This product(
Ram/2015-05-01) OpenAPI adopts RPC Signature style. See signature details in Description of the signature mechanism. We have packaged SDKs for common programming languages for developers. Developers can directly call the OpenAPI of this product by downloading the SDK without paying attention to the technical details. If the existing SDK cannot meet the usage requirements, you can connect through the signature mechanism. It will take about 5 working days. Therefore, it is recommended to join our DingTalk service group (78410016550) and sign under the guidance of experts. Before using the API, you need to prepare your identity account and access key (AccessKey) to effectively access the API through client tools (SDK, CLI, etc.). For details see getAccessKey.
User management
| API | Title | Description |
|---|---|---|
| RAM User | RAM User | |
| CreateUser | CreateUser | Creates a Resource Access Management (RAM) user. |
| GetUser | GetUser | Queries information about a Resource Access Management (RAM) user. |
| UpdateUser | UpdateUser | Modifies information about a Resource Access Management (RAM) user. |
| DeleteUser | DeleteUser | Deletes a Resource Access Management (RAM) user. |
| ListUsers | ListUsers | Queries the information about all RAM users. |
| Login Profile | Login Profile | |
| CreateLoginProfile | CreateLoginProfile | Enables console logon for a Resource Access Management (RAM) user. |
| GetLoginProfile | GetLoginProfile | Queries the logon configurations of a Resource Access Management (RAM) user. |
| UpdateLoginProfile | UpdateLoginProfile | Modifies the logon configurations of a Resource Access Management (RAM) user. |
| DeleteLoginProfile | DeleteLoginProfile | Disables console logon for a Resource Access Management (RAM) user. |
| ChangePassword | ChangePassword | Changes the password that is used to log on to the console for a Resource Access Management (RAM) user. |
| AccessKey | AccessKey | |
| CreateAccessKey | CreateAccessKey | Creates an AccessKey pair for a Resource Access Management (RAM) user. |
| UpdateAccessKey | UpdateAccessKey | Changes the status of an AccessKey pair that belongs to a Resource Access Management (RAM) user. |
| DeleteAccessKey | DeleteAccessKey | Deletes an AccessKey pair of a Resource Access Management (RAM) user. |
| ListAccessKeys | ListAccessKeys | Queries all AccessKey pairs that belong to a Resource Access Management (RAM) user. |
| MFA | MFA | |
| CreateVirtualMFADevice | CreateVirtualMFADevice | Creates a multi-factor authentication (MFA) device. |
| GetUserMFAInfo | GetUserMFAInfo | Queries the multi-factor authentication (MFA) device that is bound to a Resource Access Management (RAM) user. |
| DeleteVirtualMFADevice | DeleteVirtualMFADevice | Deletes a multi-factor authentication (MFA) device. |
| ListVirtualMFADevices | ListVirtualMFADevices | Queries multi-factor authentication (MFA) devices. |
| BindMFADevice | BindMFADevice | Binds a multi-factor authentication (MFA) device to a Resource Access Management (RAM) user. |
| UnbindMFADevice | UnbindMFADevice | Unbinds a multi-factor authentication (MFA) device from a Resource Access Management (RAM) user. |
User group management
| API | Title | Description |
|---|---|---|
| CreateGroup | CreateGroup | Creates a RAM user group. |
| GetGroup | GetGroup | Queries information about a Resource Access Management (RAM) user group. |
| UpdateGroup | UpdateGroup | Modifies a Resource Access Management (RAM) user group. |
| DeleteGroup | DeleteGroup | Deletes a Resource Access Management (RAM) user group. |
| ListGroups | ListGroups | Queries Resource Access Management (RAM) user groups. |
| ListGroupsForUser | ListGroupsForUser | Queries the Resource Access Management (RAM) user groups to which a RAM user belongs. |
| ListUsersForGroup | ListUsersForGroup | Queries Resource Access Management (RAM) users in a RAM user group. |
| AddUserToGroup | AddUserToGroup | Adds a Resource Access Management (RAM) user to a RAM user group. |
| RemoveUserFromGroup | RemoveUserFromGroup | Removes a Resource Access Management (RAM) user from a RAM user group. |
Role management
| API | Title | Description |
|---|---|---|
| CreateRole | CreateRole | Creates a Resource Access Management (RAM) role. |
| DeleteRole | DeleteRole | Deletes a Resource Access Management (RAM) role. |
| UpdateRole | UpdateRole | Modifies information about a Resource Access Management (RAM) role. |
| GetRole | GetRole | Queries information about a Resource Access Management (RAM) role. |
| ListRoles | ListRoles | Queries all Resource Access Management (RAM) roles. |
Permission management
| API | Title | Description |
|---|---|---|
| Permission Policy Management | Permission Policy Management | |
| CreatePolicy | CreatePolicy | Creates a custom policy. |
| GetPolicy | GetPolicy | Queries information about a policy. |
| UpdatePolicyDescription | UpdatePolicyDescription | Modifies the description of a custom policy. |
| DeletePolicy | DeletePolicy | Deletes a policy. |
| ListPolicies | ListPolicies | Queries a list of policies. |
| CreatePolicyVersion | CreatePolicyVersion | Creates a version for a policy. |
| GetPolicyVersion | GetPolicyVersion | Queries the information about a policy version. |
| DeletePolicyVersion | DeletePolicyVersion | Deletes a policy version. |
| ListPolicyVersions | ListPolicyVersions | Queries the versions of a policy. |
| SetDefaultPolicyVersion | SetDefaultPolicyVersion | Specifies a version for a policy as the default version. |
| Authorization Management | Authorization Management | |
| AttachPolicyToUser | AttachPolicyToUser | Attaches a policy to a Resource Access Management (RAM) user. |
| DetachPolicyFromUser | DetachPolicyFromUser | Detaches a policy from a Resource Access Management (RAM) user. |
| AttachPolicyToGroup | AttachPolicyToGroup | Attaches a policy to a Resource Access Management (RAM) user group. |
| DetachPolicyFromGroup | DetachPolicyFromGroup | Detaches a policy from a Resource Access Management (RAM) user group. |
| AttachPolicyToRole | AttachPolicyToRole | Attaches a policy to a Resource Access Management (RAM) role. |
| DetachPolicyFromRole | DetachPolicyFromRole | Detaches a policy from a Resource Access Management (RAM) role. |
| ListPoliciesForUser | ListPoliciesForUser | Queries the policies that are attached to a RAM user. |
| ListPoliciesForGroup | ListPoliciesForGroup | Queries the policies that are attached to a Resource Access Management (RAM) user group. |
| ListPoliciesForRole | ListPoliciesForRole | Queries the policies that are attached to a Resource Access Management (RAM) role. |
| ListEntitiesForPolicy | ListEntitiesForPolicy | Queries the entities to which a policy is attached. |
Security management
| API | Title | Description |
|---|---|---|
| SetAccountAlias | SetAccountAlias | Configures an alias for an Alibaba Cloud account. |
| GetAccountAlias | GetAccountAlias | Queries the alias of an Alibaba Cloud account. |
| ClearAccountAlias | ClearAccountAlias | Deletes the alias of an Alibaba Cloud account. |
| SetPasswordPolicy | SetPasswordPolicy | Configures the password policy for Resource Access Management (RAM) users, including the password strength. |
| GetPasswordPolicy | GetPasswordPolicy | Queries the password policy of Resource Access Management (RAM) users, including the password strength. |
| SetSecurityPreference | SetSecurityPreference | Configures the security preferences. |
| GetSecurityPreference | GetSecurityPreference | Queries the security preferences. |
Permission analysis and diagnostics
| API | Title | Description |
|---|---|---|
| DecodeDiagnosticMessage | DecodeDiagnosticMessage | Decodes the diagnostic information in the response that contains an access denied error. The error is caused by no RAM permissions. |
Tag management
| API | Title | Description |
|---|---|---|
| TagResources | TagResources | Adds tags to resources. |
| UntagResources | UntagResources | Removes tags from resources. |
| ListTagResources | ListTagResources | Queries the tags that are added to resources. |