EBS uses the AliyunServiceRoleForEBS service-linked role to access ECS resources on your behalf.
See Service-linked roles.
Create AliyunServiceRoleForEBS
When you first log on to the EBS console, you are prompted to create AliyunServiceRoleForEBS. This role has the following details:
-
Role name: AliyunServiceRoleForEBS
-
Role policy: AliyunServiceRolePolicyForEBS
-
Policy content:
{ "Version": "1", "Statement": [ { "Action": "ecs:DescribeDisks", "Resource": "*", "Effect": "Allow" } ] }
Delete AliyunServiceRoleForEBS
If you no longer need AliyunServiceRoleForEBS, you can delete it. See Delete a service-linked role.
Note
Before you delete AliyunServiceRoleForEBS, make sure that your account has no dedicated block storage clusters, CloudLens for EBS, or replication pairs. Otherwise, the role cannot be deleted.