Last updated：2021-05-11 10:41:43
When you activate the Kingsoft Cloud Container Engine (KCE) service, you must assign the default role KsyunKCEDefaultRolePolicy to KCE so that KCE can access related services, such as Server Load Balancing (SLB), Elastic IP (EIP), and Elastic Block Storage (EBS). This ensures normal operation of the KCE service.
- You can log in to the Identity and Access Management (IAM) console to view the detailed policy information of the default role.
- You can go to the Roles page to edit role permissions. Note that wrong configurations may cause KCE to fail to obtain required permissions and result in unavailability of the KCE service.
The KsyunKCEDefaultRolePolicy role grants the permissions on the following services:
|The following table describes the permissions on CMS.
|Creates monitoring metrics.
|Deletes monitoring metrics.
|Obtains monitoring data.