AliyunCloudMonitorFullAccess

AliyunCloudMonitorFullAccess 是阿里云管理的产品系统策略，您可以将 AliyunCloudMonitorFullAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理云监控（CloudMonitor）的权限。

策略详情

• 类型：系统策略

• 创建时间：2016-01-27 02:50:27

• 更新时间：2023-03-06 02:45:54

• 当前版本：v7

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": "cms:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "ecs:DescribeInstances",
        "rds:DescribeDBInstances",
        "slb:DescribeLoadBalancer*",
        "vpc:DescribeEipAddresses",
        "vpc:DescribeRouterInterfaces",
        "vpc:DescribeGlobalAccelerationInstances",
        "vpc:DescribeVpnGateways",
        "vpc:DescribeNatGateways",
        "vpc:DescribeBandwidthPackages",
        "vpc:DescribeCommonBandwidthPackages",
        "oss:ListBuckets",
        "log:ListProject",
        "cdn:DescribeUserDomains",
        "mns:ListQueue",
        "mns:ListTopic",
        "ess:DescribeScalingGroups",
        "ocs:DescribeInstances",
        "kvstore:DescribeInstances",
        "kvstore:DescribeLogicInstanceTopology",
        "hbase:DescribeClusterList",
        "hitsdb:DescribeHiTSDBInstanceList",
        "dds:DescribeDBInstances",
        "petadata:DescribeInstances",
        "petadata:DescribeDatabases",
        "gpdb:DescribeDBInstances",
        "emr:ListClusters",
        "opensearch:ListApps",
        "elasticsearch:ListInstance",
        "mongodb:DescribeDBInstances",
        "rds:DescribeReplicas",
        "CloudAPI:DescribeApis",
        "netgateway:DescribeNatGateways",
        "ddos:DescribeInstancePage",
        "live:DescribeLiveUserDomains",
        "cen:DescribeCens",
        "cen:DescribeCenAttachedChildInstances",
        "kafka:GetKafkaInstanceList",
        "scdn:DescribeScdnUserDomains",
        "dcdn:DescribeDcdnUserDomains",
        "polardb:DescribeDBInstances",
        "polardb:DescribeRegions",
        "polardb:DescribeDBClusters",
        "cs:DescribeClusters",
        "resourcemanager:GetAccount",
        "resourcemanager:ListAccountsForParent",
        "resourcemanager:ListAccounts",
        "resourcemanager:GetFolder",
        "resourcemanager:ListFoldersForParent",
        "resourcemanager:ListAncestors",
        "resourcemanager:GetResourceDirectory"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "cloudmonitor.aliyuncs.com"
        }
      }
    }
  ]
}

相关文档

• 权限策略基本元素

• 为RAM用户授权

• 为RAM用户组授权

• 为RAM角色授权