Unlike Virtual Private Cloud (VPC) environments, classic network environments are not isolated at the network layer. To ensure data security of your NAS file system, NAS must be authorized through RAM to list your ECS instances. This makes sure that only your own ECS instances can mount or access the NAS file system. Note that the NAS file system and the ECS instance must be under the same Alibaba Cloud account.
- Do not delete or edit
AliyunNASDefaultRolein RAM as it may cause an operation exception error or failure when mounting the file system.
- NAS is only granted permission to call your
DescribeInstancesinterface and has no permission to call any other instances. ECS instances acquired by NAS through the
DescribeInstancesinterface are only used for permission verification, and are not recorded in any form.