This topic describes the service-linked role AliyunServiceRoleForLiveKes for video encryption of ApsaraVideo Live and how to delete the role.
Overview
The service-linked role AliyunServiceRoleForLiveKes is a Resource Access Management (RAM) role that ApsaraVideo Live uses to obtain the access permissions on Key Management Service (KMS) to create key pairs for video encryption.
Scenarios
When you use the video encryption feature, the AliyunServiceRoleForLiveKes role is automatically created.
Permissions
The following code shows the access permissions that the AliyunServiceRoleForLiveKes role has:
{
"Version": "1",
"Statement": [
{
"Action": [
"kms:Encrypt",
"kms:Decrypt",
"kms:GenerateDataKey"
],
"Resource": "*",
"Effect": "Allow"
}
]
}Delete the AliyunServiceRoleForLiveKes role
If you no longer use the video encryption feature and want to delete the AliyunServiceRoleForLiveKes role, perform the following steps:
Log on to the RAM console. In the left-side navigation pane, click Roles.
On the Roles page, enter AliyunServiceRoleForLiveKes in the search box to search for the RAM role named AliyunServiceRoleForLiveKes.
Click Delete in the Actions column.
In the Delete Role message, click OK.
After you delete the role, the role is automatically created again if you use the video encryption feature again.