ApsaraDB for ClickHouse：Zero ETL服務關聯角色

背景資訊

Zero ETL服務關聯角色AliyunServiceRoleForClickHouseZeroETL是一種存取控制（RAM）提供的服務關聯角色。通過AliyunServiceRoleForClickHouseZeroETL，雲資料庫ClickHouse可以獲得Zero ETL功能需要訪問的源端和目標端資料執行個體的存取權限。

AliyunServiceRoleForClickHouseZeroETL許可權說明

角色名稱：AliyunServiceRoleForClickHouseZeroETL

角色權限原則：AliyunServiceRolePolicyForClickHouseZeroETL

許可權說明：

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "rds:DescribeDBInstances",
                "rds:DescribeDBInstanceAttribute",
                "rds:DescribeDBInstanceNetInfo",
                "rds:DescribeDBInstanceHAConfig",
                "rds:DescribeDBInstanceIPArrayList",
                "rds:DescribeSecurityGroupConfiguration",
                "rds:ModifySecurityGroupConfiguration",
                "rds:DescribeCharacterSetName",
                "rds:ModifySecurityIps",
                "clickhouse:DescribeDBInstanceAttribute",
                "clickhouse:DescribeDBInstances",
                "clickhouse:ModifySecurityIPList",
                "clickhouse:DescribeSecurityIPList",
                "clickhouse:DescribeEndpoints",
                "clickhouse:DescribeDBClusterAccessWhiteList",
                "clickhouse:DescribeDBClusterAttribute",
                "clickhouse:DescribeDBClusterNetInfoItems",
                "clickhouse:DescribeDBClusters",
                "clickhouse:ModifyDBClusterAccessWhiteList"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action": "ram:DeleteServiceLinkedRole",
            "Resource": "*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": "zetl.clickhouse.aliyuncs.com"
                }
            }
        }
    ]
}

刪除服務關聯角色

如果需要刪除AliyunServiceRoleForClickHouseZeroETL（ZeroETL服務關聯角色），需要先釋放依賴該服務關聯角色的雲資料庫ClickHouse的叢集。

• 如何釋放雲資料庫ClickHouse叢集，請參見刪除叢集。

• 如何刪除服務關聯角色，請參見刪除RAM角色。