Service-linked role for EAS

AliyunServiceRoleForPaiEas has the permissions to access the following Alibaba Cloud services:

• OSS

      {
        "Action": [
          "oss:GetObject",
          "oss:PutObject",
          "oss:DeleteObject",
          "oss:ListParts",
          "oss:AbortMultipartUpload",
          "oss:ListObjects",
          "oss:ListBuckets",
          "oss:PutBucketCors",
          "oss:GetBucketCors",
          "oss:DeleteBucketCors"
        ],
        "Resource": "*",
        "Effect": "Allow"
      }

• Simple Log Service

      {
        "Action": [
          "log:CreateConfig",
          "log:GetConfig",
          "log:UpdateConfig",
          "log:DeleteConfig",
          "log:CreateMachineGroup",
          "log:GetMachineGroup",
          "log:DeleteMachineGroup",
          "log:ApplyConfigToGroup",
          "log:ListProject",
          "log:ListLogStores"
        ],
        "Resource": "*",
        "Effect": "Allow"
      }

• ECS

      {
        "Action": [
          "ecs:CreateNetworkInterface",
          "ecs:DeleteNetworkInterface",
          "ecs:DescribeNetworkInterfaces",
          "ecs:CreateNetworkInterfacePermission",
          "ecs:DescribeNetworkInterfacePermissions",
          "ecs:DeleteNetworkInterfacePermission",
          "ecs:DescribeSecurityGroups"
        ],
        "Resource": "*",
        "Effect": "Allow"
      }

• VPC

      {
        "Action": [
          "vpc:DescribeVSwitchAttributes",
          "vpc:DescribeVpcs",
          "vpc:DescribeVSwitches",
          "vpc:DescribeVpcAttribute"
        ],
        "Resource": "*",
        "Effect": "Allow"
      }

To delete the service-linked role AliyunServiceRoleForPaiEas, perform the following steps:

1. Log on to the RAM console.

2. In the left-side navigation pane, choose Identities > Roles.

3. On the Roles page, enter AliyunServiceRoleForPaiEas in the search box. The RAM role named AliyunServiceRoleForPaiEas is displayed in the search result.

4. Click Delete Role in the Actions column.

5. In the Delete Role dialog box, enter the name of the role you want to delete and click Delete Role.

If you cannot delete the service-linked role AliyunServiceRoleForPaiEas as a RAM user, see the "Why is the service-linked role of EAS not automatically created or deleted for RAM users?" section in the FAQ about EAS topic.