Resource Management:Functions and features

Category

Feature

Description

References

Tag management

Create a predefined tag

A predefined tag is a tag that you can create in the stage of tag planning and is available for resources in all Alibaba Cloud regions.

Delete a predefined tag

When you delete a predefined tag, you delete only the predefined tag itself. The custom tags that are added to resources are not deleted.

Add a custom tag

You can add custom tags to resources to categorize the resources. This way, you can manage the resources in a centralized manner.

Remove and delete a custom tag

After you remove a custom tag from a resource, the system automatically deletes the tag within 24 hours if it is not added to other resources.

Export resources to which a tag is added

You can export resources to which a custom tag, predefined tag, or system tag is added.

• Export resources to which a custom tag is added
• Export resources to which a predefined tag is added

Add a predefined tag to a resource

After a predefined tag is created, you can add the tag to resources.

Remove a predefined tag

After you remove a predefined tag from resources, the system retains the tag if it is not added to other resources.

View and search for tags

You can view and search for custom tags, predefined tags, and system tags.

Enable or disable createdby tags

After you enable createdby tags, the system automatically adds createdby tags to newly created resources. The system does not add createdby tags to the resources that are created before you enable createdby tags. After you disable createdby tags, the system no longer adds createdby tags to newly created resources but retains the createdby tags that are added.

View and search for resources to which a tag is added

You can view and search for resources to which a custom tag, predefined tag, or system tag is added.

• Export resources to which a custom tag is added
• Export resources to which a predefined tag is added
• View system tags and the resources to which the system tags are added
• Use tags to query resources

Use the Associated Resource Tagging feature

You can enable or disable the Associated Resource Tagging feature or configure, view, or modify an associated resource tagging rule.

Tag policy management

Create a tag policy

You can create a tag policy and use this tag policy to standardize the tags that are added to your resources. You can configure details for a tag policy based on the provided policy scenarios or specify the details in the JSON format.

Delete a tag policy

If you no longer require a tag policy, you can delete the tag policy. You cannot recover tag policies that are deleted.

Attach a tag policy

You can attach a tag policy to the current account or an object of a resource directory.

Detach a tag policy

You can detach a tag policy from the current account or an object of a resource directory.

Modify a tag policy

You can modify a tag policy. You can modify the name, description, and details of the tag policy. After a tag policy is modified, the modification immediately takes effect for the object to which the tag policy is attached.

View tag policies

You can view the tag policies within the current account or your resource directory.

Enable or disable the Tag Policy feature

The Tag Policy feature supports the single-account mode and resource directory mode. You can enable the Tag Policy feature that is in a specific mode based on your business scenario and the type of your logon account. After you disable the Tag Policy feature, the attached tag policies are automatically detached.

• Enable the Tag Policy feature
• Disable the Tag Policy feature

View and download non-compliance detection results

After you attach a tag policy to an account, the system automatically checks whether the tags added to the resources of the account are compliant with the tag policy. You can generate a report for non-compliant resources and view and download the report.

View an effective tag policy

You can view the effective tag policy of the current account or your resource directory. An effective tag policy is obtained based on tag policy inheritance.

Category

Feature

Description

References

Resource group management

Create a resource group

You can create resource groups by using an Alibaba Cloud account or a RAM identity that has the permissions to create resource groups. This way, you can use resource groups to manage your resources by department or project.

Modify the basic information of a resource group

You can change the name of a resource group.

Delete a resource group

Before you delete a resource group, you must make sure that the resource group does not contain resources. If the resource group contains resources, you can transfer the resources to another resource group or release the resources. After you delete a resource group, the system checks whether the resource group contains resources. This process takes three days. The resource group remains in the Deleting state during this period. The default resource group cannot be deleted.

View and search for a resource group

You can view the basic information about a resource group, including the ID, name, identifier, and tags of the resource group.

Resource management in a resource group

Transfer resources between resource groups

You can transfer resources across resource groups to adjust the resource groups to which the resources belong.

View and search for resources in a group

You can use a single field or a combination of several fields to query resources that you have access permissions in a resource group.

Export resources in a resource group

You can export all resources in a resource group as a CSV file. This way, you can view the resources in the CSV file on your on-premises machine.

Use the Transfer Associated Resources feature

You can enable or disable the Transfer Associated Resources feature and view or modify transfer rules.

Category

Feature

Description

References

Service management

Activate or deactivate Resource Center

Resource Center is free of charge. You can use this service immediately after you activate it. After you deactivate Resource Center, you cannot view information about resources in Resource Center.

• Activate Resource Center
• Deactivate Resource Center

View the status of Resource Center

You can view the status of Resource Center.

Resource search within the current account

Search for resources within the current account

Resource Center allows you to view all resources within your Alibaba Cloud account and search for resources within your Alibaba Cloud account based on specific conditions. The resources may belong to different services or reside in different regions.

Query the number of resources within the current account

You can query the number of resources on which the current account has access permissions. You can search for only resources whose types are supported by Resource Center in services that work with Resource Center.

View the details of a resource

You can view the basic information, configuration change history, and operation records of resources within your Alibaba Cloud account.

Search for resources based on specific conditions

You can search for all resources that meet specific conditions, such as the resource type, region, or tag. You can specify one or more conditions. You can search for a specific resource by resource ID, resource name, or IP address.

View tag keys

You can view the tag keys of resources within the current account.

View tag values

You can view the tag values of resources within the current account.

View the resource types supported by Resource Center

You can view the resource types supported by Resource Center.

• Services that work with Resource Center
• ListResourceTypes

Resource search across accounts

Enable or disable cross-account resource search

After you activate Resource Center, you can view and search for only resources within the current Alibaba Cloud account by default. If you have created a resource directory for your enterprise, you can enable the cross-account resource search feature by using the management account of the resource directory or a delegated administrator account of Resource Center to view the resources within members in the resource directory. After you disable the cross-account resource search feature, you cannot use the management account of your resource directory or a delegated administrator account of Resource Center to view the information about resources within the members in the resource directory.

• Enable cross-account resource search
• Disable cross-account resource search

View the status of the cross-account resource search feature

You can view the status of the cross-account resource search feature.

Search for resources across accounts

Resource Center allows you to view and search for resources across accounts, services, or regions. You can use the management account of your resource directory to view the resources of all members in the resource directory. You can also search for resources based on filter conditions.

View the details of a resource

You can view the information about the resources within the members in your resource directory. The information includes the IDs, names, types, regions, resource groups, tags, and configurations of the resources.

Search for resources based on specific conditions

You can search for all resources that meet specific conditions, such as the resource type, region, or tag. You can specify one or more conditions. You can search for a specific resource by resource ID, resource name, or IP address.

Query the resource groups within the management account or a member of a resource directory

You can query the resource groups within the management account or a member of your resource directory.

Query the tag keys of resources within the management account or a member of a resource directory

You can query the tag keys of resources within the management account or a member of your resource directory.

Query the tag values of resources within the management account or a member of a resource directory

You can query the tag values of resources within the management account or a member of your resource directory.

Advanced search

Execute an SQL statement to query the resources within the current account

You can execute an SQL statement to query the resources that can be accessed within the current account. You can query only resources whose types are supported by Resource Center in services that work with Resource Center.

Execute an SQL statement to query resources across accounts

You can execute an SQL statement to query the resources within the management account or members of your resource directory. You can query only resources whose types are supported by Resource Center in services that work with Resource Center.

Query all sample query templates

You can query all sample query templates.

Query the information about a sample query template

You can query the information about a sample query template.

• Supported sample query templates
• GetExampleQuery

Modify a custom query template

You can modify a custom query template.

Delete a custom query template

You can delete a custom query template.

Query the information about a custom query template

You can query the information about a custom query template. The information includes the ID, expression, name, description, creation time, and update time.

Query all custom query templates

You can query the information about all custom query templates within the current account. The information includes the IDs, expressions, names, descriptions, creation time, and update time.

Resource delivery

Create a resource delivery task

You can create resource delivery tasks to deliver resource change events and scheduled resource snapshots to Object Storage Service (OSS) or Simple Log Service.

• Create a resource delivery task in single-account mode
• Create a resource delivery task in multi-account mode

Modify a resource delivery task

You can modify the information about a resource delivery task.

Delete a resource delivery task

You can delete a resource delivery task.

View the information about a resource delivery task

You can view the basic information and configurations of a resource delivery task.

View all resource delivery tasks

You can view all resource delivery tasks.

Category

Feature

Description

References

Resource directory management

Enable or disable a resource directory

You can enable or disable a resource directory.

• Enable a resource directory
• Disable a resource directory

Manage folders

You can create, modify, delete, and query folders in your resource directory.

• Create a folder
• Change the name of a folder
• Delete a folder

Member management

Create a member

You can create a member in a resource directory.

Invite an Alibaba Cloud account to join a resource directory

You can invite an Alibaba Cloud account to join your resource directory.

Delete a member

You can delete members of the resource account type from your resource directory.

Add a tag to a member

You can add tags to members in your resource directory.

Enable or disable the root user of a member

You can enable the root user of a member of the resource account type or disable the root user of a member of the cloud account type.

• Switch a resource account to a cloud account
• Switch a cloud account to a resource account

View and search for members

You can view the information about a member and search for a member.

Policy management

Create an access control policy

You can create an access control policy.

Modify an access control policy

You can modify the document of an access control policy.

View and search for an access control policy

You can view the basic information and configurations of an access control policy and search for an access control policy.

Delete an access control policy

You can delete an access control policy.

Attach an access control policy and view the effective scope of an access control policy

You can attach an access control policy to the Root folder, a folder other than the Root folder, or a member. You can also view the effective scope of an access control policy.

Trusted service management

Add a delegated administrator account

You can specify a member in your resource directory as a delegated administrator account of a trusted service.

Remove a delegated administrator account

You can remove a delegated administrator account for a trusted service.

View delegated administrator accounts

You can view all delegated administrator accounts.

Contact management

Add a contact

You can add a contact for a resource directory.

Modify a contact

You can modify the basic information about a contact and the types of messages that you want the contact to receive.

Delete a contact

You can delete a contact for a resource directory.

View and search for contacts

You can view all contacts for a resource directory and search for a contact.

Bind a contact

You can bind a contact to your resource directory, a folder in the resource directory, or a member in the resource directory.

Category

Feature

Description

References

Resource share management

Manage a resource share

You can create, modify, query, and delete a resource share.

Enable resource sharing

After resource sharing is enabled, you can use the management account or a member of your resource directory to share resources with all members in your resource directory, all members in a specific folder in your resource directory, or a specific member in your resource directory.

Add a resource or principal

You can add resources or principals to a resource share.

Remove a resource or principal

You can remove resources or principals from a resource share.

View resources or principals

You can view resources or principals added to a resource share.

• View the details of shared resources
• View the details of principals

Resource sharing invitation management

Accept a resource sharing invitation

A principal can accept a resource sharing invitation. Then, the principal can view and use the shared resources specified in the invitation.

Reject a resource sharing invitation

A principal can reject a resource sharing invitation.

View the information about resource shares

You can view the details of resource shares to which your account is added.

Permission management

Add permissions to a resource share

You can add permissions to resource shares.

Remove permissions from a resource share

You can remove permissions from resource shares.

View the permissions added to a resource share

You can view the permissions that are added to a resource share.

View the information about a permission

You can view the information about a permission related to a resource type that supports resource sharing.