PolarDB:Service-linked role for PolarDB

Background information

The service-linked role for PolarDB (AliyunServiceRoleForPolarDB) is a RAM role provided to obtain access permissions to other cloud services when PolarDB needs to implement a specific feature.

Scenarios

• of PolarDBprivate domain nameThe feature needs to access PrivateZone cloud service resources, and access permissions must be obtained through the service-linked role.

• of PolarDBcreate a PolarDB for MySQL cluster by migrating an ApsaraDB RDS for MySQL instance、Clone an ApsaraDB RDS for MySQL instance to a PolarDB for MySQL cluster with one clickandUpgrade RDS PostgreSQL to PolarDB for PostgreSQLThe feature needs to access DTS cloud service resources, and access permissions must be obtained through the service-linked role.

• of PolarDBDatabase proxyThe feature needs to access PrivateLink resources, requiring access permissions through the service-linked role.

• The network type of PolarDB needs to access VPC resources, requiring access permissions through the service-linked role.

AliyunServiceRoleForPolarDB overview

Role name: AliyunServiceRoleForPolarDB

Role policy: AliyunServiceRolePolicyForPolarDB

Permissions:

{
    "Action": [
      "pvtz:DescribeUserServiceStatus",
      "pvtz:DescribeZones",
      "pvtz:DescribeZoneInfo",
      "pvtz:DescribeZoneRecords",
      "pvtz:CheckZoneName",
      "pvtz:AddZone",
      "pvtz:BindZoneVpc",
      "pvtz:DeleteZone",
      "pvtz:AddZoneRecord",
      "pvtz:UpdateZoneRecord",
      "pvtz:DeleteZoneRecord",
      "dts:CreateDtsInstance",
      "dts:ConfigureDtsJob",
      "dts:StartDtsJob",
      "dts:DescribePreCheckStatus",
      "dts:DescribeDtsJobDetail",
      "dts:DescribeDtsJobs",
      "dts:ModifyDtsJob",
      "dts:SuspendDtsJob",
      "dts:StopDtsJob",
      "dts:DeleteDtsJob"
    ],
    "Resource": "*",
    "Effect": "Allow"
  }

Delete a service-linked role

To delete AliyunServiceRoleForPolarDB (service-linked role), you must first release the PolarDB clusters that depend on this service-linked role.

• For more information about how to release a PolarDB cluster, seeRelease a cluster。