You can create a scheduled SQL job in Simple Log Service by using the default role AliyunLogETLRole or a custom role. No additional permissions are required for the default role AliyunLogETLRole.
Background
The default role AliyunLogETLRole can run SQL analysis on source Logstores or Metricstores and write the results to destination Logstores or Metricstores. You only need to create the role without granting additional permissions.
Create the default role AliyunLogETLRole
You can create AliyunLogETLRole using one of the following methods:
-
You must use an Alibaba Cloud account or a RAM administrator to complete this authorization.
-
If AliyunLogETLRole already exists in your Alibaba Cloud account, you do not need to create it again.
-
Method 1: Click Cloud Resource Access Authorization and follow the on-screen instructions to create it.
-
Method 2: In the Create Scheduled SQL panel, click Default Role under Authorize and follow the on-screen instructions to create it.
What to do next
When you create a scheduled SQL job, set Write Authorization and SQL Execution Authorization to Default Role. For more information, see Create a scheduled SQL job.