Manage service-linked role for video encryption - ApsaraVideo Live

This topic describes the AliyunServiceRoleForLiveKes role for video encryption in ApsaraVideo Live.

Overview

AliyunServiceRoleForLiveKes is a service-linked role that ApsaraVideo Live uses to obtain the access permissions on Key Management Service (KMS) to create key pairs for video encryption. When you use video encryption, the role is automatically created.

Permissions

The following code shows the access permissions that the AliyunServiceRoleForLiveKes role has:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "kms:Encrypt",
        "kms:Decrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Effect": "Allow"
    }
  ]
}

Delete the role

If you no longer use video encryption and want to delete the AliyunServiceRoleForLiveKes role, perform the following steps:

Log on to the RAM console. In the left-side navigation pane, click Roles.
Enter AliyunServiceRoleForLiveKes in the search box to search for it.
Click Delete Role in the Actions column.
In the dialog box, click Delete Role.

Note

The role is automatically recreated if you use video encryption again.

Reference

To learn more about service-linked roles that authorize access across Alibaba Cloud services, see Service-linked roles.