Configuring credentials in Alibaba Cloud Client allows you to quickly view and manage resources such as ECS, ECI, and Simple Application Server. The client supports multiple credentials, improving O&M efficiency by eliminating the need to frequently switch accounts.
Procedure
After you download and install the Alibaba Cloud Client, you can configure your credentials using one of the following methods.
Method 1: Use a RAM user AccessKey (recommended)
An Alibaba Cloud account's AccessKey grants full control over all resources within the account, posing a high security risk if leaked. To enhance security, we recommend following the principle of least privilege: create a RAM user with limited permissions and use that user's AccessKey for daily management.
Create a RAM user and create an AccessKey pair for the user.
In the upper-right corner of the client homepage, click the
icon to open the account configuration page. Then, in the account list, click the 
icon.Add an account:
Mode: AccessKey.
AccessKey ID and AccessKey Secret: Enter the AccessKey pair for the RAM user you created.
Default region: Specifies the default region for displaying resources.
Resource Group (Optional): Specify a resource group ID to display only resources within that group. If left empty, all resources are displayed.
Verify and save: Click Verify to validate the credentials. Once validated, click Save.
Method 2: Configure other credentials
The client also supports the following types of credentials:
Assume Role: Suitable for cross-account access.
STS Token: Used for temporary logins with a RAM role.
Console Account: Use your username and password (for both Alibaba Cloud accounts and RAM users) to quickly log in to the client.
CredentialsURI/Credentials Command: Suitable for enterprise employees who obtain temporary tokens from an internal endpoint.
Assume Role
To configure this credential type, you must first grant a RAM user the permissions to assume a role.
Parameters:
AccessKey ID and AccessKey Secret: The AccessKey pair of the RAM role's trusted entity (a RAM user).
RAM role ARN: The ARN of the RAM role to assume. For more information, see View the ARN of a RAM role.
STS Token
To configure this credential type, you must first grant a RAM user the permissions to assume a role.
Parameters:
AccessKey ID and AccessKey Secret: The AccessKey pair of the RAM role's trusted entity (a RAM user).
STS Token: A temporary credential for assuming a RAM role. You can obtain an STS Token by calling the AssumeRole API operation. For more information, see Obtain an STS Token.
Console Account
Procedure:
Add an account.
Mode: Select Console Account.
Account Type: Select Alibaba Cloud account (alibabacloud.com) or RAM user (alibabacloud.com).
We recommend logging in to the client as a RAM user and carefully granting permissions to prevent unauthorized operations that result from improper management or authorization.
Click Login. On the Alibaba Cloud login page, follow the on-screen instructions to log in to Alibaba Cloud with your username and password.
After you log in, you are returned to the account configuration page. The account has been added successfully when Logged In appears at the bottom of the page.
CredentialsURI/Credentials Command
Parameters:
CredentialsURI/Credentials Command: The credentials obtained from a local or remote URI. For more information, see aliyun/aliyun-cli: Alibaba Cloud CLI. The endpoint must respond to an HTTP(S) GET request with a 200 OK status and the following JSON structure:
{
"Code": "Success",
"AccessKeyId": "<ak id>",
"AccessKeySecret": "<ak secret>",
"SecurityToken": "<security token>",
"Expiration": "2006-01-02T15:04:05Z"
}Next steps
After you add an account to the Alibaba Cloud Client, you can view and manage resources such as ECS, ECI, Simple Application Server, and managed instances. For details, see the following topics:
FAQ
Why am I logged in on first install?
If you are already logged in after your first installation, the client has automatically imported existing account configurations from the Alibaba Cloud CLI.
How to switch accounts?
In the Alibaba Cloud Client, click the icon in the upper-right corner, right-click the desired account, and then click Switch.
Why are resources missing for a RAM user?
You must grant the RAM user the required permissions to manage the resources. For more information, see Manage permissions for a RAM user.