AliyunCloudMonitorFullAccess 是阿里云管理的產品系統策略，您可以將 AliyunCloudMonitorFullAccess 授權給 RAM 身份（RAM 用戶、RAM 用戶組和 RAM 角色），本策略定義了管理云監控（CloudMonitor）的權限。

策略詳情

• 類型：系統策略

• 創建時間：2016-01-27 02:50:27

• 更新時間：2023-03-06 02:45:54

• 當前版本：v7

策略內容

{
  "Version": "1",
  "Statement": [
    {
      "Action": "cms:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "arms:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "ecs:DescribeInstances",
        "rds:DescribeDBInstances",
        "slb:DescribeLoadBalancer*",
        "vpc:DescribeEipAddresses",
        "vpc:DescribeRouterInterfaces",
        "vpc:DescribeGlobalAccelerationInstances",
        "vpc:DescribeVpnGateways",
        "vpc:DescribeNatGateways",
        "vpc:DescribeBandwidthPackages",
        "vpc:DescribeCommonBandwidthPackages",
        "oss:ListBuckets",
        "log:ListProject",
        "cdn:DescribeUserDomains",
        "mns:ListQueue",
        "mns:ListTopic",
        "ess:DescribeScalingGroups",
        "ocs:DescribeInstances",
        "kvstore:DescribeInstances",
        "kvstore:DescribeLogicInstanceTopology",
        "hbase:DescribeClusterList",
        "hitsdb:DescribeHiTSDBInstanceList",
        "dds:DescribeDBInstances",
        "petadata:DescribeInstances",
        "petadata:DescribeDatabases",
        "gpdb:DescribeDBInstances",
        "emr:ListClusters",
        "opensearch:ListApps",
        "elasticsearch:ListInstance",
        "mongodb:DescribeDBInstances",
        "rds:DescribeReplicas",
        "CloudAPI:DescribeApis",
        "netgateway:DescribeNatGateways",
        "ddos:DescribeInstancePage",
        "live:DescribeLiveUserDomains",
        "cen:DescribeCens",
        "cen:DescribeCenAttachedChildInstances",
        "kafka:GetKafkaInstanceList",
        "scdn:DescribeScdnUserDomains",
        "dcdn:DescribeDcdnUserDomains",
        "polardb:DescribeDBInstances",
        "polardb:DescribeRegions",
        "polardb:DescribeDBClusters",
        "cs:DescribeClusters",
        "resourcemanager:GetAccount",
        "resourcemanager:ListAccountsForParent",
        "resourcemanager:ListAccounts",
        "resourcemanager:GetFolder",
        "resourcemanager:ListFoldersForParent",
        "resourcemanager:ListAncestors",
        "resourcemanager:GetResourceDirectory"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "quotas:ListProductQuotas",
        "quotas:GetProductQuota",
        "quotas:ListProducts",
        "quotas:ListProductQuotaDimensions",
        "quotas:ListProductDimensionGroups"
      ],
      "Resource": "acs:quotas:*:*:*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "cloudmonitor.aliyuncs.com"
        }
      }
    }
  ]
}

相關文檔

• 權限策略基本元素

• 為RAM用戶授權

• 為RAM用戶組授權

• 為RAM角色授權