AliyunCloudMonitorReadOnlyAccess 是阿里云管理的產品系統策略，您可以將 AliyunCloudMonitorReadOnlyAccess 授權給 RAM 身份（RAM 用戶、RAM 用戶組和 RAM 角色），本策略定義了只讀訪問云監控（CloudMonitor）的權限。

策略詳情

• 類型：系統策略

• 創建時間：2016-01-27 02:50:30

• 更新時間：2023-08-11 01:54:29

• 當前版本：v10

策略內容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "cms:Get*",
        "cms:List*",
        "cms:Query*",
        "cms:BatchQuery*",
        "cms:Describe*",
        "cms:Check*",
        "cms:CreateDashboardFromOld",
        "cms:Cursor",
        "cms:BatchGet",
        "cms:BatchExport"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "arms:Describe*",
        "arms:List*",
        "arms:Get*",
        "arms:Search*",
        "arms:Check*",
        "arms:Query*"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "ecs:DescribeInstances",
        "rds:DescribeDBInstances",
        "slb:DescribeLoadBalancer*",
        "vpc:DescribeEipAddresses",
        "vpc:DescribeRouterInterfaces",
        "vpc:DescribeGlobalAccelerationInstances",
        "vpc:DescribeVpnGateways",
        "vpc:DescribeNatGateways",
        "vpc:DescribeBandwidthPackages",
        "vpc:DescribeCommonBandwidthPackages",
        "vpc:DescribePhysicalConnections",
        "vpc:DescribeVirtualBorderRouters",
        "oss:ListBuckets",
        "log:ListProject",
        "cdn:DescribeUserDomains",
        "mns:ListQueue",
        "mns:ListTopic",
        "ess:DescribeScalingGroups",
        "ocs:DescribeInstances",
        "kvstore:DescribeInstances",
        "kvstore:DescribeLogicInstanceTopology",
        "hbase:DescribeClusterList",
        "hitsdb:DescribeHiTSDBInstanceList",
        "dds:DescribeDBInstances",
        "petadata:DescribeInstances",
        "petadata:DescribeDatabases",
        "gpdb:DescribeDBInstances",
        "gdb:DescribeDBInstances",
        "emr:ListClusters",
        "opensearch:ListApps",
        "elasticsearch:ListInstance",
        "mongodb:DescribeDBInstances",
        "rds:DescribeReplicas",
        "CloudAPI:DescribeApis",
        "netgateway:DescribeNatGateways",
        "ddos:DescribeInstancePage",
        "live:DescribeLiveUserDomains",
        "cen:DescribeCens",
        "cen:DescribeCenAttachedChildInstances",
        "kafka:GetKafkaInstanceList",
        "scdn:DescribeScdnUserDomains",
        "dcdn:DescribeDcdnUserDomains",
        "polardb:DescribeDBInstances",
        "polardb:DescribeRegions",
        "polardb:DescribeDBClusters",
        "polardbx:DescribeDBInstances",
        "nas:DescribeFileSystems",
        "nas:DescribeRegions",
        "cs:DescribeClusters",
        "resourcemanager:GetAccount",
        "resourcemanager:ListAccountsForParent",
        "resourcemanager:ListAccounts",
        "resourcemanager:GetFolder",
        "resourcemanager:ListFoldersForParent",
        "resourcemanager:ListAncestors",
        "resourcemanager:GetResourceDirectory"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
    	"Action": [
    	  "quotas:ListProductQuotas",
    	  "quotas:GetProductQuota",
    	  "quotas:ListProducts",
    	  "quotas:ListProductQuotaDimensions",
    	  "quotas:ListProductDimensionGroups"
    	],
        "Resource": "acs:quotas:*:*:*",
        "Effect": "Allow"
    } 
  ]
}

相關文檔

• 權限策略基本元素

• 為RAM用戶授權

• 為RAM用戶組授權

• 為RAM角色授權