Cloud Migration Hub:Service-linked role for CMH

Scenarios

The AliyunServiceRoleForCMH role is applicable to the following scenarios:

• Access Server Migration Center (SMC): After you click connect in the Server migration tool section of the Migration tool page to connect CMH to SMC, CMH assumes the service-linked role to obtain the permissions to access SMC and synchronize the information about the tasks that you created in SMC.

• Access Data Transmission Service (DTS): After you click connect in the Database migration tool section of the Migration tool page to connect CMH to DTS, CMH assumes the service-linked role to obtain the permissions to access DTS and synchronize the information about the tasks that you created in DTS.

For more information about service-linked roles, see Service-linked roles.

Permissions

Role: AliyunServiceRoleForCMH

Policy: AliyunServiceRolePolicyForCMH

Policy description: By default, CMH assumes the service-linked role to access the resources of other Alibaba Cloud services, such as SMC and DTS.

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "smc:DescribeSourceServers",
                "smc:DescribeReplicationJobs"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "dts:DescribeDtsJobs"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Create the AliyunServiceRoleForCMH role

CMH automatically creates the AliyunServiceRoleForCMH role if this role does not exist when you perform one of the following operations for the first time:

• Connect CMH to a migration tool by calling the InitializeCMHTools operation.

• Connect CMH to a migration tool by clicking connect in the Server migration tool or Database migration tool section of the Migration tool page.

Delete the AliyunServiceRoleForCMH role

You can delete the AliyunServiceRoleForCMH role in the Resource Access Management (RAM) console. For more information, see Delete a RAM role.