AliyunServiceRoleForECI
本文為您介紹彈性容器實(shí)例服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForECI以及如何刪除服務(wù)關(guān)聯(lián)角色。
背景信息
彈性容器實(shí)例服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForECI是ECI在某些情況下，為了完成自身的某個(gè)功能，需要獲取其他云服務(wù)的訪問(wèn)權(quán)限而提供的RAM角色。更多關(guān)于服務(wù)關(guān)聯(lián)角色的信息，請(qǐng)參見(jiàn)服務(wù)關(guān)聯(lián)角色。
AliyunServiceRoleForECI應(yīng)用場(chǎng)景
在創(chuàng)建ECI實(shí)例和鏡像緩存的過(guò)程中，ECI需要訪問(wèn)云服務(wù)器ECS、專有網(wǎng)絡(luò)VPC、容器鏡像服務(wù)ACR、日志服務(wù)SLS和負(fù)載均衡SLB的資源時(shí)，可以通過(guò)自動(dòng)創(chuàng)建的彈性容器實(shí)例服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForECI獲取訪問(wèn)權(quán)限。
AliyunServiceRoleForECI權(quán)限說(shuō)明
彈性容器實(shí)例服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForECI對(duì)應(yīng)的角色權(quán)限策略為AliyunServiceRolePolicyForECI，包含的云服務(wù)訪問(wèn)權(quán)限如下：
{
"Version": "1",
"Statement": [
{
"Action": [
"ecs:CreateNetworkInterfacePermission",
"ecs:DeleteNetworkInterfacePermission",
"ecs:DescribeNetworkInterfacePermissions",
"ecs:CreateNetworkInterface",
"ecs:DescribeNetworkInterfaces",
"ecs:AttachNetworkInterface",
"ecs:DetachNetworkInterface",
"ecs:DeleteNetworkInterface",
"ecs:DescribeSecurityGroups",
"ecs:TagResources"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"vpc:DescribeVSwitches",
"vpc:DescribeVSwitchAttributes",
"vpc:DescribeVpcs",
"vpc:AssociateEipAddress",
"vpc:UnassociateEipAddress",
"vpc:DescribeEipAddresses",
"vpc:AllocateEipAddress",
"vpc:ReleaseEipAddress",
"vpc:AddCommonBandwidthPackageIp",
"vpc:RemoveCommonBandwidthPackageIp",
"vpc:DescribeIpv6Addresses",
"vpc:DescribeIpv6Gateways",
"vpc:AllocateIpv6InternetBandwidth",
"vpc:TagResources"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"cr:PullRepository",
"cr:GetAuthorizationToken",
"cr:GetRepositoryLayers",
"cr:GetRepositoryManifest",
"cr:GetRepositoryTag",
"cr:GetRepository",
"cr:ListInstance",
"cr:ListInstanceEndpoint"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"log:CreateProject",
"log:GetProject",
"log:CreateLogStore",
"log:GetLogStore",
"log:CreateMachineGroup",
"log:CreateConfig",
"log:GetConfig",
"log:ApplyConfigToGroup",
"log:GetAppliedConfigs",
"log:CreateIndex",
"log:TagResources"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"slb:DescribeLoadBalancers",
"slb:RemoveBackendServers"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "eci.aliyuncs.com"
}
}
}
]
}刪除AliyunServiceRoleForECI
如果您需要?jiǎng)h除彈性容器實(shí)例服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForECI，請(qǐng)先通過(guò)控制臺(tái)或者OpenAPI刪除依賴該服務(wù)關(guān)聯(lián)角色的ECI資源，包括ECI實(shí)例和鏡像緩存。刪除ECI實(shí)例和鏡像緩存后，您可以刪除AliyunServiceRoleForECI。具體操作，請(qǐng)參見(jiàn)刪除RAM角色。