AliyunCSManagedArmsRolePolicy 是專用于服務(wù)角色的授權(quán)策略，通常會(huì)在創(chuàng)建對(duì)應(yīng)的服務(wù)角色時(shí)同步完成授權(quán)，以允許服務(wù)角色代您訪問(wèn)其他云服務(wù)。本策略由對(duì)應(yīng)的阿里云服務(wù)按需更新，請(qǐng)勿將本策略授權(quán)給服務(wù)角色之外的 RAM 身份使用。

策略詳情

• 類型：系統(tǒng)策略

• 創(chuàng)建時(shí)間：2024-10-18 11:14:14

• 更新時(shí)間：2024-12-11 03:07:59

• 當(dāng)前版本：v19

策略內(nèi)容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "arms:CMonitorCloudInstances",
        "arms:CMonitorRegister",
        "arms:ConfigAgentLabel",
        "arms:CreateAlertRules",
        "arms:CreateAlertTemplate",
        "arms:CreateApp",
        "arms:CreateContact",
        "arms:CreateContactGroup",
        "arms:CreateDispatchRule",
        "arms:CreateOrUpdateIMRobot",
        "arms:CreateOrUpdateWebhookContact",
        "arms:CreateProm",
        "arms:CreatePrometheusAlertRule",
        "arms:DeleteAlert",
        "arms:DeleteAlertContact",
        "arms:DeleteAlertContactGroup",
        "arms:DeleteAlertRules",
        "arms:DeleteAlertTemplate",
        "arms:DeleteApp",
        "arms:DeleteContact",
        "arms:DeleteContactGroup",
        "arms:DeleteContactLink",
        "arms:DeleteContactMember",
        "arms:DeleteDispatchRule",
        "arms:DeleteIMRobot",
        "arms:DeletePrometheusAlertRule",
        "arms:DeleteWebhookContact",
        "arms:DescribeDispatchRule",
        "arms:DescribeIMRobots",
        "arms:DescribePrometheusAlertRule",
        "arms:DescribeWebhookContacts",
        "arms:DisableAlertTemplate",
        "arms:EnableAlertTemplate",
        "arms:GetAlarmHistories",
        "arms:GetAlert",
        "arms:GetAlertEvents",
        "arms:GetAlertRules",
        "arms:GetAlertRulesByPage",
        "arms:GetAssumeRoleCredentials",
        "arms:GetCommercialStatus",
        "arms:InstallEventer",
        "arms:InstallManagedPrometheus",
        "arms:ListActivatedAlerts",
        "arms:ListAlertTemplates",
        "arms:ListDashboards",
        "arms:ListDispatchRule",
        "arms:ListEscalationPolicies",
        "arms:ListOnCallSchedules",
        "arms:ListPrometheusAlertRules",
        "arms:ListPrometheusAlertTemplates",
        "arms:QueryAlarmHistory",
        "arms:QueryAlarmName",
        "arms:SaveAlert",
        "arms:SaveContactGroup",
        "arms:SaveContactMember",
        "arms:SaveTraceAppConfig",
        "arms:SearchAlarmHistories",
        "arms:SearchAlertRules",
        "arms:SearchContact",
        "arms:SearchContactGroup",
        "arms:SearchEvents",
        "arms:SendTTSVerifyLink",
        "arms:StartAlert",
        "arms:StartAlertRule",
        "arms:StopAlert",
        "arms:StopAlertRule",
        "arms:UninstallManagedPrometheus",
        "arms:UpdateAlertRules",
        "arms:UpdateAlertTemplate",
        "arms:UpdateContact",
        "arms:UpdateContactGroup",
        "arms:UpdateContactMember",
        "arms:UpdateDispatchRule",
        "arms:UpdatePrometheusAlertRule",
        "arms:UpgradeAddonRelease",
        "arms:CheckServiceStatus",
        "arms:GetClusterAllUrl",
        "arms:GetClusterInfoForArms",
        "arms:GetExploreUrl",
        "arms:GetIntegrationState",
        "arms:GetManagedPrometheusStatus",
        "arms:ListAlertEvents",
        "arms:QueryMetric",
        "arms:QueryPromInstallStatus",
        "arms:SearchAlertContactGroup",
        "arms:SearchAlertHistories",
        "arms:CreateAlertContact",
        "arms:CreateAlertContactGroup",
        "arms:ImportCustomAlertRules",
        "arms:SearchAlertContact",
        "arms:UpdateAlertContact",
        "arms:UpdateAlertContactGroup",
        "arms:UpdateAlertRule",
        "arms:UpdateWebhook",
        "arms:InnerFetchContactGroupByArmsContactGroupId",
        "xtrace:GetToken",
        "arms:ListEnvironments",
        "arms:DescribeAddonRelease",
        "arms:InstallAddon",
        "arms:DeleteAddonRelease",
        "arms:ListEnvironmentDashboards",
        "arms:ListAddonReleases",
        "arms:CreateEnvironment",
        "arms:InitEnvironment",
        "arms:DescribeEnvironment",
        "arms:InstallEnvironmentFeature",
        "arms:ListEnvironmentFeatures",
        "arms:UpdateEnvironment",
        "arms:GetPrometheusInstance",
        "arms:GetPrometheusApiToken"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    },
    {
      "Action": [
        "mse:AddBlackWhiteList",
        "mse:AddGateway",
        "mse:AddServiceSource",
        "mse:CreateApplication",
        "mse:DeleteGateway",
        "mse:GetBlackWhiteList",
        "mse:GetGateway",
        "mse:GetGatewayDetail",
        "mse:GetGatewayOption",
        "mse:ListServiceSource",
        "mse:ListTagResources",
        "mse:ModifyLosslessRule",
        "mse:TagResources",
        "mse:UntagResources",
        "mse:UpdateBlackWhiteList",
        "mse:UpdateGatewayOption",
        "mse:UpdateServiceSource",
        "mse:GetLicenseKey",
        "mse:CreateGovernanceKubernetesCluster",
        "mse:ReportOnePilotInfo",
        "mse:GenerateAgentLogSts",
        "mse:GetOpenSergoInfoByClusterId",
        "mse:ReportAppProfile"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    },
    {
      "Action": [
        "log:PostLogStoreLogs",
        "log:RemoteWritePrometheus",
        "log:RemoteWrite"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    },
    {
      "Action": [
        "cms:GetPrometheusInstance"
      ],
      "Resource": [
        "*"
      ],
      "Effect": "Allow"
    }
  ]
}

相關(guān)文檔

• 權(quán)限策略基本元素

• 普通服務(wù)角色