As conexões Lingjun acessam outros serviços da Alibaba Cloud, como VPCs, linhas dedicadas e elastic network interfaces (ENIs), por meio da função vinculada a serviço AliyunServiceRoleForEfloVcc. Este tópico descreve cenários comuns dessa função e o procedimento para excluí-la.
Informações básicas
A AliyunServiceRoleForEfloVcc é uma função do RAM que concede às conexões Lingjun acesso a outros serviços da Alibaba Cloud. Para mais informações sobre funções vinculadas a serviço, consulte Funções vinculadas a serviço.
Descrição das permissões
Nome da função: AliyunServiceRoleForEfloVcc
-
Política de acesso da função:
{ "Version": "1", "Statement": [ { "Action": [ "ecs:CreateNetworkInterface", "ecs:AttachNetworkInterface", "ecs:DetachNetworkInterface", "ecs:DeleteNetworkInterface", "ecs:DescribeNetworkInterfaces", "ecs:CreateSecurityGroup", "ecs:DeleteSecurityGroup", "ecs:AuthorizeSecurityGroup", "ecs:AuthorizeSecurityGroupEgress", "ecs:RevokeSecurityGroup", "ecs:RevokeSecurityGroupEgress", "ecs:DescribeSecurityGroups", "ecs:DescribeSecurityGroupAttribute", "ecs:ModifyInstanceAttribute" ], "Resource": "*", "Effect": "Allow" }, { "Action": [ "vpc:DescribeVpcs", "vpc:DescribeVSwitches", "vpc:ConfirmPhysicalConnection", "vpc:CreateVirtualBorderRouter", "vpc:DeleteVirtualBorderRouter", "vpc:DescribeVirtualBorderRouters", "vpc:CreateBgpGroup", "vpc:DeleteBgpGroup", "vpc:DescribeBgpGroups", "vpc:CreateBgpPeer", "vpc:DeleteBgpPeer", "vpc:DescribeBgpPeers", "cen:AttachCenChildInstance", "cen:DetachCenChildInstance", "vpc:DescribeRouteEntryList", "vpc:AddBgpNetwork", "vpc:DeleteBgpNetwork", "vpc:DescribeBgpNetworks", "vpc:TerminatePhysicalConnection", "vpc:RecoverPhysicalConnection", "vpc:DeletePhysicalConnection", "vpc:OpenPhysicalConnectionService", "vpc:GetPhysicalConnectionServiceStatus", "vpc:DescribePhysicalConnections", "vpc:CreatePhysicalConnectionOccupancyOrder", "vpc:UpdateVirtualPhysicalConnection", "vpc:CreateRouterInterface", "vpc:DeleteRouterInterface", "vpc:DeactivateRouterInterface", "vpc:DescribeRouterInterfaces", "vpc:DescribeRouteTableList", "vpc:CreateRouteEntries", "vpc:DeleteRouteEntries", "vpc:CreateRouteEntry", "vpc:DeleteRouteEntry", "vpc:DescribeGrantRulesToCen", "vpc:GrantInstanceToCen", "vpc:RevokeInstanceFromCen", "vpc:CreatePhysicalConnectionNew", "vpc:ModifyVirtualBorderRouterAttribute", "vpc:AssociatePhysicalConnectionToVirtualBorderRouter", "vpc:UnassociatePhysicalConnectionFromVirtualBorderRouter", "bssapi:SetRenewal", "vpc:CancelPhysicalConnection" ], "Resource": "*", "Effect": "Allow" }, { "Action": [ "cen:CreateTransitRouterRouteEntry", "cen:ListTransitRouterRouteEntries", "cen:DeleteTransitRouterRouteEntry", "cen:ResolveAndRouteServiceInCen", "cen:DescribeRouteServicesInCen", "cen:DeleteRouteServiceInCen", "cen:CreateTransitRouterVbrAttachment", "cen:DeleteTransitRouterVbrAttachment", "cen:ListTransitRouterVbrAttachments", "cen:ListTransitRouterVpcAttachments", "cen:DisableTransitRouterRouteTablePropagation", "cen:EnableTransitRouterRouteTablePropagation", "cen:ListTransitRouterRouteTablePropagations", "cen:AssociateTransitRouterAttachmentWithRouteTable", "cen:DissociateTransitRouterAttachmentFromRouteTable", "cen:ListTransitRouterRouteTableAssociations", "cen:ListTransitRouterRouteTables", "cen:ListTransitRouters", "cen:ListTransitRouterAvailableResource", "cen:ResolveAndRouteServiceInCen", "cen:DescribeRouteServicesInCen", "cen:DeleteRouteServiceInCen", "cen:DescribeCenAttachedChildInstances", "cen:DescribeCenAttachedChildInstanceAttribute", "cen:DescribeCens" ], "Resource": "*", "Effect": "Allow" }, { "Action": [ "ros:ListStacks", "ros:GetStack", "ros:ListStackEvents", "ros:ListStackResources", "ros:GetStackResource", "ros:CreateStack", "ros:DeleteStack", "ros:PreviewStack" ], "Resource": [ "*" ], "Effect": "Allow" }, { "Action": "ram:DeleteServiceLinkedRole", "Resource": "*", "Effect": "Allow", "Condition": { "StringEquals": { "ram:ServiceName": "vcc.eflo.aliyuncs.com" } } } ] }
Crie a função vinculada a serviço AliyunServiceRoleForEfloVcc
Ao criar um cluster pela primeira vez e chegar à etapa de configuração de rede, clique em Authorize Service Role para criar a função vinculada a serviço (AliyunServiceRoleForEfloVcc).
Exclua a função vinculada a serviço AliyunServiceRoleForEfloVcc
Antes de excluir a função vinculada a serviço AliyunServiceRoleForEfloVcc, libere todas as instâncias de conexão Lingjun dependentes dela.
A expiração da instância de serviço da Alibaba Cloud libera automaticamente as instâncias de conexão Lingjun associadas.
Para mais detalhes, consulte Excluir uma função vinculada a serviço.