MaxCompute - Supports RAM Roles
Target customers: enterprises who need to connect their self-managed identity management systems to Alibaba Cloud services in role-based SSO mode. Enterprises who need to read and write MaxCompute resources from other cloud services by using RAM roles. Features released: 1. MaxCompute allows you to use RAM roles in addition to Alibaba Cloud accounts and RAM users to access MaxCompute resources. Administrators can add RAM roles to projects and grant permissions to the RAM roles. In this case, RAM roles must access MaxCompute resources by using STS, which ensures secure access without the authentication of AccessKey pairs. 2. The MaxCompute console supports STS authentication. You can use a RAM role to access a MaxCompute project for data analytics and development in the console.