This topic lists the Alibaba Cloud services that work with Security Token Service (STS).
Overview
Each table in this topic contains the following columns:
Alibaba Cloud service: the name of the cloud service that supports STS.
Sub-service or sub-module: the sub-service or sub-module of the cloud service. A hyphen (-) indicates none.
RAM code: the code that is used in Resource Access Management (RAM) to indicate the cloud service.
Console: indicates whether STS can be used to implement access control in the console of the service. A tick (√) indicates that STS is supported. A cross (×) indicates that STS is not supported. A circle (○) indicates that no console is provided for that service.
API: indicates whether STS can be used to implement access control by calling the API of the service. A tick (√) indicates that STS is supported by calling the API of the service. A cross (×) indicates that STS is not supported by calling the API of the service. A circle (○) indicates that no API is provided for that service.
For more information about STS, see What is STS? and RAM role overview.
Elastic computing
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Elastic Compute Service (ECS) | ECS | ecs | √ | √ |
Elastic Block Storage (EBS) | EBS | ecs | √ | √ |
EBS | EBS | ebs | √ | √ |
ECS | Elastic GPU Service | ecs | √ | √ |
ECS | ECS Bare Metal Instance | ecs | √ | √ |
ECS | Super Computing Cluster | ecs | √ | √ |
ECS | Dedicated Host (DDH) | ecs | √ | √ |
ECS | Alibaba Cloud Linux 2 | ecs | √ | √ |
Auto Scaling | - | ess | √ | √ |
Container Service for Kubernetes (ACK) | - | cs | √ | √ |
Batch Compute | - | batchcompute | √ | √ |
Resource Orchestration Service (ROS) | - | ros | √ | √ |
Function Compute | - | fc | √ | √ |
Simple Application Server | - | swas | √ | ○ |
Elastic High Performance Computing (E-HPC) | - | ehpc | √ | √ |
Container Registry (Enterprise Edition) | - | cr | √ | √ |
Container Registry (Personal Edition) | - | cr | × | × |
WUYING Workspace | WUYING Workspace | ecd | √ | √ |
Elastic Container Instance | - | eci | √ | √ |
CloudFlow | - | fnf | √ | √ |
Web App Service | - | webplus | √ | √ |
Compute Nest | - |
| √ | ○ |
Alibaba Cloud Distributed Cloud Container Platform (ACK One) | - | adcp | √ | √ |
Databases
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
ApsaraDB RDS | ApsaraDB RDS | rds | √ | √ |
ApsaraDB RDS | ApsaraDB RDS for MySQL | rds | √ | √ |
ApsaraDB RDS | ApsaraDB RDS for SQL Server | rds | √ | √ |
ApsaraDB RDS | ApsaraDB RDS for PostgreSQL | rds | √ | √ |
ApsaraDB RDS | ApsaraDB RDS for PPAS | rds | √ | √ |
ApsaraDB RDS | ApsaraDB for MyBase | rds | √ | √ |
ApsaraDB for Redis | - | kvstore | √ | √ |
ApsaraDB for MongoDB | - | dds | √ | √ |
AnalyticDB for PostgreSQL | - | gpdb | √ | √ |
Data Transmission Service (DTS) | - | dts | √ | √ |
Data Management (DMS) | - | dms | √ | √ |
AnalyticDB for MySQL | - | adb | √ | √ |
PolarDB for Xscale (PolarDB-X) | - |
| √ | √ |
ApsaraDB for HBase | - | hbase | √ | √ |
Advanced Database & Application Migration (ADAM) | - | adam | √ | ○ |
PolarDB | - | polardb | √ | √ |
Database Backup (DBS) | - | dbs | √ | √ |
Database Autonomy Service (DAS) | - | hdm | √ | √ |
Data Lake Analytics (DLA) | - | openanalytics | √ | √ |
ApsaraDB for OceanBase | - | oceanbase | √ | ○ |
ApsaraDB for Cassandra | - | cassandra | √ | √ |
LedgerDB | - | ledgerdb | √ | √ |
ApsaraDB for ClickHouse | - | clickhouse | √ | √ |
Database Gateway | - | dg | √ | √ |
Storage
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Object Storage Service (OSS) | - | oss | √ | √ |
Apsara File Storage NAS (NAS) | - | nas | √ | √ |
Tablestore (OTS) | - | ots | √ | √ |
Cloud Storage Gateway (CSG) | - | hcs-sgw | √ | √ |
Cloud Backup | - | hbr | √ | √ |
Hybrid Cloud Storage Array (CSA) | CSA | hgw | √ | ○ |
Hybrid Cloud Storage Array (CSA) | Remote Service | asrs | √ | ○ |
Cloud communications
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Short Message Service (SMS) | - | dysms | √ | √ |
Network
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Virtual Private Cloud (VPC) | - | vpc | √ | √ |
Server Load Balancer (SLB) | SLB | slb | √ | √ |
SLB | Application Load Balancer (ALB) | alb | √ | √ |
SLB | Network Load Balancer (NLB) | nlb | √ | √ |
Express Connect | - | vpc | √ | √ |
Elastic IP Address (EIP) | EIP | vpc | √ | √ |
EIP | Anycast Elastic IP Address (Anycast EIP) | eipanycast | √ | √ |
NAT Gateway | - | vpc | √ | √ |
VPN Gateway | - | vpc | √ | √ |
Internet Shared Bandwidth | - | vpc | √ | √ |
Global Accelerator (GA) | - | ga | √ | √ |
Smart Access Gateway | - | smartag | √ | √ |
Cloud Enterprise Network (CEN) | - | cen | √ | √ |
PrivateLink | - | privatelink | √ | √ |
Alibaba Cloud DNS PrivateZone | - | pvtz | √ | √ |
Cloud Data Transfer (CDT) | - | cdt | √ | √ |
VPC peering connection | - | vpc | √ | √ |
IPv6 Gateway | - | vpc | √ | √ |
O&M and management
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Application Real-Time Monitoring Service (ARMS) | - | arms | √ | √ |
CloudMonitor | - | cms | √ | √ |
Intelligent Advisor | - | advisor-intl | √ | √ |
Cloud Shell | - | cloudshell | √ | ○ |
Cloud Config | - | config | √ | √ |
Logic Composer | - | composer | √ | √ |
CloudOps Orchestration Service | - | oos | √ | √ |
Cloud Governance Center (CGC) | CGC | governance | √ | ○ |
Middleware
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Enterprise Distributed Application Service (EDAS) | - | edas | √ | √ |
ApsaraMQ | ApsaraMQ for RocketMQ | mq | √ | √ |
ApsaraMQ | ApsaraMQ for MQTT | mq | √ | √ |
ApsaraMQ | ApsaraMQ for RabbitMQ | amqp | √ | √ |
Message Service (MNS) | - | mns | √ | √ |
Application Configuration Management | - | acms | √ | √ |
ApsaraMQ for Kafka | - | alikafka | √ | √ |
Application High Availability Service | - | ahas | √ | × |
Service Mesh (ASM) | - | servicemesh | √ | √ |
EventBridge | - | eventbridge | √ | √ |
Media services and CDN
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
CDN | - | cdn | √ | √ |
ApsaraVideo Media Processing (MPS) | - | mts | √ | √ |
ApsaraVideo VOD (VOD) | - | vod | √ | √ |
ApsaraVideo Live | - | live | √ | √ |
Real-Time Communication | - | rtc | √ | √ |
Dynamic Content Delivery Network (DCDN) | - | dcdn | √ | √ |
Enterprise applications
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Direct Mail | - | dm | √ | √ |
API Gateway | - | apigateway | √ | √ |
Resource Management | Resource Management | resourcemanager | √ | √ |
Resource Management | Resource Sharing | resourcesharing | √ | √ |
Resource Management | the Tag service | tag | √ | √ |
Resource Management | Resource Center | resourcecenter | √ | √ |
Blockchain as a Service (BaaS) | BaaS | baas | √ | √ |
CloudQuotation (CQ) | - | assettech | √ | ○ |
Domains and websites
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Alibaba Cloud DNS (DNS) | DNS | alidns | √ | √ |
DNS | Alibaba Cloud Public DNS | pubdns | √ | √ |
Domain Names | - | domain | √ | √ |
Artificial intelligence
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Intelligent Speech Interaction | Intelligent Speech Interaction | nls | × | × |
Platform for AI (PAI) | - | pai | × | × |
PAI | - | paiplugin | ○ | √ |
Image search | - | imagesearch | √ | √ |
Machine Translation | - | alimt | √ | √ |
IoT
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
IoT Platform | - | iot | √ | √ |
Link IoT Edge | - | iot | × | × |
Lindorm | Time Series Database (TSDB) | hitsdb | √ | √ |
Big data
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
DataWorks | - | dataworks | √ | √ |
Quick BI | - | - | × | × |
DataV | - | datav | √ | ○ |
Realtime Compute for Apache Flink | - | - | × | × |
Elasticsearch | - | elasticsearch | √ | √ |
E-MapReduce (EMR) | E-MapReduce | emr | √ | √ |
Simple Log Service | - | log | √ | √ |
Hologres | - | hologram | √ | √ |
Developer services
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Apsara Devops | - | rdc | × | × |
Managed Service for OpenTelemetry | - | xtrace | √ | √ |
Security
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Security Center | - |
| √ | √ |
Server Guard | - | yundun-aegis | √ | √ |
Anti-DDoS | Anti-DDoS | yundun-ddos | √ | √ |
Anti-DDoS | Anti-DDoS Proxy (Chinese Mainland) |
| √ | √ |
Anti-DDoS | Anti-DDoS Proxy (Outside Chinese Mainland) |
| √ | √ |
GameShield | - | yundun-gameshield | √ | ○ |
Web Application Firewall (WAF) | WAF | yundun-waf | √ | √ |
Certificate Management Service | - | yundun-cert | √ | √ |
Cloud Firewall | - | yundun-cloudfirewall | √ | √ |
Managed Security Service (MSSP) | - | mssp | √ | ○ |
Content Moderation | - | yundun-greenweb | √ | √ |
Bastionhost | Bastionhost | yundun-bastionhost | √ | ○ |
Data Security Center (DSC) | - | yundun-sddp | √ | √ |
Identity as a Service (IDaaS) | IDaaS | yundun-idaas | √ | ○ |
Key Management Service (KMS) | - | kms | √ | √ |
RAM | RAM |
| √ | √ |
RAM | CloudSSO | cloudsso | √ | ○ |
ActionTrail | - | actiontrail | √ | √ |
Technical support
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Ticket Management | - | support | √ | √ |
Marketplace
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Alibaba Cloud Marketplace | - | acm | √ | × |
Others
Alibaba Cloud service | Sub-service or sub-module | RAM code | Console | API |
Billing Management | - |
| √ | √ |
ICP Filing | - |
| √ | ○ |