Cluster management FAQ

Why can't my RAM user automatically create the AliyunServiceRoleForCDP service-linked role?

A Resource Access Management (RAM) user must have specific permissions to automatically create or delete the AliyunServiceRoleForCDP service-linked role. If a RAM user cannot automatically create the role, add the following access policy for the user.

{
    "Statement": [
        {
            "Action": [
                "ram:CreateServiceLinkedRole"
            ],
            "Resource": "acs:ram:*:YOUR_ACCOUNT_ID:role/*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": [
                        "ddicdp.aliyuncs.com"
                    ]
                }
            }
        }
    ],
    "Version": "1"
}