Create an IAM role for a trusted Kingsoft Cloud service

This topic describes how to create an IAM role for a trusted Kingsoft Cloud service. The IAM role is used to authorize cross-service access.

Background

You can create the following types of IAM roles for trusted Kingsoft Cloud services:

• Normal service role: When creating a normal service role, you need to define a role name, select a trusted service, and define a policy.
• Service-linked role: When creating a service-linked role, you only need to select a trusted service. The role name and policy are predefined by the service.

Create a normal service role

1. Log in to the IAM console.
2. In the left navigation pane, click Roles.
3. On the Roles page, click Create Role.
4. On the Create Role page, select Kingsoft Cloud Service as the trusted entity.
5. Select Normal Service Role from the Choose Role Type drop-down list.
6. Set Role Name and Remarks.
7. Select a trusted service from the Select Trusted Service drop-down list.

   Only the services in the drop-down list are available.

8. Click Next.

   After the role is created, choose Permissions > Grants or Policies in the left navigation pane to grant permissions or attach policies to the role.

Create a service-linked role

1. Log in to the IAM console.
2. In the left navigation pane, click Roles.
3. On the Roles page, click Create Role.
4. On the Create Role page, select Kingsoft Cloud Service as the trusted entity.
5. Select Service Linked Role from the Choose Role Type drop-down list.
6. Select a trusted service from the Select Trusted Service drop-down list.

   After you select a service, you can view the name, remarks, and policy predefined for the service-linked role. You can click Policy Detail to view the details of the policy.

7. Click Confirm.