AliyunCSManagedLogRolePolicy

{
	"Version": "1",
	"Statement": [{
			"Effect": "Allow",
			"Action": "cs:InstallClusterAddons",
			"Resource": "*",
			"Condition": {
				"ForAnyValue:StringEquals": {
					"cs:AddonNames": [
						"logtail-ds",
						"loongcollector"
					]
				}
			}
		},
		{
			"Effect": "Allow",
			"Action": "cs:GetClusterAddonInstance",
			"Resource": "*"
		},
		{
			"Action": [
				"log:CreateProject",
				"log:GetProject",
				"log:DeleteProject",
				"log:CreateLogStore",
				"log:GetLogStore",
				"log:UpdateLogStore",
				"log:DeleteLogStore",
				"log:CreateConfig",
				"log:UpdateConfig",
				"log:GetConfig",
				"log:DeleteConfig",
				"log:CreateMachineGroup",
				"log:UpdateMachineGroup",
				"log:GetMachineGroup",
				"log:DeleteMachineGroup",
				"log:ApplyConfigToGroup",
				"log:GetAppliedMachineGroups",
				"log:GetAppliedConfigs",
				"log:RemoveConfigFromMachineGroup",
				"log:RemoveConfigFromGroup",
				"log:CreateIndex",
				"log:GetIndex",
				"log:UpdateIndex",
				"log:DeleteIndex",
				"log:CreateSavedSearch",
				"log:GetSavedSearch",
				"log:UpdateSavedSearch",
				"log:DeleteSavedSearch",
				"log:CreateDashboard",
				"log:GetDashboard",
				"log:UpdateDashboard",
				"log:DeleteDashboard",
				"log:CreateJob",
				"log:GetJob",
				"log:DeleteJob",
				"log:UpdateJob",
				"log:PostLogStoreLogs",
				"log:CreateSortedSubStore",
				"log:GetSortedSubStore",
				"log:ListSortedSubStore",
				"log:UpdateSortedSubStore",
				"log:DeleteSortedSubStore",
				"log:CreateApp",
				"log:UpdateApp",
				"log:GetApp",
				"log:DeleteApp",
				"log:GetLogStoreLogs",
				"log:TagResources",
				"log:ListJobs",
				"log:ListTagResources",
				"log:UntagResources",
				"log:CreateResourceRecord",
				"log:UpdateResourceRecord",
				"log:UpsertResourceRecord",
				"log:GetResourceRecord",
				"log:DeleteResourceRecord",
				"log:ListResourceRecords",
				"log:ListResources",
				"log:GetResource",
				"log:PutLogs",
				"log:UpdateLogStoreMeteringMode",
				"log:GetLogStoreMeteringMode",
				"log:CreateLogtailPipelineConfig",
				"log:DeleteLogtailPipelineConfig",
				"log:GetLogtailPipelineConfig",
				"log:UpdateLogtailPipelineConfig",
				"log:ListLogtailPipelineConfig",
				"log:CreateSubStore",
				"cs:UpdateContactGroup",
				"cs:DescribeTemplates",
				"cs:DescribeTemplateAttribute",
				"eventbridge:PutEvents"
			],
			"Resource": [
				"*"
			],
			"Effect": "Allow"
		}
	]
}