云市场伙伴服务关联角色AliyunServiceRoleForMarketSupplier

背景信息

云市场伙伴首次发布MCP商品时，需要授权创建云市场伙伴服务关联角色AliyunServiceRoleForMarketSupplier，允许云市场伙伴工作台访问您云原生API网关中的资源，使用该权限查询、管理您的网关实例，以完成API/MCP服务的部署。

AliyunServiceRoleForMarketSupplier应用场景

伙伴在云市场发布MCP商品时，通过自动创建的云市场伙伴服务关联角色AliyunServiceRoleForMarketSupplier获取访问权限，在云原生网关中托管部署MCP服务。

AliyunServiceRoleForMarketSupplier权限说明

AliyunServiceRoleForMarketSupplier具备以下云服务的访问权限：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "apig:CreateConsumer",
        "apig:ListConsumers",
        "apig:UpdateConsumer",
        "apig:DeleteConsumer",
        "apig:CreateConsumerAuthorizationRules",
        "apig:QueryConsumerAuthorizationRules",
        "apig:GetConsumer",
        "apig:GetConsumerAuthorizationRule",
        "apig:CreateConsumerAuthorizationRule",
        "apig:CreateDomain",
        "apig:GetDomain",
        "apig:GetGateway",
        "apig:ListHttpApis",
        "apig:ListServices",
        "apig:CreateService",
        "apig:CreatePolicy",
        "apig:CreatePolicyAttachment",
        "apig:ListPolicies",
        "apig:UpdatePolicy",
        "apig:ListPlugins",
        "apig:CreatePluginAttachment",
        "apig:ListGateways",
        "apig:CreateMcpServer",
        "apig:DeployMcpServer",
        "apig:GetMcpServer",
        "apig:ListMcpServers"
      ],
      "Resource": "*"
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "supplier.market.aliyuncs.com"
        }
      }
    }
  ]
}