AliyunServiceRolePolicyForBdrcRd is the authorization policy dedicated to a service-linked role. The policy is automatically attached to a service role when the service role is created. Then, the service-linked role is authorized to access other cloud services. This policy is updated by the relevant Alibaba Cloud service. Do not attach this policy to a RAM identity other than a service-linked role.
Policy details
Type: service system policy
Creation time: 19:53:04 on January 14, 2026
Update time: 19:53:04 on January 14, 2026
Current version: v1
Policy content
{
"Version": "1",
"Statement": [
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "rd.bdrc.aliyuncs.com"
}
}
},
{
"Effect": "Allow",
"Action": [
"ecs:DescribeRegions",
"ecs:DescribeInstances",
"ecs:DescribeDisks",
"ecs:DescribeAutoSnapshotPolicyEx",
"ecs:ApplyAutoSnapshotPolicy",
"oss:ListBuckets",
"oss:GetBucketStat",
"oss:GetBucketInfo",
"oss:GetBucketVersioning",
"oss:PutBucketVersioning",
"oss:GetBucketReplication",
"oss:GetBucketTagging",
"nas:DescribeRegions",
"nas:DescribeFileSystems",
"nas:GetRecycleBinAttribute",
"nas:EnableRecycleBin",
"nas:UpdateRecycleBinAttribute",
"ots:DescribeRegions",
"ots:ListInstance",
"ots:GetInstance",
"hbr:DescribeRegions",
"hbr:DescribeUserBusinessStatus",
"hbr:DescribeBackupPlans",
"hbr:DescribeUniBackupInstances",
"hbr:DescribeUniBackupPlans",
"hbr:DescribeVaults",
"hbr:DescribePoliciesV2",
"hbr:DescribePolicyBindings",
"hbr:CreatePolicyBindings",
"resourcecenter:GetResourceCenterServiceStatus",
"resourcecenter:SearchResources",
"resourcecenter:GetResourceConfiguration"
],
"Resource": "*"
}
]
}