AliyunCloudMonitorFullAccess

AliyunCloudMonitorFullAccess 是阿里云管理的产品系统策略，您可以将 AliyunCloudMonitorFullAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理云监控（CloudMonitor）的权限。

策略详情

• 类型：系统策略

• 创建时间：2016-01-27 02:50:27

• 更新时间：2025-08-20 08:51:38

• 当前版本：v17

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": "cms:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "arms:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "ecs:DescribeInstances",
        "rds:DescribeDBInstances",
        "slb:DescribeLoadBalancer*",
        "vpc:DescribeEipAddresses",
        "vpc:DescribeRouterInterfaces",
        "vpc:DescribeGlobalAccelerationInstances",
        "vpc:DescribeVpnGateways",
        "vpc:DescribeNatGateways",
        "vpc:DescribeBandwidthPackages",
        "vpc:DescribeCommonBandwidthPackages",
        "oss:ListBuckets",
        "log:ListProject",
        "log:EnableService",
        "log:GetMLServiceResults",
        "cdn:DescribeUserDomains",
        "mns:ListQueue",
        "mns:ListTopic",
        "ess:DescribeScalingGroups",
        "ocs:DescribeInstances",
        "kvstore:DescribeInstances",
        "kvstore:DescribeLogicInstanceTopology",
        "hbase:DescribeClusterList",
        "hitsdb:DescribeHiTSDBInstanceList",
        "dds:DescribeDBInstances",
        "petadata:DescribeInstances",
        "petadata:DescribeDatabases",
        "gpdb:DescribeDBInstances",
        "emr:ListClusters",
        "opensearch:ListApps",
        "elasticsearch:ListInstance",
        "mongodb:DescribeDBInstances",
        "rds:DescribeReplicas",
        "CloudAPI:DescribeApis",
        "netgateway:DescribeNatGateways",
        "ddos:DescribeInstancePage",
        "live:DescribeLiveUserDomains",
        "cen:DescribeCens",
        "cen:DescribeCenAttachedChildInstances",
        "kafka:GetKafkaInstanceList",
        "scdn:DescribeScdnUserDomains",
        "dcdn:DescribeDcdnUserDomains",
        "polardb:DescribeDBInstances",
        "polardb:DescribeRegions",
        "polardb:DescribeDBClusters",
        "cs:DescribeClusters",
        "resourcemanager:GetAccount",
        "resourcemanager:ListAccountsForParent",
        "resourcemanager:ListAccounts",
        "resourcemanager:GetFolder",
        "resourcemanager:ListFoldersForParent",
        "resourcemanager:ListAncestors",
        "resourcemanager:GetResourceDirectory",
        "tag:ListTagKeys",
        "tag:ListTagValues"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "quotas:ListProductQuotas",
        "quotas:GetProductQuota",
        "quotas:ListProducts",
        "quotas:ListProductQuotaDimensions",
        "quotas:ListProductDimensionGroups"
      ],
      "Resource": "acs:quotas:*:*:*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": [
            "cloudmonitor.aliyuncs.com",
            "audit.log.aliyuncs.com"
          ]
        }
      }
    },
    {
      "Action": [
        "log:GetLogStoreLogs",
        "log:GetLogStoreHistogram",
        "log:QueryPrometheusMetrics",
        "log:PostLogStoreLogs",
        "log:RemoteWritePrometheus"
      ],
      "Resource":["acs:log:*:*:project/*/logstore/aliyun-prom-*",
      "acs:log:*:*:project/proj-xtrace-*/logstore/logstore-tracing",
      "acs:log:*:*:project/proj-xtrace-*/logstore/logstore-profiling",
      "acs:log:*:*:project/proj-xtrace-*/logstore/logstore-agent",
      "acs:log:*:*:project/proj-xtrace-*/logstore/logstore-rum"],
      "Effect": "Allow"
    }
  ]
}

相关文档

• 权限策略基本元素

• 为RAM用户授权

• 为RAM用户组授权

• 为RAM角色授权