一、服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。
| CAM中产品名 | 角色名称 | 角色类型 | 角色载体 |
| 数据安全审计 | CDS_QCSLinkedRoleInAudit | 服务相关角色 | audit.cds.cloud.tencent.com |
二、CDS_QCSLinkedRoleInAudit
·策略名称： QcloudAccessForCDSLinkedRoleInAudit
·策略内容：{
"version": "2.0",
"statement": [
{
"action": [
"cvm:DescribeInstances",
"clb:CreateLoadBalancer",
"clb:DeleteLoadBalancer",
"clb:CreateListener",
"clb:DescribeListeners",
"clb:DeleteListener",
"clb:DeleteLoadBalancerListeners",
"clb:RegisterTargets",
"clb:DeregisterTargets",
"vpc:CreateVpcEndPointService",
"vpc:DescribeVpcEndPointService",
"vpc:ModifyVpcEndPointServiceAttribute",
"vpc:DeleteVpcEndPointService",
"vpc:CreateVpcEndPointServiceWhiteList",
"vpc:DescribeVpcEndPointServiceWhiteList",
"vpc:DeleteVpcEndPointServiceWhiteList",
"vpc:EnableVpcEndPointConnect",
"vpc:CheckVpcEndPointServiceExist",
"vpc:CreateVpcEndPoint",
"vpc:DescribeVpcEndPoint",
"vpc:ModifyVpcEndPointAttribute",
"vpc:DeleteVpcEndPoint",
"vpc:DeleteVpcEndPointAndServiceAll",
"vpc:DescribeSubnetEx",
"cdb:DescribeDBRoutes",
"cdb:DescribeDBInstances",
"mariadb:DescribeDBInstances",
"sqlserver:DescribeDBInstances",
"postgres:DescribeDBInstances",
"redis:DescribeInstances",
"mongodb:DescribeDBInstances",
"dcdb:DescribeDCDBInstances",
"sms:SendSms",
"tat:DescribeAutomationAgentStatus",
"tat:RunCommand",
"tat:DescribeInvocations",
"tat:DescribeInvocationTasks",
"ckafka:DescribeInstances",
"ckafka:DescribeInstancesDetail",
"ckafka:DescribeInstanceAttributes",
"ckafka:DescribeTopic",
"ckafka:DescribeTopicDetail",
"ckafka:DescribeRoute",
"ckafka:CreateRoute",
"cynosdb:DescribeClusters",
"cynosdb:DescribeInstances",
"cls:pushLog",
"cls:DeleteCloudProductLogTask",
"vpc:CreateTrafficMirror",
"vpc:UpdateTrafficMirrorAllFilter",
"vpc:ResetTrafficMirrorTarget",
"vpc:DeleteTrafficMirror",
"vpc:StartTrafficMirror",
"vpc:StopTrafficMirror",
"vpc:DescribeTrafficMirrors",
"vpc:ModifyTrafficMirrorAttribute",
"vpc:DescribeVpcs",
"vpc:DescribeNetworkInterfaces",
"vpc:DescribeSubnets",
"vpc:DeleteNetworkInterfaceEx",
"vpc:DescribeNetworkInterfaceLimitEx",
"vpc:DescribeNetworkInterfacesEx",
"vpc:DetachNetworkInterfaceEx",
"vpc:DescribeVpcTaskResult",
"vpc:ModifyNetworkInterfaceAttribute",
"vpc:ResetTrafficMirrorSrcs",
"vpc:CheckTrafficMirror",
"vpc:ResetTrafficMirrorFilter",
"vpc:UpdateTrafficMirrorDirection",
"cvm:DescribeZoneInstanceConfigInfos",
"cdb:DescribeDBSecurityGroups",
"postgres:DescribeDBInstanceSecurityGroups",
"sqlserver:DescribeDBSecurityGroups",
"redis:DescribeDBSecurityGroups",
"mongodb:DescribeSecurityGroup",
"mariadb:DescribeDBSecurityGroups",
"cynosdb:DescribeDBSecurityGroups",
"dcdb:DescribeDBSecurityGroups",
"vpc:DescribeAddressTemplates",
"vpc:DescribeAddressTemplateGroups",
"vpc:DescribeServiceTemplates",
"vpc:DescribeServiceTemplateGroups",
"vpc:DescribeSecurityGroupPolicies",
"cvm:DescribeSecurityGroupPolicys",
"vpc:DescribeAddress",
"vpc:DescribeAddressGroups",
"vpc:DescribeService",
"vpc:DescribeServiceGroups"
],
"resource": "*",
"effect": "allow"
}
]
}