All Products
Search
Document Center

Resource Access Management:Services that work with service-linked roles

Last Updated:Dec 16, 2024

This topic lists the services that work with service-linked roles.

Alibaba Cloud service

Service identifier

Service-linked role

References

Resource Management

resourcemanager.aliyuncs.com

AliyunServiceRoleForResourceDirectory

RAM roles in a resource directory

rmc.resourcemanager.aliyuncs.com

AliyunServiceRoleForResourceMetaCenter

Service-linked role for Resource Center

Cloud Config

config.aliyuncs.com

AliyunServiceRoleForConfig

Manage the AliyunServiceRoleForConfig service-linked role

remediation.config.aliyuncs.com

AliyunServiceRoleForConfigRemediation

PolarDB

polardb.aliyuncs.com

AliyunServiceRoleForPolarDB

Service-linked roles for PolarDB

Cloud Backup

dr.hbr.aliyuncs.com

AliyunServiceRoleForHbrDr

Service-linked role for ECS disaster recovery

ecsbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrEcsBackup

Service-linked roles for Cloud Backup

ossbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrOssBackup

nasbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrNasBackup

csgbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrCsgBackup

vaultencryption.hbr.aliyuncs.com

AliyunServiceRoleForHbrVaultEncryption

otsbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrOtsBackup

CloudOps Orchestration Service (OOS)

bandwidthscheduler.oos.aliyuncs.com

AliyunServiceRoleForOOSBandwidthScheduler

Manage service-linked roles for OOS

instancescheduler.oos.aliyuncs.com

AliyunServiceRoleForOOSInstanceScheduler

executiondelivery.oos.aliyuncs.com

AliyunServiceRoleForOOSExecutionDelivery

Auto Scaling

ess.aliyuncs.com

AliyunServiceRoleForAutoScaling

Grant permissions to Auto Scaling

Time Series Database (TSDB)

hitsdb.aliyuncs.com

AliyunServiceRoleForTSDB

None.

CloudMonitor

cloudmonitor.aliyuncs.com

AliyunServiceRoleForCloudMonitor

Manage the service-linked role for CloudMonitor

Blockchain as a Service (BaaS)

baas.aliyuncs.com

AliyunServiceRoleForBaaS

None.

Global Traffic Manager (GTM)

gtm.aliyuncs.com

AliyunServiceRoleForGTM

Service-linked role

Alibaba Cloud DNS (DNS)

alidns.aliyuncs.com

AliyunServiceRoleForDNS

None.

Data Security Center (DSC)

sddp.aliyuncs.com

AliyunServiceRoleForSDDP

Authorize DSC to access Alibaba Cloud resources

CDN

cdn-ddos.cdn.aliyuncs.com

AliyunServiceRoleForCDNAccessingDDoS

Integrate Alibaba Cloud CDN with Anti-DDoS

logdelivery.cdn.aliyuncs.com

AliyunServiceRoleForCDNLogDelivery

None.

Application Real-Time Monitoring Service (ARMS)

arms.aliyuncs.com

AliyunServiceRoleForARMS

Service-linked role for ARMS

security.arms.aliyuncs.com

AliyunServiceRoleForARMSSecurity

Service-linked role for Application Security

EventBridge

sendevent-fc.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToFC

Service-linked roles

sendevent-mns.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToMNS

sendevent-sms.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToSMS

sendevent-directmail.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToDirectMail

source-rocketmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceRocketMQ

connect-vpc.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeConnectVPC

source-actiontrail.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceActionTrail

source-rabbitmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceRabbitMQ

sendevent-rabbitmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRabbitMQ

sendevent-rocketmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRocketMQ

source-mqtt.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceMqtt

sendevent-sae.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToSAE

sendevent-rds.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRDS

DataWorks

openplatform.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksOpenPlatform

Appendix: DataWorks service-linked role

emr.dataworks.aliyuncs.com

AliyunServiceRoleForDataworksOnEmr

Appendix: Service-linked roles used by DataWorks to access Alibaba Cloud services to which compute engines belong

engine.dataworks.aliyuncs.com

AliyunServiceRoleForDataworksEngine

Appendix: Service-linked roles used by DataWorks to access Alibaba Cloud services to which compute engines belong

dlf.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksAccessDLF

Manage permissions on DLF

di.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksDI

Service-linked role of DataWorks Data Integration

Elastic High Performance Computing (E-HPC)

ehpc.aliyuncs.com

AliyunServiceRoleForEHPC

Service-linked role of E-HPC

ApsaraMQ for RabbitMQ

monitoring.amqp.aliyuncs.com

AliyunServiceRoleForAmqpMonitoring

Service-linked roles

logdelivery.amqp.aliyuncs.com

AliyunServiceRoleForAmqpLogDelivery

network.amgp.aliyuncs.com

AliyunServiceRoleForAmqpNetwork

encrypt.amqpaliyuncs.com

AliyunServiceRoleForAmqpEncrypt

Server Migration Center (SMC)

smc.aliyuncs.com

AliyunServiceRoleForSMC

Service linked roles for SMC

ApsaraMQ for Kafka

connector.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaConnector

Service-linked roles

instanceencryption.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaInstanceEncryption

alikafka.aliyuncs.com

AliyunServiceRoleForAlikafka

etl.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaETL

Managed Service for OpenTelemetry

xtrace.aliyuncs.com

AliyunServiceRoleForXtrace

Service-linked role

NAT Gateway (NAT)

nat.aliyuncs.com

AliyunServiceRoleForNatgw

Service-linked role

Alibaba Cloud DNS PrivateZone

pvtz.aliyuncs.com

AliyunServiceRoleForPvtz

Service-linked role for PrivateZone

ActionTrail

actiontrail.aliyuncs.com

AliyunServiceRoleForActionTrail

Manage the service-linked role

Cloud Storage Gateway (CSG)

hcs-sgw.aliyuncs.com

AliyunServiceRoleForHCSSGW

Service-linked roles for CSG

logmonitor.hcs-sgw.aliyuncs.com

AliyunServiceRoleForHCSSGWLogMonitor

API Gateway

apigateway.aliyuncs.com

AliyunServiceRoleForApiGateway

None.

monitor.apigateway.aliyuncs.com

AliyunServiceRoleForApiGatewayMonitoring

None.

Microservices Engine (MSE)

mse.aliyuncs.com

AliyunServiceRoleForMSE

MSE service-linked role

Elasticsearch

ops.elasticsearch.aliyuncs.com

AliyunServiceRoleForElasticsearchOps

None.

collector.elasticsearch.aliyuncs.com

AliyunServiceRoleForElasticsearchCollector

Bastionhost

bastionhost.aliyuncs.com

AliyunServiceRoleForBastionhost

Service-linked role for Bastionhost

Global Accelerator (GA)

vpcendpoint.ga.aliyuncs.com

AliyunServiceRoleForGaVpcEndpoint

AliyunServiceRoleForGaVpcEndpoint

cdt.ga.aliyuncs.com

AliyunServiceRoleForGaCdt

AliyunServiceRoleForGaCdt

ssl.ga.aliyuncs.com

AliyunServiceRoleForGaSsl

AliyunServiceRoleForGaSsl

ApsaraMQ for RocketMQ

ons.aliyuncs.com

AliyunServiceRoleForOns

Service-linked roles

AnalyticDB for PostgreSQL

adbpg.aliyuncs.com

AliyunServiceRoleForADBPG

Service-linked role

OpenSearch

opensearch.aliyuncs.com

AliyunServiceRoleForOpenSearch

AliyunServiceRoleForOpenSearch

searchengine.aliyuncs.com

AliyunServiceRoleForSearchEngine

Service-linked role for OpenSearch Vector Search Edition

Key Management Service (KMS)

secretsmanager-rds.kms.aliyuncs.com

AliyunServiceRoleForKMSSecretsManagerForRDS

Manage the service-linked role for dynamic ApsaraDB RDS secrets

keystore.kms.aliyuncs.com

AliyunServiceRoleForKMSKeyStore

Service-linked role

ApsaraDB for MongoDB

mongodb.aliyuncs.com

AliyunServiceRoleForMongoDB

Service-linked role

ApsaraDB RDS

pgsql-onecs.rds.aliyuncs.com

AliyunServiceRoleForRdsPgsqlOnEcs

Service-linked roles

backupencryption.rds.aliyuncs.com

AliyunServiceRoleForRdsBackupEncryption

None.

PrivateLink

privatelink.aliyuncs.com

AliyunServiceRoleForPrivatelink

Service-linked role

AnalyticDB for MySQL

ads.aliyuncs.com

AliyunServiceRoleForAnalyticDBForMySQL

Service-linked role

ApsaraDB for ClickHouse

clickhouse.aliyuncs.com

AliyunServiceRoleForClickHouse

ApsaraDB for ClickHouse service-linked role

Application Load Balancer (ALB)

alb.aliyuncs.com

AliyunServiceRoleForAlb

Service-linked roles for ALB

logdelivery.alb.aliyuncs.com

AliyunServiceRoleForAlbLogDelivery

Dynamic Content Delivery Network (DCDN)

logdelivery.dcdn.aliyuncs.com

AliyunServiceRoleForDCDNLogDelivery

None.

Classic Load Balancer

logdelivery.slb.aliyuncs.com

AliyunServiceRoleForSlbLogDelivery

Service-linked roles for CLB

Cloud Enterprise Network (CEN)

cen.aliyuncs.com

AliyunServiceRoleForCEN

AliyunServiceRoleForCEN

Elastic Container Instance

eci.aliyuncs.com

AliyunServiceRoleForECI

AliyunServiceRoleForECI

vnode.eci.aliyuncs.com

AliyunServiceRoleForECIVnode

AliyunServiceRoleForECIVnode

Database Backup (DBS)

dbs.aliyuncs.com

AliyunServiceRoleForDBS

How do I activate DBS?

Cloud Governance Center (CGC)

governance.aliyuncs.com

AliyunServiceRoleForGovernance

Service-linked role in Cloud Governance Center

CloudSSO

cloudsso.aliyuncs.com

AliyunServiceRoleForCloudSSO

Use the service-linked role for CloudSSO

Resource Sharing

resourcesharing.aliyuncs.com

AliyunServiceRoleForResourceSharing

Service-linked role for Resource Sharing

Tair (Redis® OSS-Compatible)

r-kvstore.aliyuncs.com

AliyunServiceRoleForKvstore

Service-linked role

Database Autonomy Service (DAS)

hdm.aliyuncs.com

AliyunServiceRoleForDAS

AliyunServiceRoleForDAS role

Elastic Compute Service (ECS)

archiving.ecs.aliyuncs.com

AliyunServiceRoleForECSArchiving

Manage the service-linked role for Cloud Assistant

VPN Gateway

vpn.aliyuncs.com

AliyunServiceRoleForVpn

AliyunServiceRoleForVpn

IoT Platform

device-file-upload.iot.aliyuncs.com

AliyunServiceRoleForIoTDeviceFileUpload

None.

log-export.iot.aliyuncs.com

AliyunServiceRoleForIoTLogExport

AliyunServiceRoleForIoTLogExport service-linked role

ruleengine-lindorm.iot.aliyuncs.com

AliyunServiceRoleForIoTRuleengineLindorm

None.

Alibaba Cloud Distributed Cloud Container Platform (ACK One)

adcp.aliyuncs.com

AliyunServiceRoleForAdcp

Service-linked role for ACK One and the permissions of the role

Simple Log Service

alert.log.aliyuncs.com

AliyunServiceRoleForSLSAlert

Manage the AliyunServiceRoleForSLSAlert service-linked role

audit.log.aliyuncs.com

AliyunServiceRoleForSLSAudit

Manage the AliyunServiceRoleForSLSAudit service-linked role

Service Catalog

servicecatalog.aliyuncs.com

AliyunServiceRoleForServiceCatalog

Service-linked role

Security Center

cspm.sas.aliyuncs.com

AliyunServiceRoleForSasCspm

Service-linked roles for Security Center

cloudsiem.sas.aliyuncs.com

AliyunServiceRoleForSasCloudSiem

File Storage NAS (NAS)

extreme.nas.aliyuncs.com

AliyunServiceRoleForNasExtreme

Service-linked roles of NAS

encryption.nas.aliyuncs.com

AliyunServiceRoleForNasEncryption

ecs-handler.nas.aliyuncs.com

AliyunServiceRoleForNasEcsHandler

logdelivery.nas.aliyuncs.com

AliyunServiceRoleForNasLogDelivery

Elastic Accelerated Computing Instances

eais.aliyuncs.com

AliyunServiceRoleForEais

None.

Employee Identity and Access Management (EIAM)

eiam.aliyuncs.com

AliyunServiceRoleForEiam

None.

Service Mesh (ASM)

servicemesh.aliyuncs.com

AliyunServiceRoleForServiceMesh

Manage the service-linked role for ASM