AliyunServiceRolePolicyForDataWorksScheduler is the authorization policy dedicated to a service-linked role. The policy is automatically attached to a service role when the service role is created. Then, the service-linked role is authorized to access other cloud services. This policy is updated by the relevant Alibaba Cloud service. Do not attach this policy to a RAM identity other than a service-linked role.
Policy details
Type: service system policy
Creation time: 10:16:24 on May 21, 2025
Update time: 08:36:02 on October 30, 2025
Current version: v7
Policy content
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"eventbridge:GetRule",
"eventbridge:ListRules",
"eventbridge:CreateRule",
"eventbridge:DeleteRule",
"eventbridge:DisableRule",
"eventbridge:EnableRule",
"eventbridge:UpdateRule",
"eventbridge:GetEventBus",
"eventbridge:ListEventStreamings",
"eventbridge:DeleteEventStreaming",
"eventbridge:PauseEventStreaming",
"eventbridge:StartEventStreaming",
"eventbridge:GetEventStreaming",
"eventbridge:UpdateEventStreaming",
"eventbridge:CreateEventStreaming",
"eventbridge:CreateEventBus",
"eventbridge:CreateEventSource",
"eventbridge:DeleteEventSource",
"oss:ListObjects",
"oss:ListBuckets"
],
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "scheduler.dataworks.aliyuncs.com"
}
}
}
]
}