AliyunCSManagedLogRolePolicy es la directiva de autorización exclusiva para un rol de servicio. Por lo general, esta directiva se adjunta al rol de servicio durante su creación para autorizarlo a acceder a otros servicios en la nube. El servicio correspondiente de Alibaba Cloud actualiza esta directiva. No adjunte esta directiva a ninguna identidad de RAM que no sea un rol de servicio.
Detalles de la directiva
Tipo: directiva de sistema de servicio
Fecha de creación: 18 de octubre de 2024 a las 11:14:27
Fecha de actualización: 18 de agosto de 2026 a las 16:00:36
Versión actual: v15
Contenido de la directiva
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": "cs:InstallClusterAddons",
"Resource": "*",
"Condition": {
"ForAnyValue:StringEquals": {
"cs:AddonNames": [
"logtail-ds",
"loongcollector"
]
}
}
},
{
"Effect": "Allow",
"Action": "cs:GetClusterAddonInstance",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"agentloop:CreateAgentSpace",
"agentloop:GetAgentSpace"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"cms:GetServiceObservability",
"cms:CreateServiceObservability"
],
"Resource": "*"
},
{
"Action": [
"log:CreateProject",
"log:GetProject",
"log:DeleteProject",
"log:CreateLogStore",
"log:GetLogStore",
"log:UpdateLogStore",
"log:DeleteLogStore",
"log:CreateConfig",
"log:UpdateConfig",
"log:GetConfig",
"log:DeleteConfig",
"log:CreateMachineGroup",
"log:UpdateMachineGroup",
"log:GetMachineGroup",
"log:DeleteMachineGroup",
"log:ApplyConfigToGroup",
"log:GetAppliedMachineGroups",
"log:GetAppliedConfigs",
"log:RemoveConfigFromMachineGroup",
"log:RemoveConfigFromGroup",
"log:CreateIndex",
"log:GetIndex",
"log:UpdateIndex",
"log:DeleteIndex",
"log:CreateSavedSearch",
"log:GetSavedSearch",
"log:UpdateSavedSearch",
"log:DeleteSavedSearch",
"log:CreateDashboard",
"log:GetDashboard",
"log:UpdateDashboard",
"log:DeleteDashboard",
"log:CreateJob",
"log:GetJob",
"log:DeleteJob",
"log:UpdateJob",
"log:PostLogStoreLogs",
"log:CreateSortedSubStore",
"log:GetSortedSubStore",
"log:ListSortedSubStore",
"log:UpdateSortedSubStore",
"log:DeleteSortedSubStore",
"log:CreateApp",
"log:UpdateApp",
"log:GetApp",
"log:DeleteApp",
"log:GetLogStoreLogs",
"log:TagResources",
"log:ListJobs",
"log:ListTagResources",
"log:UntagResources",
"log:CreateResourceRecord",
"log:UpdateResourceRecord",
"log:UpsertResourceRecord",
"log:GetResourceRecord",
"log:DeleteResourceRecord",
"log:ListResourceRecords",
"log:ListResources",
"log:GetResource",
"log:PutLogs",
"log:UpdateLogStoreMeteringMode",
"log:GetLogStoreMeteringMode",
"log:CreateLogtailPipelineConfig",
"log:DeleteLogtailPipelineConfig",
"log:GetLogtailPipelineConfig",
"log:UpdateLogtailPipelineConfig",
"log:ListLogtailPipelineConfig",
"log:CreateSubStore",
"cs:UpdateContactGroup",
"cs:DescribeTemplates",
"cs:DescribeTemplateAttribute",
"eventbridge:PutEvents"
],
"Resource": [
"*"
],
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "agentloop.aliyuncs.com"
}
}
}
]
}