To survey and migrate Alibaba Cloud resources by using Cloud Migration Hub (CMH) as a Resource Access Management (RAM) user, you need specific RAM permissions. This topic lists the required policies and describes how to grant them.
Overview
When you use CMH to survey or migrate Alibaba Cloud resources, CMH automatically retrieves resource information, creates resources, and performs migrations under your account. If you access CMH as a RAM user or RAM role, your account must have the required permissions.
Grant permissions
The following example uses the AliyunAPDSFullAccess policy. Log on to the RAM console. In the left-side navigation pane, choose Identities > Users or Identities > Roles. Create a RAM user or RAM role, and then attach the AliyunAPDSFullAccess policy to it.
Permissions
RAM policies with full permissions
|
Policy |
Description |
Scenario |
|
AliyunAPDSFullAccess |
The full permissions on CMH. |
Use the CMH console. |
|
AliyunConfigFullAccess |
The full permissions on Cloud Config. |
N/A |
|
AliyunIaCServiceFullAccess |
The full permissions on Infrastructure as Code (IaC) Service. |
Migrate data across zones on Alibaba Cloud, migrate data from Amazon Web Services (AWS) to Alibaba Cloud, migrate data across regions on Alibaba Cloud, or migrate data across Alibaba Cloud accounts |
|
AliyunECSFullAccess |
The full permissions on Elastic Compute Service (ECS). |
Migrate data from AWS to Alibaba Cloud, migrate data across zones on Alibaba Cloud, migrate data across regions on Alibaba Cloud, or migrate data across Alibaba Cloud accounts |
|
AliyunRDSFullAccess |
The full permissions on ApsaraDB RDS. |
Migrate data from AWS to Alibaba Cloud, migrate data across zones on Alibaba Cloud, migrate data across regions on Alibaba Cloud, or migrate data across Alibaba Cloud accounts |
|
AliyunVPCFullAccess |
The full permissions on Virtual Private Cloud (VPC). |
Migrate data across zones or regions on Alibaba Cloud or migrate data across Alibaba Cloud accounts |
|
AliyunSLBFullAccess |
The full permissions on Server Load Balancer (SLB). |
Migrate data across zones or regions on Alibaba Cloud or migrate data across Alibaba Cloud accounts |
|
AliyunOSSFullAccess |
The full permissions on Object Storage Service (OSS). |
Migrate data across regions on Alibaba Cloud or migrate data across Alibaba Cloud accounts |