Help Center/ Log Tank Service/ FAQs/ SDKs/ How Do I Configure Permission Authentication for Log Reporting via the Device SDKs?
Updated on 2025-08-25 GMT+08:00
View PDF
Share

How Do I Configure Permission Authentication for Log Reporting via the Device SDKs?

LTS provides iOS, Android, Web, applet, and quick app SDKs for mobile devices to report logs. This section describes how to configure permission authentication in different scenarios.

Using the iOS and Android SDKs

When using these SDKs to report logs to LTS, you are advised to use AK/SK authentication. For security purposes, create an IAM user and grant the minimum permissions to the IAM user. The procedure is as follows:

  1. Log in to the IAM console.
  2. On the Users page, click Create User.
  3. On the basic information configuration page, select Programmatic access for Access Type, deselect Management console access, select Access key for Credential Type, and retain the default values for other parameters.

  4. Click Next. You do not need to add the user to any user group.
  5. Click Create. The IAM user will be displayed in the user list. For more operations, see Creating an IAM User.
  6. Download the access key (AK/SK) generated for the user.

    The new user's AK/SK is restricted to reporting logs to LTS. They do not have permission to access the console or read/write other cloud services.

  7. Use the obtained AK/SK to report logs to LTS using the iOS SDK or Android SDK. For details, see Using SDKs to Ingest Logs to LTS.

Using the Web/Applet/Quick App SDKs

To use the web, Baidu applet, DingTalk applet, WeChat applet, Alipay applet, or quick app SDK to report logs to LTS, you must enable the anonymous write function for your log stream. However, enabling this function means logs are not authenticated and could lead to dirty data.

  1. Log in to the LTS console.
  2. On the Log Management page, locate the desired log group and click .
  3. Click Create Log Stream.
  4. On the displayed page, enable Anonymous Write. This function is applicable when devices report logs via SDKs. By enabling it, you grant the log stream permission for anonymous writing, which means no valid authentication will be performed. This may lead to the generation of dirty data.

  5. Click OK. For details, see Managing Log Streams.
  6. After enabling anonymous write, use the web, Baidu applet, DingTalk applet, WeChat applet, Alipay applet, or quick app SDK to report logs to LTS. For details, see .
Parent topic: SDKs