All Products
Search
Document Center

Resource Access Management:Services that work with service-linked roles

Last Updated:Dec 22, 2023

This topic lists the services that work with service-linked roles.

Alibaba Cloud service

Service identifier

Service-linked role

References

Resource Management

resourcemanager.aliyuncs.com

AliyunServiceRoleForResourceDirectory

RAM roles in a resource directory

rmc.resourcemanager.aliyuncs.com

AliyunServiceRoleForResourceMetaCenter

Service-linked role for Resource Center

Cloud Config

config.aliyuncs.com

AliyunServiceRoleForConfig

Manage the service-linked role for Cloud Config

remediation.config.aliyuncs.com

AliyunServiceRoleForConfigRemediation

PolarDB

polardb.aliyuncs.com

AliyunServiceRoleForPolarDB

Service-linked roles for PolarDB

Cloud Backup

dr.hbr.aliyuncs.com

AliyunServiceRoleForHbrDr

Service-linked role for ECS disaster recovery

ecsbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrEcsBackup

Service-Linked Role for HBR

ossbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrOssBackup

nasbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrNasBackup

csgbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrCsgBackup

vaultencryption.hbr.aliyuncs.com

AliyunServiceRoleForHbrVaultEncryption

otsbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrOtsBackup

CloudOps Orchestration Service (OOS)

bandwidthscheduler.oos.aliyuncs.com

AliyunServiceRoleForOOSBandwidthScheduler

Service-linked roles for OOS

instancescheduler.oos.aliyuncs.com

AliyunServiceRoleForOOSInstanceScheduler

executiondelivery.oos.aliyuncs.com

AliyunServiceRoleForOOSExecutionDelivery

Auto Scaling

ess.aliyuncs.com

AliyunServiceRoleForAutoScaling

Grant permissions to Auto Scaling

Time Series Database (TSDB)

hitsdb.aliyuncs.com

AliyunServiceRoleForTSDB

None.

CloudMonitor

cloudmonitor.aliyuncs.com

AliyunServiceRoleForCloudMonitor

Manage the service-linked role for CloudMonitor

Blockchain as a Service (BaaS)

baas.aliyuncs.com

AliyunServiceRoleForBaaS

None.

Global Traffic Manager (GTM)

gtm.aliyuncs.com

AliyunServiceRoleForGTM

Service-linked role for GTM

Alibaba Cloud DNS (DNS)

alidns.aliyuncs.com

AliyunServiceRoleForDNS

None.

Data Security Center (DSC)

sddp.aliyuncs.com

AliyunServiceRoleForSDDP

Authorize DSC to access Alibaba Cloud resources

CDN

cdn-ddos.cdn.aliyuncs.com

AliyunServiceRoleForCDNAccessingDDoS

Integrate Alibaba Cloud CDN with Anti-DDoS

cdn-waf.cdn.aliyuncs.com

AliyunServiceRoleForCDNAccessingWAF

None.

logdelivery.cdn.aliyuncs.com

AliyunServiceRoleForCDNLogDelivery

None.

Application Real-Time Monitoring Service (ARMS)

arms.aliyuncs.com

AliyunServiceRoleForARMS

Service-linked role for ARMS

security.arms.aliyuncs.com

AliyunServiceRoleForARMSSecurity

Service-linked role for Application Security

EventBridge

sendevent-fc.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToFC

Service-linked roles for EventBridge

sendevent-mns.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToMNS

sendevent-sms.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToSMS

sendevent-directmail.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToDirectMail

source-rocketmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceRocketMQ

connect-vpc.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeConnectVPC

source-actiontrail.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceActionTrail

source-rabbitmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceRabbitMQ

sendevent-rabbitmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRabbitMQ

sendevent-rocketmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRocketMQ

source-mqtt.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceMqtt

sendevent-sae.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToSAE

sendevent-rds.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRDS

DataWorks

openplatform.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksOpenPlatform

Appendix: DataWorks service-linked role

emr.dataworks.aliyuncs.com

AliyunServiceRoleForDataworksOnEmr

Appendix: Service-linked roles used by DataWorks to access Alibaba Cloud services to which compute engines belong

engine.dataworks.aliyuncs.com

AliyunServiceRoleForDataworksEngine

Appendix: Service-linked roles used by DataWorks to access Alibaba Cloud services to which compute engines belong

dlf.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksAccessDLF

Manage permissions on DLF

di.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksDI

Service-linked role of Data Integration of DataWorks

Elastic High Performance Computing (E-HPC)

ehpc.aliyuncs.com

AliyunServiceRoleForEHPC

Service-linked role for E-HPC

Server Migration Center (SMC)

smc.aliyuncs.com

AliyunServiceRoleForSMC

Service linked roles for SMC

ApsaraMQ for Kafka

connector.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaConnector

Service-linked roles for ApsaraMQ for Kafka

instanceencryption.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaInstanceEncryption

alikafka.aliyuncs.com

AliyunServiceRoleForAlikafka

etl.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaETL

Managed Service for OpenTelemetry

xtrace.aliyuncs.com

AliyunServiceRoleForXtrace

Service-linked role for Managed Service for OpenTelemetry

NAT Gateway (NAT)

nat.aliyuncs.com

AliyunServiceRoleForNatgw

Service-linked role for NAT

Alibaba Cloud DNS PrivateZone

pvtz.aliyuncs.com

AliyunServiceRoleForPvtz

Service-linked roles for Alibaba Cloud DNS PrivateZone

ActionTrail

actiontrail.aliyuncs.com

AliyunServiceRoleForActionTrail

Manage the service-linked role

Cloud Storage Gateway (CSG)

hcs-sgw.aliyuncs.com

AliyunServiceRoleForHCSSGW

Service-linked roles for CSG

logmonitor.hcs-sgw.aliyuncs.com

AliyunServiceRoleForHCSSGWLogMonitor

Data Lake Analytics (DLA)

openanalytics.aliyuncs.com

AliyunServiceRoleForOpenAnalytics

AliyunServiceRoleForOpenAnalytics

API Gateway

apigateway.aliyuncs.com

AliyunServiceRoleForApiGateway

None.

monitor.apigateway.aliyuncs.com

AliyunServiceRoleForApiGatewayMonitoring

None.

Elasticsearch

ops.elasticsearch.aliyuncs.com

AliyunServiceRoleForElasticsearchOps

None.

collector.elasticsearch.aliyuncs.com

AliyunServiceRoleForElasticsearchCollector

Bastionhost

bastionhost.aliyuncs.com

AliyunServiceRoleForBastionhost

Service-linked role for Bastionhost

Global Accelerator (GA)

vpcendpoint.ga.aliyuncs.com

AliyunServiceRoleForGaVpcEndpoint

AliyunServiceRoleForGaVpcEndpoint

cdt.ga.aliyuncs.com

AliyunServiceRoleForGaCdt

AliyunServiceRoleForGaCdt

ssl.ga.aliyuncs.com

AliyunServiceRoleForGaSsl

AliyunServiceRoleForGaSsl

ApsaraMQ for RocketMQ

ons.aliyuncs.com

AliyunServiceRoleForOns

Service-linked role for ApsaraMQ for RocketMQ

AnalyticDB for PostgreSQL

adbpg.aliyuncs.com

AliyunServiceRoleForADBPG

Service-linked role for AnalyticDB for PostgreSQL

OpenSearch

opensearch.aliyuncs.com

AliyunServiceRoleForOpenSearch

AliyunServiceRoleForOpenSearch

searchengine.aliyuncs.com

AliyunServiceRoleForSearchEngine

AliyunServiceRoleForSearchEngine

Key Management Service (KMS)

secretsmanager-rds.kms.aliyuncs.com

AliyunServiceRoleForKMSSecretsManagerForRDS

Manage the service-linked role for dynamic ApsaraDB RDS secrets

keystore.kms.aliyuncs.com

AliyunServiceRoleForKMSKeyStore

Service-linked role

ApsaraDB for MongoDB

mongodb.aliyuncs.com

AliyunServiceRoleForMongoDB

Service-linked role

ApsaraDB RDS

pgsql-onecs.rds.aliyuncs.com

AliyunServiceRoleForRdsPgsqlOnEcs

Service-linked role for ApsaraDB RDS

backupencryption.rds.aliyuncs.com

AliyunServiceRoleForRdsBackupEncryption

None.

PrivateLink

privatelink.aliyuncs.com

AliyunServiceRoleForPrivatelink

Service-linked role for PrivateLink

AnalyticDB for MySQL

ads.aliyuncs.com

AliyunServiceRoleForAnalyticDBForMySQL

Manage the service-linked role

ApsaraDB for ClickHouse

clickhouse.aliyuncs.com

AliyunServiceRoleForClickHouse

ApsaraDB for ClickHouse service-linked role

Application Load Balancer (ALB)

alb.aliyuncs.com

AliyunServiceRoleForAlb

Service-linked roles for ALB

logdelivery.alb.aliyuncs.com

AliyunServiceRoleForAlbLogDelivery

Dynamic Content Delivery Network (DCDN)

logdelivery.dcdn.aliyuncs.com

AliyunServiceRoleForDCDNLogDelivery

None.

Server Load Balancer (SLB)

logdelivery.slb.aliyuncs.com

AliyunServiceRoleForSlbLogDelivery

Service-linked role for SLB

Cloud Enterprise Network (CEN)

cen.aliyuncs.com

AliyunServiceRoleForCEN

AliyunServiceRoleForCEN

Elastic Container Instance

eci.aliyuncs.com

AliyunServiceRoleForECI

Elastic Container Instance service-linked role

vnode.eci.aliyuncs.com

AliyunServiceRoleForECIVnode

Service-linked role for virtual nodes

Database Backup (DBS)

dbs.aliyuncs.com

AliyunServiceRoleForDBS

How do I activate DBS?

Cloud Governance Center

governance.aliyuncs.com

AliyunServiceRoleForGovernance

Service-linked role in Cloud Governance Center

CloudSSO

cloudsso.aliyuncs.com

AliyunServiceRoleForCloudSSO

Use the service-linked role for CloudSSO

Resource Sharing

resourcesharing.aliyuncs.com

AliyunServiceRoleForResourceSharing

Service-linked role for Resource Sharing

ApsaraDB for Redis

r-kvstore.aliyuncs.com

AliyunServiceRoleForKvstore

Service-linked role

Database Autonomy Service (DAS)

hdm.aliyuncs.com

AliyunServiceRoleForDAS

AliyunServiceRoleForDAS role

Elastic Compute Service (ECS)

archiving.ecs.aliyuncs.com

AliyunServiceRoleForECSArchiving

Manage the service-linked role for ECS Cloud Assistant

VPN Gateway

vpn.aliyuncs.com

AliyunServiceRoleForVpn

Service-linked role for VPN Gateway

IoT Platform

device-file-upload.iot.aliyuncs.com

AliyunServiceRoleForIoTDeviceFileUpload

None.

log-export.iot.aliyuncs.com

AliyunServiceRoleForIoTLogExport

AliyunServiceRoleForIoTLogExport service-linked role

ruleengine-lindorm.iot.aliyuncs.com

AliyunServiceRoleForIoTRuleengineLindorm

None.

Alibaba Cloud Distributed Cloud Container Platform (ACK One)

adcp.aliyuncs.com

AliyunServiceRoleForAdcp

Manage the service-linked role for ACK One

Simple Log Service

alert.log.aliyuncs.com

AliyunServiceRoleForSLSAlert

Manage the AliyunServiceRoleForSLSAlert service-linked role

audit.log.aliyuncs.com

AliyunServiceRoleForSLSAudit

Manage the AliyunServiceRoleForSLSAudit service-linked role

Service Catalog

servicecatalog.aliyuncs.com

AliyunServiceRoleForServiceCatalog

Service-linked role for Service Catalog

Security Center (SAS)

cspm.sas.aliyuncs.com

AliyunServiceRoleForSasCspm

Service-linked roles in Security Center

cloudsiem.sas.aliyuncs.com

AliyunServiceRoleForSasCloudSiem

Apsara File Storage NAS (NAS)

extreme.nas.aliyuncs.com

AliyunServiceRoleForNasExtreme

Service-linked roles of NAS

encryption.nas.aliyuncs.com

AliyunServiceRoleForNasEncryption

ecs-handler.nas.aliyuncs.com

AliyunServiceRoleForNasEcsHandler

logdelivery.nas.aliyuncs.com

AliyunServiceRoleForNasLogDelivery

Elastic Accelerated Computing Instances

eais.aliyuncs.com

AliyunServiceRoleForEais

None

Employee Identity and Access Management (EIAM)

eiam.aliyuncs.com

AliyunServiceRoleForEiam

None

Service Mesh (ASM)

servicemesh.aliyuncs.com

AliyunServiceRoleForServiceMesh

Manage the service-linked role for ASM