Cache for Redis
Cache for Redis
Document
- Documentation
Cache for RedisUser guideAccount and access authorizationCross-service access authorization
Copy page
Download PDFAccount and access authorization
Cross-service access authorization
Copy pageDownload PDFCross-service access authorization
Before using Cache for Redis, you need to authorize cross-service access to allow Redis instances to access other services (such as VPC and EIP). This topic describes the procedure for cross-service access authorization.
Background information
Identity and Access Management (IAM) supports policy management. You can associate the ServiceRoleForRedis role with your Cache for Redis account and then associate this role with the ServiceRoleForRedis policy to access other services.
The statements for defining the access policy ServiceRoleForRedis are as follows:
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVpcs",
"vpc:DescribeVpcAttributes",
"vpc:DescribeSubnets",
"vpc:DescribeSecurityGroups",
"vpc:CreateNetworkInterface",
"vpc:DeleteNetworkInterface",
"vpc:DescribeNetworkInterfaces",
"vpc:CreateNetworkInterfacePermission",
"vpc:DeleteNetworkInterfacePermission",
"vpc:DescribeNetworkInterfacePermissions",
"vpc:AssociateEipAddress",
"vpc:DisassociateEipAddress",
"vpc:DescribeEipAddressAttributes",
"vpc:DescribeEipAddresses"
],
"Resource": [
"*"
]
}
]
}
For more information about access control roles and policies, refer to About roles and About policies.
Precautions
If you need to authorize cross-service access for IAM users, the IAM users must have the IAMFullAccess permissions, otherwise an error will occur during authorization. For more information on how to authorize IAM users, refer to About users.
Authorize via console
- Log in to the Redis console.
- On the Cross-service access requests page, confirm the access roles and associated policies, and click Authorize.
tip
- After service authorization is completed, the Instances page of Redis instances is automatically displayed.
- If you have authorized before, you do not need to authorize again.
Authorize via API
You can call the CreateServiceLinkedRole API to complete the authorization for cross-service access with ServiceName as Redis.
Subsequent operations
After completing service authorization, you can proceed with other operations for the Redis instance.
Last updated: 2025.12.09 17:44:01
All rights reserved © Beijing Volcano Engine Technology Co., Ltd2024
