Service-linked role

Background information

The service-linked role for IoT Mobile Connection Package (AliyunServiceRoleForLinkcard) is a Resource Access Management (RAM) role that grants IoT Mobile Connection Package the permissions required to access other Alibaba Cloud services. This role is necessary for the service to perform certain functions. For more information, see Service-linked roles.

Scenarios

The MQ message push feature of IoT Mobile Connection Package requires access to resources in Message Queue for Apache RocketMQ. This feature obtains the required access permissions using a service-linked role.

Role details

• Role name: AliyunServiceRoleForLinkcard

• Permissions:

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "mq:QueryInstanceBaseInfo",
          "mq:QueryTopicStatus",
          "mq:PUB"
        ],
        "Resource": "*"
      },
      {
        "Action": "ram:DeleteServiceLinkedRole",
        "Resource": "*",
        "Effect": "Allow",
        "Condition": {
          "StringEquals": {
            "ram:ServiceName": "dyiot.aliyuncs.com"
          }
        }
      }
    ]
  }

Delete the service-linked role

You can delete the AliyunServiceRoleForLinkcard role when you no longer need it. For more information, see Delete a service-linked role.

1. Log on to the IoT SIM service console.

2. In the navigation pane on the left, click MQ Push to go to the Message Queue Service page.

3. Clear the Allow IoT Mobile Connection Package to write data to the selected Message Queue topic checkbox and click OK.

   After you submit the change, the AliyunServiceRoleForLinkcard service-linked role is deleted.