Service linked role for GTM

Overview

This topic describes the scenarios of the service linked role for Global Traffic Manager (GTM) and how to delete the service linked role. The service linked role is named AliyunServiceRoleForGTM, which is a Resource Access Management (RAM) role.

Background

GTM may need to access other cloud services to implement its own functions. Alibaba Cloud provides the service linked role that allows GTM to access other cloud services. For more information about service linked roles, see Service linked roles.

Scenarios

The alert group feature in GTM requires access to the cloud service resources of Cloud Monitor. GTM obtains permission to access these resources by using its service linked role. When you use this feature, the service linked role is automatically created. You do not need to manually create the role.

AliyunServiceRoleForDNS introduction

• Role name: AliyunServiceRoleForGTM

• Policy name: AliyunServiceRolePolicyForGTM

• Permissions:

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "cms:QueryContactGroup",
        "cms:QueryContact"
      ],
      "Resource": "*",
      "Effect": "Allow"
    }
  ]
}

Delete the service linked role

If you need to delete the service linked role for GTM, you must first delete all GTM instances.

• For more information about how to delete a service linked role, see Delete a service linked role.