Find out which Alibaba Cloud services support Security Token Service (STS) for temporary access credentials.
Overview
Each table contains the following columns:
-
Service: the Alibaba Cloud service name.
-
Sub-service or sub-module: the sub-service or sub-module of the service. A hyphen (-) means not applicable.
-
RAM code: the unique identifier for the service in RAM.
-
Console: whether RAM access control works in the console. = yes, = no, ○ = no console available.
-
API: whether RAM access control works via API. = yes, = no, ○ = no API available.
For more information about STS, see What is Security Token Service (STS)? and Overview.
Elastic computing
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Elastic Compute Service (ECS) |
ECS |
ecs |
|
|
|
Elastic Block Storage (EBS) |
EBS |
ecs |
|
|
|
EBS |
EBS |
ebs |
|
|
|
ECS |
Elastic GPU Service |
ecs |
|
|
|
ECS |
ECS Bare Metal Instance |
ecs |
|
|
|
ECS |
Dedicated Host (DDH) |
ecs |
|
|
|
ECS |
Alibaba Cloud Linux 2 |
ecs |
|
|
|
Auto Scaling |
- |
ess |
|
|
|
Container Service for Kubernetes (ACK) |
- |
cs |
|
|
|
Batch Compute |
- |
batchcompute |
|
|
|
Resource Orchestration Service (ROS) |
- |
ros |
|
|
|
Function Compute |
- |
fc |
|
|
|
Simple Application Server |
- |
swas |
|
○ |
|
Elastic High Performance Computing (E-HPC) |
- |
ehpc |
|
|
|
Container Registry (Enterprise Edition) |
- |
cr |
|
|
|
Container Registry (Personal Edition) |
- |
cr |
|
|
|
Elastic Desktop Service (EDS) |
EDS |
ecd |
|
|
|
Elastic Container Instance |
- |
eci |
|
|
|
CloudFlow |
- |
fnf |
|
|
|
Web App Service |
- |
webplus |
|
|
|
Compute Nest |
- |
|
|
○ |
|
Distributed Cloud Container Platform for Kubernetes (ACK One) |
- |
adcp |
|
|
Databases
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
ApsaraDB RDS |
ApsaraDB RDS |
rds |
|
|
|
ApsaraDB RDS |
ApsaraDB RDS for MySQL |
rds |
|
|
|
ApsaraDB RDS |
ApsaraDB RDS for SQL Server |
rds |
|
|
|
ApsaraDB RDS |
ApsaraDB RDS for PostgreSQL |
rds |
|
|
|
ApsaraDB RDS |
ApsaraDB RDS for PPAS |
rds |
|
|
|
ApsaraDB RDS |
ApsaraDB for MyBase |
rds |
|
|
|
Tair (Redis® OSS-Compatible) |
- |
kvstore |
|
|
|
ApsaraDB for MongoDB |
- |
dds |
|
|
|
AnalyticDB for PostgreSQL |
- |
gpdb |
|
|
|
Data Transmission Service (DTS) |
- |
dts |
|
|
|
Data Management |
- |
dms |
|
|
|
AnalyticDB for MySQL |
- |
adb |
|
|
|
PolarDB for Xscale (PolarDB-X) |
- |
|
|
|
|
ApsaraDB for HBase |
- |
hbase |
|
|
|
Advanced Database & Application Migration |
- |
adam |
|
○ |
|
PolarDB |
- |
polardb |
|
|
|
Data Disaster Recovery |
- |
dbs |
|
|
|
Database Autonomy Service (DAS) |
- |
hdm |
|
|
|
ApsaraDB for OceanBase |
- |
oceanbase |
|
○ |
|
ApsaraDB for Cassandra |
- |
cassandra |
|
|
|
LedgerDB |
- |
ledgerdb |
|
|
|
ApsaraDB for ClickHouse |
- |
clickhouse |
|
|
|
Database Gateway (DG) |
- |
dg |
|
|
|
ApsaraDB for SelectDB |
- |
selectdb |
|
|
Storage
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Object Storage Service (OSS) |
- |
oss |
|
|
|
File Storage NAS (NAS) |
- |
nas |
|
|
|
Tablestore |
- |
ots |
|
|
|
Cloud Storage Gateway (CSG) |
- |
hcs-sgw |
|
|
|
Cloud Backup |
- |
hbr |
|
|
|
Hybrid Cloud Storage |
Hybrid Cloud Storage |
hgw |
|
○ |
|
Hybrid Cloud Storage |
Remote Service |
asrs |
|
○ |
Cloud communication
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Short Message Service (SMS) |
- |
dysms |
|
|
Networking
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Virtual Private Cloud (VPC) |
- |
vpc |
|
|
|
Server Load Balancer (SLB) |
Classic Load Balancer (CLB) |
slb |
|
|
|
Server Load Balancer (SLB) |
Application Load Balancer (ALB) |
alb |
|
|
|
Server Load Balancer (SLB) |
Network Load Balancer (NLB) |
nlb |
|
|
|
Server Load Balancer (SLB) |
Gateway Load Balancer (GWLB) |
gwlb |
|
|
|
Express Connect |
- |
vpc |
|
|
|
Elastic IP Address (EIP) |
EIP |
vpc |
|
|
|
EIP |
Anycast Elastic IP Address (Anycast EIP) |
eipanycast |
|
|
|
NAT Gateway |
- |
vpc |
|
|
|
VPN Gateway |
- |
vpc |
|
|
|
Internet Shared Bandwidth |
- |
vpc |
|
|
|
Global Accelerator (GA) |
- |
ga |
|
|
|
Smart Access Gateway (SAG) |
- |
smartag |
|
|
|
Cloud Enterprise Network (CEN) |
- |
cen |
|
|
|
PrivateLink |
- |
privatelink |
|
|
|
Alibaba Cloud DNS PrivateZone |
- |
pvtz |
|
|
|
Cloud Data Transfer (CDT) |
- |
cdt |
|
|
|
VPC peering connection |
- |
vpc |
|
|
|
IPv6 Gateway |
- |
vpc |
|
|
O&M and management
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Application Real-Time Monitoring Service (ARMS) |
- |
arms |
|
|
|
CloudMonitor |
- |
cms |
|
|
|
Intelligent Advisor |
- |
advisor-intl |
|
|
|
Cloud Shell |
- |
cloudshell |
|
○ |
|
Cloud Config |
- |
config |
|
|
|
Logic Composer |
- |
composer |
|
|
|
CloudOps Orchestration Service (OOS) |
- |
oos |
|
|
|
Cloud Governance Center (CGC) |
CGC |
governance |
|
○ |
|
CGC |
Service Catalog |
servicecatalog |
|
|
Middleware
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Enterprise Distributed Application Service (EDAS) |
- |
edas |
|
|
|
ApsaraMQ |
ApsaraMQ for RocketMQ |
mq |
|
|
|
ApsaraMQ |
ApsaraMQ for MQTT |
mq |
|
|
|
ApsaraMQ |
ApsaraMQ for RabbitMQ |
amqp |
|
|
|
Simple Message Queue (formerly MNS) (SMQ) |
- |
mns |
|
|
|
ApsaraMQ for Kafka |
- |
alikafka |
|
|
|
Application High Availability Service |
- |
ahas |
|
|
|
Alibaba Cloud Service Mesh (ASM) |
- |
servicemesh |
|
|
|
EventBridge |
- |
eventbridge |
|
|
Media services and CDN
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
CDN |
- |
cdn |
|
|
|
ApsaraVideo Media Processing (MPS) |
- |
mts |
|
|
|
ApsaraVideo VOD (VOD) |
- |
vod |
|
|
|
ApsaraVideo Live |
- |
live |
|
|
|
Real-Time Communication |
- |
rtc |
|
|
|
Dynamic Content Delivery Network (DCDN) |
- |
dcdn |
|
|
|
Edge Security Acceleration (ESA) |
- |
esa |
|
|
Enterprise applications
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Direct Mail |
- |
dm |
|
|
|
API Gateway |
- |
apigateway |
|
|
|
Resource Management |
Resource Management |
resourcemanager |
|
|
|
Resource Management |
Resource Sharing |
resourcesharing |
|
|
|
Resource Management |
Tag |
tag |
|
|
|
Resource Management |
Resource Center |
resourcecenter |
|
|
|
Blockchain as a Service (BaaS) |
BaaS |
baas |
|
|
|
CloudQuotation (CQ) |
- |
assettech |
|
○ |
Domains and websites
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Alibaba Cloud DNS (DNS) |
DNS |
alidns |
|
|
|
DNS |
Alibaba Cloud Public DNS |
pubdns |
|
|
|
Domain Names and Websites |
- |
domain |
|
|
AI
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Intelligent Speech Interaction |
Intelligent Speech Interaction |
nls |
|
|
|
Platform for AI (PAI) |
- |
pai |
|
|
|
PAI |
- |
paiplugin |
○ |
|
|
Image Search |
- |
imagesearch |
|
|
|
Machine Translation |
- |
alimt |
|
|
|
Alibaba Cloud Model Studio |
- |
sfm |
|
|
IoT
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
IoT Platform |
- |
iot |
|
|
|
Link IoT Edge |
- |
iot |
|
|
|
Lindorm |
Time Series Database (TSDB) |
hitsdb |
|
|
Analytics computing
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
DataWorks |
- |
dataworks |
|
|
|
Quick BI |
- |
- |
|
|
|
DataV |
- |
datav |
|
○ |
|
Realtime Compute for Apache Flink |
- |
- |
|
|
|
Elasticsearch |
- |
elasticsearch |
|
|
|
E-MapReduce (EMR) |
E-MapReduce |
emr |
|
|
|
Simple Log Service (SLS) |
- |
log |
|
|
|
Hologres |
- |
hologram |
|
|
Developer services
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Alibaba Cloud DevOps |
- |
rdc |
|
|
|
Managed Service for OpenTelemetry |
- |
xtrace |
|
|
Security
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Security Center |
- |
|
|
|
|
Server Guard |
- |
yundun-aegis |
|
|
|
Anti-DDoS |
Anti-DDoS |
yundun-ddos |
|
|
|
Anti-DDoS |
Anti-DDoS Proxy (Chinese Mainland) |
|
|
|
|
Anti-DDoS |
Anti-DDoS Proxy (Outside Chinese Mainland) |
|
|
|
|
Web Application Firewall (WAF) |
WAF |
yundun-waf |
|
|
|
Certificate Management Service (Original SSL Certificate) |
- |
yundun-cert |
|
|
|
Cloud Firewall |
- |
yundun-cloudfirewall |
|
|
|
Managed Security Service (MSSP) |
- |
mssp |
|
○ |
|
Content Moderation |
- |
yundun-greenweb |
|
|
|
Bastionhost |
Bastionhost |
yundun-bastionhost |
|
○ |
|
Data Security Center (DSC) |
- |
yundun-sddp |
|
|
|
Identity as a Service (IDaaS) |
IDaaS |
yundun-idaas |
|
○ |
|
Key Management Service (KMS) |
- |
kms |
|
|
|
Resource Access Management (RAM) |
RAM |
|
|
|
|
RAM |
CloudSSO |
cloudsso |
|
○ |
|
ActionTrail |
- |
actiontrail |
|
|
Technical support
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Ticket Management |
- |
support |
|
|
Marketplace
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Alibaba Cloud Marketplace |
- |
acm |
|
|
Other
|
Service |
Sub-service or sub-module |
RAM code |
Console |
API |
|
Expenses and Costs |
- |
|
|
|
|
ICP Filing |
- |
|
|
○ |