AI Doc service-linked role

Updated at:

This topic describes the application scenarios for the AI Doc service-linked role and how to delete it.

Background information

The AI Doc service-linked role is a RAM role that allows AI Doc to access the OSS service and automatically synchronize result files when you subscribe to parsing results. For more information about service-linked roles, see Service-linked Role.

Scenarios

The AI Doc service-linked role provides the required access permissions to synchronize your documents with your OSS bucket.

Introduction to AliyunServiceRoleForDocSyncOSS

Role name: AliyunServiceRoleForDocSyncOSS

Access policy: AliyunServiceRolePolicyForDocSyncOSS

Permission description: To use this feature, you must first create a bucket in OSS whose name starts with aidoc. This enables document synchronization.

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "oss:PutObject",
        "oss:GetBucketInfo"
      ],
      "Resource": [
        "acs:oss:*:*:aidoc*/*",
        "acs:oss:*:*:aidoc*"
      ]
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "doc-sync-oss.carbon.aliyuncs.com"
        }
      }
    }
  ]
}

Delete the service-linked role

You cannot delete the AliyunServiceRoleForDocSyncOSS service-linked role after it has been used.