The service-linked role AliyunServiceRoleForEfloCnp allows CNP to access other Alibaba Cloud services. This topic covers its common scenarios, permissions, and deletion process.
Background information
AliyunServiceRoleForEfloCnp is a RAM role that CNP assumes to access other Alibaba Cloud services in specific scenarios. For more information, see Service-linked roles .
Common scenarios
CNP requires access to the ARMS resources of a Lingjun AI Computing cluster to run performance evaluations. The service-linked role grants these permissions.
Permissions of the service-linked role AliyunServiceRoleForEfloCnp
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"arms:OpenVCluster",
"arms:CheckServiceStatus",
"arms:GetCloudClusterAllUrl"
],
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "cnp.eflo.aliyuncs.com"
}
}
}
]
}
Delete the service-linked role AliyunServiceRoleForEfloCnp
Before you delete AliyunServiceRoleForEfloCnp, be aware that doing so prevents performance evaluations for all clusters in the current account.
To delete AliyunServiceRoleForEfloCnp, perform the following steps:
-
Log on to the Resource Access Management (RAM) console. In the left-side navigation bar, choose Identity Management > Roles.
-
On the Roles page, enter AliyunServiceRoleForEfloCnp in the search box to find the role.
-
In the Actions column on the right, click Delete Role.
-
In the Delete Role dialog box, click Delete Role.