AliyunARMSReadOnlyAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunARMSReadOnlyAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunARMSReadOnlyAccess policy: Provides read-only access to Application Real-Time Monitoring Service via Management Console.
Policy details
Type: service system policy
Creation time: 12:04:42 on May 09, 2019
Update time: 09:42:19 on February 27, 2025
Current version: v8
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"arms:DoInsightsAction",
"arms:Describe*",
"arms:List*",
"arms:Get*",
"arms:Search*",
"arms:Check*",
"arms:Query*",
"xtrace:Read*",
"xtrace:Get*",
"xtrace:Describe*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"cms:Get*",
"cms:List*",
"cms:Query*",
"cms:BatchQuery*",
"cms:Describe*",
"cms:Cursor",
"cms:BatchGet",
"cms:BatchExport",
"cms:Check*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "log:GetMLServiceResults",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"log:GetLogStoreLogs",
"log:QueryPrometheusMetrics",
"log:QueryMetrics"
],
"Resource": "acs:log:*:*:project/*/logstore/aliyun-prom-*",
"Effect": "Allow"
}
]
}