Service-linked Role-Cloudera Data Platform(CDP)-阿里云帮助中心

This topic describes AliyunServiceRoleForCDP, the service-linked role for Cloudera Data Platform (CDP), and explains how to delete the role.

Background information

AliyunServiceRoleForCDP, the service-linked role for Cloudera Data Platform (CDP), is a Resource Access Management (RAM) role. CDP uses this role to access other Alibaba Cloud services to perform specific functions. For more information about service-linked roles, see Service-linked roles.

AliyunServiceRoleForCDP Scenarios

The AliyunServiceRoleForCDP service-linked role is required to obtain access permissions when Cloudera Data Platform features, such as cluster creation and data source attachment, require access to resources from Alibaba Cloud services such as Elastic Compute Service (ECS) and Virtual Private Cloud (VPC).

Permissions of AliyunServiceRoleForCDP

AliyunServiceRoleForCDP can access the following Alibaba Cloud services:

"Action": [
  "acm:DescribeInstance",
  "acm:DescribeOrder",
  "acm:CreateOrder",
  "acm:DescribeProduct",
  "acm:DescribePrice",
  "ecs:RunInstances",
  "ecs:CreateInstance",
  "ecs:RenewInstance",
  "ecs:DescribeInstances",
  "ecs:DescribeDisks",
  "ecs:DescribeInstanceHistoryEvents",
  "ecs:DescribeInstanceStatus",
  "ecs:DescribeDeploymentSets",
  "ecs:DescribeAccountAttributes",
  "ecs:DescribeInstanceTypes",
  "ecs:AuthorizeSecurityGroup",
  "ecs:DescribeAvailableResource",
  "ecs:DescribePrice",
  "ecs:CreateDeploymentSet",
  "ecs:DeleteDeploymentSet",
  "ecs:ModifyInstanceChargeType",
  "ecs:ModifyInstanceSpec",
  "ecs:ModifyPrepayInstanceSpec",
  "ecs:AcceptInquiredSystemEvent",
  "ecs:RedeployInstance",
  "ecs:DescribeTasks",
  "ecs:ModifyInstanceAttribute",
  "ecs:DeleteInstances",
  "ecs:RebootInstances",
  "ecs:StartInstances",
  "ecs:StopInstances",
  "ecs:ResizeDisk",
  "ecs:AttachInstanceRamRole",
  "ecs:AllocateEipAddress",
  "ecs:AssociateEipAddress",
  "ecs:DescribeEipAddresses",
  "ecs:ReleaseEipAddress",
  "ecs:UnassociateEipAddress",
  "ecs:DescribeRenewalPrice"
],
"Resource": "*",
"Effect": "Allow"
}

Delete AliyunServiceRoleForCDP

Before you delete the AliyunServiceRoleForCDP service-linked role, you must release the CDP clusters that use this role.

For information about how to delete a service-linked role, see Delete a service-linked role.