All Products
Search
Document Center

API Gateway:Service-linked role of API Gateway

Last Updated:Jun 19, 2024

This topic describes the use scenarios of the AliyunServiceRoleForApiGateway service-linked role. This topic also describes how to delete the service-linked role.

Background information

The AliyunServiceRoleForApiGateway service-linked role is a RAM role that is used to grant API Gateway the access permissions on Function Compute. This role is required if you configure an API whose backend service type is Function Compute. For more information, see the topics about service-linked roles.

Use scenarios

API Gateway accesses Function Compute by assuming the service-linked role.

Introduction to AliyunServiceRoleForApiGateway

Role name: AliyunServiceRoleForApiGateway Role policy: AliyunServiceRolePolicyForApiGateway Policy description:

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "fc:InvokeFunction"
      ],
      "Resource": "*",
      "Effect": "Allow"
    }
  ]
}

Delete the service-linked role

Before you delete AliyunServiceRoleForApiGateway, you must delete APIs whose backend service type is Function Compute.