Todos os produtos
Search

Este produto

    Application Real-Time Monitoring Service:Autorização RAM

    Central de documentação

    Application Real-Time Monitoring Service:Autorização RAM

    Última atualização: Jul 15, 2026

    O Resource Access Management (RAM) é um serviço fornecido pela Alibaba Cloud para gerenciar identidades de usuários e permissões de acesso a recursos. O uso do RAM ajuda a evitar o compartilhamento das chaves da sua conta da Alibaba Cloud com outros usuários e permite conceder aos usuários o acesso com privilégio mínimo. O RAM usa políticas de permissão para definir autorizações. Este tópico descreve a estrutura geral de uma política RAM e os elementos de instrução de política (Action, Resource e Condition) definidos por Application Real-Time Monitoring Service. para políticas de permissão RAM. O código RAM (RamCode) para Application Real-Time Monitoring Service. é arms,xtrace , e a granularidade de autorização suportada é Resource level. .

    Estrutura geral de uma política

    As políticas de permissão suportam o formato JSON com a seguinte estrutura geral:

    {
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

    A lista a seguir descreve os campos da política:

    • Version: Especifica o número da versão da política. É fixo em 1.

    • Statement:

      • Effect: Especifica o resultado da autorização. Valores válidos: Allow e Deny.

      • Action: Especifica uma ou mais operações que são permitidas ou negadas.

      • Resource: Especifica os objetos específicos afetados pelas operações. Você pode usar os Alibaba Cloud Resource Names (ARNs) para descrever recursos específicos.

      • Condition: Especifica as condições para que a autorização entre em vigor. Este campo é opcional.

        • Operador de condição: Especifica os operadores condicionais. Diferentes tipos de condições suportam diferentes operadores condicionais.

        • Condition_key: Especifica as chaves de condição.

        • Condition_value: Especifica os valores de condição.

    Action

    A tabela a seguir lista as ações definidas por Application Real-Time Monitoring Service.. As colunas da tabela são descritas a seguir:

    • Action: As ações podem ser usadas no elemento Action das instruções de política de permissão RAM para conceder permissões para realizar a operação.

    • API: A API que você pode chamar para realizar a ação.

    • Nível de acesso: O nível de acesso predefinido concedido para cada API. Valores válidos: create, list, get, update e delete.

    • Tipo de recurso: O tipo de recurso que suporta autorização para realizar a ação. Indica se a ação suporta permissão em nível de recurso. O recurso especificado deve ser compatível com a ação. Caso contrário, a política será ineficaz.

      • Para APIs com permissões em nível de recurso, os tipos de recursos obrigatórios são marcados com um asterisco (*). Especifique o ARN correspondente no elemento Resource da política.

      • Para APIs sem permissões em nível de recurso, é exibido como Todos os Recursos. Use um asterisco (*) no elemento Resource da política.

    • Chave de condição: As chaves de condição definidas pelo serviço. A chave permite controle granular, aplicando-se apenas a ações ou a ações associadas a recursos específicos. Além das chaves de condição específicas do serviço, a Alibaba Cloud fornece um conjunto de chaves de condição comuns aplicáveis a todos os serviços integrados ao RAM. Para mais informações, consulte Chaves de condição comuns.

    • Ação dependente: As ações dependentes necessárias para executar a ação. Para concluir a ação, o usuário RAM ou a função RAM deve ter permissões para realizar todas as ações dependentes.

    Action

    API

    Nível de acesso

    Tipo de recurso

    Chave de condição

    Ação dependente
    arms:CreateEnvServiceMonitor CreateEnvServiceMonitor create

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:GetGrafanaWorkspace GetGrafanaWorkspace get

    *GrafanaWorkspace.

    acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}

    		 Nenhum Nenhum
    arms:CreateIntegration CreateIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListTraceApps ListTraceApps none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRetcodeShareUrl GetRetcodeShareUrl none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRetcodeApp GetRetcodeAppByPid none

    *RetcodeApp.

    acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId}

    		 Nenhum Nenhum
    arms:ListEnvironmentMetricTargets ListEnvironmentMetricTargets none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:QueryMetricByPage QueryMetricByPage get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateEnvironment CreateEnvironment create

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/*

    		 Nenhum Nenhum
    arms:UninstallPromCluster UninstallPromCluster delete

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:ListActivatedAlerts ListActivatedAlerts none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DescribeEnvironment DescribeEnvironment get

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:DeleteContact DeleteContact none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:AddRecordingRule AddRecordingRule none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:DescribeEnvCustomJob DescribeEnvCustomJob get

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:EnableMetric EnableMetric none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:GetAgentDownloadUrl GetAgentDownloadUrl none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListIntegration ListIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateAlertContact UpdateAlertContact none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:StopAlertRule StopAlert none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:InitEnvironment InitEnvironment update

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:ListDispatchRule ListOnCallSchedules none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetPrometheusMonitoring GetPrometheusMonitoring get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteGrafanaWorkspace DeleteGrafanaWorkspace delete

    *GrafanaWorkspace.

    acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}

    		 Nenhum Nenhum
    arms:ApplyScenario ApplyScenario none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetPrometheusInstance GetPrometheusInstance get

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:SearchAlertContact SearchAlertContact none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetAlertRules GetAlertRules get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:QueryTopology QueryAppTopology get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListDispatchRule ListEscalationPolicies none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteAlertRules DeleteAlertRule delete

    *AlertRule.

    acs:arms:{#regionId}:{#accountId}:AlertRule/{#AlertRuled}

    		 Nenhum Nenhum
    arms:ListPrometheusAlertTemplates ListPrometheusAlertTemplates none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetSourceMapInfo GetSourceMapInfo none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRetcodeDataByQuery GetRetcodeDataByQuery get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteIntegration DeleteIntegration none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:DescribeEnvPodMonitor DescribeEnvPodMonitor get

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:GetRumExceptionStack GetRumExceptionStack get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRumAppInfo GetRumAppInfo get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateAlertContactGroup UpdateAlertContactGroup none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetAppJVMConfig GetAppJVMConfig none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRetcodeLogstore GetRetcodeLogstore none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateGrafanaWorkspace CreateGrafanaWorkspace create

    *GrafanaWorkspace.

    acs:arms:{#regionId}:{#AccountId}:grafanaworkspace/*

    		 Nenhum Nenhum
    arms:OpenXtraceDefaultSLR OpenXtraceDefaultSLR none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:QueryReleaseMetric QueryReleaseMetric none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListEnvironmentDashboards ListEnvironmentDashboards none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:DescribePrometheusAlertRule DescribePrometheusAlertRule get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdatePrometheusInstance UpdatePrometheusInstance update

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:CreatePrometheusAlertRule CreatePrometheusAlertRule create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListRetcodeApps ListRetcodeApps none

    *RetcodeApp.

    acs:arms:{#regionId}:{#accountId}:retcodeapp/*

    		 Nenhum Nenhum
    arms:AddAliClusterIdsToPrometheusGlobalView AddAliClusterIdsToPrometheusGlobalView none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:DeletePrometheusGlobalView DeletePrometheusGlobalView none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:DeleteContact DeleteIMRobot none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRumOcuStatisticData GetRumOcuStatisticData get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetAlert ListInsightsEvents none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListGrafanaWorkspace ListGrafanaWorkspace list

    *GrafanaWorkspace.

    acs:arms:{#regionId}:{#accountId}:grafanaworkspace/*

    		 Nenhum Nenhum
    arms:DeleteEnvPodMonitor DeleteEnvPodMonitor delete

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:GetIntegrationState GetIntegrationState none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:DeleteRetcodeApp DeleteRetcodeApp none

    *RetcodeApp.

    acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}

    		 Nenhum Nenhum
    arms:CreateAlertRules CreateOrUpdateAlertRule create

    *AlertRule.

    acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}

    		 Nenhum Nenhum
    arms:CreatePrometheusInstance CreatePrometheusInstance create

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/*

    		 Nenhum Nenhum
    arms:CreateWebhook CreateWebhook none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:SetRetcodeShareStatus SetRetcodeShareStatus none

    *RetcodeApp.

    acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId}

    		 Nenhum Nenhum
    arms:CreateContact CreateOrUpdateWebhookContact none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListDispatchRule ListNotificationPolicies none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRumData GetRumDataForPage get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateAlertRules ImportAppAlertRules none

    *AlertRule.

    acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}

    		 Nenhum Nenhum
    arms:CheckServiceStatus CheckServiceStatus none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateDispatchRule CreateOrUpdateSilencePolicy none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:SearchTraceAppByName SearchTraceAppByName get

    *TraceApp.

    acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}

    		 Nenhum Nenhum
    arms:GetCloudClusterAllUrl GetCloudClusterAllUrl none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:CreateContact CreateOrUpdateContact none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListScenario ListScenario none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetSyntheticTask SwitchSyntheticTaskStatus none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListPrometheusGlobalView ListPrometheusGlobalView none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetSyntheticMonitors GetSyntheticMonitors none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:SearchAlertRules SearchAlertRules none

    *AlertRule.

    acs:arms:{#regionId}:{#AccountId}:AlertRule/*

    		 Nenhum Nenhum
    arms:ListEnvironmentFeatures ListEnvironmentFeatures none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:UpdatePrometheusIntegration UpdatePrometheusIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRecordingRule GetRecordingRule none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:SaveTraceAppConfig SaveTraceAppConfig none

    *TraceApp.

    acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}

    		 Nenhum Nenhum
    arms:GetTimingSyntheticTask GetTimingSyntheticTask get

    *SyntheticTask.

    acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}

    		 Nenhum Nenhum
    arms:ListEnvironmentAddons ListEnvironmentAddons none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:ListEnvironmentAlertRules ListEnvironmentAlertRules none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:OpenArmsDefaultSLR OpenArmsDefaultSLR none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeletePrometheusAlertRule DeletePrometheusAlertRule delete

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetAppApiPageInfo GetAppApiByPage none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:SearchAlertContactGroup SearchAlertContactGroup none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateDispatchRule UpdateDispatchRule none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListDashboards ListDashboards none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateEnvCustomJob UpdateEnvCustomJob update

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:AddPrometheusGlobalViewByAliClusterIds AddPrometheusGlobalViewByAliClusterIds none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeletePrometheusIntegration DeletePrometheusIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteEnvironment DeleteEnvironment delete

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:UpdateEnvDropMetricsRule UpdateEnvDropMetricsRule update

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:CreateDispatchRule CreateOrUpdateNotificationPolicy none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:RemoveSourcesFromPrometheusGlobalView RemoveSourcesFromPrometheusGlobalView none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:UpdatePrometheusMonitoring UpdatePrometheusMonitoring update

    *All resources.

    *

    		 Nenhum Nenhum
    arms:AppendInstancesToPrometheusGlobalView AppendInstancesToPrometheusGlobalView none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:DescribeEnvironmentFeature DescribeEnvironmentFeature none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:DeleteTimingSyntheticTask DeleteTimingSyntheticTask delete

    *SyntheticTask.

    acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}

    		 Nenhum Nenhum
    arms:SearchContact DescribeIMRobots none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListSyntheticDetail ListSyntheticDetail list

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetClusterAllUrl GetClusterAllUrl none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:GetTrace GetTrace none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetStack GetStack none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DescribeEnvDropMetricsRule DescribeEnvDropMetricsRule get

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:UpdateMetricDrop UpdateMetricDrop none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:InstallAddon InstallAddon none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:ListEnvPodMonitors ListEnvPodMonitors list

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:CreateOrUpdateEventBridgeIntegration CreateOrUpdateEventBridgeIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteAddonRelease DeleteAddonRelease none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:ListEnvServiceMonitors ListEnvServiceMonitors list

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:SyncRecordingRules SyncRecordingRules none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateRumApp UpdateRumFileStatus update

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateEnvCustomJob CreateEnvCustomJob create

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:TagResources TagResources update

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    *RetcodeApp.

    acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}

    *TraceApp.

    acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#EnvironmentId}

    *GrafanaWorkspace.

    acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}

    		 Nenhum Nenhum
    arms:GetCommercialStatus GetCommercialStatus none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetSyntheticTaskList GetSyntheticTaskList none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:InstallManagedPrometheus InstallManagedPrometheus none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:UpdateEnvServiceMonitor UpdateEnvServiceMonitor update

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:DeleteContactGroup DeleteContactGroup none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateAlertContact CreateAlertContact none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteScenario DeleteScenario none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListAddons ListAddons none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:QueryCommercialUsage QueryCommercialUsage get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CheckCommercialStatus CheckCommercialStatus none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteEnvServiceMonitor DeleteEnvServiceMonitor delete

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:DoInsightsAction DoInsightsAction get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateAlertRule UpdateAlertRule none

    *AlertRule.

    acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}

    		 Nenhum Nenhum
    arms:CloseAlarm CloseAlarm create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:SearchContact DescribeContacts none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UninstallManagedPrometheus UninstallManagedPrometheus none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:StopTimingSyntheticTask StopTimingSyntheticTask update

    *SyntheticTask.

    acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}

    		 Nenhum Nenhum
    arms:RemoveAliClusterIdsFromPrometheusGlobalView RemoveAliClusterIdsFromPrometheusGlobalView none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:SearchTraces SearchTraces none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreatePrometheusMonitoring CreatePrometheusMonitoring create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:SearchRetcodeAppByPage SearchRetcodeAppByPage get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetOnCallSchedulesDetail GetOnCallSchedulesDetail none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:StartAlertRule StartAlert none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetAlarmHistories ListAlerts none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:AddTagToFlinkCluster AddTagToFlinkCluster create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetRumApps GetRumApps list

    *Rum.

    acs:arms:{#regionId}:{#accountId}:rum/*

    		 Nenhum Nenhum
    arms:ChangeResourceGroup ChangeResourceGroup update

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    *RetcodeApp.

    acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}

    *TraceApp.

    acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#EnvironmentId}

    *GrafanaWorkspace.

    acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}

    *XTraceApp.

    acs:arms:{#regionId}:{#accountId}:xtraceapp/{#Pid}

    		 Nenhum Nenhum
    arms:CreateRumApp CreateRumApp create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetPrometheusApiToken GetPrometheusApiToken none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdatePrometheusMonitoringStatus UpdatePrometheusMonitoringStatus update

    *PrometheusMonitoring.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:GetPrometheusIntegration ListPrometheusIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateGrafanaWorkspace UpdateGrafanaWorkspace update

    *GrafanaWorkspace.

    acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}

    		 Nenhum Nenhum
    arms:CreateEnvPodMonitor CreateEnvPodMonitor create

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:StartTimingSyntheticTask StartTimingSyntheticTask update

    *SyntheticTask.

    acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}

    		 Nenhum Nenhum
    arms:CreateDispatchRule CreateDispatchRule none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DescribeTraceLicenseKey DescribeTraceLicenseKey get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateEnvPodMonitor UpdateEnvPodMonitor update

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:DeleteAlertContact DeleteAlertContact none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:BlockAlarmNotification BlockAlarmNotification create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:OpenVCluster OpenVCluster none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ChangeAlarmSeverity ChangeAlarmSeverity create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteSilencePolicy DeleteSilencePolicy none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DescribeDispatchRule DescribeDispatchRule none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteEnvCustomJob DeleteEnvCustomJob delete

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:UpgradeAddonRelease UpgradeAddonRelease none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:UpdateSourceMap Upload update

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListAlertEvents ListAlertEvents none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListEventBridgeIntegrations ListEventBridgeIntegrations none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListCmsInstances ListCmsInstances none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteSourceMap DeleteSourceMap delete

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteEventBridgeIntegration DeleteEventBridgeIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteTraceApp DeleteTraceApp none

    *TraceApp.

    acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}

    		 Nenhum Nenhum
    arms:GetSyntheticTaskDetail GetSyntheticTaskDetail none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:AddPrometheusGlobalView AddPrometheusGlobalView none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateContact CreateOrUpdateIMRobot none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListDispatchRule ListSilencePolicies none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateAlertContactGroup CreateAlertContactGroup none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteDispatchRule DeleteNotificationPolicy none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DescribeAddonRelease DescribeAddonRelease none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:UpdateWebhook UpdateWebhook none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteRumUploadFile DeleteRumUploadFile delete

    *All resources.

    *

    		 Nenhum Nenhum
    arms:AddIntegration AddIntegration none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:DeleteAlertRules DeleteAlertRules none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateRumUploadFileUrl CreateRumUploadFileUrl create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteSyntheticTask DeleteSyntheticTask none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteRumApp DeleteRumApp delete

    *All resources.

    *

    		 Nenhum Nenhum
    arms:AddGrafana AddGrafana none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:GetExploreUrl GetExploreUrl none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:ListEnvironmentKubeResources ListEnvironmentKubeResources none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdatePrometheusAlertRule UpdatePrometheusAlertRule update

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateGrafanaWorkspaceVersion UpdateGrafanaWorkspaceVersion update

    *GrafanaWorkspace.

    acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}

    		 Nenhum Nenhum
    arms:DelAuthToken DelAuthToken none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:SearchTraceAppByPage SearchTraceAppByPage none

    *TraceApp.

    acs:arms:{#regionId}:{#accountId}:traceapp/*

    		 Nenhum Nenhum
    arms:SearchTracesByPage SearchTracesByPage none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListPrometheusInstanceByTagAndResourceGroupId ListPrometheusInstanceByTagAndResourceGroupId list

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/*

    		 Nenhum Nenhum
    arms:QueryPromInstallStatus QueryPromInstallStatus none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:ClaimAlarm ClaimAlarm create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateContactGroup CreateOrUpdateContactGroup none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListPrometheusAlertRules ListPrometheusAlertRules list

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteGrafanaResource DeleteGrafanaResource none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:CreateTimingSyntheticTask CreateTimingSyntheticTask create

    *SyntheticTask.

    acs:arms:{#regionId}:{#accountId}:synthetictask/*

    		 Nenhum Nenhum
    arms:ListPrometheusMonitoring ListPrometheusMonitoring list

    *All resources.

    *

    		 Nenhum Nenhum
    arms:InstallCmsExporter InstallCmsExporter none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:QueryAppMetadata QueryAppMetadata get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListClusterFromGrafana ListClusterFromGrafana none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListEnvCustomJobs ListEnvCustomJobs list

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:DeleteContact DeleteWebhookContact none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteAlertContactGroup DeleteAlertContactGroup none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateEnvironment UpdateEnvironment update

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:ListDispatchRule ListDispatchRule none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdatePrometheusGlobalView UpdatePrometheusGlobalView update

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:GetMultipleTrace GetMultipleTrace none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetPrometheusGlobalView GetPrometheusGlobalView none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:GetRumUploadFiles GetRumUploadFiles get

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteCmsExporter DeleteCmsExporter none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:ListTimingSyntheticTasks ListTimingSyntheticTasks list

    *SyntheticTask.

    acs:arms:{#regionId}:{#accountId}:synthetictask/*

    		 Nenhum Nenhum
    arms:AddPrometheusIntegration AddPrometheusIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:CreateRetcodeApp CreateRetcodeApp none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:SearchContactGroup DescribeContactGroups none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteDispatchRule DeleteDispatchRule none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateTimingSyntheticTask UpdateTimingSyntheticTask create

    *SyntheticTask.

    acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}

    		 Nenhum Nenhum
    arms:UpdateContact SendTTSVerifyLink none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetAuthToken GetAuthToken none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:ConfigApp ConfigApp none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpgradeEnvironmentFeature UpgradeEnvironmentFeature none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:SearchContact DescribeWebhookContacts none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeleteEnvironmentFeature DeleteEnvironmentFeature none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:DescribeEnvServiceMonitor DescribeEnvServiceMonitor get

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:SearchEvents SearchEvents none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetTraceAppConfig GetTraceAppConfig get

    *TraceApp.

    acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}

    		 Nenhum Nenhum
    arms:GetAgentDownloadUrl GetAgentDownloadUrlV2 none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DescribeAddonMetrics DescribeAddonMetrics none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetManagedPrometheusStatus GetManagedPrometheusStatus none

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:InstallEnvironmentFeature InstallEnvironmentFeature none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:UpdateRumApp UpdateRumApp update

    *All resources.

    *

    		 Nenhum Nenhum
    arms:DeletePrometheusMonitoring DeletePrometheusMonitoring delete

    *All resources.

    *

    		 Nenhum Nenhum
    arms:BindPrometheusGrafanaInstance BindPrometheusGrafanaInstance update

    *Prometheus.

    acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}

    		 Nenhum Nenhum
    arms:DeleteAppList DeleteAppList none

    *TraceApp.

    acs:arms:{#regionId}:{#accountId}:traceapp/{#Pid}

    		 Nenhum Nenhum
    arms:AddPrometheusInstance AddPrometheusInstance none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetPrometheusIntegration GetPrometheusIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetTraceApp GetTraceApp none

    *TraceApp.

    acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}

    		 Nenhum Nenhum
    arms:ListDashboardsByName ListDashboardsByName none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListAddonReleases ListAddonReleases none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:GetSyntheticTask GetSyntheticTaskMonitors none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:RestartEnvironmentFeature RestartEnvironmentFeature none

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}

    		 Nenhum Nenhum
    arms:OpenArmsService OpenArmsServiceSecondVersion none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:SearchAlertHistories SearchAlertHistories none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:GetSyntheticTask CreateSyntheticTask create

    *All resources.

    *

    		 Nenhum Nenhum
    arms:UpdateIntegration UpdateIntegration none

    *All resources.

    *

    		 Nenhum Nenhum
    arms:ListEnvironments ListEnvironments list

    *Environment.

    acs:arms:{#regionId}:{#accountId}:environment/*

    		 Nenhum Nenhum
    arms:ListPrometheusInstances ListPrometheusInstances none

    *All resources.

    *

    		 Nenhum Nenhum

    Resource

    A tabela a seguir lista os recursos definidos por Application Real-Time Monitoring Service.. Especifique-os no elemento Resource das instruções de política RAM para conceder permissões para operações específicas. Eles são identificados de forma exclusiva por ARNs. Formato: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

    • acs: A sigla do serviço da Alibaba Cloud, que indica a nuvem pública da Alibaba Cloud.

    • {#ramcode}: O código usado no RAM para indicar um serviço da Alibaba Cloud.

    • {#regionId}: O ID da região. Se o recurso abrange todas as regiões, defina-o como um asterisco (*).

    • {#accountId}: O ID da conta da Alibaba Cloud. Se o recurso abrange todas as contas da Alibaba Cloud, defina-o como um asterisco (*).

    • {#resourceType}: O identificador de recurso definido pelo serviço. Suporta uma estrutura hierárquica, semelhante a um caminho de arquivo. Se a instrução abrange recursos globais, defina-o como um asterisco (*).

    Tipo de recurso

    ARN
    Environment.
    • acs:arms:{#regionId}:{#accountId}:environment/{#environmentId}
    • acs:arms:{#regionId}:{#accountId}:environment/*
    GrafanaWorkspace.
    • acs:arms:{#regionId}:{#accountId}:grafanaworkspace/{#GrafanaWorkspaceId}
    • acs:arms:{#regionId}:{#AccountId}:grafanaworkspace/*
    TraceApp.
    • acs:arms:{#regionId}:{#AccountId}:traceapp/{#Pid}
    • acs:arms:{#regionId}:{#accountId}:traceapp/*
    RetcodeApp.
    • acs:arms:{#regionId}:{#accountId}:retcodeapp/{#RetcodeAppId}
    • acs:arms:{#regionId}:{#accountId}:retcodeapp/*
    • acs:arms:{#regionId}:{#accountId}:retcodeapp/{#Pid}
    Prometheus.
    • acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}
    • acs:arms:{#regionId}:{#accountId}:Prometheus/{#ClusterId}
    • acs:arms:{#regionId}:{#accountId}:prometheus/*
    PrometheusMonitoring.
    • acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/{#monitoringName}/*
    • acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/*
    • acs:arms:{#regionId}:{#accountId}:prometheus/{#ClusterId}
    • acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/*
    • acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}/monitoring/{#type}/{#monitoringName}
    AlertRule.
    • acs:arms:{#regionId}:{#accountId}:AlertRule/{#AlertRuled}
    • acs:arms:{#regionId}:{#AccountId}:alertrule/{#AlertRuled}
    • acs:arms:{#regionId}:{#AccountId}:AlertRule/*
    PrometheusAlertRule.
    • acs:arms:${Region}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/${PrometheusAlertRuleId}
    • acs:arms:${Region}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/*
    • acs:arms:{#regionId}:{#accountId}:prometheusalertrule/{#ClusterId}/{#PrometheusAlertRuleId}
    • acs:arms:{#regionId}:${AccountId}:prometheus/${ClusterId}/prometheusalertrule/*
    IntegrationExporter.
    • acs:arms:{#regionId}:{#accountId}:prometheus/{#clusterId}
    SyntheticTask.
    • acs:arms:{#regionId}:{#accountId}:synthetictask/{#TaskId}
    • acs:arms:{#regionId}:{#accountId}:synthetictask/*
    Rum.
    • acs:arms:{#regionId}:{#accountId}:rum/*
    XTraceApp.
    • acs:arms:{#regionId}:{#accountId}:xtraceapp/{#Pid}

    Condition

    Application Real-Time Monitoring Service. não define chaves de condição em nível de produto. No entanto, você pode usar as chaves de condição comuns da Alibaba Cloud para controle de acesso. Para mais informações, consulte Chaves de condição comuns.

    Como criar políticas RAM personalizadas?

    Você pode criar políticas personalizadas e concedê-las a usuários RAM, grupos de usuários RAM ou funções RAM. Para instruções, consulte: