Resource Access Management:API overview

Scenario

Description

API selection

Difference

User management

Manage RAM users, AccessKey pairs, logon passwords, and MFA devices.

• IMS API

• RAM API

• IMS API supports additional operations such as querying AccessKey pair last-used time, modifying default domain names, and obtaining credential reports.

• New user, user group, and security operations will be added to IMS API. We recommend that you use IMS API.

• Some RAM and IMS operations overlap and produce the same result.

User group management

Manage RAM user groups and their members.

Security settings

Manage password policies, global security preferences, default domain names, user credential reports, and account security reports.

Policy management

Manage policies and grant or revoke permissions for RAM users, roles, and user groups.

• RAM API

• Resource Management API

• Some RAM and Resource Management operations overlap and produce the same result.

• Only Resource Management API supports resource group-level permissions.

• Resource Management API also provides service-linked role operations.

Role management

Manage RAM roles.

Role usage

Obtain STS tokens by assuming roles.

STS API

None.

Single sign-on (SSO) management

Manage identity providers (IdPs) for user-based and role-based SSO.

IMS API

None.

Role-based SSO usage

Obtain STS tokens by using role-based SSO.

STS API

None.

Open authorization (OAuth) management

Manage applications and application secrets.

IMS API

None.