All Products
Search
Document Center

Resource Access Management:Services that work with service-linked roles

Last Updated:Mar 21, 2025

This topic lists the services that work with service-linked roles.

Alibaba Cloud service

Service identifier

Service-linked role

References

Resource Management

resourcemanager.aliyuncs.com

AliyunServiceRoleForResourceDirectory

RAM roles in a resource directory

rmc.resourcemanager.aliyuncs.com

AliyunServiceRoleForResourceMetaCenter

Service-linked role for Resource Center

Cloud Config

config.aliyuncs.com

AliyunServiceRoleForConfig

Manage the AliyunServiceRoleForConfig service-linked role

remediation.config.aliyuncs.com

AliyunServiceRoleForConfigRemediation

PolarDB

polardb.aliyuncs.com

AliyunServiceRoleForPolarDB

Service-linked roles for PolarDB

Cloud Backup

dr.hbr.aliyuncs.com

AliyunServiceRoleForHbrDr

Service-linked role for ECS disaster recovery

ecsbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrEcsBackup

Service-linked roles for Cloud Backup

ossbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrOssBackup

nasbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrNasBackup

csgbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrCsgBackup

vaultencryption.hbr.aliyuncs.com

AliyunServiceRoleForHbrVaultEncryption

otsbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrOtsBackup

crossbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrCrossAccountBackup

ecsencryption.hbr.aliyuncs.com

AliyunServiceRoleForHbrEcsEncryption

magpiebridge.hbr.aliyuncs.com

AliyunServiceRoleForHbrMagpieBridge

pdsbackup.hbr.aliyuncs.com

AliyunServiceRoleForHbrPdsBackup

CloudOps Orchestration Service (OOS)

bandwidthscheduler.oos.aliyuncs.com

AliyunServiceRoleForOOSBandwidthScheduler

Manage service-linked roles for OOS

instancescheduler.oos.aliyuncs.com

AliyunServiceRoleForOOSInstanceScheduler

executiondelivery.oos.aliyuncs.com

AliyunServiceRoleForOOSExecutionDelivery

Auto Scaling

ess.aliyuncs.com

AliyunServiceRoleForAutoScaling

Grant permissions to Auto Scaling

Time Series Database (TSDB)

hitsdb.aliyuncs.com

AliyunServiceRoleForTSDB

None.

CloudMonitor

cloudmonitor.aliyuncs.com

AliyunServiceRoleForCloudMonitor

Manage the service-linked role for CloudMonitor

Blockchain as a Service (BaaS)

baas.aliyuncs.com

AliyunServiceRoleForBaaS

None.

Global Traffic Manager (GTM)

gtm.aliyuncs.com

AliyunServiceRoleForGTM

Service-linked role

Alibaba Cloud DNS (DNS)

alidns.aliyuncs.com

AliyunServiceRoleForDNS

None.

Data Security Center (DSC)

sddp.aliyuncs.com

AliyunServiceRoleForSDDP

Authorize DSC to access Alibaba Cloud resources

CDN

cdn-ddos.cdn.aliyuncs.com

AliyunServiceRoleForCDNAccessingDDoS

Integrate Alibaba Cloud CDN with Anti-DDoS

logdelivery.cdn.aliyuncs.com

AliyunServiceRoleForCDNLogDelivery

None.

Application Real-Time Monitoring Service (ARMS)

arms.aliyuncs.com

AliyunServiceRoleForARMS

Service-linked role for ARMS

security.arms.aliyuncs.com

AliyunServiceRoleForARMSSecurity

Service-linked role for Application Security

EventBridge

sendevent-fc.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToFC

Service-linked roles

sendevent-mns.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToMNS

sendevent-sms.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToSMS

sendevent-directmail.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToDirectMail

source-rocketmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceRocketMQ

connect-vpc.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeConnectVPC

source-actiontrail.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceActionTrail

source-rabbitmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceRabbitMQ

sendevent-rabbitmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRabbitMQ

sendevent-rocketmq.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRocketMQ

source-mqtt.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSourceMqtt

sendevent-sae.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToSAE

sendevent-rds.eventbridge.aliyuncs.com

AliyunServiceRoleForEventBridgeSendToRDS

DataWorks

openplatform.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksOpenPlatform

Appendix: DataWorks service-linked role

emr.dataworks.aliyuncs.com

AliyunServiceRoleForDataworksOnEmr

Appendix: Service-linked roles used by DataWorks to access Alibaba Cloud services to which compute engines belong

engine.dataworks.aliyuncs.com

AliyunServiceRoleForDataworksEngine

Appendix: Service-linked roles used by DataWorks to access Alibaba Cloud services to which compute engines belong

dlf.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksAccessDLF

Manage permissions on DLF

di.dataworks.aliyuncs.com

AliyunServiceRoleForDataWorksDI

Service-linked role of DataWorks Data Integration

Elastic High Performance Computing (E-HPC)

ehpc.aliyuncs.com

AliyunServiceRoleForEHPC

Service-linked role of E-HPC

ApsaraMQ for RabbitMQ

monitoring.amqp.aliyuncs.com

AliyunServiceRoleForAmqpMonitoring

Service-linked roles

logdelivery.amqp.aliyuncs.com

AliyunServiceRoleForAmqpLogDelivery

network.amgp.aliyuncs.com

AliyunServiceRoleForAmqpNetwork

encrypt.amqpaliyuncs.com

AliyunServiceRoleForAmqpEncrypt

Server Migration Center (SMC)

smc.aliyuncs.com

AliyunServiceRoleForSMC

Service linked roles for SMC

ApsaraMQ for Kafka

connector.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaConnector

Service-linked roles

instanceencryption.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaInstanceEncryption

alikafka.aliyuncs.com

AliyunServiceRoleForAlikafka

etl.alikafka.aliyuncs.com

AliyunServiceRoleForAlikafkaETL

Managed Service for OpenTelemetry

xtrace.aliyuncs.com

AliyunServiceRoleForXtrace

Service-linked role

NAT Gateway (NAT)

nat.aliyuncs.com

AliyunServiceRoleForNatgw

Service-linked role

Alibaba Cloud DNS PrivateZone

pvtz.aliyuncs.com

AliyunServiceRoleForPvtz

Service-linked role for PrivateZone

ActionTrail

actiontrail.aliyuncs.com

AliyunServiceRoleForActionTrail

Manage the service-linked role

Cloud Storage Gateway (CSG)

hcs-sgw.aliyuncs.com

AliyunServiceRoleForHCSSGW

Service-linked roles for CSG

logmonitor.hcs-sgw.aliyuncs.com

AliyunServiceRoleForHCSSGWLogMonitor

API Gateway

apigateway.aliyuncs.com

AliyunServiceRoleForApiGateway

None.

monitor.apigateway.aliyuncs.com

AliyunServiceRoleForApiGatewayMonitoring

None.

Microservices Engine (MSE)

mse.aliyuncs.com

AliyunServiceRoleForMSE

MSE service-linked role

Elasticsearch

ops.elasticsearch.aliyuncs.com

AliyunServiceRoleForElasticsearchOps

None.

collector.elasticsearch.aliyuncs.com

AliyunServiceRoleForElasticsearchCollector

Bastionhost

bastionhost.aliyuncs.com

AliyunServiceRoleForBastionhost

Service-linked role for Bastionhost

Global Accelerator (GA)

vpcendpoint.ga.aliyuncs.com

AliyunServiceRoleForGaVpcEndpoint

AliyunServiceRoleForGaVpcEndpoint

cdt.ga.aliyuncs.com

AliyunServiceRoleForGaCdt

AliyunServiceRoleForGaCdt

ssl.ga.aliyuncs.com

AliyunServiceRoleForGaSsl

AliyunServiceRoleForGaSsl

ApsaraMQ for RocketMQ

ons.aliyuncs.com

AliyunServiceRoleForOns

Service-linked roles

AnalyticDB for PostgreSQL

adbpg.aliyuncs.com

AliyunServiceRoleForADBPG

Service-linked role

OpenSearch

opensearch.aliyuncs.com

AliyunServiceRoleForOpenSearch

AliyunServiceRoleForOpenSearch

searchengine.aliyuncs.com

AliyunServiceRoleForSearchEngine

Service-linked role for OpenSearch Vector Search Edition

Key Management Service (KMS)

secretsmanager-rds.kms.aliyuncs.com

AliyunServiceRoleForKMSSecretsManagerForRDS

Manage the service-linked role for dynamic ApsaraDB RDS secrets

keystore.kms.aliyuncs.com

AliyunServiceRoleForKMSKeyStore

Service-linked role

ApsaraDB for MongoDB

mongodb.aliyuncs.com

AliyunServiceRoleForMongoDB

Service-linked role

ApsaraDB RDS

pgsql-onecs.rds.aliyuncs.com

AliyunServiceRoleForRdsPgsqlOnEcs

Service-linked roles

backupencryption.rds.aliyuncs.com

AliyunServiceRoleForRdsBackupEncryption

None.

PrivateLink

privatelink.aliyuncs.com

AliyunServiceRoleForPrivatelink

Service-linked role

AnalyticDB for MySQL

ads.aliyuncs.com

AliyunServiceRoleForAnalyticDBForMySQL

Service-linked role

ApsaraDB for ClickHouse

clickhouse.aliyuncs.com

AliyunServiceRoleForClickHouse

ApsaraDB for ClickHouse service-linked role

Application Load Balancer (ALB)

alb.aliyuncs.com

AliyunServiceRoleForAlb

Service-linked roles for ALB

logdelivery.alb.aliyuncs.com

AliyunServiceRoleForAlbLogDelivery

Dynamic Content Delivery Network (DCDN)

logdelivery.dcdn.aliyuncs.com

AliyunServiceRoleForDCDNLogDelivery

None.

Classic Load Balancer (CLB)

logdelivery.slb.aliyuncs.com

AliyunServiceRoleForSlbLogDelivery

Service-linked roles for CLB

Cloud Enterprise Network (CEN)

cen.aliyuncs.com

AliyunServiceRoleForCEN

AliyunServiceRoleForCEN

Elastic Container Instance

eci.aliyuncs.com

AliyunServiceRoleForECI

AliyunServiceRoleForECI

vnode.eci.aliyuncs.com

AliyunServiceRoleForECIVnode

AliyunServiceRoleForECIVnode

Data Disaster Recovery

dbs.aliyuncs.com

AliyunServiceRoleForDBS

How do I activate Data Disaster Recovery?

Cloud Governance Center (CGC)

governance.aliyuncs.com

AliyunServiceRoleForGovernance

Service-linked role in Cloud Governance Center

CloudSSO

cloudsso.aliyuncs.com

AliyunServiceRoleForCloudSSO

Use the service-linked role for CloudSSO

Resource Sharing

resourcesharing.aliyuncs.com

AliyunServiceRoleForResourceSharing

Service-linked role for Resource Sharing

Tair (Redis® OSS-Compatible)

r-kvstore.aliyuncs.com

AliyunServiceRoleForKvstore

Service-linked role

Database Autonomy Service (DAS)

hdm.aliyuncs.com

AliyunServiceRoleForDAS

AliyunServiceRoleForDAS role

Elastic Compute Service (ECS)

archiving.ecs.aliyuncs.com

AliyunServiceRoleForECSArchiving

Manage the service-linked role for Cloud Assistant

VPN Gateway

vpn.aliyuncs.com

AliyunServiceRoleForVpn

AliyunServiceRoleForVpn

IoT Platform

device-file-upload.iot.aliyuncs.com

AliyunServiceRoleForIoTDeviceFileUpload

None.

log-export.iot.aliyuncs.com

AliyunServiceRoleForIoTLogExport

AliyunServiceRoleForIoTLogExport service-linked role

ruleengine-lindorm.iot.aliyuncs.com

AliyunServiceRoleForIoTRuleengineLindorm

None.

Alibaba Cloud Distributed Cloud Container Platform (ACK One)

adcp.aliyuncs.com

AliyunServiceRoleForAdcp

Permissions of Service-linked roles for ACK One

Simple Log Service

alert.log.aliyuncs.com

AliyunServiceRoleForSLSAlert

Manage the AliyunServiceRoleForSLSAlert service-linked role

audit.log.aliyuncs.com

AliyunServiceRoleForSLSAudit

Manage the AliyunServiceRoleForSLSAudit service-linked role

Service Catalog

servicecatalog.aliyuncs.com

AliyunServiceRoleForServiceCatalog

Service-linked role

Security Center

cspm.sas.aliyuncs.com

AliyunServiceRoleForSasCspm

Service-linked roles for Security Center

cloudsiem.sas.aliyuncs.com

AliyunServiceRoleForSasCloudSiem

File Storage NAS (NAS)

extreme.nas.aliyuncs.com

AliyunServiceRoleForNasExtreme

Service-linked roles of NAS

encryption.nas.aliyuncs.com

AliyunServiceRoleForNasEncryption

ecs-handler.nas.aliyuncs.com

AliyunServiceRoleForNasEcsHandler

logdelivery.nas.aliyuncs.com

AliyunServiceRoleForNasLogDelivery

Elastic Accelerated Computing Instances

eais.aliyuncs.com

AliyunServiceRoleForEais

None.

Employee Identity and Access Management (EIAM)

eiam.aliyuncs.com

AliyunServiceRoleForEiam

None.

Service Mesh (ASM)

servicemesh.aliyuncs.com

AliyunServiceRoleForServiceMesh

Manage the service-linked role for ASM

Gateway Load Balancer (GWLB)

gwlb.aliyuncs.com

AliyunServiceRoleForGwlb

System policies for GWLB

Function Compute

fc.aliyuncs.com

AliyunServiceRoleForF

Service-linked role of Function Compute