This topic describes the differences and relationships among the Resource Directory, Resource Group, and Tag services.

Differences

The following table lists the differences among the Resource Directory, Resource Group, and Tag services.

Item Resource Directory Resource Group Tag
Use scenario Multi-account scenario: Your enterprise uses multiple Alibaba Cloud accounts to manage cloud resources. In this case, you can use the Resource Directory service to build an organizational structure. This way, you can use this structure to manage accounts and resources in a centralized and orderly manner. Single-account scenario: Your enterprise uses one Alibaba Cloud account to manage all cloud resources, and each branch or project team uses RAM users for daily operations. In this case, you can use the Resource Group service to isolate resources and manage permissions. Single-account scenario: Your enterprise uses one Alibaba Cloud account to manage all cloud resources, and each branch or project team uses RAM users for daily operations. In this case, you can use the Tag service to manage resources effectively, allocate costs, and implement automated O&M.
Resource isolation Resources are isolated by using accounts. Resources are isolated by using RAM identities and permission policies. Resources are isolated by using RAM identities and permission policies.
Management level Account level. Resource level. Examples:
  • Grant permissions on resources by resource group.
  • Allocate costs for resources by resource group.
Resource level. Examples:
  • Add tags to resources.
  • Allocate costs for resources based on tags.
  • Implement automated O&M for resources based on tags.
Cross-account capability Resource groups and tags created within different member accounts are not interconnected and cannot be used across the accounts. Resource groups created within different Alibaba Cloud accounts are not interconnected and cannot be used across the accounts. Tags created within different Alibaba Cloud accounts are not interconnected and cannot be used across the accounts.

Relationships

The Resource Directory, Resource Group, and Tag services complement each other and can be used together. For example, an enterprise has multiple branches, departments, or project teams. If the enterprise is compared to a tree, the Resource Directory service can be used to build the trunk and branches of the tree. The Resource Group and Tag services can be used to summarize and manage the leaves of the branches. The enterprise can select one or more of the three services.

Relationships among Resource Directory, Resource Group, and Tag