背景信息

虛擬節點服務關聯角色AliyunServiceRoleForECIVnode是ECI為了實現虛擬節點功能，需要獲取其他云服務的訪問權限而提供的RAM角色。更多關于服務關聯角色的信息，請參見服務關聯角色。

AliyunServiceRoleForECIVnode應用場景

在創建虛擬節點（VNode）的過程中，系統需要訪問彈性容器實例ECI、云服務器ECS、專有網絡VPC的資源時，可以通過自動創建的虛擬節點服務關聯角色AliyunServiceRoleForECIVnode獲取訪問權限。

AliyunServiceRoleForECIVnode權限說明

虛擬節點服務關聯角色AliyunServiceRoleForECIVnode對應的角色權限策略為AliyunServiceRolePolicyForECIVnode，包含的云服務訪問權限如下：

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "eci:CreateContainerGroup",
                "eci:CreateContainerGroupFromTemplate",
                "eci:UpdateContainerGroup",
                "eci:UpdateContainerGroupByTemplate",
                "eci:RestartContainerGroup",
                "eci:DeleteContainerGroup",
                "eci:DescribeContainerGroups",
                "eci:ExportContainerGroupTemplate",
                "eci:ExecContainerCommand",
                "eci:CreateImageCache",
                "eci:DeleteImageCache",
                "eci:UpdateImageCache",
                "eci:DescribeImageCaches",
                "eci:DescribeContainerGroupMetric",
                "eci:DescribeMultiContainerGroupMetric",
                "eci:DescribeContainerLog",
                "eci:DescribeContainerGroupPrice",
                "eci:DescribeRegions"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "vpc:DescribeVSwitches",
                "vpc:DescribeVpcs",
                "vpc:DescribeEipAddresses"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "ecs:CreateNetworkInterfacePermission",
                "ecs:DeleteNetworkInterfacePermission",
                "ecs:CreateNetworkInterface",
                "ecs:DescribeNetworkInterfaces",
                "ecs:DescribeSecurityGroups"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": "ram:DeleteServiceLinkedRole",
            "Resource": "*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": "vnode.eci.aliyuncs.com"
                }
            }
        }
    ]
}

刪除AliyunServiceRoleForECIVnode

如果您需要刪除虛擬節點服務關聯角色AliyunServiceRoleForECIVnode，請先通過openAPI刪除依賴該服務關聯角色的虛擬節點資源。刪除虛擬節點后，您可以刪除AliyunServiceRoleForECIVnode。具體操作，請參見刪除RAM角色。