AliyunServiceRoleForPAIWorkspace grants Machine Learning Platform for AI (PAI) the permissions it needs to create event buses and event rules in EventBridge when you set up workspace notification rules. PAI creates and manages this role automatically — no manual permission configuration is required.
Overview
| Field | Value |
|---|---|
| Role name | AliyunServiceRoleForPAIWorkspace |
| Policy name | AliyunServiceRolePolicyForPAIWorkspace |
| Service name | aiworkspace.pai.aliyuncs.com |
PAI assumes this role to access your EventBridge resources. The policy grants the following permissions:
{
"Statement": [
{
"Effect": "Allow",
"Action": "eventbridge:PutEvents",
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "aiworkspace.pai.aliyuncs.com"
}
}
}
],
"Version": "1"
}When the role is created
The first time you create a notification rule for a PAI workspace, the system automatically creates AliyunServiceRoleForPAIWorkspace. No further action is needed.
For details on setting up notification rules, see Create a notification rule.
Delete the role
Before deleting AliyunServiceRoleForPAIWorkspace, make sure you no longer need to create or manage notification rules in PAI workspaces.
To delete the role, go to the Resource Access Management (RAM) console. For instructions, see Delete a RAM role.
Related topics
Service-linked roles — understand how service-linked roles differ from standard RAM roles