Backup and Disaster Recovery Center secures resource access through network isolation, RAM authorization policies, and STS temporary credentials.
RAM authorization policies
Resource Access Management (RAM) is an Alibaba Cloud access control service. RAM policies let you centrally manage users (employees, systems, or applications) and control which resources they can access.
RAM policies are JSON documents with Statement elements that each define an Action, Effect, Resource, and Condition. Combine multiple statements for fine-grained access control. RAM overview.
STS temporary authorization
Unlike RAM's long-term access control, Security Token Service (STS) provides temporary authorization. STS issues a temporary AccessKey pair and token for accessing Backup and Disaster Recovery Center. These credentials typically carry more restricted permissions and expire after a set period, reducing exposure if leaked.
Backup and Disaster Recovery Center integrates with STS to issue credentials with custom validity periods and scoped permissions for third-party applications or sub-users.