PTS服務(wù)關(guān)聯(lián)角色
本文介紹PTS服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForPts以及如何刪除該角色。
背景信息
PTS服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForPts是PTS在某些情況下，為了完成自身的某個功能，需要獲取其他云服務(wù)的訪問權(quán)限而提供的RAM角色。更多關(guān)于服務(wù)關(guān)聯(lián)角色的信息，請參見服務(wù)關(guān)聯(lián)角色。
AliyunServiceRoleForPts應(yīng)用場景
PTS需要訪問應(yīng)用實時監(jiān)控服務(wù)ARMS、什么是消息隊列 Kafka 版、微服務(wù)引擎MSE、企業(yè)級分布式應(yīng)用服務(wù)EDAS等云服務(wù)的資源時，可通過自動創(chuàng)建的PTS服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForPts獲取訪問權(quán)限。
AliyunServiceRoleForPts權(quán)限說明
AliyunServiceRoleForPts具備以下云服務(wù)的訪問權(quán)限：
{
"Action": [
"arms:GetPrometheusApiToken",
"arms:OpenVCluster",
"arms:OpenArmsService",
"arms:CheckServiceStatus",
"arms:ListDashboards",
"arms:GetExploreUrl"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"alikafka:GetInstanceList",
"alikafka:GetTopicList"
],
"Resource": "*",
"Effect": "Allow"
}{
"Action": [
"kvsrote:DescribeInstanceAttribute",
"kvstore:DescribeInstances"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"polardb:DescribeDBClusters",
"polardb:DescribeDatabases",
"polardb:DescribeDBClusterEndpoints",
"polardb:DescribeAccounts"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"mse:GetServiceListPage",
"mse:GetServiceProvidersPage",
"mse:GetServiceDetail",
"mse:ListGatewayRoute"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"edas:GetServiceListPage",
"edas:GetServiceProvidersPage",
"edas:GetServiceMethodPage"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"log:ListLogStores",
"log:GetLogs",
"log:GetLogStoreLogs"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"cms:NodeList",
"cms:QueryMetricList",
"cms:NodeStatusList",
"cms:ListNodeStatus",
"cms:GetNodeStatus",
"cms:ListNode",
"cms:ListNodeProcesses",
"cms:CreateAgentInstallTask",
"cms:GetProfile",
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"ecs:DescribeInstances",
"ecs:DescribeInstances",
"ecs:DescribeInstanceMonitorData",
"ecs:DescribeInstanceAttribute",
"ecs:DescribeInstanceTypes",
"ecs:DescribeInstanceDisks",
"ecs:AuthorizeSecurityGroup",
"ecs:RevokeSecurityGroup",
"ecs:DescribeRegions",
"ecs:DescribeSecurityGroups",
"ecs:CreateNetworkInterface",
"ecs:DeleteNetworkInterface",
"ecs:DescribeNetworkInterfaces",
"ecs:CreateNetworkInterfacePermission",
"ecs:DescribeNetworkInterfacePermissions",
"ecs:DeleteNetworkInterfacePermission"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"yundun-ddoscoo:DescribeInstances",
"yundun-ddoscoo:DescribeInstanceDetails",
"yundun-ddoscoo:DescribeInstanceList",
"yundun-ddoscoo:DescribeInstanceSpecs",
"yundun-ddoscoo:DescribeDomains",
"yundun-ddoscoo:DescribeLayer7InstanceRelations"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"eip:DescribeEipAddresses",
"eip:DescribeEipMonitorData"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"rds:DescribeDatabases",
"rds:DescribeDBInstanceDetail",
"rds:DescribeDBInstances",
"rds:DescribeDBInstanceAttribute",
"rds:DescribeSlowLogs",
"rds:DescribeSlowLogRecords",
"rds:DescribeErrorLogs",
"rds:DescribeRegions"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"slb:DescribeLoadBalancers",
"slb:DescribeLoadBalancerAttribute",
"slb:DescribeHealthStatus",
"slb:DescribeRegions"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"yundun-waf:DescribePayInfo",
"yundun-waf:DescribeDomainNames",
"yundun-waf:DescribeDomainConfig"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"vpc:DescribeVpcs",
"vpc:DescribeVSwitches",
"vpc:DescribeVSwitchAttributes"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"cs:ListClusters",
"cs:GetClusterById",
"cs:DescribeClusterInnerServiceKubeconfig",
"cs:RevokeClusterInnerServiceKubeconfig"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"dms:SearchDatabase",
"dms:ListTables",
"dms:GetMetaTableDetailInfo",
"dms:CreateStructSyncOrder",
"dms:GetOrderBaseInfo"
],
"Resource": "*",
"Effect": "Allow"
} {
"Action": [
"bss:CreateOrder"
],
"Resource": "*",
"Effect": "Allow"
}刪除AliyunServiceRoleForPts
如果您使用了PTS功能，然后需要刪除PTS服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForPts，例如出于安全考慮，需要刪除該角色，則需要先明確刪除后的影響：刪除AliyunServiceRoleForPts后，無法使用服務(wù)測試、服務(wù)壓測功能。
刪除AliyunServiceRoleForPts的操作步驟如下：
使用阿里云賬號登錄RAM控制臺，在左側(cè)導(dǎo)航欄中單擊。
在角色頁面創(chuàng)建角色右側(cè)的搜索框中，輸入AliyunServiceRoleForPts，自動搜索到PTS的服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForPts。
在AliyunServiceRoleForPts的操作列單擊刪除。
在刪除角色對話框，單擊確定。
常見問題
為什么我的RAM用戶無法自動創(chuàng)建PTS服務(wù)關(guān)聯(lián)角色AliyunServiceRoleForPts？
您需要擁有指定的權(quán)限，才能自動創(chuàng)建或刪除AliyunServiceRoleForPts。因此，在RAM用戶無法自動創(chuàng)建AliyunServiceRoleForPts時，您需為其添加以下權(quán)限策略。
{
"Statement": [
{
"Action": [
"ram:CreateServiceLinkedRole"
],
"Resource": "acs:ram:*:主賬號ID:role/*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"pts.aliyuncs.com"
]
}
}
}
],
"Version": "1"
}請將主賬號ID替換為您實際的阿里云賬號ID。