AliyunLogFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunLogFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunLogFullAccess policy: Provides full access to Log Service via Management Console.
Policy details
Type: service system policy
Creation time: 06:30:32 on January 05, 2016
Update time: 02:18:54 on January 09, 2026
Current version: v4
Policy content
{
"Version": "1",
"Statement": [
{
"Action": "log:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"audit.log.aliyuncs.com",
"alert.log.aliyuncs.com",
"middlewarelens.log.aliyuncs.com",
"storagelens.log.aliyuncs.com",
"ai-lens.log.aliyuncs.com",
"securitylens.log.aliyuncs.com"
]
}
}
},
{
"Effect": "Allow",
"Action": [
"cms:CreateChat",
"cms:CreateThread"
],
"Resource": "acs:cms:*:*:digitalemployee/apsara-*"
}
]
}