通过子账号访问日志审计服务需要哪些RAMPolicy-阿里云帮助中心

问题描述

移动推送的子账号通过移动推送控制台访问回执日志的日志审计服务，需要的RAM Policy。

解决方案

回执日志参考官网。子账号通过移动推送控制台访问回执日志的日志审计服务，需要的RAM Policy（${aliyunUid}、${region}替换为具体值）：

{
  "Version": "1",
  "Statement": [{
      "Effect": "Allow",
      "Action": ["log:List*", "log:Get*"],
      "Resource": [
        "acs:log:*:*:project/slsaudit-center-${aliyunUid}-${region}",
        "acs:log:*:*:project/slsaudit-center-${aliyunUid}-${region}/logstore/*",
        "acs:log:*:*:project/slsaudit-center-${aliyunUid}-${region}/dashboard/*",
        "acs:log:*:*:project/slsaudit-center-${aliyunUid}-${region}/savedsearch/*"
      ]
    }, {
      "Effect": "Allow",
      "Action": ["log:GetApp"],
      "Resource": [
        "acs:log:*:*:*"
      ]
    }
  ]
}

适用于

移动推送