AliyunCloudMonitorReadOnlyAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunCloudMonitorReadOnlyAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunCloudMonitorReadOnlyAccess policy: Provides read-only access to Cloud Monitor via Management Console.
Policy details
Type: service system policy
Creation time: 02:50:30 on January 27, 2016
Update time: 01:44:43 on January 30, 2026
Current version: v21
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"cms:Get*",
"cms:List*",
"cms:Query*",
"cms:BatchQuery*",
"cms:Describe*",
"cms:Check*",
"cms:CreateDashboardFromOld",
"cms:Cursor",
"cms:BatchGet",
"cms:BatchExport",
"cms:CountAlertHistoriesByFields",
"cms:CountAlertRulesByFields"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"arms:Describe*",
"arms:List*",
"arms:Get*",
"arms:Search*",
"arms:Check*",
"arms:Query*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ecs:DescribeInstances",
"rds:DescribeDBInstances",
"slb:DescribeLoadBalancer*",
"vpc:DescribeEipAddresses",
"vpc:DescribeRouterInterfaces",
"vpc:DescribeGlobalAccelerationInstances",
"vpc:DescribeVpnGateways",
"vpc:DescribeNatGateways",
"vpc:DescribeBandwidthPackages",
"vpc:DescribeCommonBandwidthPackages",
"vpc:DescribePhysicalConnections",
"vpc:DescribeVirtualBorderRouters",
"oss:ListBuckets",
"log:ListProject",
"log:GetMLServiceResults",
"cdn:DescribeUserDomains",
"mns:ListQueue",
"mns:ListTopic",
"ess:DescribeScalingGroups",
"ocs:DescribeInstances",
"kvstore:DescribeInstances",
"kvstore:DescribeLogicInstanceTopology",
"hbase:DescribeClusterList",
"hitsdb:DescribeHiTSDBInstanceList",
"dds:DescribeDBInstances",
"petadata:DescribeInstances",
"petadata:DescribeDatabases",
"gpdb:DescribeDBInstances",
"gdb:DescribeDBInstances",
"emr:ListClusters",
"opensearch:ListApps",
"elasticsearch:ListInstance",
"mongodb:DescribeDBInstances",
"rds:DescribeReplicas",
"CloudAPI:DescribeApis",
"netgateway:DescribeNatGateways",
"ddos:DescribeInstancePage",
"live:DescribeLiveUserDomains",
"cen:DescribeCens",
"cen:DescribeCenAttachedChildInstances",
"kafka:GetKafkaInstanceList",
"scdn:DescribeScdnUserDomains",
"dcdn:DescribeDcdnUserDomains",
"polardb:DescribeDBInstances",
"polardb:DescribeRegions",
"polardb:DescribeDBClusters",
"polardbx:DescribeDBInstances",
"nas:DescribeFileSystems",
"nas:DescribeRegions",
"cs:DescribeClusters",
"resourcemanager:GetAccount",
"resourcemanager:ListAccountsForParent",
"resourcemanager:ListAccounts",
"resourcemanager:GetFolder",
"resourcemanager:ListFoldersForParent",
"resourcemanager:ListAncestors",
"resourcemanager:GetResourceDirectory",
"tag:ListTagKeys",
"tag:ListTagValues"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"quotas:ListProductQuotas",
"quotas:GetProductQuota",
"quotas:ListProducts",
"quotas:ListProductQuotaDimensions",
"quotas:ListProductDimensionGroups"
],
"Resource": "acs:quotas:*:*:*",
"Effect": "Allow"
},
{
"Action": [
"log:GetLogStoreLogs",
"log:GetLogStoreHistogram",
"log:QueryPrometheusMetrics"
],
"Resource": [
"acs:log:*:*:project/*/logstore/aliyun-prom-*",
"acs:log:*:*:project/*/storeview/aliyun_prom_*",
"acs:log:*:*:project/proj-xtrace-*/logstore/logstore-tracing",
"acs:log:*:*:project/proj-xtrace-*/logstore/logstore-profiling",
"acs:log:*:*:project/proj-xtrace-*/logstore/logstore-agent",
"acs:log:*:*:project/proj-xtrace-*/logstore/logstore-rum"
],
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": [
"cms:CreateChat",
"cms:CreateThread"
],
"Resource": "acs:cms:*:*:digitalemployee/apsara-*"
}
]
}