文档

服务关联角色

更新时间:

本文为您介绍企业数据智能平台服务关联角色(AliyunServiceRoleForDataQ)的应用场景以及如何删除服务关联角色。

背景信息

企业数据智能平台服务关联角色(AliyunServiceRoleForDataQ)是在某些情况下,为了完成企业数据智能平台自身的某个功能,需要获取其他云服务的访问权限,而提供的RAM角色。更多关于服务关联角色的信息,请参见服务关联角色

应用场景

企业数据智能平台工作组的云计算资源功能中,以阿里云实例模式新建云资源时,需要访问RDS、AnalyticDB MySQL、AnalyticDB PostgreSQL、PolarDB等资源的实例信息,需通过服务关联角色功能获取访问权限。

AliyunServiceRoleForDataQ介绍

角色名称:AliyunServiceRoleForDataQ

角色权限策略:AliyunServiceRolePolicyForDataQ

权限说明:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "rds:DescribeDBInstances",
        "rds:DescribeDBInstanceAttribute",
        "rds:DescribeDBInstanceNetInfo",
        "rds:DescribeDatabases",
        "rds:DescribeDBInstanceIPArrayList",
        "rds:ModifySecurityIps"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "adb:DescribeDBClusters",
        "adb:DescribeDBClusterAttribute",
        "adb:DescribeDBClusterNetInfo",
        "adb:DescribeSchemas",
        "adb:DescribeDBClusterAccessWhiteList",
        "adb:ModifyDBClusterAccessWhiteList"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "gpdb:DescribeDBInstances",
        "gpdb:DescribeDBInstanceAttribute",
        "gpdb:DescribeDBInstanceNetInfo",
        "gpdb:DescribeDBInstanceIPArrayList",
        "gpdb:ModifySecurityIps"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "polardb:DescribeDBClusters",
        "polardb:DescribeDBClusterAttribute",
        "polardb:DescribeDBClusterEndpoints",
        "polardb:DescribeDatabases",
        "polardb:DescribeDBClusterAccessWhitelist",
        "polardb:ModifyDBClusterAccessWhitelist"
      ],
      "Resource": "*"
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "dataq.aliyuncs.com"
        }
      }
    }
  ]
}

删除服务关联角色

如果您需要删除AliyunServiceRoleForDataQ(服务关联角色),需要先删除以阿里云实例模式创建的云资源。

  • 本页导读 (1)
文档反馈