管理服务关联角色AliyunServiceRoleForSLSAILens

应用场景

当您通过AI日志洞察应用采集AI类云产品日志时，日志服务会调用相关云产品的OpenAPI接口获取采集账号下的云产品信息。此过程中，日志服务需要通过AliyunServiceRoleForSLSAILens角色获取AI类云产品的部分读取权限及日志采集相关的部分修改权限。更多信息，请参见服务关联角色。

权限策略

• 角色名称：AliyunServiceRoleForSLSAILens

• 角色权限策略名称：AliyunServiceRolePolicyForSLSAILens

• 权限策略：

  {
      "Version": "1",
      "Statement": [
          {
              "Action": [
                  "pai:GetWorkspace",
                  "pai:ListWorkspaces"
              ],
              "Resource": "*",
              "Effect": "Allow"
          },
          {
              "Action": [
                  "log:CreateProject",
                  "log:GetProject",
                  "log:ListProject",
                  "log:ListLogStores",
                  "log:GetLogStore",
                  "log:CreateIndex",
                  "log:UpdateIndex",
                  "log:GetIndex",
                  "log:CreateDashboard",
                  "log:UpdateDashboard",
                  "log:ListDashboard",
                  "log:CreateLogStore",
                  "log:CreateSavedSearch",
                  "log:UpdateSavedSearch"
              ],
              "Resource": "acs:log:*:*:project/*",
              "Effect": "Allow"
          },
          {
              "Action": "ram:DeleteServiceLinkedRole",
              "Resource": "*",
              "Effect": "Allow",
              "Condition": {
                  "StringEquals": {
                      "ram:ServiceName": "ai-lens.log.aliyuncs.com"
                  }
              }
          }
      ]
  }