PolarDB:Service-linked role for PolarDB

Background information

The service-linked role for PolarDB (AliyunServiceRoleForPolarDB) is a RAM role provided to obtain access permissions to other cloud services when PolarDB needs to implement a specific feature.

Scenarios

• of PolarDBprivate domain nameThe feature needs to access PrivateZone cloud service resources, and access permissions must be obtained through the service-linked role.

• of PolarDBcreate a PolarDB for MySQL cluster by migrating an ApsaraDB RDS for MySQL instance、Clone an ApsaraDB RDS for MySQL instance to PolarDB for MySQLandUpgrade RDS PostgreSQL to PolarDB for PostgreSQLThe feature needs to access DTS cloud service resources, and access permissions must be obtained through the service-linked role.

• of PolarDBDatabase proxyThe feature needs to access PrivateLink resources, requiring access permissions through the service-linked role.

• The network type of PolarDB needs to access VPC resources, requiring access permissions through the service-linked role.

AliyunServiceRoleForPolarDB overview

Role name: AliyunServiceRoleForPolarDB

Role policy: AliyunServiceRolePolicyForPolarDB

Permissions:

{
    "Action": [
      "pvtz:DescribeUserServiceStatus",
      "pvtz:DescribeZones",
      "pvtz:DescribeZoneInfo",
      "pvtz:DescribeZoneRecords",
      "pvtz:CheckZoneName",
      "pvtz:AddZone",
      "pvtz:BindZoneVpc",
      "pvtz:DeleteZone",
      "pvtz:AddZoneRecord",
      "pvtz:UpdateZoneRecord",
      "pvtz:DeleteZoneRecord",
      "dts:CreateDtsInstance",
      "dts:ConfigureDtsJob",
      "dts:StartDtsJob",
      "dts:DescribePreCheckStatus",
      "dts:DescribeDtsJobDetail",
      "dts:DescribeDtsJobs",
      "dts:ModifyDtsJob",
      "dts:SuspendDtsJob",
      "dts:StopDtsJob",
      "dts:DeleteDtsJob"
    ],
    "Resource": "*",
    "Effect": "Allow"
  }

Delete a service-linked role

To delete AliyunServiceRoleForPolarDB (service-linked role), you must first release the PolarDB clusters that depend on this service-linked role.

• For more information about how to release a PolarDB cluster, seeRelease a cluster。