AliyunAgentLoopReadOnlyAccess 是阿里云管理的产品系统策略，您可以将 AliyunAgentLoopReadOnlyAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了只读访问 Agent 观测与优化（AgentLoop）的权限。
策略详情
类型：系统策略
创建时间：2026-06-11 18:00:04
更新时间：2026-07-07 10:13:08
当前版本：v2
策略内容
{
"Version": "1",
"Statement": [
{
"Action": [
"agentloop:Get*",
"agentloop:List*",
"agentloop:Describe*",
"agentloop:Search*",
"agentloop:ExecuteQuery"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"log:GetLogStoreLogs",
"log:GetLogStoreHistogram",
"log:GetIndex",
"log:GetLogStore",
"log:ListLogStores",
"log:GetProject",
"log:ListProject"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"airegistry:ListNamespaces",
"airegistry:ListNamespaceBySource",
"airegistry:GetNamespace",
"airegistry:GetPrompt",
"airegistry:ListPrompts",
"airegistry:ListPromptVersions",
"airegistry:GetPromptVersion",
"airegistry:GetPromptVersionDetail",
"airegistry:GetPromptGovernance",
"airegistry:GetSkillDetail",
"airegistry:GetSkillVersionDetail",
"airegistry:DownloadSkillVersion",
"airegistry:DownloadSkillVersionViaOss",
"airegistry:ListSkills"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"cms:ListWorkspaces",
"cms:GetWorkspace",
"cms:GetEntityStoreData",
"cms:GetServiceObservability",
"cms:DescribeIntranetRegions",
"cms:DescribeVpcForIntranetSynthetic",
"cms:DescribeVswitchForIntranetSynthetic",
"cms:DescribeSecurityGroupForIntranetSynthetic",
"cms:ListServices",
"cms:GetUmodelCommonSchemaRef",
"cms:ListAddons",
"cms:GetAddon",
"cms:GetAddonSchema",
"cms:GetAddonCodeTemplate",
"cms:GetAddonMetrics",
"cms:GetAddonAlertTemplates",
"cms:GetPrometheusUserSetting",
"cms:GetCmsService",
"cms:ListIntegrationPolicies",
"cms:GetIntegrationPolicy",
"cms:GetAddonRelease",
"cms:ListAddonReleases",
"cms:ListIntegrationPolicyAddons",
"cms:ListIntegrationPolicyDashboards",
"cms:GetPrometheusInstance",
"cms:ListPrometheusInstances",
"cms:GetCloudResource",
"cms:GetCloudResourceData",
"cms:GetRumInstance",
"cms:DescribeEnvironmentFeature"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"resourcecenter:GetResourceCenterServiceStatus"
],
"Resource": "*",
"Effect": "Allow"
}
]
}