All Products
Search
Document Center

Resource Access Management:Services that work with STS

Last Updated:May 20, 2024

This topic lists the Alibaba Cloud services that work with Security Token Service (STS).

Overview

Each table in this topic contains the following columns:

  • Alibaba Cloud service: the name of the cloud service that supports STS.

  • Sub-service or sub-module: the sub-service or sub-module of the cloud service. A hyphen (-) indicates none.

  • RAM code: the code that is used in Resource Access Management (RAM) to indicate the cloud service.

  • Console: indicates whether STS can be used to implement access control in the console of the service. A tick (√) indicates that STS is supported. A cross (×) indicates that STS is not supported. A circle (○) indicates that no console is provided for that service.

  • API: indicates whether STS can be used to implement access control by calling the API of the service. A tick (√) indicates that STS is supported by calling the API of the service. A cross (×) indicates that STS is not supported by calling the API of the service. A circle (○) indicates that no API is provided for that service.

For more information about STS, see What is STS? and RAM role overview.

Elastic computing

Service

Sub-service or sub-module

RAM code

Console

API

ECS

ECS

ecs

Elastic Block Storage (EBS)

EBS

ecs

EBS

EBS

ebs

ECS

Elastic GPU Service

ecs

ECS

ECS Bare Metal Instance

ecs

ECS

Super Computing Cluster

ecs

ECS

Dedicated Host (DDH)

ecs

ECS

Alibaba Cloud Linux 2

ecs

Auto Scaling

-

ess

Container Service for Kubernetes (ACK)

-

cs

Batch Compute

-

batchcompute

Resource Orchestration Service (ROS)

-

ros

Function Compute

-

fc

Simple Application Server

-

swas

Elastic High Performance Computing (E-HPC)

-

ehpc

Container Registry (Enterprise Edition)

-

cr

Container Registry (Personal Edition)

-

cr

×

×

WUYING Workspace

WUYING Workspace

ecd

Elastic Container Instance

-

eci

CloudFlow

-

fnf

Web App Service

-

webplus

Compute Nest

-

  • computenest

  • computenestsupplier

Alibaba Cloud Distributed Cloud Container Platform (ACK One)

-

adcp

Databases

Service

Sub-service or sub-module

RAM code

Console

API

ApsaraDB RDS

ApsaraDB RDS

rds

ApsaraDB RDS

ApsaraDB RDS for MySQL

rds

ApsaraDB RDS

ApsaraDB RDS for SQL Server

rds

ApsaraDB RDS

ApsaraDB RDS for PostgreSQL

rds

ApsaraDB RDS

ApsaraDB RDS for PPAS

rds

ApsaraDB RDS

ApsaraDB for MyBase

rds

ApsaraDB for Redis

-

kvstore

ApsaraDB for MongoDB

-

dds

AnalyticDB for PostgreSQL

-

gpdb

Data Transmission Service (DTS)

-

dts

Data Management (DMS)

-

dms

AnalyticDB for MySQL

-

adb

PolarDB for Xscale (PolarDB-X)

-

  • drds

  • polardbx

ApsaraDB for HBase

-

hbase

Advanced Database & Application Migration (ADAM)

-

adam

PolarDB

-

polardb

Database Backup (DBS)

-

dbs

Database Autonomy Service (DAS)

-

hdm

Data Lake Analytics (DLA)

-

openanalytics

ApsaraDB for OceanBase

-

oceanbase

ApsaraDB for Cassandra

-

cassandra

LedgerDB

-

ledgerdb

ApsaraDB for ClickHouse

-

clickhouse

Database Gateway (DG)

-

dg

Storage

Service

Sub-service or sub-module

RAM code

Console

API

Object Storage Service (OSS)

-

oss

Apsara File Storage NAS (NAS)

-

nas

Tablestore (OTS)

-

ots

Cloud Storage Gateway (CSG)

-

hcs-sgw

Cloud Backup

-

hbr

Hybrid Cloud Storage Array (CSA)

CSA

hgw

CSA

Remote Service

asrs

Cloud communications

Service

Sub-service or sub-module

RAM code

Console

API

Short Message Service (SMS)

-

dysms

Network

Service

Sub-service or sub-module

RAM code

Console

API

Virtual Private Cloud (VPC)

-

vpc

Server Load Balancer (SLB)

SLB

slb

SLB

Application Load Balancer (ALB)

alb

SLB

Network Load Balancer (NLB)

nlb

Express Connect

-

vpc

Elastic IP Address (EIP)

EIP

vpc

EIP

Anycast Elastic IP Address (Anycast EIP)

eipanycast

NAT Gateway

-

vpc

VPN Gateway

-

vpc

Internet Shared Bandwidth

-

vpc

Global Accelerator (GA)

-

ga

Smart Access Gateway (SAG)

-

smartag

Cloud Enterprise Network (CEN)

-

cen

PrivateLink

-

privatelink

Alibaba Cloud DNS PrivateZone

-

pvtz

Cloud Data Transfer (CDT)

-

cdt

VPC peering connection

-

vpc

IPv6 Gateway

-

vpc

O&M and management

Service

Sub-service or sub-module

RAM code

Console

API

Application Real-Time Monitoring Service (ARMS)

-

arms

CloudMonitor

-

cms

Intelligent Advisor

-

advisor-intl

Cloud Shell

-

cloudshell

Cloud Config

-

config

Logic Composer

-

composer

CloudOps Orchestration Service

-

oos

Cloud Governance Center (CGC)

CGC

governance

Middleware

Service

Sub-service or sub-module

RAM code

Console

API

Enterprise Distributed Application Service (EDAS)

-

edas

ApsaraMQ

ApsaraMQ for RocketMQ

mq

ApsaraMQ

ApsaraMQ for MQTT

mq

ApsaraMQ

ApsaraMQ for RabbitMQ

amqp

Message Service (MNS)

-

mns

Application Configuration Management

-

acms

ApsaraMQ for Kafka

-

alikafka

Application High Availability Service

-

ahas

×

Service Mesh (ASM)

-

servicemesh

EventBridge

-

eventbridge

Media services and CDN

Service

Sub-service or sub-module

RAM code

Console

API

CDN

-

cdn

ApsaraVideo Media Processing (MPS)

-

mts

ApsaraVideo VOD (VOD)

-

vod

ApsaraVideo Live

-

live

Real-Time Communication

-

rtc

Dynamic Content Delivery Network (DCDN)

-

dcdn

Enterprise applications

Service

Sub-service or sub-module

RAM code

Console

API

Direct Mail

-

dm

API Gateway

-

apigateway

Artifacts

Resource Management

resourcemanager

Resource Management

Resource Sharing

resourcesharing

Resource Management

the Tag service

tag

Resource Management

Resource Center

resourcecenter

Blockchain as a Service (BaaS)

BaaS

baas

CloudQuotation (CQ)

-

assettech

Domains and websites

Service

Sub-service or sub-module

RAM code

Console

API

Alibaba Cloud DNS (DNS)

DNS

alidns

DNS

Alibaba Cloud Public DNS

pubdns

Domain Names

-

domain

Artificial intelligence

Service

Sub-service or sub-module

RAM code

Console

API

Intelligent Speech Interaction

Intelligent Speech Interaction

nls

×

×

Platform for AI (PAI)

-

pai

×

×

PAI

-

paiplugin

Image Search

-

imagesearch

Machine Translation

-

alimt

IoT

Service

Sub-service or sub-module

RAM code

Console

API

IoT Platform

-

iot

Link IoT Edge

-

iot

×

×

Lindorm

Time Series Database (TSDB)

hitsdb

Big data

Service

Sub-service or sub-module

RAM code

Console

API

DataWorks

-

dataworks

Quick BI

-

-

×

×

DataV

-

datav

Realtime Compute for Apache Flink

-

-

×

×

Elasticsearch

-

elasticsearch

E-MapReduce (EMR)

E-MapReduce

emr

Simple Log Service

-

log

Hologres

-

hologram

Developer services

Service

Sub-service or sub-module

RAM code

Console

API

Apsara Devops

-

rdc

×

×

Managed Service for OpenTelemetry

-

xtrace

Security

Service

Sub-service or sub-module

RAM code

Console

API

Security Center

-

  • yundun-sas

  • yundun-aegis

Server Guard

-

yundun-aegis

Anti-DDoS

Anti-DDoS

yundun-ddos

Anti-DDoS

Anti-DDoS Proxy (Chinese Mainland)

  • yundun-high

  • yundun-ddoscoo

Anti-DDoS

Anti-DDoS Proxy (Outside Chinese Mainland)

  • yundun-high

  • yundun-ddoscoo

Web Application Firewall (WAF)

WAF

yundun-waf

Certificate Management Service

-

yundun-cert

Cloud Firewall

-

yundun-cloudfirewall

Managed Security Service (MSSP)

-

mssp

Content Moderation

-

yundun-greenweb

Bastionhost

Bastionhost

yundun-bastionhost

Data Security Center (DSC)

-

yundun-sddp

Identity as a Service (IDaaS)

IDaaS

yundun-idaas

Key Management Service (KMS)

-

kms

RAM

RAM

  • ram

  • sts

  • ims

RAM

CloudSSO

cloudsso

ActionTrail

-

actiontrail

Technical support

Service

Sub-service or sub-module

RAM code

Console

API

Ticket Management

-

support

Marketplace

Service

Sub-service or sub-module

RAM code

Console

API

Alibaba Cloud Marketplace

-

acm

×

Others

Service

Sub-service or sub-module

RAM code

Console

API

Billing Management

-

  • bss

  • bssapi

  • efc

ICP Filing

-

  • beian

  • bsn