Todos os produtos
Search
Central de documentação

Simple Log Service:Autorização RAM

Última atualização: Nov 03, 2026

O Resource Access Management (RAM) é um serviço fornecido pela Alibaba Cloud para gerenciar identidades de usuários e permissões de acesso a recursos. O uso do RAM ajuda a evitar o compartilhamento das chaves da sua conta da Alibaba Cloud com outros usuários e permite conceder aos usuários o acesso com privilégio mínimo. O RAM usa políticas de permissão para definir autorizações. Este tópico descreve a estrutura geral de uma política RAM e os elementos de instrução de política (Action, Resource e Condition) definidos por Simple Log Service para políticas de permissão RAM. O código RAM (RamCode) para Simple Log Service é log , e a granularidade de autorização suportada é RESOURCE .

Estrutura geral de uma política

As políticas de permissão suportam o formato JSON com a seguinte estrutura geral:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

A lista a seguir descreve os campos da política:

  • Version: Especifica o número da versão da política. É fixo em 1.

  • Statement:

    • Effect: Especifica o resultado da autorização. Valores válidos: Allow e Deny.

    • Action: Especifica uma ou mais operações que são permitidas ou negadas.

    • Resource: Especifica os objetos específicos afetados pelas operações. Você pode usar os Alibaba Cloud Resource Names (ARNs) para descrever recursos específicos.

    • Condition: Especifica as condições para que a autorização entre em vigor. Este campo é opcional.

      • Operador de condição: Especifica os operadores condicionais. Diferentes tipos de condições suportam diferentes operadores condicionais.

      • Condition_key: Especifica as chaves de condição.

      • Condition_value: Especifica os valores de condição.

Action

A tabela a seguir lista as ações definidas por Simple Log Service. As colunas da tabela são descritas a seguir:

  • Action: As ações podem ser usadas no elemento Action das instruções de política de permissão RAM para conceder permissões para realizar a operação.

  • API: A API que você pode chamar para realizar a ação.

  • Nível de acesso: O nível de acesso predefinido concedido para cada API. Valores válidos: create, list, get, update e delete.

  • Tipo de recurso: O tipo de recurso que suporta autorização para realizar a ação. Indica se a ação suporta permissão em nível de recurso. O recurso especificado deve ser compatível com a ação. Caso contrário, a política será ineficaz.

    • Para APIs com permissões em nível de recurso, os tipos de recursos obrigatórios são marcados com um asterisco (*). Especifique o ARN correspondente no elemento Resource da política.

    • Para APIs sem permissões em nível de recurso, é exibido como Todos os Recursos. Use um asterisco (*) no elemento Resource da política.

  • Chave de condição: As chaves de condição definidas pelo serviço. A chave permite controle granular, aplicando-se apenas a ações ou a ações associadas a recursos específicos. Além das chaves de condição específicas do serviço, a Alibaba Cloud fornece um conjunto de chaves de condição comuns aplicáveis a todos os serviços integrados ao RAM. Para mais informações, consulte Chaves de condição comuns.

  • Ação dependente: As ações dependentes necessárias para executar a ação. Para concluir a ação, o usuário RAM ou a função RAM deve ter permissões para realizar todas as ações dependentes.

Action

API

Nível de acesso

Tipo de recurso

Chave de condição

Ação dependente

log:GetThread GetThread get

*DataAgent

acs:log:{#regionId}:{#accountId}:dataagent/{#name}/thread/{#threadId}

Nenhum Nenhum
log:GetDataAgent GetDataAgent get

*DataAgent

acs:log:{#regionId}:{#accountId}:dataagent/{#name}

Nenhum Nenhum
log:DeleteOSSIngestion DeleteOSSIngestion delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/{#ossIngestionName}

Nenhum Nenhum
log:CreateThread CreateThread create

*All Resource

*

Nenhum Nenhum
log:DeleteDomain DeleteDomain delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/{#DomainName}

log:TLSVersion

Nenhum
log:PutConsumeProcessor PutConsumeProcessor create

*ConsumeProcessor

acs:log:{#regionId}:{#accountId}:project/{#project}/consumeprocessor/{#processorName}

log:TLSVersion

Nenhum
log:GetAppliedConfigs GetAppliedConfigs get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}

log:TLSVersion

Nenhum
log:ListDashboard ListDashboard list

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/*

log:TLSVersion

Nenhum
log:UpdateMetricStoreMeteringMode UpdateMetricStoreMeteringMode update

*All Resource

*

Nenhum Nenhum
log:GetIngestProcessor GetIngestProcessor get

*IngestProcessor

acs:log:{#regionId}:{#accountId}:project/{#project}/ingestprocessor/{#processorName}

log:TLSVersion

Nenhum
log:UpsertContextModel UpsertContextModel update

*ContextModel

acs:log:{#regionId}:{#accountId}:contextmodel/{#name}

Nenhum Nenhum
log:CreateDomain CreateDomain create

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/{#DomainName}

log:TLSVersion

Nenhum
log:DeleteConfig DeleteConfig delete

*All Resource

*

log:TLSVersion

Nenhum
log:CreateIndex CreateIndex create

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}

log:TLSVersion

Nenhum
log:CreateAlert CreateAlert create

*All Resource

*

Nenhum Nenhum
log:DeleteAgentInstanceConfig DeleteAgentInstanceConfig delete

*AgentInstanceConfig

acs:log:{#regionId}:{#accountId}:agentinstanceconfig/{#configType}

log:TLSVersion

Nenhum
log:UpdateLogStore UpdateLogStore update

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}

log:TLSVersion

log:Encrypted

Nenhum
log:UpdateSavedSearch UpdateSavedSearch update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}

log:TLSVersion

Nenhum
log:UpdateMachineGroup UpdateMachineGroup update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}

log:TLSVersion

Nenhum
log:UpdateLogtailPipelineConfig UpdateLogtailPipelineConfig update

*All Resource

*

log:TLSVersion

Nenhum
log:ListMachineGroup ListMachineGroup get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/*

log:TLSVersion

Nenhum
log:StopOSSIngestion StopOSSIngestion none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/{#ossIngestionName}

Nenhum Nenhum
log:GetAzureBlobIngestion GetAzureBlobIngestion get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/azureblobingestion/{#azureBlobIngestionName}

Nenhum Nenhum
log:DeleteAlert DeleteAlert delete

*All Resource

*

Nenhum Nenhum
log:DeleteStoreView DeleteStoreView delete

*All Resource

*

Nenhum Nenhum
log:ListOSSExports ListOSSExports list

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/*

Nenhum Nenhum
log:ListTagResources ListTagResources get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

log:TLSVersion

Nenhum
log:DeleteLogtailPipelineConfig DeleteLogtailPipelineConfig delete

*All Resource

*

log:TLSVersion

Nenhum
log:GetThreadData GetThreadData get

*DataAgent

acs:log:{#regionId}:{#accountId}:dataagent/{#name}/thread/{#threadId}

Nenhum Nenhum
log:DeleteAzureBlobIngestion DeleteAzureBlobIngestion delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/azureblobingestion/{#azureblobIngestionName}

Nenhum Nenhum
log:StopGCSIngestion StopGCSIngestion none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/gcsingestion/{#gcsIngestionName}

Nenhum Nenhum
log:DeleteMaxComputeExport DeleteMaxComputeExport delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/maxcomputeexport/{#mcExportName}

Nenhum Nenhum
log:CreateKafkaIngestion CreateKafkaIngestion create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/kafkaingestion/{#kafkaIngestionName}

Nenhum Nenhum
log:CreateDownloadJob CreateDownloadJob create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/downloadjob/{#downloadJobName}

Nenhum Nenhum
log:CreateProject CreateProject create

*Project

acs:log:{#regionId}:{#accountId}:project/{#projectName}

log:TLSVersion

Nenhum
log:UpdateIndex UpdateIndex update

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}

log:TLSVersion

Nenhum
log:UpdateLogStoreEncryption UpdateLogStoreEncryption update

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

Nenhum Nenhum
log:CreateScheduledSQL CreateScheduledSQL create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/{#scheduledSQLName}

Nenhum Nenhum
log:CreateOSSExport CreateOSSExport create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/{#ossExportName}

Nenhum Nenhum
log:DeleteLogging DeleteLogging delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging

log:TLSVersion

Nenhum
log:GetETL GetETL get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/etl/{#etlName}

Nenhum Nenhum
log:UpsertCollectionPolicy UpsertCollectionPolicy create

*CollectionPolicy

acs:log::{#accountId}:collectionpolicy/{#policyName}

log:TLSVersion

Nenhum
log:UpdateLogStoreMeteringMode UpdateLogStoreMeteringMode update

*All Resource

*

log:TLSVersion

Nenhum
log:RefreshToken RefreshToken create

*All Resource

*

log:TLSVersion

Nenhum
log:EnableAlert EnableAlert none

*All Resource

*

Nenhum Nenhum
log:DeleteMetricStore DeleteMetricStore delete

*MetricStore

acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#name}

Nenhum Nenhum
log:ConsumerGroupHeartBeat ConsumerGroupHeartBeat none

*All Resource

*

log:TLSVersion

Nenhum
log:CreateStoreView CreateStoreView create

*All Resource

*

Nenhum Nenhum
log:ListIngestProcessors ListIngestProcessors list

*IngestProcessor

acs:log:{#regionId}:{#accountId}:project/{#project}/ingestprocessor/*

log:TLSVersion

Nenhum
log:GetLogStoreMeteringMode GetLogStoreMeteringMode get

*All Resource

*

Nenhum Nenhum
log:CreateLogtailPipelineConfig CreateLogtailPipelineConfig create

*All Resource

*

log:TLSVersion

Nenhum
log:ListAlerts ListAlerts list

*Alert

acs:log:{#regionId}:{#accountId}:project/{#project}/alert/*

Nenhum Nenhum
log:ListScheduledSQLs ListScheduledSQLs none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/*

Nenhum Nenhum
log:GetSqlInstance GetSqlInstance none

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

Nenhum Nenhum
log:GetSavedSearch GetSavedSearch get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}

log:TLSVersion

Nenhum
log:ListDataAgents ListDataAgents list

*All Resource

*

Nenhum Nenhum
log:DeleteSavedSearch DeleteSavedSearch delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}

log:TLSVersion

Nenhum
log:CreateSourceModel CreateSourceModel create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}

Nenhum Nenhum
log:GetMaterializedView GetMaterializedView get

*All Resource

*

Nenhum Nenhum
log:UpdateOSSIngestion UpdateOSSIngestion update

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/{#ossIngestionName}

Nenhum Nenhum
log:ListMaxComputeExports ListMaxComputeExports list

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/maxcomputeexport/*

Nenhum Nenhum
log:ListETLs ListETLs list

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/etl/*

Nenhum Nenhum
log:StartOSSExport StartOSSExport none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/{#ossExportName}

Nenhum Nenhum
log:GetDashboard GetDashboard get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}

log:TLSVersion

Nenhum
log:StopETL StopETL none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/etl/{#etlName}

Nenhum Nenhum
log:GetOSSHDFSExport GetOSSHDFSExport get

*All Resource

*

Nenhum Nenhum
log:UpdateSqlInstance UpdateSqlInstance update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

Nenhum Nenhum
log:MergeShard MergeShard update

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

log:TLSVersion

Nenhum
log:DeleteIndex DeleteIndex delete

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}

log:TLSVersion

Nenhum
log:UpdateETL UpdateETL update

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/etl/{#etlName}

Nenhum Nenhum
log:UpdateDashboard UpdateDashboard update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}

log:TLSVersion

Nenhum
log:ListJobInstances ListJobInstances get

*All Resource

*

Nenhum Nenhum
log:DeleteETL DeleteETL delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/etl/{#etlName}

Nenhum Nenhum
log:ListOSSIngestions ListOSSIngestions list

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/*

Nenhum Nenhum
log:UpdateMetricStoreProcessor UpdateMetricStoreProcessor update

*MetricStore

acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#metricstore}

Nenhum Nenhum
log:GetMetricStore GetMetricStore get

*MetricStore

acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#name}

Nenhum Nenhum
log:DisableAlert DisableAlert none

*All Resource

*

Nenhum Nenhum
log:CreateDataAgent CreateDataAgent create

*All Resource

*

Nenhum Nenhum
log:CreateMetricStore CreateMetricStore create

*MetricStore

acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#name}

Nenhum Nenhum
log:GetMaxComputeExport GetMaxComputeExport get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/maxcomputeexport/{#mcExportName}

Nenhum Nenhum
log:UpsertSourceModel UpsertSourceModel update

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}

Nenhum Nenhum
log:UntagResources UntagResources delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

log:TLSVersion

Nenhum
log:CreateAzureBlobIngestion CreateAzureBlobIngestion create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/azureblobingestion/{#azureBlobIngestionName}

Nenhum Nenhum
log:UpdateMachineGroupMachine UpdateMachineGroupMachine update

*All Resource

*

log:TLSVersion

Nenhum
log:GetSourceModelStatus GetSourceModelStatus get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}

Nenhum Nenhum
log:GetGCSIngestion GetGCSIngestion get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/gcsingestion/{#gcsIngestionName}

Nenhum Nenhum
log:EnableService OpenSlsService create

*Service

acs:log::{#AccountId}:service

log:TLSVersion

Nenhum
log:CallAiTools CallAiTools update

*All Resource

*

Nenhum Nenhum
log:DeleteMachineGroup DeleteMachineGroup delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}

log:TLSVersion

Nenhum
log:CreateETL CreateETL create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/etl/{#etlName}

Nenhum Nenhum
log:CreateAgentInstanceConfig CreateAgentInstanceConfig create

*All Resource

*

log:TLSVersion

Nenhum
log:EnableScheduledSQL EnableScheduledSQL none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/{#scheduledSQLName}

Nenhum Nenhum
log:UpdateAgentInstanceConfig UpdateAgentInstanceConfig update

*AgentInstanceConfig

acs:log:{#regionId}:{#accountId}:agentinstanceconfig/{#configType}

log:TLSVersion

Nenhum
log:DeleteConsumerGroup DeleteConsumerGroup delete

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}

log:TLSVersion

Nenhum
log:GetAnnotationLabel GetAnnotationLabel get

*All Resource

*

Nenhum Nenhum
log:GetCursorOrData GetCursorTime get

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

log:TLSVersion

Nenhum
log:GetCollectionPolicy GetCollectionPolicy get

*CollectionPolicy

acs:log::{#accountId}:collectionpolicy/{#policyName}

log:TLSVersion

Nenhum
log:ListAnnotationDataSets ListAnnotationDataSets list

*All Resource

*

Nenhum Nenhum
log:GetProject GetProject get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

log:TLSVersion

Nenhum
log:DeleteIngestProcessor DeleteIngestProcessor delete

*IngestProcessor

acs:log:{#regionId}:{#accountId}:project/{#project}/ingestprocessor/{#processorName}

log:TLSVersion

Nenhum
log:ChangeResourceGroup ChangeResourceGroup update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

log:TLSVersion

Nenhum
log:GetDownloadJob GetDownloadJob get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/downloadjob/{#downloadJobName}

Nenhum Nenhum
log:ListS3Ingestions ListS3Ingestions list

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/s3ingestion/*

Nenhum Nenhum
log:CreateTicket CreateTicket create

*All Resource

*

log:TLSVersion

Nenhum
log:GetJobInstance GetJobInstance get

*All Resource

*

Nenhum Nenhum
log:ListMachines ListMachines get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}

log:TLSVersion

Nenhum
log:ListDownloadJobs ListDownloadJobs list

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/downloadjob/*

Nenhum Nenhum
log:PutIngestProcessor PutIngestProcessor update

*IngestProcessor

acs:log:{#regionId}:{#accountId}:project/{#project}/ingestprocessor/{#processorName}

log:TLSVersion

Nenhum
log:UpdateLogging UpdateLogging update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging

log:TLSVersion

Nenhum
log:CreateS3Ingestion CreateS3Ingestion create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/s3ingestion/{#s3IngestionName}

Nenhum Nenhum
log:UpdateMaxComputeExport UpdateMaxComputeExport update

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/maxcomputeexport/{#mcExportName}

Nenhum Nenhum
log:CreateLogStore CreateLogStore create

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstoreName}

log:TLSVersion

log:Encrypted

Nenhum
log:ListApiKeys ListApiKeys list

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/apikey/*

Nenhum Nenhum
log:ListConsumerGroup ListConsumerGroup get

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/consumergroup/*

log:TLSVersion

Nenhum
log:CreateOSSIngestion CreateOSSIngestion create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/{#ossIngestionName}

Nenhum Nenhum
log:ListSourceModels ListSourceModels list

*All Resource

*

Nenhum Nenhum
log:StartMaxComputeExport StartMaxComputeExport none

*All Resource

*

Nenhum Nenhum
log:CreateDashboard CreateDashboard create

*All Resource

*

log:TLSVersion

Nenhum
log:UpdateConsumerGroup UpdateConsumerGroup update

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}

log:TLSVersion

Nenhum
log:ListLogtailPipelineConfig ListLogtailPipelineConfig list

*All Resource

*

log:TLSVersion

Nenhum
log:GetIndex GetIndex get

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}

log:TLSVersion

Nenhum
log:ListAgentInstanceConfigs ListAgentInstanceConfigs list

*All Resource

*

log:TLSVersion

Nenhum
log:CreateConfig CreateConfig create

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}

log:TLSVersion

Nenhum
log:GetLogging GetLogging get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging

log:TLSVersion

Nenhum
log:PutProjectPolicy PutProjectPolicy create

*All Resource

*

log:TLSVersion

Nenhum
log:GetCursorOrData GetCursor get

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

log:TLSVersion

Nenhum
log:GetConsumeProcessor GetConsumeProcessor get

*ConsumeProcessor

acs:log:{#regionId}:{#accountId}:project/{#project}/consumeprocessor/{#processorName}

log:TLSVersion

Nenhum
log:GetLogtailPipelineConfig GetLogtailPipelineConfig get

*All Resource

*

log:TLSVersion

Nenhum
log:ListCollectionPolicies ListCollectionPolicies list

*CollectionPolicy

acs:log::{#accountId}:collectionpolicy/*

log:TLSVersion

Nenhum
log:GetAlert GetAlert get

*All Resource

*

Nenhum Nenhum
log:UpdateGCSIngestion UpdateGCSIngestion update

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/gcsingestion/{#gcsIngestionName}

Nenhum Nenhum
log:GetOSSIngestion GetOSSIngestion get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/{#ossIngestionName}

Nenhum Nenhum
log:DeleteS3Ingestion DeleteS3Ingestion delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/s3ingestion/{#s3IngestionName}

Nenhum Nenhum
log:ListAiTools ListAiTools list

*All Resource

*

Nenhum Nenhum
log:UpdateLogStoreProcessor UpdateLogStoreProcessor update

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}

Nenhum Nenhum
log:StopOSSExport StopOSSExport none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/{#ossExportName}

Nenhum Nenhum
log:ListStoreViews ListStoreViews list

*All Resource

*

Nenhum Nenhum
log:DeleteConsumeProcessor DeleteConsumeProcessor delete

*ConsumeProcessor

acs:log:{#regionId}:{#accountId}:project/{#project}/consumeprocessor/{#processorName}

log:TLSVersion

Nenhum
log:ListDomains ListDomains get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/*

log:TLSVersion

Nenhum
log:ListShards ListShards get

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

log:TLSVersion

Nenhum
log:CreateSqlInstance CreateSqlInstance create

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

Nenhum Nenhum
log:StartOSSIngestion StartOSSIngestion none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/{#ossIngestionName}

Nenhum Nenhum
log:ListMaterializedViews ListMaterializedViews list

*MaterializedView

acs:log:{#regionId}:{#accountId}:project/{#project}/materializedview/*

Nenhum Nenhum
log:CreateGCSIngestion CreateGCSIngestion create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/gcsingestion/{#gcsIngestionName}

Nenhum Nenhum
log:GetAgentInstanceConfig GetAgentInstanceConfig get

*AgentInstanceConfig

acs:log:{#regionId}:{#accountId}:agentinstanceconfig/{#configType}

log:TLSVersion

Nenhum
log:DeleteOSSExport DeleteOSSExport delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/{#ossExportName}

Nenhum Nenhum
log:CreateLogging CreateLogging create

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging

log:TLSVersion

Nenhum
log:CreateMaxComputeExport CreateMaxComputeExport create

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/maxcomputeexport/{#mcExportName}

Nenhum Nenhum
log:GetMachineGroup GetMachineGroup get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}

log:TLSVersion

Nenhum
log:GetOSSExport GetOSSExport get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/{#ossExportName}

Nenhum Nenhum
log:UpdateMetricStore UpdateMetricStore update

*MetricStore

acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#name}

Nenhum Nenhum
log:CreateConsumerGroup CreateConsumerGroup create

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}

log:TLSVersion

Nenhum
log:ListConfig ListConfig list

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/*

log:TLSVersion

Nenhum
log:StartGCSIngestion StartGCSIngestion none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/gcsingestion/{#gcsIngestionName}

Nenhum Nenhum
log:DescribeService GetSlsService get

*Service

acs:log::{#AccountId}:service

log:TLSVersion

Nenhum
log:ListAnnotationLabels ListAnnotationLabels list

*All Resource

*

Nenhum Nenhum
log:DeleteKafkaIngestion DeleteKafkaIngestion delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/kafkaingestion/{#kafkaIngestionName}

Nenhum Nenhum
log:GetMetricStoreMeteringMode GetMetricStoreMeteringMode get

*All Resource

*

Nenhum Nenhum
log:GetS3Ingestion GetS3Ingestion get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/s3ingestion/{#s3IngestionName}

Nenhum Nenhum
log:CreateSavedSearch CreateSavedSearch create

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}

log:TLSVersion

Nenhum
log:UpdateStoreView UpdateStoreView update

*All Resource

*

Nenhum Nenhum
log:ListOSSHDFSExports ListOSSHDFSExports list

*All Resource

*

Nenhum Nenhum
log:ListGCSIngestions ListGCSIngestions list

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/gcsingestion/*

Nenhum Nenhum
log:CreateOSSHDFSExport CreateOSSHDFSExport create

*All Resource

*

Nenhum Nenhum
log:GetAppliedMachineGroups GetAppliedMachineGroups get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}

log:TLSVersion

Nenhum
log:UpdateMaterializedView UpdateMaterializedView update

*All Resource

*

Nenhum Nenhum
log:CreateMaterializedView CreateMaterializedView create

*All Resource

*

Nenhum Nenhum
log:GetContextModel GetContextModel get

*ContextModel

acs:log:{#regionId}:{#accountId}:contextmodel/{#name}

Nenhum Nenhum
log:QueryContextModel QueryContextModel list

*ContextModel

acs:log:{#regionId}:{#accountId}:contextmodel/{#name}

Nenhum Nenhum
log:DeleteScheduledSQL DeleteScheduledSQL delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/{#scheduledSQLName}

Nenhum Nenhum
log:GetScheduledSQL GetScheduledSQL get

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/{#scheduledSQLName}

Nenhum Nenhum
log:DeleteProjectPolicy DeleteProjectPolicy delete

*All Resource

*

log:TLSVersion

Nenhum
log:GetApiKey GetApiKey get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/apikey/{#ApiKeyName}

Nenhum Nenhum
log:GetLogStoreConfig GetLogStoreConfig get

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

Nenhum Nenhum
log:ListSavedSearch ListSavedSearch get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/*

log:TLSVersion

Nenhum
log:UpdateAlert UpdateAlert update

*All Resource

*

Nenhum Nenhum
log:CreateAnnotationLabel CreateAnnotationLabel create

*All Resource

*

Nenhum Nenhum
log:GetMLServiceResults GetMLServiceResults list

*All Resource

*

Nenhum Nenhum
log:ListLogStores ListLogStores get

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/*

log:TLSVersion

Nenhum
log:ConsumerGroupUpdateCheckPoint ConsumerGroupUpdateCheckPoint update

*All Resource

*

log:TLSVersion

Nenhum
log:RemoveConfigFromGroup RemoveConfigFromMachineGroup delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}

log:TLSVersion

Nenhum
log:ListThreads ListThreads list

*DataAgent

acs:log:{#regionId}:{#accountId}:dataagent/{#name}/thread/*

Nenhum Nenhum
log:CreateMachineGroup CreateMachineGroup create

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}

log:TLSVersion

Nenhum
log:CreateContextModel CreateContextModel create

*ContextModel

acs:log:{#regionId}:{#accountId}:contextmodel/{#name}

Nenhum Nenhum
log:GetProjectPolicy GetProjectPolicy get

*All Resource

*

log:TLSVersion

Nenhum
log:UpdateOSSExport UpdateOSSExport update

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/{#ossExportName}

Nenhum Nenhum
log:ListProject ListProject get

*Project

acs:log:{#regionId}:{#accountId}:project/*

log:TLSVersion

Nenhum
log:DeleteLogStore DeleteLogStore delete

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}

log:TLSVersion

Nenhum
log:DeleteDashboard DeleteDashboard delete

*All Resource

*

log:TLSVersion

Nenhum
log:GetStoreViewIndex GetStoreViewIndex get

*All Resource

*

Nenhum Nenhum
log:GetConfig GetConfig get

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}

log:TLSVersion

Nenhum
log:ListMetricStores ListMetricStores list

*MetricStore

acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/*

Nenhum Nenhum
log:UpdateContextModel UpdateContextModel update

*ContextModel

acs:log:{#regionId}:{#accountId}:contextmodel/{#name}

Nenhum Nenhum
log:DeleteCollectionPolicy DeleteCollectionPolicy delete

*CollectionPolicy

acs:log::{#accountId}:collectionpolicy/{#policyName}

log:TLSVersion

Nenhum
log:DeleteMaterializedView DeleteMaterializedView delete

*All Resource

*

Nenhum Nenhum
log:UpdateScheduledSQL UpdateScheduledSQL update

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/{#scheduledSQLName}

Nenhum Nenhum
log:PutLogStoreConfig PutLogStoreConfig update

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

Nenhum Nenhum
log:DeleteProject DeleteProject delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}

log:TLSVersion

Nenhum
log:ListConsumeProcessors ListConsumeProcessors list

*ConsumeProcessor

acs:log:{#regionId}:{#accountId}:project/{#project}/consumeprocessor/*

log:TLSVersion

Nenhum
log:UpdateProject UpdateProject update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

log:TLSVersion

Nenhum
log:UpdateConfig UpdateConfig update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}

log:TLSVersion

Nenhum
log:SplitShard SplitShard update

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}

log:TLSVersion

Nenhum
log:StopMaxComputeExport StopMaxComputeExport none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/maxcomputeexport/{#mcExportName}

Nenhum Nenhum
log:QuerySourceModel QuerySourceModel list

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}

Nenhum Nenhum
log:TagResources TagResources create

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}

log:TLSVersion

Nenhum
log:GetLogStore GetLogStore get

*LogStore

acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}

log:TLSVersion

Nenhum
log:DisableScheduledSQL DisableScheduledSQL none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/{#scheduledSQLName}

Nenhum Nenhum
log:DeleteDownloadJob DeleteDownloadJob delete

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/downloadjob/{#downloadJobName}

Nenhum Nenhum
log:CreateApiKey CreateApiKey create

*All Resource

*

Nenhum Nenhum
log:StartETL StartETL none

*Project

acs:log:{#regionId}:{#accountId}:project/{#project}/etl/{#etlName}

Nenhum Nenhum
log:ApplyConfigToGroup ApplyConfigToMachineGroup update

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}

*Project

acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}

log:TLSVersion

Nenhum
log:GetStoreView GetStoreView get

*All Resource

*

Nenhum Nenhum
log:ListContextModels ListContextModels list

*All Resource

*

Nenhum Nenhum

Resource

A tabela a seguir lista os recursos definidos por Simple Log Service. Especifique-os no elemento Resource das instruções de política RAM para conceder permissões para operações específicas. Eles são identificados de forma exclusiva por ARNs. Formato: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

  • acs: A sigla do serviço da Alibaba Cloud, que indica a nuvem pública da Alibaba Cloud.

  • {#ramcode}: O código usado no RAM para indicar um serviço da Alibaba Cloud.

  • {#regionId}: O ID da região. Se o recurso abrange todas as regiões, defina-o como um asterisco (*).

  • {#accountId}: O ID da conta da Alibaba Cloud. Se o recurso abrange todas as contas da Alibaba Cloud, defina-o como um asterisco (*).

  • {#resourceType}: O identificador de recurso definido pelo serviço. Suporta uma estrutura hierárquica, semelhante a um caminho de arquivo. Se a instrução abrange recursos globais, defina-o como um asterisco (*).

Tipo de recurso

ARN

DataAgent
  • acs:log:{#regionId}:{#accountId}:dataagent/{#name}/thread/{#threadId}
  • acs:log:{#regionId}:{#accountId}:dataagent/{#name}
  • acs:log:{#regionId}:{#accountId}:dataagent/*
  • acs:log:{#regionId}:{#accountId}:dataagent/{#name}/thread/*
Project
  • acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/{#ossIngestionName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/{#DomainName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/apikey/{#ApiKeyName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/*
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}/azureblobingestion/{#azureBlobIngestionName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}/gcsingestion/{#gcsIngestionName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/maxcomputeexport/{#mcExportName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/kafkaingestion/{#kafkaIngestionName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/downloadjob/{#downloadJobName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/{#scheduledSQLName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/ossexport/{#ossExportName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging
  • acs:log:{#regionId}:{#accountId}:project/{#project}/etl/{#etlName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}/elasticsearchingestion/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/maxcomputeexport/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}/etl/*
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/elasticsearchingestion/{#elasticsearchIngestionName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/scheduledsql/{#jobName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/ossingestion/*
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{MachineGroup}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/s3ingestion/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}/downloadjob/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}/s3ingestion/{#s3IngestionName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/apikey/*
  • acs:log:{#regionId}:{#accountId}:project/*
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/elasticsearchingestion/{#esIngestionName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/*
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}/gcsingestion/*
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/*
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}//dashboard/{#DashboardName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/azureblobingestion/*
LogStore
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}
  • acs:log:{#Region}:{#AccountId}:project/{#ProjectName}/logstore/{#LogstoreName}
  • acs:log:${regionId}:${accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/consumergroup/{#ConsumerGroupName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstoreName}
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/consumergroup/*
  • acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/*
  • acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{l#ogstoreName}/consumergroup/{#ConsumerGroup}
ConsumeProcessor
  • acs:log:{#regionId}:{#accountId}:project/{#project}/consumeprocessor/{#processorName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/consumeprocessor/*
IngestProcessor
  • acs:log:{#regionId}:{#accountId}:project/{#project}/ingestprocessor/{#processorName}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/ingestprocessor/*
ContextModel
  • acs:log:{#regionId}:{#accountId}:contextmodel/{#name}
  • acs:log:{#regionId}:{#accountId}:contextmodel/*
AgentInstanceConfig
  • acs:log:{#regionId}:{#accountId}:agentinstanceconfig/{#configType}
  • acs:log:{#regionId}:{#accountId}:agentinstanceconfig/*
CollectionPolicy
  • acs:log::{#accountId}:collectionpolicy/{#policyName}
  • acs:log::{#accountId}:collectionpolicy/*
Ticket
  • acs:log::{#accountId}:ticket/*
MetricStore
  • acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#name}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#metricstore}
  • acs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/*
Alert
  • acs:log:{#regionId}:{#accountId}:project/{#project}/alert/*
MaterializedView
  • acs:log:{#regionId}:{#accountId}:project/{#project}/materializedview/*
Service
  • acs:log::{#AccountId}:service
Region
  • acs:log:{#regionId}:{#accountId}:*

Condition

A tabela a seguir lista as chaves de condição em nível de produto definidas por Simple Log Service. Você também pode usar as Chaves de condição comuns da Alibaba Cloud. Especifique essas chaves no elemento Condition das instruções de política RAM para definir regras de autorização granulares. Na chave de condição, especifique os valores de condição no elemento Condition_value da política.

Cada chave de condição possui um tipo de dado específico, como string, número, booleano ou endereço IP. O tipo de dado determina quais operadores condicionais podem ser usados para comparar os valores da solicitação com os valores da política. Você deve especificar os operadores condicionais compatíveis com o tipo de dado da chave de condição. Operadores incompatíveis tornarão a política inválida. Consulte Operador de condição para combinações válidas.

Chave de condição

Descrição

Tipo de dado

log:TLSVersion A versão do TLS.

Valores válidos:

  • TLSv1
  • TLSv1.1
  • TLSv1.2
  • TLSv1.3
String
log:Encrypted Especifica se uma configuração de criptografia é definida ao criar ou modificar um Logstore.

Valores válidos:

  • true
  • false
Boolean

Como criar políticas RAM personalizadas?

Você pode criar políticas personalizadas e concedê-las a usuários RAM, grupos de usuários RAM ou funções RAM. Para instruções, consulte: