Simple Log Service：授權RAM使用者操作定時SQL

操作步驟

1. 使用阿里雲帳號（主帳號）或Resource Access Management員登入RAM控制台。

2. 建立一個自訂權限原則，其中在指令碼編輯頁簽，請使用以下指令碼替換配置框中的原有內容。具體操作，請參見通過指令碼編輯模式建立自訂權限原則。

   重要

   • 指令碼中的Project名稱和Logstore名稱請根據實際情況替換。

   • 如果您要使用RAM使用者配置定時SQL任務警示，還需授予RAM使用者警示操作許可權。更多資訊，請參見授權RAM使用者操作警示。

   • 權限原則中的Logstore包括了Logstore和MetricStore。當您的操作對象為MetricStore時，如下策略同樣適用。

   {
     "Version": "1",
     "Statement": [
       {
         "Effect": "Allow",
         "Action": [
           "log:GetJobInstance",
           "log:ModifyJobInstance",
           "log:ModifyJobInstanceState",
           "log:ListJobInstances"
         ],
         "Resource": "acs:log:*:*:project/Project名稱/job/*/jobinstance/*"
       },
       {
         "Effect": "Allow",
         "Action": [
           "log:ListJobs",
           "log:GetJob",
           "log:CreateJob",
           "log:UpdateJob",
           "log:DeleteJob"
         ],
         "Resource": "acs:log:*:*:project/Project名稱/job/*"
       },
       {
         "Effect": "Allow",
         "Action": [
           "log:ListLogStores",
           "log:ListSavedSearch",
           "log:ListDashboard"
         ],
         "Resource": "acs:log:*:*:project/Project名稱/*"
       },
       {
         "Effect": "Allow",
         "Action": [
           "log:GetLogStore",
           "log:GetIndex",
           "log:GetLogStoreHistogram",
           "log:GetLogStoreLogs"
         ],
         "Resource": "acs:log:*:*:project/Project名稱/logstore/Logstore名稱"
       },
       {
         "Effect": "Allow",
         "Action": [
           "ram:PassRole",
           "ram:GetRole",
           "ram:ListRoles"
         ],
         "Resource": "*"
       },
       {
         "Effect": "Allow",
         "Action": [
           "log:CreateLogStore",
           "log:CreateIndex",
           "log:UpdateIndex"
         ],
         "Resource": [
           "acs:log:*:*:project/sls-alert-*/logstore/internal-alert-center-log"
         ]
       },
       {
         "Effect": "Allow",
         "Action": [
           "log:CreateDashboard",
           "log:CreateChart",
           "log:UpdateDashboard"
         ],
         "Resource": [
           "acs:log:*:*:project/sls-alert-*/dashboard/*"
         ]
       },
       {
         "Effect": "Allow",
         "Action": [
           "log:CreateProject"
         ],
         "Resource": [
           "acs:log:*:*:project/sls-alert-*"
         ]
       }
     ]
   }

3. 為RAM使用者添加建立的自訂權限原則。具體操作，請參見為RAM使用者授權。