Otorisasi RAM - Application Real-Time Monitoring Service

Resource Access Management (RAM) adalah layanan Alibaba Cloud yang dirancang untuk manajemen identitas pengguna dan kontrol izin akses resource. Melalui RAM, Anda dapat menerapkan prinsip least privilege tanpa perlu membagikan kunci akun Alibaba Cloud Anda kepada pengguna lain. RAM menggunakan kebijakan izin untuk menentukan otorisasi. Topik ini menjelaskan struktur umum kebijakan RAM, serta elemen pernyataan kebijakan (Action, Resource, dan Condition) yang didefinisikan oleh Layanan Pemantauan Aplikasi Waktu Nyata. untuk kebijakan izin RAM. Kode RAM (RamCode) untuk Layanan Pemantauan Aplikasi Waktu Nyata. adalah arms,xtrace , dan granularitas otorisasi yang didukung adalah Tingkat resource. .

Struktur umum kebijakan

Kebijakan izin menggunakan format JSON dengan struktur umum berikut:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

Berikut adalah penjelasan untuk setiap field dalam kebijakan

Version: Menentukan nomor versi kebijakan. Nilainya tetap 1.
Statement:
- Effect: Menentukan hasil otorisasi. Nilai yang valid: Allow dan Deny.
- Action: Menentukan satu atau beberapa operasi yang diizinkan atau ditolak.
- Resource: Menentukan objek spesifik yang terpengaruh oleh operasi tersebut. Anda dapat menggunakan Alibaba Cloud Resource Names (ARNs) untuk mengidentifikasi resource tertentu.
- Condition: Menentukan kondisi agar otorisasi berlaku. Field ini bersifat opsional.
  - Condition operator: Menentukan operator kondisional. Setiap jenis kondisi mendukung operator kondisional yang berbeda.
  - Condition_key: Menentukan condition key.
  - Condition_value: Menentukan nilai kondisi.

Action

Tabel berikut mencantumkan action yang didefinisikan oleh Layanan Pemantauan Aplikasi Waktu Nyata.. Setiap kolom dalam tabel dijelaskan sebagai berikut:

Action: Dapat digunakan dalam elemen Action pada pernyataan kebijakan RAM untuk memberikan izin guna melakukan operasi tersebut.
API: API yang dipanggil untuk melakukan action tersebut.
Access level: Tingkat akses yang telah ditentukan untuk setiap API. Nilai yang valid: create, list, get, update, dan delete.
Resource type: Jenis resource yang mendukung otorisasi untuk melakukan action tersebut. Ini menunjukkan apakah action tersebut mendukung izin tingkat resource. Resource yang ditentukan harus kompatibel dengan action tersebut; jika tidak, kebijakan tidak akan berlaku.
- Untuk API dengan izin tingkat resource, jenis resource yang diperlukan ditandai dengan tanda bintang (*). Tentukan ARN yang sesuai dalam elemen Resource pada kebijakan.
- Untuk API tanpa izin tingkat resource, ini ditampilkan sebagai All Resources. Gunakan tanda bintang (*) dalam elemen Resource kebijakan.
Condition key: Ditentukan oleh layanan. Kunci ini memungkinkan kontrol yang lebih terperinci, yang berlaku baik untuk action saja maupun untuk action yang terkait dengan resource tertentu. Selain condition key spesifik layanan, Alibaba Cloud menyediakan serangkaian condition key umum yang berlaku di seluruh layanan yang terintegrasi dengan RAM. Untuk informasi lebih lanjut, lihat Common condition keys.
Dependent action: Action dependen yang diperlukan untuk menjalankan action tersebut. Agar action dapat dieksekusi dengan sukses, RAM user atau RAM role harus memiliki izin atas semua action dependen tersebut.

Action	API	Level akses	Tipe resource	Condition key	Action dependen
arms:CreateEnvServiceMonitor	CreateEnvServiceMonitor	create	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetGrafanaWorkspace	GetGrafanaWorkspace	get	*GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:CreateIntegration	CreateIntegration	none	All resources. ``	None	None
arms:ListTraceApps	ListTraceApps	none	All resources. ``	None	None
arms:GetRetcodeShareUrl	GetRetcodeShareUrl	none	All resources. ``	None	None
arms:GetRetcodeApp	GetRetcodeAppByPid	none	*RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId}`	None	None
arms:ListEnvironmentMetricTargets	ListEnvironmentMetricTargets	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:QueryMetricByPage	QueryMetricByPage	get	All resources. ``	None	None
arms:CreateEnvironment	CreateEnvironment	create	Environment `acs:arms:{#regionId}:{#accountId}:environment/`	None	None
arms:UninstallPromCluster	UninstallPromCluster	delete	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ListActivatedAlerts	ListActivatedAlerts	none	All resources. ``	None	None
arms:DescribeEnvironment	DescribeEnvironment	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DeleteContact	DeleteContact	none	All resources. ``	None	None
arms:AddRecordingRule	AddRecordingRule	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DescribeEnvCustomJob	DescribeEnvCustomJob	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:EnableMetric	EnableMetric	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId}`	None	None
arms:GetAgentDownloadUrl	GetAgentDownloadUrl	none	All resources. ``	None	None
arms:ListIntegration	ListIntegration	none	All resources. ``	None	None
arms:UpdateAlertContact	UpdateAlertContact	none	All resources. ``	None	None
arms:StopAlertRule	StopAlert	none	All resources. ``	None	None
arms:InitEnvironment	InitEnvironment	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListDispatchRule	ListOnCallSchedules	none	All resources. ``	None	None
arms:GetPrometheusMonitoring	GetPrometheusMonitoring	get	All resources. ``	None	None
arms:DeleteGrafanaWorkspace	DeleteGrafanaWorkspace	delete	*GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:ApplyScenario	ApplyScenario	none	All resources. ``	None	None
arms:GetPrometheusInstance	GetPrometheusInstance	get	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:SearchAlertContact	SearchAlertContact	none	All resources. ``	None	None
arms:GetAlertRules	GetAlertRules	get	All resources. ``	None	None
arms:QueryTopology	QueryAppTopology	get	All resources. ``	None	None
arms:ListDispatchRule	ListEscalationPolicies	none	All resources. ``	None	None
arms:DeleteAlertRules	DeleteAlertRule	delete	*AlertRule `acs:arms:{#regionId}:{#accountId}:AlertRule/{#AlertRuled}`	None	None
arms:ListPrometheusAlertTemplates	ListPrometheusAlertTemplates	none	All resources. ``	None	None
arms:GetSourceMapInfo	GetSourceMapInfo	none	All resources. ``	None	None
arms:GetRetcodeDataByQuery	GetRetcodeDataByQuery	get	All resources. ``	None	None
arms:DeleteIntegration	DeleteIntegration	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DescribeEnvPodMonitor	DescribeEnvPodMonitor	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetRumExceptionStack	GetRumExceptionStack	get	All resources. ``	None	None
arms:GetRumAppInfo	GetRumAppInfo	get	All resources. ``	None	None
arms:UpdateAlertContactGroup	UpdateAlertContactGroup	none	All resources. ``	None	None
arms:GetAppJVMConfig	GetAppJVMConfig	none	All resources. ``	None	None
arms:GetRetcodeLogstore	GetRetcodeLogstore	none	All resources. ``	None	None
arms:CreateGrafanaWorkspace	CreateGrafanaWorkspace	create	GrafanaWorkspace `acs:arms:{#regionId}:{#AccountId}:grafanaworkspace/`	None	None
arms:OpenXtraceDefaultSLR	OpenXtraceDefaultSLR	none	All resources. ``	None	None
arms:QueryReleaseMetric	QueryReleaseMetric	none	All resources. ``	None	None
arms:ListEnvironmentDashboards	ListEnvironmentDashboards	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DescribePrometheusAlertRule	DescribePrometheusAlertRule	get	All resources. ``	None	None
arms:UpdatePrometheusInstance	UpdatePrometheusInstance	update	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:CreatePrometheusAlertRule	CreatePrometheusAlertRule	create	All resources. ``	None	None
arms:ListRetcodeApps	ListRetcodeApps	none	RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/`	None	None
arms:AddAliClusterIdsToPrometheusGlobalView	AddAliClusterIdsToPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeletePrometheusGlobalView	DeletePrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteContact	DeleteIMRobot	none	All resources. ``	None	None
arms:GetRumOcuStatisticData	GetRumOcuStatisticData	get	All resources. ``	None	None
arms:GetAlert	ListInsightsEvents	none	All resources. ``	None	None
arms:ListGrafanaWorkspace	ListGrafanaWorkspace	list	GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/`	None	None
arms:DeleteEnvPodMonitor	DeleteEnvPodMonitor	delete	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetIntegrationState	GetIntegrationState	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteRetcodeApp	DeleteRetcodeApp	none	*RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}`	None	None
arms:CreateAlertRules	CreateOrUpdateAlertRule	create	*AlertRule `acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}`	None	None
arms:CreatePrometheusInstance	CreatePrometheusInstance	create	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/`	None	None
arms:CreateWebhook	CreateWebhook	none	All resources. ``	None	None
arms:SetRetcodeShareStatus	SetRetcodeShareStatus	none	*RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId}`	None	None
arms:CreateContact	CreateOrUpdateWebhookContact	none	All resources. ``	None	None
arms:ListDispatchRule	ListNotificationPolicies	none	All resources. ``	None	None
arms:GetRumData	GetRumDataForPage	get	All resources. ``	None	None
arms:CreateAlertRules	ImportAppAlertRules	none	*AlertRule `acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}`	None	None
arms:CheckServiceStatus	CheckServiceStatus	none	All resources. ``	None	None
arms:CreateDispatchRule	CreateOrUpdateSilencePolicy	none	All resources. ``	None	None
arms:SearchTraceAppByName	SearchTraceAppByName	get	*TraceApp `acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}`	None	None
arms:GetCloudClusterAllUrl	GetCloudClusterAllUrl	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:CreateContact	CreateOrUpdateContact	none	All resources. ``	None	None
arms:ListScenario	ListScenario	none	All resources. ``	None	None
arms:GetSyntheticTask	SwitchSyntheticTaskStatus	none	All resources. ``	None	None
arms:ListPrometheusGlobalView	ListPrometheusGlobalView	none	All resources. ``	None	None
arms:GetSyntheticMonitors	GetSyntheticMonitors	none	All resources. ``	None	None
arms:SearchAlertRules	SearchAlertRules	none	AlertRule `acs:arms:{#regionId}:{#AccountId}:AlertRule/`	None	None
arms:ListEnvironmentFeatures	ListEnvironmentFeatures	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpdatePrometheusIntegration	UpdatePrometheusIntegration	none	All resources. ``	None	None
arms:GetRecordingRule	GetRecordingRule	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:SaveTraceAppConfig	SaveTraceAppConfig	none	*TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}`	None	None
arms:GetTimingSyntheticTask	GetTimingSyntheticTask	get	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:ListEnvironmentAddons	ListEnvironmentAddons	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListEnvironmentAlertRules	ListEnvironmentAlertRules	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:OpenArmsDefaultSLR	OpenArmsDefaultSLR	none	All resources. ``	None	None
arms:DeletePrometheusAlertRule	DeletePrometheusAlertRule	delete	All resources. ``	None	None
arms:GetAppApiPageInfo	GetAppApiByPage	none	All resources. ``	None	None
arms:SearchAlertContactGroup	SearchAlertContactGroup	none	All resources. ``	None	None
arms:UpdateDispatchRule	UpdateDispatchRule	none	All resources. ``	None	None
arms:ListDashboards	ListDashboards	none	All resources. ``	None	None
arms:UpdateEnvCustomJob	UpdateEnvCustomJob	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:AddPrometheusGlobalViewByAliClusterIds	AddPrometheusGlobalViewByAliClusterIds	none	All resources. ``	None	None
arms:DeletePrometheusIntegration	DeletePrometheusIntegration	none	All resources. ``	None	None
arms:DeleteEnvironment	DeleteEnvironment	delete	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpdateEnvDropMetricsRule	UpdateEnvDropMetricsRule	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:CreateDispatchRule	CreateOrUpdateNotificationPolicy	none	All resources. ``	None	None
arms:RemoveSourcesFromPrometheusGlobalView	RemoveSourcesFromPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:UpdatePrometheusMonitoring	UpdatePrometheusMonitoring	update	All resources. ``	None	None
arms:AppendInstancesToPrometheusGlobalView	AppendInstancesToPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DescribeEnvironmentFeature	DescribeEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DeleteTimingSyntheticTask	DeleteTimingSyntheticTask	delete	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:SearchContact	DescribeIMRobots	none	All resources. ``	None	None
arms:ListSyntheticDetail	ListSyntheticDetail	list	All resources. ``	None	None
arms:GetClusterAllUrl	GetClusterAllUrl	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:GetTrace	GetTrace	none	All resources. ``	None	None
arms:GetStack	GetStack	none	All resources. ``	None	None
arms:DescribeEnvDropMetricsRule	DescribeEnvDropMetricsRule	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpdateMetricDrop	UpdateMetricDrop	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId}`	None	None
arms:InstallAddon	InstallAddon	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListEnvPodMonitors	ListEnvPodMonitors	list	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:CreateOrUpdateEventBridgeIntegration	CreateOrUpdateEventBridgeIntegration	none	All resources. ``	None	None
arms:DeleteAddonRelease	DeleteAddonRelease	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListEnvServiceMonitors	ListEnvServiceMonitors	list	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:SyncRecordingRules	SyncRecordingRules	none	All resources. ``	None	None
arms:UpdateRumApp	UpdateRumFileStatus	update	All resources. ``	None	None
arms:CreateEnvCustomJob	CreateEnvCustomJob	create	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:TagResources	TagResources	update	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}` RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}` TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}` Environment `acs:arms:{#regionId}:{#accountId}:environment/{#EnvironmentId}` *GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:GetCommercialStatus	GetCommercialStatus	none	All resources. ``	None	None
arms:GetSyntheticTaskList	GetSyntheticTaskList	none	All resources. ``	None	None
arms:InstallManagedPrometheus	InstallManagedPrometheus	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:UpdateEnvServiceMonitor	UpdateEnvServiceMonitor	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DeleteContactGroup	DeleteContactGroup	none	All resources. ``	None	None
arms:CreateAlertContact	CreateAlertContact	none	All resources. ``	None	None
arms:DeleteScenario	DeleteScenario	none	All resources. ``	None	None
arms:ListAddons	ListAddons	none	All resources. ``	None	None
arms:QueryCommercialUsage	QueryCommercialUsage	get	All resources. ``	None	None
arms:CheckCommercialStatus	CheckCommercialStatus	none	All resources. ``	None	None
arms:DeleteEnvServiceMonitor	DeleteEnvServiceMonitor	delete	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DoInsightsAction	DoInsightsAction	get	All resources. ``	None	None
arms:UpdateAlertRule	UpdateAlertRule	none	*AlertRule `acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}`	None	None
arms:CloseAlarm	CloseAlarm	create	All resources. ``	None	None
arms:SearchContact	DescribeContacts	none	All resources. ``	None	None
arms:UninstallManagedPrometheus	UninstallManagedPrometheus	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:StopTimingSyntheticTask	StopTimingSyntheticTask	update	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:RemoveAliClusterIdsFromPrometheusGlobalView	RemoveAliClusterIdsFromPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:SearchTraces	SearchTraces	none	All resources. ``	None	None
arms:CreatePrometheusMonitoring	CreatePrometheusMonitoring	create	All resources. ``	None	None
arms:SearchRetcodeAppByPage	SearchRetcodeAppByPage	get	All resources. ``	None	None
arms:GetOnCallSchedulesDetail	GetOnCallSchedulesDetail	none	All resources. ``	None	None
arms:StartAlertRule	StartAlert	none	All resources. ``	None	None
arms:GetAlarmHistories	ListAlerts	none	All resources. ``	None	None
arms:AddTagToFlinkCluster	AddTagToFlinkCluster	create	All resources. ``	None	None
arms:GetRumApps	GetRumApps	list	Rum `acs:arms:{#regionId}:{#accountId}:rum/`	None	None
arms:ChangeResourceGroup	ChangeResourceGroup	update	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}` RetcodeApp `acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}` TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}` Environment `acs:arms:{#regionId}:{#accountId}:environment/{#EnvironmentId}` GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}` XTraceApp `acs:arms:{#regionId}:{#accountId}:xtraceapp/{#Pid}`	None	None
arms:CreateRumApp	CreateRumApp	create	All resources. ``	None	None
arms:GetPrometheusApiToken	GetPrometheusApiToken	none	All resources. ``	None	None
arms:UpdatePrometheusMonitoringStatus	UpdatePrometheusMonitoringStatus	update	*PrometheusMonitoring `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:GetPrometheusIntegration	ListPrometheusIntegration	none	All resources. ``	None	None
arms:UpdateGrafanaWorkspace	UpdateGrafanaWorkspace	update	*GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:CreateEnvPodMonitor	CreateEnvPodMonitor	create	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:StartTimingSyntheticTask	StartTimingSyntheticTask	update	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:CreateDispatchRule	CreateDispatchRule	none	All resources. ``	None	None
arms:DescribeTraceLicenseKey	DescribeTraceLicenseKey	get	All resources. ``	None	None
arms:UpdateEnvPodMonitor	UpdateEnvPodMonitor	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DeleteAlertContact	DeleteAlertContact	none	All resources. ``	None	None
arms:BlockAlarmNotification	BlockAlarmNotification	create	All resources. ``	None	None
arms:OpenVCluster	OpenVCluster	none	All resources. ``	None	None
arms:ChangeAlarmSeverity	ChangeAlarmSeverity	create	All resources. ``	None	None
arms:DeleteSilencePolicy	DeleteSilencePolicy	none	All resources. ``	None	None
arms:DescribeDispatchRule	DescribeDispatchRule	none	All resources. ``	None	None
arms:DeleteEnvCustomJob	DeleteEnvCustomJob	delete	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpgradeAddonRelease	UpgradeAddonRelease	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpdateSourceMap	Upload	update	All resources. ``	None	None
arms:ListAlertEvents	ListAlertEvents	none	All resources. ``	None	None
arms:ListEventBridgeIntegrations	ListEventBridgeIntegrations	none	All resources. ``	None	None
arms:ListCmsInstances	ListCmsInstances	none	All resources. ``	None	None
arms:DeleteSourceMap	DeleteSourceMap	delete	All resources. ``	None	None
arms:DeleteEventBridgeIntegration	DeleteEventBridgeIntegration	none	All resources. ``	None	None
arms:DeleteTraceApp	DeleteTraceApp	none	*TraceApp `acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}`	None	None
arms:GetSyntheticTaskDetail	GetSyntheticTaskDetail	none	All resources. ``	None	None
arms:AddPrometheusGlobalView	AddPrometheusGlobalView	none	All resources. ``	None	None
arms:CreateContact	CreateOrUpdateIMRobot	none	All resources. ``	None	None
arms:ListDispatchRule	ListSilencePolicies	none	All resources. ``	None	None
arms:CreateAlertContactGroup	CreateAlertContactGroup	none	All resources. ``	None	None
arms:DeleteDispatchRule	DeleteNotificationPolicy	none	All resources. ``	None	None
arms:DescribeAddonRelease	DescribeAddonRelease	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpdateWebhook	UpdateWebhook	none	All resources. ``	None	None
arms:DeleteRumUploadFile	DeleteRumUploadFile	delete	All resources. ``	None	None
arms:AddIntegration	AddIntegration	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteAlertRules	DeleteAlertRules	none	All resources. ``	None	None
arms:CreateRumUploadFileUrl	CreateRumUploadFileUrl	create	All resources. ``	None	None
arms:DeleteSyntheticTask	DeleteSyntheticTask	none	All resources. ``	None	None
arms:DeleteRumApp	DeleteRumApp	delete	All resources. ``	None	None
arms:AddGrafana	AddGrafana	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:GetExploreUrl	GetExploreUrl	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ListEnvironmentKubeResources	ListEnvironmentKubeResources	none	All resources. ``	None	None
arms:UpdatePrometheusAlertRule	UpdatePrometheusAlertRule	update	All resources. ``	None	None
arms:UpdateGrafanaWorkspaceVersion	UpdateGrafanaWorkspaceVersion	update	*GrafanaWorkspace `acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}`	None	None
arms:DelAuthToken	DelAuthToken	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:SearchTraceAppByPage	SearchTraceAppByPage	none	TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/`	None	None
arms:SearchTracesByPage	SearchTracesByPage	none	All resources. ``	None	None
arms:ListPrometheusInstanceByTagAndResourceGroupId	ListPrometheusInstanceByTagAndResourceGroupId	list	Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/`	None	None
arms:QueryPromInstallStatus	QueryPromInstallStatus	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ClaimAlarm	ClaimAlarm	create	All resources. ``	None	None
arms:CreateContactGroup	CreateOrUpdateContactGroup	none	All resources. ``	None	None
arms:ListPrometheusAlertRules	ListPrometheusAlertRules	list	All resources. ``	None	None
arms:DeleteGrafanaResource	DeleteGrafanaResource	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:CreateTimingSyntheticTask	CreateTimingSyntheticTask	create	SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/`	None	None
arms:ListPrometheusMonitoring	ListPrometheusMonitoring	list	All resources. ``	None	None
arms:InstallCmsExporter	InstallCmsExporter	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:QueryAppMetadata	QueryAppMetadata	get	All resources. ``	None	None
arms:ListClusterFromGrafana	ListClusterFromGrafana	none	All resources. ``	None	None
arms:ListEnvCustomJobs	ListEnvCustomJobs	list	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DeleteContact	DeleteWebhookContact	none	All resources. ``	None	None
arms:DeleteAlertContactGroup	DeleteAlertContactGroup	none	All resources. ``	None	None
arms:UpdateEnvironment	UpdateEnvironment	update	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:ListDispatchRule	ListDispatchRule	none	All resources. ``	None	None
arms:UpdatePrometheusGlobalView	UpdatePrometheusGlobalView	update	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:GetMultipleTrace	GetMultipleTrace	none	All resources. ``	None	None
arms:GetPrometheusGlobalView	GetPrometheusGlobalView	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:GetRumUploadFiles	GetRumUploadFiles	get	All resources. ``	None	None
arms:DeleteCmsExporter	DeleteCmsExporter	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ListTimingSyntheticTasks	ListTimingSyntheticTasks	list	SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/`	None	None
arms:AddPrometheusIntegration	AddPrometheusIntegration	none	All resources. ``	None	None
arms:CreateRetcodeApp	CreateRetcodeApp	none	All resources. ``	None	None
arms:SearchContactGroup	DescribeContactGroups	none	All resources. ``	None	None
arms:DeleteDispatchRule	DeleteDispatchRule	none	All resources. ``	None	None
arms:UpdateTimingSyntheticTask	UpdateTimingSyntheticTask	create	*SyntheticTask `acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}`	None	None
arms:UpdateContact	SendTTSVerifyLink	none	All resources. ``	None	None
arms:GetAuthToken	GetAuthToken	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:ConfigApp	ConfigApp	none	All resources. ``	None	None
arms:UpgradeEnvironmentFeature	UpgradeEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:SearchContact	DescribeWebhookContacts	none	All resources. ``	None	None
arms:DeleteEnvironmentFeature	DeleteEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:DescribeEnvServiceMonitor	DescribeEnvServiceMonitor	get	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:SearchEvents	SearchEvents	none	All resources. ``	None	None
arms:GetTraceAppConfig	GetTraceAppConfig	get	*TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}`	None	None
arms:GetAgentDownloadUrl	GetAgentDownloadUrlV2	none	All resources. ``	None	None
arms:DescribeAddonMetrics	DescribeAddonMetrics	none	All resources. ``	None	None
arms:GetManagedPrometheusStatus	GetManagedPrometheusStatus	none	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:InstallEnvironmentFeature	InstallEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:UpdateRumApp	UpdateRumApp	update	All resources. ``	None	None
arms:DeletePrometheusMonitoring	DeletePrometheusMonitoring	delete	All resources. ``	None	None
arms:BindPrometheusGrafanaInstance	BindPrometheusGrafanaInstance	update	*Prometheus `acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}`	None	None
arms:DeleteAppList	DeleteAppList	none	*TraceApp `acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}`	None	None
arms:AddPrometheusInstance	AddPrometheusInstance	none	All resources. ``	None	None
arms:GetPrometheusIntegration	GetPrometheusIntegration	none	All resources. ``	None	None
arms:GetTraceApp	GetTraceApp	none	*TraceApp `acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}`	None	None
arms:ListDashboardsByName	ListDashboardsByName	none	All resources. ``	None	None
arms:ListAddonReleases	ListAddonReleases	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:GetSyntheticTask	GetSyntheticTaskMonitors	none	All resources. ``	None	None
arms:RestartEnvironmentFeature	RestartEnvironmentFeature	none	*Environment `acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}`	None	None
arms:OpenArmsService	OpenArmsServiceSecondVersion	none	All resources. ``	None	None
arms:SearchAlertHistories	SearchAlertHistories	none	All resources. ``	None	None
arms:GetSyntheticTask	CreateSyntheticTask	create	All resources. ``	None	None
arms:UpdateIntegration	UpdateIntegration	none	All resources. ``	None	None
arms:ListEnvironments	ListEnvironments	list	Environment `acs:arms:{#regionId}:{#accountId}:environment/`	None	None
arms:ListPrometheusInstances	ListPrometheusInstances	none	All resources. ``	None	None

Resource

Tabel berikut mencantumkan resource yang ditentukan oleh Layanan Pemantauan Aplikasi Waktu Nyata.. Tentukan resource tersebut dalam elemen Resource pada pernyataan kebijakan RAM untuk memberikan izin terhadap operasi tertentu. Resource tersebut diidentifikasi secara unik menggunakan ARN dengan format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: Singkatan dari Alibaba Cloud service, yang menunjukkan cloud publik Alibaba Cloud.
{#ramcode}: Kode yang digunakan dalam RAM untuk menunjukkan layanan Alibaba Cloud.
{#regionId}: region ID. Jika resource mencakup semua wilayah, atur nilainya menjadi tanda bintang (*).
{#accountId}: ID akun Alibaba Cloud. Jika resource mencakup semua akun Alibaba Cloud, atur nilainya menjadi tanda bintang (*).
{#resourceType}: Identifier resource yang ditentukan oleh layanan. Mendukung struktur hierarkis, mirip dengan path file. Jika pernyataan mencakup resource global, atur nilainya menjadi tanda bintang (*).

Tipe resource	ARN
Environment	acs:arms:{#regionId}:{#accountId}:environment/{#environmentId} acs:arms:{#regionId}:{#accountId}:environment/*
GrafanaWorkspace	acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId} acs:arms:{#regionId}:{#AccountId}:grafanaworkspace/*
TraceApp	acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid} acs:arms:{#regionId}:{#accountId}:traceapp/*
RetcodeApp	acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId} acs:arms:{#regionId}:{#accountId}:retcodeapp/* acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}
Prometheus	acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId} acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId} acs:arms:{#regionId}:{#accountId}:prometheus/*
PrometheusMonitoring	acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/{#monitoringName}/* acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/* acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId} acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/* acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/{#monitoringName}
AlertRule	acs:arms:{#regionId}:{#accountId}:AlertRule/{#AlertRuled} acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled} acs:arms:{#regionId}:{#AccountId}:AlertRule/*
PrometheusAlertRule	acs:arms:${Region}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/${PrometheusAlertRuleId} acs:arms:${Region}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/* acs:arms:{#regionId}:{#accountId}:prometheusalertrule/{#ClusterId}/{#PrometheusAlertRuleId} acs:arms:{#regionId}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/*
IntegrationExporter	acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}
SyntheticTask	acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId} acs:arms:{#regionId}:{#accountId}:synthetictask/*
Rum	acs:arms:{#regionId}:{#accountId}:rum/*
XTraceApp	acs:arms:{#regionId}:{#accountId}:xtraceapp/{#Pid}

Condition

Layanan Pemantauan Aplikasi Waktu Nyata. tidak mendefinisikan condition key tingkat produk. Namun, Anda dapat menggunakan condition key umum Alibaba Cloud untuk kontrol akses. Untuk informasi lebih lanjut, lihat Common condition keys.

Cara membuat kebijakan RAM kustom?

Anda dapat membuat kebijakan kustom dan memberikannya kepada RAM user, RAM user group, atau RAM role. Untuk caranya, lihat: