The following tables list the API operations that are available for use in Resource Access Management (RAM).
Note Alibaba Cloud provides OpenAPI Developer Portal to simplify API usage. You can use OpenAPI Explorer to debug API operations.
RAM user management
| API | Description |
|---|---|
| CreateUser | Creates a RAM user. |
| GetUser | Queries the information of a RAM user. |
| UpdateUser | Modifies a RAM user. |
| DeleteUser | Deletes a RAM user. |
| ListUsers | Queries the list of all RAM users. |
| CreateLoginProfile | Enables console logon for a RAM user. |
| GetLoginProfile | Queries the logon configurations of a RAM user. |
| DeleteLoginProfile | Disables console logon for a RAM user. |
| UpdateLoginProfile | Modifies the logon configurations of a RAM user. |
| CreateAccessKey | Creates an AccessKey pair for a RAM user. |
| UpdateAccessKey | Changes the status of an AccessKey pair that belongs to a RAM user. |
| DeleteAccessKey | Deletes an AccessKey pair of a RAM user. |
| ListAccessKeys | Queries the list of all AccessKey pairs that belong to a RAM user. |
| CreateVirtualMFADevice | Creates a multi-factor authentication (MFA) device. |
| ListVirtualMFADevices | Queries the list of all MFA devices. |
| DeleteVirtualMFADevice | Deletes an MFA device. |
| BindMFADevice | Attaches an MFA device to a RAM user. |
| UnbindMFADevice | Detaches an MFA device from a RAM user. |
| GetUserMFAInfo | Queries the MFA device that is attached to a RAM user. |
| ChangePassword | Changes the password of a RAM user. |
Management of RAM user groups
| API | Description |
|---|---|
| CreateGroup | Creates a RAM user group. |
| GetGroup | Queries the information of a RAM user group. |
| UpdateGroup | Modifies a RAM user group. |
| ListGroups | Queries the list of all RAM user groups. |
| DeleteGroup | Deletes a RAM user group. |
| AddUserToGroup | Adds a RAM user to a RAM user group. |
| RemoveUserFromGroup | Removes a RAM user from a RAM user group. |
| ListGroupsForUser | Queries the RAM user groups to which a RAM user belongs. |
| ListUsersForGroup | Queries RAM users in a RAM user group. |
RAM role management
| API | Description |
|---|---|
| CreateRole | Creates a RAM role. |
| GetRole | Queries the information of a RAM role. |
| UpdateRole | Modifies a RAM role. |
| ListRoles | Queries the list of all RAM roles. |
| DeleteRole | Deletes a RAM role. |
Policy management
| API | Description |
|---|---|
| CreatePolicy | Creates a policy. |
| GetPolicy | Queries the information of a policy. |
| DeletePolicy | Deletes a policy. |
| ListPolicies | Queries a list of policies. |
| CreatePolicyVersion | Creates a version for an existing policy. |
| GetPolicyVersion | Queries the information of a policy version. |
| DeletePolicyVersion | Deletes a policy version. |
| ListPolicyVersions | Queries the versions of a policy. |
| SetDefaultPolicyVersion | Sets the default version for a policy. |
| AttachPolicyToUser | Attaches a policy to a RAM user. |
| DetachPolicyFromUser | Detaches a policy from a RAM user. |
| AttachPolicyToGroup | Attaches a policy to a RAM user group. |
| DetachPolicyFromGroup | Detaches a policy from a RAM user group. |
| AttachPolicyToRole | Attaches a policy to a RAM role. |
| DetachPolicyFromRole | Detaches a policy from a RAM role. |
| ListEntitiesForPolicy | Queries the entities to which a policy is attached. |
| ListPoliciesForUser | Queries the policies that are attached to a RAM user. |
| ListPoliciesForGroup | Queries the policies that are attached to a RAM user group. |
| ListPoliciesForRole | Queries the policies that are attached to a RAM role. |
Security control
| API | Description |
|---|---|
| SetAccountAlias | Sets the alias of an Alibaba Cloud account. |
| GetAccountAlias | Queries the alias of an Alibaba Cloud account. |
| ClearAccountAlias | Deletes the alias of an Alibaba Cloud account. |
| SetPasswordPolicy | Sets the password policy for RAM users, including the password strength. |
| GetPasswordPolicy | Queries the password policy of RAM users, including the password strength. |
| SetSecurityPreference | Sets the security preferences. |