Service roles and service-linked roles are predefined by Tencent Cloud services and, upon user authorization, the corresponding services can access and use resources by assuming these service-linked roles. This document provides detailed information on the use cases and associated authorization policies of these specific service-linked roles.

CKafka_QCSLinkedRoleInSslQuery

Use Cases： The current role is related to the CKafka service, used to authorize Ckafka to query SSL resources
Authorization Polices

• Policy Name： QcloudAccessForCKafkaLinkedRoleInSslQuery
• Policy Information：
  

  {
      "version": "2.0",
      "statement": [
          {
              "effect": "allow",
              "action": [
                  "ssl:DescribeCertificateDetail",
                  "ssl:DescribeCertificates"
              ],
              "resource": "*"
          }
      ]
  }

CKafka_QCSLinkedRoleInKmsAccess

Use Cases： The current role is related to the CKafka service, which will access your KMS service resources within policy-permitted scope.
Authorization Polices

• Policy Name： QcloudAccessForCKafkaLinkedRoleInKmsAccess
• Policy Information：
  

  {
      "version": "2.0",
      "statement": [
          {
              "effect": "allow",
              "action": [
                  "kms:GetRegions",
                  "kms:GetServiceStatus",
                  "kms:ListAlgorithms",
                  "kms:UnbindCloudResource",
                  "kms:BindCloudResource",
                  "kms:Decrypt",
                  "kms:GenerateDataKey",
                  "kms:CreateKey",
                  "kms:ListKeyDetail"
              ],
              "resource": "*"
          }
      ]
  }

cosCkafka_QCSRole

Use Cases：
Authorization Polices

• Policy Name： QcloudCOSAccessForCkafkaRole
• Policy Information：
  

  {
      "version": "2.0",
      "statement": [
          {
              "action": [
                  "cos:PutObject",
                  "cos:GetObject",
                  "cos:DeleteObject",
                  "cos:ListParts",
                  "cos:UploadPart"
              ],
              "resource": "*",
              "effect": "allow"
          }
      ]
  }