Skip to main content

FC Service Bound to RAM Role

ID: rule:aliyun:fc-service-bind-role
Severity: medium
IaC Types: ROS, Terraform

Description

Ensures that the Function Compute service has a RAM role bound to it.

Reason for Violation

Binding a RAM role to an FC service allows the function to securely access other Alibaba Cloud resources.

Recommendation

Bind a RAM role to the Function Compute service by setting the role attribute.

Resource Types

  • ROS: ALIYUN::FC::Service
  • Terraform: alicloud_fc_service