如果使用子账号开启日志投递可能由于相关权限问题导致无法开启,需要授予子账号相关权限。
{
"Version":"1",
"Statement":[
{
"Action":[
"log:CloseProductDataCollection",
"log:OpenProductDataCollection",
"log:GetProductDataCollection"
],
"Resource":[
"acs:mse:*:*:instance/*",
"acs:log:*:*:project/*/logstore/mse_*"
],
"Effect":"Allow"
},
{
"Action":"ram:PassRole",
"Resource":"acs:ram::*:role/aliyunserviceroleforslsaudit",
"Effect":"Allow"
},
{
"Action":"ram:CreateServiceLinkedRole",
"Resource":"*",
"Effect":"Allow",
"Condition":{
"StringEquals":{
"ram:ServiceName":"audit.log.aliyuncs.com"
}
}
}
]
}