All Products
Search
Document Center

Alibaba Cloud DNS:Service-linked role for Alibaba Cloud DNS

Last Updated:Jun 16, 2026

Alibaba Cloud DNS uses the service-linked role AliyunServiceRoleForDNS to access other cloud services on your behalf.

Scenarios

AliyunServiceRoleForDNS is a RAM role that allows Alibaba Cloud DNS to access other Alibaba Cloud services. For example, the DNS monitoring feature requires access to CloudMonitor resources. For more information about service-linked roles, see Service-linked roles.

Details of AliyunServiceRoleForDNS

  • Role name: AliyunServiceRoleForDNS

  • Policy name: AliyunServiceRolePolicyForDNS

  • Permissions:

    {
    "Version": "1",
    "Statement": [
      {
        "Action": [
          "cms:QueryTaskConfig",
          "cms:DescribeISPAreaCity",
          "cms:CreateTask",
          "cms:ModifyTask",
          "cms:DeleteTasks",
          "cms:DescribeTasks",
          "cms:DescribeTaskDetail",
          "cms:CreateAlarm",
          "cms:DeleteAlarm",
          "cms:UpdateAlarm",
          "cms:ListAlarm",
          "cms:QueryAlarm",
          "cms:QueryMetricList",
          "cms:QueryMetricLast",
          "cms:QueryTaskMonitorData",
          "cms:QueryStaticsAvailability",
          "cms:QueryStaticsErrorRate",
          "cms:QueryStaticsResponseTime",
          "cms:QueryErrorDistribution"
        ],
        "Resource": "*",
        "Effect": "Allow"
      }
    ]
    }

Delete the service-linked role

If you delete the AliyunServiceRoleForDNS service-linked role, your DNS monitoring jobs may become unavailable. Proceed with caution. For more information, see Delete a service-linked role.