This topic describes how to create an AccessKey pair for your Alibaba Cloud account or RAM user. When you call API operations, you must use the AccessKey pair to verify your identity.

Background information

An AccessKey pair includes an AccessKey ID and AccessKey secret.
  • The AccessKey ID is used to verify the identity of a user.
  • The AccessKey secret is used to encrypt and verify the signature string. You must keep your AccessKey secret strictly confidential.
Warning If the AccessKey pair of your Alibaba Cloud account is disclosed, the security of your resources are under threat. We recommend that you use a RAM user to call API operations. This reduces the risk of disclosing the AccessKey information of your Alibaba Cloud account.

Procedure

  1. Log on to the Alibaba Cloud console.
  2. Move the point over the profile picture in the upper-right corner of the page, and click AccessKey.
  3. In the Security Tips dialog box that appears, click Continue to manage AccessKey or Get Started with Sub Users' AccessKey.
  4. Obtain the AccessKey pair of an account.
    • Obtain the AccessKey pair of your Alibaba Cloud account.
      1. Click Continue to manage AccessKey.
      2. On the Security Management page, click Create AccessKey.
      3. On the Phone Verification dialog box that appears, click Send verification code, enter the code obtained in the Verification code field, and then click OK.
      4. In the Create User AccessKey dialog box that appears, show AccessKey Details to view the AccessKey ID and AccessKey secret. Click Save AccessKey Information.
    • Create a RAM user and obtain the AccessKey pair.
      1. Click Get started with the sub-user AccessKey.
      2. Go to the RAM console and create a RAM user on the Create User page. Skip this step if you have created a RAM user.
      3. Go to the RAM console and in the left-side navigation pane, choose Identities > Users.
      4. Find the target RAM user and click the user logon name. Then, click the Authentication tab. In the User AccessKeys section, click Create AccessKey.
      5. On the Phone Verification dialog box that appears, click Send verification code, enter the code obtained in the Verification code field, and then click OK.
      6. On the Create AccessKey dialog box that appears, view the AccessKey ID and AccessKey secret. To download or copy the AccessKey pair, click Download CSV File or Copy.