qwencloud-observe
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyreferences/ram_policies.md
LOWAnomalyLOW
references/ram_policies.md
The fragment is a declarative Alibaba Cloud RAM policy for infrastructure observability. It does not contain malware or obfuscated code, but it presents a meaningful security risk because Resource:* is used with ECS command execution and monitoring-agent installation. The policy should be tightened with resource and condition restrictions, explicit command controls, and careful handling of billing data and slow-log contents. The supplied text does not implement the stated Forbidden.RAM behavior; it only documents it.
Confidence: 98%Severity: 64%
Audit Metadata