KVCacheStore service-linked role - KVCacheStore - Alibaba Cloud Documentation Center

KVCacheStore uses a service-linked role to access resources in other Alibaba Cloud services. The system policy attached to the role is predefined by Alibaba Cloud.

Create a service-linked role

When you use specific KVCacheStore features, the system prompts you to create the required service-linked role. Each service-linked role has a system policy predefined by Alibaba Cloud. You cannot modify the policy.

AliyunServiceRoleForKVCacheStore

When you access the Overview or KVCacheStore list page of the KVCacheStore console, the system checks whether the service-linked role exists. If the role does not exist, the system prompts you to create it.

System policy: AliyunServiceRolePolicyForKVCacheStore

Policy content:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "eflo:ListVscs",
        "eflo:DescribeVsc"
      ],
      "Resource": "*"
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "kvcachestore.aliyuncs.com"
        }
      }
    }
  ]
}

Delete the service-linked role

When KVCacheStore no longer needs to access the related resources, delete the service-linked role in the Resource Access Management (RAM) console. For more information, see Service-linked roles.

Important

Before you delete the role, make sure that no KVCacheStore resources exist in the current Alibaba Cloud account.