms:SearchAlertHistories	SearchAlertHistories	none	All Resource ``	None	None
arms:ListEnvironmentAlertRules	ListEnvironmentAlertRules	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DescribeDispatchRule	DescribeDispatchRule	none	All Resource ``	None	None
arms:DescribeEnvDropMetricsRule	DescribeEnvDropMetricsRule	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DeleteEnvServiceMonitor	DeleteEnvServiceMonitor	delete	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:AddAliClusterIdsToPrometheusGlobalView	AddAliClusterIdsToPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DescribeEnvironment	DescribeEnvironment	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:AddPrometheusIntegration	AddPrometheusIntegration	none	All Resource ``	None	None
arms:CreateDispatchRule	CreateDispatchRule	none	All Resource ``	None	None
arms:UpdateRumApp	UpdateRumApp	update	All Resource ``	None	None
arms:GetExploreUrl	GetExploreUrl	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DescribeAddonRelease	DescribeAddonRelease	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:InstallManagedPrometheus	InstallManagedPrometheus	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteDispatchRule	DeleteDispatchRule	none	All Resource ``	None	None
arms:ListActivatedAlerts	ListActivatedAlerts	none	All Resource ``	None	None
arms:DeleteDispatchRule	DeleteNotificationPolicy	none	All Resource ``	None	None
arms:CreatePrometheusAlertRule	CreatePrometheusAlertRule	create	All Resource ``	None	None
arms:GetAppApiPageInfo	GetAppApiByPage	none	All Resource ``	None	None
arms:ListDispatchRule	ListOnCallSchedules	none	All Resource ``	None	None
arms:StopAlertRule	StopAlert	none	All Resource ``	None	None
arms:GetAuthToken	GetAuthToken	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:StartAlertRule	StartAlert	none	All Resource ``	None	None
arms:GetTraceAppConfig	GetTraceAppConfig	get	*TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}`	None	None
arms:UpgradeEnvironmentFeature	UpgradeEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpdateContact	SendTTSVerifyLink	none	All Resource ``	None	None
arms:CreateContact	CreateOrUpdateIMRobot	none	All Resource ``	None	None
arms:SearchAlertContact	SearchAlertContact	none	All Resource ``	None	None
arms:GetPrometheusIntegration	GetPrometheusIntegration	none	All Resource ``	None	None
arms:ChangeAlarmSeverity	ChangeAlarmSeverity	create	All Resource ``	None	None
arms:DeletePrometheusAlertRule	DeletePrometheusAlertRule	delete	All Resource ``	None	None
arms:DeleteAppList	DeleteAppList	none	*TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}`	None	None
arms:GetRumUploadFiles	GetRumUploadFiles	get	All Resource ``	None	None
arms:GetSyntheticTaskDetail	GetSyntheticTaskDetail	none	All Resource ``	None	None
arms:GetPrometheusGlobalView	GetPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:UpdateEnvServiceMonitor	UpdateEnvServiceMonitor	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:StartTimingSyntheticTask	StartTimingSyntheticTask	update	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:GetManagedPrometheusStatus	GetManagedPrometheusStatus	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:CreateEnvCustomJob	CreateEnvCustomJob	create	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListEnvServiceMonitors	ListEnvServiceMonitors	list	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:CreateRumApp	CreateRumApp	create	All Resource ``	None	None
arms:UpdatePrometheusInstance	UpdatePrometheusInstance	update	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteTimingSyntheticTask	DeleteTimingSyntheticTask	delete	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:ListSyntheticDetail	ListSyntheticDetail	list	All Resource ``	None	None
arms:UpdateTimingSyntheticTask	UpdateTimingSyntheticTask	create	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:UninstallPromCluster	UninstallPromCluster	delete	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:UpdateAlertContact	UpdateAlertContact	none	All Resource ``	None	None
arms:SearchTraces	SearchTraces	none	All Resource ``	None	None
arms:OpenVCluster	OpenVCluster	none	All Resource ``	None	None
arms:ListTraceApps	ListTraceApps	none	All Resource ``	None	None
arms:SearchTracesByPage	SearchTracesByPage	none	All Resource ``	None	None
arms:ListAlertEvents	ListAlertEvents	none	All Resource ``	None	None
arms:CloseAlarm	CloseAlarm	create	All Resource ``	None	None
arms:UpdateEnvCustomJob	UpdateEnvCustomJob	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:AddPrometheusGlobalViewByAliClusterIds	AddPrometheusGlobalViewByAliClusterIds	none	All Resource ``	None	None
arms:GetRetcodeShareUrl	GetRetcodeShareUrl	none	All Resource ``	None	None
arms:UpdateEnvDropMetricsRule	UpdateEnvDropMetricsRule	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:CreatePrometheusMonitoring	CreatePrometheusMonitoring	create	All Resource ``	None	None
arms:ListEnvironmentMetricTargets	ListEnvironmentMetricTargets	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpdatePrometheusMonitoringStatus	UpdatePrometheusMonitoringStatus	update	*PrometheusMonitoring `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ListCmsInstances	ListCmsInstances	none	All Resource ``	None	None
arms:UpdateGrafanaWorkspaceVersion	UpdateGrafanaWorkspaceVersion	update	*GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:UpdateGrafanaWorkspace	UpdateGrafanaWorkspace	update	*GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:ApplyScenario	ApplyScenario	none	All Resource ``	None	None
arms:GetAlert	ListInsightsEvents	none	All Resource ``	None	None
arms:GetRumOcuStatisticData	GetRumOcuStatisticData	get	All Resource ``	None	None
arms:AddPrometheusGlobalView	AddPrometheusGlobalView	none	All Resource ``	None	None
arms:UpdateEnvironment	UpdateEnvironment	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetPrometheusApiToken	GetPrometheusApiToken	none	All Resource ``	None	None
arms:CreateEnvironment	CreateEnvironment	create	Environment `acs:arms:{#regionId}:{#accountId}:environment/`	None	None
arms:SearchContact	DescribeWebhookContacts	none	All Resource ``	None	None
arms:CreatePrometheusInstance	CreatePrometheusInstance	create	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/`	None	None
arms:BindPrometheusGrafanaInstance	BindPrometheusGrafanaInstance	update	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:AddRecordingRule	AddRecordingRule	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:SearchEvents	SearchEvents	none	All Resource ``	None	None
arms:GetSyntheticTask	CreateSyntheticTask	create	All Resource ``	None	None
arms:DeletePrometheusMonitoring	DeletePrometheusMonitoring	delete	All Resource ``	None	None
arms:DeleteGrafanaWorkspace	DeleteGrafanaWorkspace	delete	*GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:DeletePrometheusIntegration	DeletePrometheusIntegration	none	All Resource ``	None	None
arms:DeleteAlertRules	DeleteAlertRules	none	All Resource ``	None	None
arms:CreateContactGroup	CreateOrUpdateContactGroup	none	All Resource ``	None	None
arms:CreateAlertContact	CreateAlertContact	none	All Resource ``	None	None
arms:ListAddons	ListAddons	none	All Resource ``	None	None
arms:DescribePrometheusAlertRule	DescribePrometheusAlertRule	get	All Resource ``	None	None
arms:SearchContactGroup	DescribeContactGroups	none	All Resource ``	None	None
arms:GetTrace	GetTrace	none	All Resource ``	None	None
arms:TagResources	TagResources	update	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}` RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}` TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}` Environment `acs:arms:{#regionId}:{#accountId}:environment/{#EnvironmentId}` *GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:BlockAlarmNotification	BlockAlarmNotification	create	All Resource ``	None	None
arms:SearchContact	DescribeContacts	none	All Resource ``	None	None
arms:SearchRetcodeAppByPage	SearchRetcodeAppByPage	get	All Resource ``	None	None
arms:GetRumAppInfo	GetRumAppInfo	get	All Resource ``	None	None
arms:DeleteCmsExporter	DeleteCmsExporter	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:OpenArmsService	OpenArmsServiceSecondVersion	none	All Resource ``	None	None
arms:GetTraceApp	GetTraceApp	none	*TraceApp `acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}`	None	None
arms:ListPrometheusAlertTemplates	ListPrometheusAlertTemplates	none	All Resource ``	None	None
arms:DeleteScenario	DeleteScenario	none	All Resource ``	None	None
arms:CreateOrUpdateEventBridgeIntegration	CreateOrUpdateEventBridgeIntegration	none	All Resource ``	None	None
arms:GetIntegrationState	GetIntegrationState	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:UntagResources	UntagResources	update	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}` RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}` TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}` Environment `acs:arms:{#regionId}:{#accountId}:environment/{#EnvironmentId}` *GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:AddGrafana	AddGrafana	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:GetAlarmHistories	ListAlerts	none	All Resource ``	None	None
arms:AddIntegration	AddIntegration	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteEnvironment	DeleteEnvironment	delete	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListTimingSyntheticTasks	ListTimingSyntheticTasks	list	SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/`	None	None
arms:GetRumApps	GetRumApps	list	Rum `acs:arms:{#regionId}:{#accountId}:rum/`	None	None
arms:GetCommercialStatus	GetCommercialStatus	none	All Resource ``	None	None
arms:QueryAppMetadata	QueryAppMetadata	get	All Resource ``	None	None
arms:ListEnvironments	ListEnvironments	list	Environment `acs:arms:{#regionId}:{#accountId}:environment/`	None	None
arms:DeleteEnvCustomJob	DeleteEnvCustomJob	delete	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetSyntheticTaskList	GetSyntheticTaskList	none	All Resource ``	None	None
arms:ClaimAlarm	ClaimAlarm	create	All Resource ``	None	None
arms:DeleteRumUploadFile	DeleteRumUploadFile	delete	All Resource ``	None	None
arms:ListEnvPodMonitors	ListEnvPodMonitors	list	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:SetRetcodeShareStatus	SetRetcodeShareStatus	none	*RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId}`	None	None
arms:InstallEnvironmentFeature	InstallEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListDashboardsByName	ListDashboardsByName	none	All Resource ``	None	None
arms:CreateRetcodeApp	CreateRetcodeApp	none	All Resource ``	None	None
arms:CreateDispatchRule	CreateOrUpdateNotificationPolicy	none	All Resource ``	None	None
arms:DeleteRetcodeApp	DeleteRetcodeApp	none	*RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}`	None	None
arms:GetSourceMapInfo	GetSourceMapInfo	none	All Resource ``	None	None
arms:GetRetcodeDataByQuery	GetRetcodeDataByQuery	get	All Resource ``	None	None
arms:ListEnvironmentAddons	ListEnvironmentAddons	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetGrafanaWorkspace	GetGrafanaWorkspace	get	*GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:CreateRumUploadFileUrl	CreateRumUploadFileUrl	create	All Resource ``	None	None
arms:SearchAlertRules	SearchAlertRules	none	AlertRule `acs:arms:{#regionId}:{#AccountId}:AlertRule/`	None	None
arms:ListEnvironmentDashboards	ListEnvironmentDashboards	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetStack	GetStack	none	All Resource ``	None	None
arms:GetRumExceptionStack	GetRumExceptionStack	get	All Resource ``	None	None
arms:ListEnvironmentKubeResources	ListEnvironmentKubeResources	none	All Resource ``	None	None
arms:GetMultipleTrace	GetMultipleTrace	none	All Resource ``	None	None
arms:DeleteAlertContact	DeleteAlertContact	none	All Resource ``	None	None
arms:SearchTraceAppByPage	SearchTraceAppByPage	none	TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/`	None	None
arms:DescribeEnvServiceMonitor	DescribeEnvServiceMonitor	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:CreateEnvPodMonitor	CreateEnvPodMonitor	create	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:InstallAddon	InstallAddon	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:CreateContact	CreateOrUpdateWebhookContact	none	All Resource ``	None	None
arms:DeleteContact	DeleteIMRobot	none	All Resource ``	None	None

Resource

The following table lists the resources defined by Application Real-Time Monitoring Service. Specify them in the Resource element of RAM policy statements to grant permissions for specific operations. They are uniquely identified by ARNs. Format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: The initialism of Alibaba Cloud service, which indicates the public cloud of Alibaba Cloud.
{#ramcode}: The code used in RAM to indicate an Alibaba Cloud service.
{#regionId}: The region ID. If the resource covers all regions, set it to an asterisk (*).
{#accountId}: The ID of the Alibaba Cloud account. If the resource covers all Alibaba Cloud accounts, set it to an asterisk (*).
{#resourceType}: The service-defined resource identifier. It supports a hierarchical structure, which is similar to a file path. If the statement covers global resources, set it to an asterisk (*).

Resource type	ARN
Environment	acs:arms:{#regionId}:{#accountId}:environment/{#environmentId} acs:arms:{#regionId}:{#accountId}:environment/*
AlertRule	acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled} acs:arms:{#regionId}:{#accountId}:AlertRule/{#AlertRuled} acs:arms:{#regionId}:{#AccountId}:AlertRule/*
Prometheus	acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId} acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId} acs:arms:{#regionId}:{#accountId}:prometheus/*
TraceApp	acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid} acs:arms:{#regionId}:{#accountId}:traceapp/*
PrometheusMonitoring	acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/{#monitoringName}/* acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/* acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/* acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId} acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/{#monitoringName}
PrometheusAlertRule	acs:arms:{#regionId}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/* acs:arms:{#regionId}:{#accountId}:prometheusalertrule/{#ClusterId}/{#PrometheusAlertRuleId} acs:arms:${Region}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/* acs:arms:${Region}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/${PrometheusAlertRuleId}
GrafanaWorkspace	acs:arms:{#regionId}:{#AccountId}:grafanaworkspace/* acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}
SyntheticTask	acs:arms:{#regionId}:{#accountId}:synthetictask/* acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}
IntegrationExporter	acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}
RetcodeApp	acs:arms:{#regionId}:{#accountId}:retcodeapp/* acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid} acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId}
XTraceApp	acs:arms:{#regionId}:{#accountId}:xtraceapp/{#Pid}
Rum	acs:arms:{#regionId}:{#accountId}:rum/*

Condition

Application Real-Time Monitoring Service does not define product-level condition keys. However, you can use Alibaba Cloud common condition keys for access control. For more information, see Common condition keys.

How to create custom RAM policies?

You can create custom policies and grant them to RAM users, RAM user groups, or RAM roles. For instructions, see: