Simple Log Service:Install Logtail on ECS instances

Prerequisites

If you use a Resource Access Management (RAM) user to log on to the Simple Log Service console, make sure that the RAM user has management permissions on CloudOps Orchestration Service (OOS) and the Logtail-based Data Collection module supported by Simple Log Service.

• Simple Log Service

  In the Permission Assistant wizard, select Logtail-based Data Collection. For more information, see Configure the permission assistant feature.

• OOS: Simple Log Service utilizes OOS to automatically install Logtail on ECS instances.

  • System permissions: AliyunOOSFullAccess.

    For more information about how to attach the AliyunOOSFullAccess policy to a RAM user, see Grant permissions to a RAM user.

  • Custom permissions: Create a custom policy that grants permissions to manage OOS resources based on the following example. For more information, see Create custom policies.

    After the custom policy is created, attach the policy to the RAM user. For more information, see Grant permissions to a RAM user.

    {
        "Version": "1",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": [
                    "ecs:DescribeTagKeys",
                    "ecs:DescribeTags",
                    "ecs:DescribeInstances",
                    "ecs:DescribeInvocationResults",
                    "ecs:RunCommand",
                    "ecs:DescribeInvocations"
                ],
                "Resource": "*"
            },
            {
                "Effect": "Allow",
                "Action": [
                    "oos:ListTemplates",
                    "oos:StartExecution",
                    "oos:ListExecutions",
                    "oos:GetExecutionTemplate",
                    "oos:ListExecutionLogs",
                    "oos:ListTaskExecutions"
                ],
                "Resource": "*"
            }
        ]
    }