AliyunARMSFullAccess

AliyunARMSFullAccess 是阿里云管理的产品系统策略，您可以将 AliyunARMSFullAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理业务实时监控服务（ARMS）的权限。

策略详情

• 类型：系统策略

• 创建时间：2017-02-21 08:51:17

• 更新时间：2025-09-11 03:51:09

• 当前版本：v13

策略内容

{
	"Version": "1",
	"Statement": [{
			"Action": "arms:*",
			"Resource": "*",
			"Effect": "Allow"
		},
		{
			"Action": "cms:*",
			"Resource": "*",
			"Effect": "Allow"
		},
		{
			"Action": [
				"xtrace:Describe*",
				"xtrace:Get*",
				"xtrace:Read*"
			],
			"Resource": "*",
			"Effect": "Allow"
		},
		{
			"Action": "ram:CreateServiceLinkedRole",
			"Resource": "*",
			"Effect": "Allow",
			"Condition": {
				"StringEquals": {
					"ram:ServiceName": [
						"arms.aliyuncs.com",
						"audit.log.aliyuncs.com",
						"security.arms.aliyuncs.com"
					]
				}
			}
		},
		{
			"Action": [
				"log:GetLogStoreLogs",
				"log:QueryPrometheusMetrics",
				"log:QueryMetrics",
				"log:PostLogStoreLogs",
				"log:RemoteWritePrometheus",
				"log:RemoteWrite"
			],
			"Resource": "acs:log:*:*:project/*/logstore/aliyun-prom-*",
			"Effect": "Allow"
		},
		{
			"Action": [
				"log:GetMLServiceResults",
				"log:GetAgentInstanceConfig",
				"log:UpdateAgentInstanceConfig",
				"log:DeleteAgentInstanceConfig",
				"log:CreateAgentInstanceConfig"
			],
			"Resource": "*",
			"Effect": "Allow"
		},
		{
			"Action": [
				"log:GetLogStoreLogs"
			],
			"Resource": "acs:log:*:*:project/proj-xtrace-*/logstore/*",
			"Effect": "Allow"
		}
	]
}

相关文档

• 权限策略基本元素

• 为RAM用户授权

• 为RAM用户组授权

• 为RAM角色授权