Services that work with STS - Resource Access Management

This topic lists the Alibaba Cloud services that work with Security Token Service (STS).

Overview

Each table in this topic contains the following columns:

Service: the name of the Alibaba Cloud service that supports STS.
Sub-service or sub-module: the sub-service or sub-module of the service. A hyphen (-) indicates that this does not apply.
RAM code: the unique code used in RAM to identify the service.
Console: indicates whether RAM can be used for access control in the service's console. Supported indicates support, Not supported indicates no support, and ○ indicates that the service does not have a console.
API: indicates whether RAM can be used for access control when calling the service's API. Supported indicates support, Not supported indicates no support, and ○ indicates that the service does not provide an API.

For more information about STS, see What is STS? and RAM role overview.

Elastic computing

Service	Sub-service or sub-module	RAM code	Console	API
Elastic Compute Service (ECS)	ECS	ecs	Supported	Supported
Elastic Block Storage (EBS)	EBS	ecs	Supported	Supported
EBS	EBS	ebs	Supported	Supported
ECS	Elastic GPU Service	ecs	Supported	Supported
ECS	ECS Bare Metal Instance	ecs	Supported	Supported
ECS	Dedicated Host (DDH)	ecs	Supported	Supported
ECS	Alibaba Cloud Linux 2	ecs	Supported	Supported
Auto Scaling	-	ess	Supported	Supported
Container Service for Kubernetes (ACK)	-	cs	Supported	Supported
Batch Compute	-	batchcompute	Supported	Supported
Resource Orchestration Service (ROS)	-	ros	Supported	Supported
Function Compute	-	fc	Supported	Supported
Simple Application Server	-	swas	Supported	○
Elastic High Performance Computing (E-HPC)	-	ehpc	Supported	Supported
Container Registry (Enterprise Edition)	-	cr	Supported	Supported
Container Registry (Personal Edition)	-	cr	Not supported	Not supported
Elastic Desktop Service (EDS)	EDS	ecd	Supported	Supported
Elastic Container Instance	-	eci	Supported	Supported
CloudFlow	-	fnf	Supported	Supported
Web App Service	-	webplus	Supported	Supported
Compute Nest	-	computenest computenestsupplier	Supported	○
Distributed Cloud Container Platform for Kubernetes (ACK One)	-	adcp	Supported	Supported

Databases

Service	Sub-service or sub-module	RAM code	Console	API
ApsaraDB RDS	ApsaraDB RDS	rds	Supported	Supported
ApsaraDB RDS	ApsaraDB RDS for MySQL	rds	Supported	Supported
ApsaraDB RDS	ApsaraDB RDS for SQL Server	rds	Supported	Supported
ApsaraDB RDS	ApsaraDB RDS for PostgreSQL	rds	Supported	Supported
ApsaraDB RDS	ApsaraDB RDS for PPAS	rds	Supported	Supported
ApsaraDB RDS	ApsaraDB for MyBase	rds	Supported	Supported
Tair (Redis^® OSS-Compatible)	-	kvstore	Supported	Supported
ApsaraDB for MongoDB	-	dds	Supported	Supported
AnalyticDB for PostgreSQL	-	gpdb	Supported	Supported
Data Transmission Service (DTS)	-	dts	Supported	Supported
Data Management	-	dms	Supported	Supported
AnalyticDB for MySQL	-	adb	Supported	Supported
PolarDB for Xscale (PolarDB-X)	-	drds polardbx	Supported	Supported
ApsaraDB for HBase	-	hbase	Supported	Supported
Advanced Database & Application Migration	-	adam	Supported	○
PolarDB	-	polardb	Supported	Supported
Data Disaster Recovery	-	dbs	Supported	Supported
Database Autonomy Service (DAS)	-	hdm	Supported	Supported
ApsaraDB for OceanBase	-	oceanbase	Supported	○
ApsaraDB for Cassandra	-	cassandra	Supported	Supported
LedgerDB	-	ledgerdb	Supported	Supported
ApsaraDB for ClickHouse	-	clickhouse	Supported	Supported
Database Gateway (DG)	-	dg	Supported	Supported
ApsaraDB for SelectDB	-	selectdb	Supported	Supported

Storage

Service	Sub-service or sub-module	RAM code	Console	API
Object Storage Service (OSS)	-	oss	Supported	Supported
File Storage NAS (NAS)	-	nas	Supported	Supported
Tablestore	-	ots	Supported	Supported
Cloud Storage Gateway (CSG)	-	hcs-sgw	Supported	Supported
Cloud Backup	-	hbr	Supported	Supported
Hybrid Cloud Storage	Hybrid Cloud Storage	hgw	Supported	○
Hybrid Cloud Storage	Remote Service	asrs	Supported	○

Cloud communication

Service	Sub-service or sub-module	RAM code	Console	API
Short Message Service (SMS)	-	dysms	Supported	Supported

Networking

Service	Sub-service or sub-module	RAM code	Console	API
Virtual Private Cloud (VPC)	-	vpc	Supported	Supported
Server Load Balancer (SLB)	Classic Load Balancer (CLB)	slb	Supported	Supported
Server Load Balancer (SLB)	Application Load Balancer (ALB)	alb	Supported	Supported
Server Load Balancer (SLB)	Network Load Balancer (NLB)	nlb	Supported	Supported
Server Load Balancer (SLB)	Gateway Load Balancer (GWLB)	gwlb	Supported	Supported
Express Connect	-	vpc	Supported	Supported
Elastic IP Address (EIP)	EIP	vpc	Supported	Supported
EIP	Anycast Elastic IP Address (Anycast EIP)	eipanycast	Supported	Supported
NAT Gateway	-	vpc	Supported	Supported
VPN Gateway	-	vpc	Supported	Supported
Internet Shared Bandwidth	-	vpc	Supported	Supported
Global Accelerator (GA)	-	ga	Supported	Supported
Smart Access Gateway (SAG)	-	smartag	Supported	Supported
Cloud Enterprise Network (CEN)	-	cen	Supported	Supported
PrivateLink	-	privatelink	Supported	Supported
Alibaba Cloud DNS PrivateZone	-	pvtz	Supported	Supported
Cloud Data Transfer (CDT)	-	cdt	Supported	Supported
VPC peering connection	-	vpc	Supported	Supported
IPv6 Gateway	-	vpc	Supported	Supported

O&M and management

Service	Sub-service or sub-module	RAM code	Console	API
Application Real-Time Monitoring Service (ARMS)	-	arms	Supported	Supported
CloudMonitor	-	cms	Supported	Supported
Intelligent Advisor	-	advisor-intl	Supported	Supported
Cloud Shell	-	cloudshell	Supported	○
Cloud Config	-	config	Supported	Supported
Logic Composer	-	composer	Supported	Supported
CloudOps Orchestration Service (OOS)	-	oos	Supported	Supported
Cloud Governance Center (CGC)	CGC	governance	Supported	○
CGC	Service Catalog	servicecatalog	Supported	Supported

Middleware

Service	Sub-service or sub-module	RAM code	Console	API
Enterprise Distributed Application Service (EDAS)	-	edas	Supported	Supported
ApsaraMQ	ApsaraMQ for RocketMQ	mq	Supported	Supported
ApsaraMQ	ApsaraMQ for MQTT	mq	Supported	Supported
ApsaraMQ	ApsaraMQ for RabbitMQ	amqp	Supported	Supported
Simple Message Queue (formerly MNS) (SMQ)	-	mns	Supported	Supported
ApsaraMQ for Kafka	-	alikafka	Supported	Supported
Application High Availability Service	-	ahas	Supported	Not supported
Alibaba Cloud Service Mesh (ASM)	-	servicemesh	Supported	Supported
EventBridge	-	eventbridge	Supported	Supported

Media services and CDN

Service	Sub-service or sub-module	RAM code	Console	API
CDN	-	cdn	Supported	Supported
ApsaraVideo Media Processing (MPS)	-	mts	Supported	Supported
ApsaraVideo VOD (VOD)	-	vod	Supported	Supported
ApsaraVideo Live	-	live	Supported	Supported
Real-Time Communication	-	rtc	Supported	Supported
Dynamic Content Delivery Network (DCDN)	-	dcdn	Supported	Supported
Edge Security Acceleration (ESA)	-	esa	Supported	Supported

Enterprise applications

Service	Sub-service or sub-module	RAM code	Console	API
Direct Mail	-	dm	Supported	Supported
API Gateway	-	apigateway	Supported	Supported
Resource Management	Resource Management	resourcemanager	Supported	Supported
Resource Management	Resource Sharing	resourcesharing	Supported	Supported
Resource Management	Tag	tag	Supported	Supported
Resource Management	Resource Center	resourcecenter	Supported	Supported
Blockchain as a Service (BaaS)	BaaS	baas	Supported	Supported
CloudQuotation (CQ)	-	assettech	Supported	○

Domains and websites

Service	Sub-service or sub-module	RAM code	Console	API
Alibaba Cloud DNS (DNS)	DNS	alidns	Supported	Supported
DNS	Alibaba Cloud Public DNS	pubdns	Supported	Supported
Domain Names and Websites	-	domain	Supported	Supported

AI

Service	Sub-service or sub-module	RAM code	Console	API
Intelligent Speech Interaction	Intelligent Speech Interaction	nls	Not supported	Not supported
Platform for AI (PAI)	-	pai	Not supported	Not supported
PAI	-	paiplugin	○	Supported
Image Search	-	imagesearch	Supported	Supported
Machine Translation	-	alimt	Supported	Supported
Alibaba Cloud Model Studio	-	sfm	Not supported	Supported

IoT

Service	Sub-service or sub-module	RAM code	Console	API
IoT Platform	-	iot	Supported	Supported
Link IoT Edge	-	iot	Not supported	Not supported
Lindorm	Time Series Database (TSDB)	hitsdb	Supported	Supported

Analytics computing

Service	Sub-service or sub-module	RAM code	Console	API
DataWorks	-	dataworks	Supported	Supported
Quick BI	-	-	Not supported	Not supported
DataV	-	datav	Supported	○
Realtime Compute for Apache Flink	-	-	Not supported	Not supported
Elasticsearch	-	elasticsearch	Supported	Supported
E-MapReduce (EMR)	E-MapReduce	emr	Supported	Supported
Simple Log Service (SLS)	-	log	Supported	Supported
Hologres	-	hologram	Supported	Supported

Developer services

Service	Sub-service or sub-module	RAM code	Console	API
Alibaba Cloud DevOps	-	rdc	Not supported	Not supported
Managed Service for OpenTelemetry	-	xtrace	Supported	Supported

Security

Service	Sub-service or sub-module	RAM code	Console	API
Security Center	-	yundun-sas yundun-aegis	Supported	Supported
Server Guard	-	yundun-aegis	Supported	Supported
Anti-DDoS	Anti-DDoS	yundun-ddos	Supported	Supported
Anti-DDoS	Anti-DDoS Proxy (Chinese Mainland)	yundun-high yundun-ddoscoo	Supported	Supported
Anti-DDoS	Anti-DDoS Proxy (Outside Chinese Mainland)	yundun-high yundun-ddoscoo	Supported	Supported
Web Application Firewall (WAF)	WAF	yundun-waf	Supported	Supported
Certificate Management Service (Original SSL Certificate)	-	yundun-cert	Supported	Supported
Cloud Firewall	-	yundun-cloudfirewall	Supported	Supported
Managed Security Service (MSSP)	-	mssp	Supported	○
Content Moderation	-	yundun-greenweb	Supported	Supported
Bastionhost	Bastionhost	yundun-bastionhost	Supported	○
Data Security Center (DSC)	-	yundun-sddp	Supported	Supported
Identity as a Service (IDaaS)	IDaaS	yundun-idaas	Supported	○
Key Management Service (KMS)	-	kms	Supported	Supported
Resource Access Management (RAM)	RAM	ram sts ims	Supported	Supported
RAM	CloudSSO	cloudsso	Supported	○
ActionTrail	-	actiontrail	Supported	Supported

Technical support

Service	Sub-service or sub-module	RAM code	Console	API
Ticket Management	-	support	Supported	Supported

Marketplace

Service	Sub-service or sub-module	RAM code	Console	API
Alibaba Cloud Marketplace	-	acm	Supported	Not supported

Other

Service	Sub-service or sub-module	RAM code	Console	API
Expenses and Costs	-	bss bssapi efc	Supported	Supported
ICP Filing	-	beian bsn	Supported	○