日本熟妇hd丰满老熟妇,中文字幕一区二区三区在线不卡 ,亚洲成片在线观看,免费女同在线一区二区

AI 助理
備案控制臺
文檔
輸入文檔關鍵字查找
首頁 日志服務 開發參考 API參考 授權信息

授權信息

更新時間：
產品詳情
我的收藏
訪問控制（RAM）是阿里云提供的管理用戶身份與資源訪問權限的服務。使用RAM可以讓您避免與其他用戶共享阿里云賬號密鑰，并可按需為用戶授予最小權限。RAM中使用權限策略描述授權的具體內容。
本文為您介紹日志服務（Sls）為RAM權限策略定義的操作（Action）、資源（Resource）和條件（Condition）。日志服務（Sls）的RAM代碼（RamCode）為[{"popCode":"Sls","ramCodes":["log"]}]，支持的授權粒度為RESOURCE。

權限策略通用結構

權限策略支持JSON格式，其通用結構如下：
{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}
各字段含義如下：
  • Effect：權限策略效果。取值：Allow（允許）、Deny（拒絕）。
  • Action：授予允許或拒絕權限的具體操作。具體信息，請參見操作（Action）。
  • Resource：受操作影響的具體對象，您可以使用資源ARN來描述指定資源。具體信息，請參見資源（Resource）。
  • Condition：指授權生效的條件。可選字段。具體信息，請參見條件（Condition）。
    • Condition_operator：條件運算符，不同類型的條件對應不同的條件運算符。具體信息，請參見權限策略基本元素。
    • Condition_key：條件關鍵字。
    • Condition_value：條件關鍵字對應的值。

操作（Action）

下表是日志服務（Sls）定義的操作，這些操作可以在RAM權限策略語句的Action元素中使用，用來授予執行該操作的權限。下面對表中的具體項提供說明：
  • 操作：是指具體的權限點。
  • API：是指操作對應的API接口。
  • 訪問級別：是指每個操作的訪問級別，取值為寫入（Write）、讀取（Read）或列出（List）。
  • 資源類型：是指操作中支持授權的資源類型。具體說明如下：
    • 對于必選的資源類型，用背景高亮的方式表示。
    • 對于不支持資源級授權的操作，用全部資源表示。
  • 條件關鍵字：是指云產品自身定義的條件關鍵字。該列不體現適用于任何操作的通用條件關鍵字。
  • 關聯操作：是指成功執行操作所需要的其他權限。操作者必須同時具備關聯操作的權限，操作才能成功。
操作API訪問級別資源類型條件關鍵字關聯操作
log:ListConfigListConfiglist
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/*
log:TLSVersion
無
log:GetLogtailPipelineConfigGetLogtailPipelineConfigget
全部資源
*
log:TLSVersion
無
log:UpdateProjectUpdateProjectupdate
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}
log:TLSVersion
無
log:GetMachineGroupGetMachineGroupget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}
log:TLSVersion
無
log:ListDomainsListDomainsget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/*
log:TLSVersion
無
log:GetCursorOrDataGetCursorTimeget
LogStore
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}
log:TLSVersion
無
log:GetAppliedMachineGroupsGetAppliedMachineGroupsget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}
log:TLSVersion
無
log:ConsumerGroupHeartBeatConsumerGroupHeartBeatnone
全部資源
*
log:TLSVersion
無
log:GetDashboardGetDashboardget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}
log:TLSVersion
無
log:UpdateLogtailPipelineConfigUpdateLogtailPipelineConfigupdate
全部資源
*
log:TLSVersion
無
log:UpdateDashboardUpdateDashboardupdate
全部資源
*
log:TLSVersion
無
log:UpdateConsumerGroupUpdateConsumerGroupupdate
LogStore
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}
log:TLSVersion
無
log:GetLogStoreGetLogStoreget
LogStore
acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}
log:TLSVersion
無
log:ChangeResourceGroupChangeResourceGroupupdate
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}
log:TLSVersion
無
log:CreateIndexCreateIndexcreate
LogStore
acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}
log:TLSVersion
無
log:ListTagResourcesListTagResourcesget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}
log:TLSVersion
無
log:GetAppliedConfigsGetAppliedConfigsget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}
log:TLSVersion
無
log:GetIndexGetIndexget
LogStore
acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}
log:TLSVersion
無
log:ListMachineGroupListMachineGroupget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/*
log:TLSVersion
無
log:ListETLsListETLslist
全部資源
*
無無
log:GetLogStoreMeteringModeGetLogStoreMeteringModeget
全部資源
*
無無
log:CreateLogStoreCreateLogStorecreate
LogStore
acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstoreName}
log:TLSVersion
log:Encrypted
無
log:UpdateIndexUpdateIndexupdate
LogStore
acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}
log:TLSVersion
無
log:GetConfigGetConfigget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}
log:TLSVersion
無
log:ListLogStoresListLogStoresget
LogStore
acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/*
log:TLSVersion
無
log:ConsumerGroupUpdateCheckPointConsumerGroupUpdateCheckPointupdate
全部資源
*
log:TLSVersion
無
log:UpdateConfigUpdateConfigupdate
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}
log:TLSVersion
無
log:GetProjectGetProjectget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}
log:TLSVersion
無
log:CreateSavedSearchCreateSavedSearchcreate
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}
log:TLSVersion
無
log:CreateDashboardCreateDashboardcreate
全部資源
*
log:TLSVersion
無
log:GetLoggingGetLoggingget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging
log:TLSVersion
無
log:CreateLoggingCreateLoggingcreate
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging
log:TLSVersion
無
log:ListProjectListProjectget
Project
acs:log:{#regionId}:{#accountId}:project/*
log:TLSVersion
無
log:ListConsumerGroupListConsumerGroupget
LogStore
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/consumergroup/*
log:TLSVersion
無
log:CreateMachineGroupCreateMachineGroupcreate
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}
log:TLSVersion
無
log:CreateConfigCreateConfigcreate
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}
log:TLSVersion
無
log:ListShardsListShardsget
LogStore
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}
log:TLSVersion
無
log:GetETLGetETLget
全部資源
*
無無
log:UpdateSavedSearchUpdateSavedSearchupdate
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}
log:TLSVersion
無
log:ListSavedSearchListSavedSearchget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/*
log:TLSVersion
無
log:UpdateLogStoreUpdateLogStoreupdate
LogStore
acs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}
log:TLSVersion
log:Encrypted
無
log:DeleteProjectDeleteProjectdelete
Project
acs:log:{#regionId}:{#accountId}:project/{#project}
log:TLSVersion
無
log:CreateConsumerGroupCreateConsumerGroupcreate
LogStore
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}
log:TLSVersion
無
log:GetSqlInstanceGetSqlInstancenone
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}
無無
log:ListMachinesListMachinesget
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}
log:TLSVersion
無
log:GetCursorOrDataGetCursorget
LogStore
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}
log:TLSVersion
無
log:CreateProjectCreateProjectcreate
Project
acs:log:{#regionId}:{#accountId}:project/{#projectName}
log:TLSVersion
無
log:ListDashboardListDashboardlist
Project
acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/*
log:TLSVersion
無

資源（Resource）

下表是日志服務（Sls）定義的資源，這些資源可以在RAM權限策略語句的Resource元素中使用，用來授予對該資源執行具體操作的權限。 其中，資源ARN是資源在阿里云上的唯一標識。具體說明如下：
  • {#}為變量標識，需要您替換為實際值。例如：{#ramcode}需要您替換為實際的云服務RAM代碼。
  • *表示全部。例如：
    • {#resourceType}為*時：表示全部資源。
    • {#regionId}為*時：表示全部地域。
    • {#accountId}為*時：表示全部阿里云賬號。
資源類型資源ARN
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/*
CollectionPolicyacs:log::{#accountId}:collectionpolicy/{#policyName}
Project acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}
Serviceacs:log::{#AccountId}:service
LogStoreacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}
LogStoreacs:log:*:{#accountId}:project/{ProjectName}/logstore/{#LogstoreName}
AgentInstanceConfigacs:log:{#regionId}:{#accountId}:agentinstanceconfig/{#configName}
IngestProcessoracs:log:{#regionId}:{#accountId}:project/{#project}/ingestprocessor/{#processorName}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{#MachineGroupName}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{DashboardName}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}//dashboard/{#DashboardName}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/*
Dashboardacs:log::{#accountId}:project/{#projectName}/dashboard/{#dashboardId}
ExternalStoreacs:log:{#regionId}:{#accountId}:externalstore/{#ProjectName}/{#ExternalStoreName}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logtailconfig/{#LogtailConfigName}
Regionacs:log:{#regionId}:{#accountId}:*
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/externalstore/{#ExternalStoreName}
LogStoreacs:log:${regionId}:${accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/consumergroup/{#ConsumerGroupName}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}
Ticketacs:log::{#accountId}:ticket/*
AgentInstanceConfigacs:log:{#regionId}:{#accountId}:agentinstanceconfig/*
LogStoreacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#logstoreName}/consumergroup/{#ConsumerGroup}
LogStoreacs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstore}
MetricStoreacs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#name}
CollectionPolicyacs:log::{#accountId}:collectionpolicy/*
MetricStoreacs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/*
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logging
ProcessConfigacs:log:{#regionId}:{#accountId}:processconfig/*
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/*
UnifiedObservabilityModelacs:log:{#regionId}:{#accountId}:UnifiedObservabilityModel/{#instanceId}
LogStoreacs:log:{#regionId}:{#accountId}:project/{#project}/logstore/{#logstoreName}
Dashboardacs:log::{#accountId}:project/*
UnifiedObservabilityModelacs:log:{#regionId}:{#accountId}:UnifiedObservabilityModel/*
ConsumeProcessoracs:log:{#regionId}:{#accountId}:project/{#project}/consumeprocessor/{#processorName}
LogStoreacs:log:{#regionId}:{#accountId}:project/{#project}/logstore/*
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/domain/{#DomainName}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/{#SavedSearchName}
LogStoreacs:log:*:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}
Projectacs:log:{#Region}:{#AccountId}:project/{#ProjectName}
Project acs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/{#DashboardName}
Projectacs:log:{#regionId}:{#accountId}:project/*
LogStoreacs:log:{#Region}:{#AccountId}:project/{#ProjectName}/logstore/{#LogstoreName}
LogStoreacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{#LogstoreName}/consumergroup/*
ConsumeProcessoracs:log:{#regionId}:{#accountId}:project/{#project}/consumeprocessor/*
LogStoreacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/logstore/{l#ogstoreName}/consumergroup/{#ConsumerGroup}
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/machinegroup/{MachineGroup}
Alertacs:log:{#regionId}:{#accountId}:project/{#project}/alert/*
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/savedsearch/*
Projectacs:log:{#regionId}:{#accountId}:project/{#project}
IngestProcessoracs:log:{#regionId}:{#accountId}:project/{#project}/ingestprocessor/*
Projectacs:log:{#regionId}:{#accountId}:project/{#ProjectName}/dashboard/*
MetricStoreacs:log:{#regionId}:{#accountId}:project/{#project}/metricstore/{#metricstore}

條件（Condition）

下表是日志服務（Sls）定義的產品級條件關鍵字，這些條件關鍵字可以在RAM權限策略語句的Condition元素中使用，用來描述授予權限的條件。以下僅列舉產品級的條件關鍵字，阿里云定義的通用條件關鍵字也同樣適用日志服務（Sls）。
其中，數據類型決定了您可以使用哪些條件運算符將請求中的值與權限策略語句中的值進行比較。您必須使用與數據類型匹配的條件運算符，否則無法匹配策略語句，授權行為無效。數據類型與條件運算符的對應關系，請參見條件操作類型。
條件關鍵字描述類型
log:TLSVersionTLS的版本String
log:Encrypted創建或者修改Logstore時是否指定加密配置Boolean

相關操作

您可以創建自定義權限策略，并將權限策略授予RAM用戶、RAM用戶組或RAM角色。具體操作如下：