Simple Log Service:Install Logtail on ECS instances

Prerequisites

Simple Log Service automatically installs Logtail on ECS instances based on Operation Orchestration Service (OOS). If you use a Resource Access Management (RAM) user to log on to the Simple Log Service console, make sure that the RAM user has management permissions on OOS and the Logtail-based Data Collection module supported by Simple Log Service.

• Simple Log Service

  In the Permission Assistant wizard, select Logtail-based Data Collection. For more information, see Configure the permission assistant feature.

• OOS

  • System permissions: AliyunOOSFullAccess.

    For more information about how to attach the AliyunOOSFullAccess policy to a RAM user, see Grant permissions to a RAM user.

  • Custom permissions: Create a custom policy that grants permissions to manage OOS resources based on the following example. For more information, see Create custom policies.

    After the custom policy is created, attach the policy to the RAM user. For more information, see Grant permissions to a RAM user.

    {
        "Version": "1",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": [
                    "ecs:DescribeTagKeys",
                    "ecs:DescribeTags",
                    "ecs:DescribeInstances",
                    "ecs:DescribeInvocationResults",
                    "ecs:RunCommand",
                    "ecs:DescribeInvocations"
                ],
                "Resource": "*"
            },
            {
                "Effect": "Allow",
                "Action": [
                    "oos:ListTemplates",
                    "oos:StartExecution",
                    "oos:ListExecutions",
                    "oos:GetExecutionTemplate",
                    "oos:ListExecutionLogs",
                    "oos:ListTaskExecutions"
                ],
                "Resource": "*"
            }
        ]
    }