Application scenarios of the service-linked role of DysmsLog and how to delete the service-linked role-Short Message Service(SMS)-阿里云帮助中心

This topic describes the application scenarios of the service-linked role (AliyunServiceRoleForDysmsLog) of DysmsLog and how to delete the service-linked role.

Background information

The service-linked role (AliyunServiceRoleForDysmsLog) of DysmsLog is a RAM role that is used to access other cloud services. For more information about service-linked roles, see Service-linked roles.

Common scenarios

The function of DysmsLog to write SMS sending records to Log Service requires access to resources of cloud services. We can obtain corresponding access permissions by using the service-linked role function.

AliyunServiceRoleForDysmsLog Introduction

Role name: AliyunServiceRoleForDysmsLog

Role policy: AliyunServiceRolePolicyForDysmsLog

Policy content:

{
    "Version": "1",
    "Statement": [
        {
            "Action": "ram:DeleteServiceLinkedRole",
            "Resource": "*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": "log.dysms.aliyuncs.com"
                }
            }
        },
        {
            "Action": "log:CreateProject",
            "Resource": "acs:log:*:*:project/sms-log-*",
            "Effect": "Allow"
        },
        {
            "Action": "log:CreateLogStore",
            "Resource": "acs:log:*:*:project/sms-log-*/logstore/*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "log:GetLogStore",
                "log:UpdateLogStore",
                "log:GetIndex",
                "log:CreateIndex",
                "log:UpdateIndex"
            ],
            "Resource": "acs:log:*:*:project/sms-log-*/logstore/sms-log",
            "Effect": "Allow"
        },
        {
            "Action": [
                "log:CreateDashboard",
                "log:GetDashboard",
                "log:UpdateDashboard"
            ],
            "Resource": "acs:log:*:*:project/sms-log-*/dashboard/*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "log:CreateSavedSearch",
                "log:UpdateSavedSearch"
            ],
            "Resource": "acs:log:*:*:project/sms-log-*/savedsearch/*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "log:PostLogStoreLogs"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Delete the AliyunServiceRoleForGwsDiskEncryption role

For more information about how to delete a service-linked AliyunServiceRoleForDysmsLog, see Delete a service-linked role.