This topic describes how to create an IAM role for a trusted Kingsoft Cloud service. The IAM role is used to authorize cross-service access.
Background
You can create the following types of IAM roles for trusted Kingsoft Cloud services:
- Normal service role: When creating a normal service role, you need to define a role name, select a trusted service, and define a policy.
- Service-linked role: When creating a service-linked role, you only need to select a trusted service. The role name and policy are predefined by the service.
Create a normal service role
- Log in to the IAM console.
- In the left navigation pane, click Roles.
- On the Roles page, click Create Role.
- On the Create Role page, select Kingsoft Cloud Service as the trusted entity.
- Select Normal Service Role from the Choose Role Type drop-down list.
- Set Role Name and Remarks.
- Select a trusted service from the Select Trusted Service drop-down list.
Only the services in the drop-down list are available.
- Click Next.
After the role is created, choose Permissions > Grants or Policies in the left navigation pane to grant permissions or attach policies to the role.
Create a service-linked role
- Log in to the IAM console.
- In the left navigation pane, click Roles.
- On the Roles page, click Create Role.
- On the Create Role page, select Kingsoft Cloud Service as the trusted entity.
- Select Service Linked Role from the Choose Role Type drop-down list.
- Select a trusted service from the Select Trusted Service drop-down list.
After you select a service, you can view the name, remarks, and policy predefined for the service-linked role. You can click Policy Detail to view the details of the policy.
- Click Confirm.