Release Content:

Alibaba Cloud is committed to improving the security of cloud services and spares no effort in safeguarding user accounts and assets. An AccessKey pair is a credential used by an application to access Alibaba Cloud resources over APIs. By default, the AccessKey of the Alibaba Cloud account (also known as the main account) has administrator access of the account. If an AccessKey of Alibaba Cloud account is improperly stored and leaked, all assets under the account are exposed to risks, unexpected fees may be generated, and ransomware attacks may be launched. To reduce the occurrence of such incidents, Alibaba Cloud will adjust the number of Alibaba Cloud account AccessKeys from 5 to 2 in batches from October 13, 2025.

Note: We strongly recommend that you use the STS token or the RAM user AccessKey for program access. You can limit the permissions of the credentials to reduce the risk of leakage, related documents.

Impact of change:

If an Alibaba Cloud account has more than two AccessKeys, you cannot create a new one. The AccessKey created before the change will not be affected, nor will it affect the AccessKey quota for all RAM users in the account. (For the difference between cloud account AccessKey and RAM user AccessKey, please refer to the document.)

Release schedule:

• From October 13 to November 31, 2025, AccessKey Management Console (enter through the personal information in the upper right corner of the console) will release the quota changes of the Alibaba Cloud account AccessKeys in batches according to the account UID.
• From November 31 to December 30, 2025, the OpenAPI will be changed in batches. The quota for creating Alibaba Cloud account AccessKey by calling IMS: CreateAccessKey or RAM: CreateAccessKey API will be limited to 2.

If you have any questions or need further assistance, feel free to submit a ticket or call our hotline to obtain technical support. Thank you for your understanding and trust.