AliyunCloudMonitorReadOnlyAccess

AliyunCloudMonitorReadOnlyAccess 是阿里云管理的产品系统策略，您可以将 AliyunCloudMonitorReadOnlyAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了只读访问云监控（CloudMonitor）的权限。

策略详情

• 类型：系统策略

• 创建时间：2016-01-27 02:50:30

• 更新时间：2023-08-11 01:54:29

• 当前版本：v10

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "cms:Get*",
        "cms:List*",
        "cms:Query*",
        "cms:BatchQuery*",
        "cms:Describe*",
        "cms:Check*",
        "cms:CreateDashboardFromOld",
        "cms:Cursor",
        "cms:BatchGet",
        "cms:BatchExport"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "arms:Describe*",
        "arms:List*",
        "arms:Get*",
        "arms:Search*",
        "arms:Check*",
        "arms:Query*"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "ecs:DescribeInstances",
        "rds:DescribeDBInstances",
        "slb:DescribeLoadBalancer*",
        "vpc:DescribeEipAddresses",
        "vpc:DescribeRouterInterfaces",
        "vpc:DescribeGlobalAccelerationInstances",
        "vpc:DescribeVpnGateways",
        "vpc:DescribeNatGateways",
        "vpc:DescribeBandwidthPackages",
        "vpc:DescribeCommonBandwidthPackages",
        "vpc:DescribePhysicalConnections",
        "vpc:DescribeVirtualBorderRouters",
        "oss:ListBuckets",
        "log:ListProject",
        "cdn:DescribeUserDomains",
        "mns:ListQueue",
        "mns:ListTopic",
        "ess:DescribeScalingGroups",
        "ocs:DescribeInstances",
        "kvstore:DescribeInstances",
        "kvstore:DescribeLogicInstanceTopology",
        "hbase:DescribeClusterList",
        "hitsdb:DescribeHiTSDBInstanceList",
        "dds:DescribeDBInstances",
        "petadata:DescribeInstances",
        "petadata:DescribeDatabases",
        "gpdb:DescribeDBInstances",
        "gdb:DescribeDBInstances",
        "emr:ListClusters",
        "opensearch:ListApps",
        "elasticsearch:ListInstance",
        "mongodb:DescribeDBInstances",
        "rds:DescribeReplicas",
        "CloudAPI:DescribeApis",
        "netgateway:DescribeNatGateways",
        "ddos:DescribeInstancePage",
        "live:DescribeLiveUserDomains",
        "cen:DescribeCens",
        "cen:DescribeCenAttachedChildInstances",
        "kafka:GetKafkaInstanceList",
        "scdn:DescribeScdnUserDomains",
        "dcdn:DescribeDcdnUserDomains",
        "polardb:DescribeDBInstances",
        "polardb:DescribeRegions",
        "polardb:DescribeDBClusters",
        "polardbx:DescribeDBInstances",
        "nas:DescribeFileSystems",
        "nas:DescribeRegions",
        "cs:DescribeClusters",
        "resourcemanager:GetAccount",
        "resourcemanager:ListAccountsForParent",
        "resourcemanager:ListAccounts",
        "resourcemanager:GetFolder",
        "resourcemanager:ListFoldersForParent",
        "resourcemanager:ListAncestors",
        "resourcemanager:GetResourceDirectory"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
    	"Action": [
    	  "quotas:ListProductQuotas",
    	  "quotas:GetProductQuota",
    	  "quotas:ListProducts",
    	  "quotas:ListProductQuotaDimensions",
    	  "quotas:ListProductDimensionGroups"
    	],
        "Resource": "acs:quotas:*:*:*",
        "Effect": "Allow"
    } 
  ]
}

相关文档

• 权限策略基本元素

• 为RAM用户授权

• 为RAM用户组授权

• 为RAM角色授权