Cloud Backup：Cloud BackupECS容災的服務關聯角色

背景資訊

Cloud BackupECS容災的服務關聯角色（AliyunServiceRoleForHbrDr）是在某些情況下，為了完成Cloud BackupECS容災自身的某個功能，需要擷取其他雲端服務的存取權限，而提供的RAM角色。更多關於服務關聯角色的資訊請參見服務關聯角色。

Cloud BackupECS容災服務可能需要建立新的vSwitch、安全性群組及ECS執行個體、鏡像等，您可以通過Cloud BackupECS容災的服務關聯角色（AliyunServiceRoleForHbrDr）擷取訪問VPC和ECS資源的許可權。

AliyunServiceRoleForHbrDr 介紹

角色名稱：AliyunServiceRoleForHbrDr

角色權限原則： AliyunServiceRolePolicyForHbrDr

許可權說明：

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "ecs:DescribeImages",
        "ecs:CreateDisk",
        "ecs:AttachDisk",
        "ecs:ReInitDisk",
        "ecs:DetachDisk",
        "ecs:DescribeDisks",
        "ecs:ReplaceSystemDisk",
        "ecs:DeleteDisk",
        "ecs:ResizeDisk",
        "ecs:CreateInstance",
        "ecs:StartInstance",
        "ecs:StopInstance",
        "ecs:RebootInstance",
        "ecs:DeleteInstance",
        "ecs:DescribeInstances",
        "ecs:CreateSecurityGroup",
        "ecs:DescribeSecurityGroups",
        "ecs:AuthorizeSecurityGroup",
        "ecs:AuthorizeSecurityGroupEgress",
        "ecs:DeleteSecurityGroup",
        "ecs:AllocatePublicIpAddress",
        "ecs:ModifyInstanceAttribute",
        "ecs:JoinSecurityGroup",
        "ecs:CreateNetworkInterface",
        "ecs:DeleteNetworkInterface",
        "ecs:DescribeNetworkInterfaces",
        "ecs:CreateNetworkInterfacePermission",
        "ecs:DescribeNetworkInterfacePermissions",
        "ecs:DeleteNetworkInterfacePermission",
        "ecs:CreateSnapshot",
        "ecs:DeleteSnapshot",
        "ecs:DescribeSnapshots",
        "ecs:DescribeSnapshotLinks",
        "ecs:CreateCommand",
        "ecs:InvokeCommand",
        "ecs:StopInvocation",
        "ecs:DeleteCommand",
        "ecs:DescribeCommands",
        "ecs:DescribeInvocations",
        "ecs:DescribeInvocationResults",
        "ecs:DescribeCloudAssistantStatus",
        "ecs:ModifyResourceMeta"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "vpc:DescribeVpcs",
        "vpc:DescribeVSwitches",
        "vpc:DescribeEipAddresses",
        "vpc:AssociateEipAddress"
      ],
      "Resource": "*",
      "Effect": "Allow"
    }
  ]
}

刪除服務關聯角色

如果您需要刪除服務關聯角色（AliyunServiceRoleForHbrDr），您需要先刪除Cloud BackupECS容災下的所有網站對。

刪除服務關聯角色具體操作請參見刪除服務關聯角色。