This topic explains when to use the service-linked role for Mobile Push, AliyunServiceRoleForCloudPush, and how to delete it.
Background information
The service-linked role for Mobile Push, AliyunServiceRoleForCloudPush, is a RAM role that allows Mobile Push to access other cloud services on your behalf. Mobile Push uses this role when one of its features requires permissions to access other cloud services. For more information about service-linked roles, see Service-linked roles.
Use cases
The sms linkage feature of Mobile Push uses the service-linked role to access Short Message Service resources.
AliyunServiceRoleForCloudPush details
Role name: AliyunServiceRoleForCloudPush
Role permission policy: AliyunServiceRolePolicyForCloudPush
Permissions:
{
"Version": "1",
"Statement": [
{
"Action": [
"dysms:SendSms",
"dysms:QuerySendDetails"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"mns:PublishMessage"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "cloudpush.aliyuncs.com"
}
}
}
]
}Delete the service-linked role
To delete the AliyunServiceRoleForCloudPush service-linked role, you must first disable the sms linkage feature.
To disable the sms linkage feature, see Configure SMS linkage.
To delete the service-linked role, see Delete a service-linked role.