All Products
Search

This Product

    Resource Management:CreateMultiAccountDeliveryChannel

    Document Center

    Resource Management:CreateMultiAccountDeliveryChannel

    Last Updated:Oct 26, 2026

    Creates a cross-account resource delivery channel.

    Operation description

    A Resource Directory management account or a Resource Center delegated administrator account can create a cross-account resource delivery channel in Resource Center to deliver scheduled resource snapshots and resource configuration change events of Resource Directory members to Object Storage Service (OSS) or Simple Log Service (SLS). You can then consume standardized resource information from OSS or SLS.

    Two delivery scenarios are supported for scheduled resource event delivery:

    • Standard scheduled resource event delivery: This scenario applies when the ResourceSnapshotDelivery.CustomExpression parameter is empty.

    • Custom scheduled resource event delivery: This scenario applies when the ResourceSnapshotDelivery.CustomExpression parameter is not empty.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

    • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

    • API: The API that you can call to perform the action.

    • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

    • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

      • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

      • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

    • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

    • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

    Action

    Access level

    Resource type

    Condition key

    Dependent action

    resourcecenter:CreateMultiAccountDeliveryChannel

    create

    *MultiAccountDeliveryChannel

    acs:resourcecenter::{#accountId}:multiaccountdeliverychannel/*

    		 None None

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    DeliveryChannelName

    string

    Yes

    The name of the delivery channel.

    test-multi-account-delivery
    DeliveryChannelDescription

    string

    No

    The description of the delivery channel.

    This is a description.
    ResourceSnapshotDelivery

    object

    No

    The scheduled resource snapshot delivery.

    DeliveryTime

    string

    No

    The delivery time. Specify the time in UTC in the HH:mmZ format, such as 09:00Z.

    09:00Z
    TargetArn

    string

    No

    The ARN of the delivery destination. Valid values:

    • If TargetType is set to OSS, set TargetArn to the ARN of an OSS bucket whose name is prefixed with resourcecenter-. Example: acs:oss:cn-hangzhou:191142248777****:resourcecenter-oss.

    • If TargetType is set to SLS, set TargetArn to the ARN of an SLS Logstore whose name is prefixed with resourcecenter-. Example: acs:log:cn-hangzhou:191142248777****:project/delivery/logstore/resourcecenter-sls.

    acs:oss:cn-hangzhou:1911422487776***:resourcecenter-oss
    TargetType

    string

    No

    The type of the delivery destination. Valid values:

    • For standard scheduled resource snapshot delivery, only OSS is supported.

    • For custom scheduled resource snapshot delivery, OSS or SLS is supported.

    Valid values:

    • SLS :

      SLS

    • OSS :

      OSS

    OSS
    CustomExpression

    string

    No

    The custom expression.

    select * from resources limit 100;

    SlsProperties

    object

    No

    The SLS configurations.

    OversizedDataOssTargetArn

    string

    No

    The ARN of the OSS bucket to which oversized files are delivered.

    If a resource configuration change event exceeds 1 MB in size, the event is delivered as an OSS object. You must specify the ARN of an OSS bucket whose name is prefixed with resourcecenter-.

    Note

    This parameter takes effect only when you create a custom scheduled resource snapshot delivery channel. You do not need to specify this parameter when you create a standard scheduled resource snapshot delivery channel.

    acs:oss:cn-hangzhou:1911422487776***:resourcecenter-oss
    ResourceChangeDelivery

    object

    No

    The delivery of resource configuration changes.

    SlsProperties

    object

    No

    The SLS configurations.

    OversizedDataOssTargetArn

    string

    No

    The ARN of the OSS bucket to which oversized files are delivered.

    If a resource configuration change event exceeds 1 MB in size, the event is delivered as an OSS object. You must specify the ARN of an OSS bucket whose name is prefixed with resourcecenter-.

    acs:oss:cn-hangzhou:1911422487776***:resourcecenter-oss
    TargetArn

    string

    No

    The ARN of the delivery destination. Valid values:

    • If TargetType is set to OSS, set TargetArn to the ARN of an OSS bucket whose name is prefixed with resourcecenter-.

    • If TargetType is set to SLS, set TargetArn to the ARN of an SLS Logstore whose name is prefixed with resourcecenter-.

    acs:log:cn-hangzhou: 1911422487776***:project/delivery/logstore/resourcecenter-sls

    TargetType

    string

    No

    The type of the delivery destination.

    Valid values: SLS.

    Valid values:

    • SLS :

      SLS

    SLS
    DeliveryChannelFilter

    object

    Yes

    The effective scope of the delivery channel.

    AccountScopes

    array

    Yes

    The list of account scopes for delivery.

    string

    Yes

    The account scope for delivery. Valid values:

    • The ID of the resource directory, which indicates that resources in the management account and all member accounts are delivered.

    • The ID of the Root folder, which indicates that resources in all member accounts under the Root folder and its subfolders are delivered.

    • The ID of a folder, which indicates that resources in all member accounts under the specified folder are delivered.

    • The ID of a member account, which indicates that resources in the specified member account are delivered.

    For more information about how to obtain the ID of a resource directory, the ID of the Root folder, the ID of a folder, and the ID of a member account, see GetResourceDirectory, ListFoldersForParent, and ListAccounts.

    rd-r4****

    ResourceTypes

    array

    No

    The list of resource types to deliver.

    string

    No

    The resource type to deliver. For more information, see Cloud services and resource types supported by Resource Center.

    To deliver all resource types supported by Resource Center, set this parameter to ALL.

    ACS::VPC::VPC

    Response elements

    Element

    Type

    Description

    Example

    object

    The response parameters.

    DeliveryChannelId

    string

    The ID of the delivery channel.

    dc-6q79dm4o9***
    RequestId

    string

    The request ID.

    994BFEFE-4BB5-5A27-8917-4583DEEF2***

    Examples

    Success response

    JSON format

    {
  "DeliveryChannelId": "dc-6q79dm4o9***",
  "RequestId": "994BFEFE-4BB5-5A27-8917-4583DEEF2***"
}

    Error codes

    HTTP status code

    Error code

    Error message

    Description
    400 NoPermission.ServiceLinkedRole The current user does not have permission to create servicelinkedrole. Please contact the Alibaba Cloud account or administrator to authorize custom policy: Service Name: rmc.resourcemanager.aliyuncs.com, Action: ram:CreateServiceLinkedRole.
    400 InvalidParameter.ResourceChangeDelivery.TargetArn The resource configuration change delivery target arn is invalid. The resource configuration change delivery target arn is invalid.
    403 ExceedLimit.DeliveryChannelQuota The number of delivery channels exceeds the limit. The number of delivery channels exceeds the limit.
    403 NoPermission.AccountScope The operator is not permitted for this account scope. The operator is not permitted for this account scope.
    404 MissingParameter.DeliveryName The specified parameter DeliveryName is missing.
    404 MissingParameter.OverSizedDataOssTargetArn The specified parameter OverSizedDataOssTargetArn is missing.
    404 MissingParameter.DeliveryFilter The specified parameter DeliveryFilter is missing.
    404 MissingParameter.DeliveryFilter.AccountScopes The specified parameter DeliveryFilter.AccountScopes is missing.
    404 MissingParameter.ResourceSnapshotDelivery.TargetType The specified parameter ResourceSnapshotDelivery.TargetType is missing.
    404 MissingParameter.ResourceChangeDelivery.TargetArn The specified parameter ResourceChangeDelivery.TargetArn is missing.
    404 MissingParameter.ResourceChangeDelivery.TargetType The specified parameter ResourceChangeDelivery.TargetType is missing.
    404 MissingParameter.ResourceSnapshotDelivery.TargetArn The specified parameter ResourceSnapshotDelivery.TargetArn is missing.
    404 MissingParameter.ResourceDeliveryConfiguration The parameter ResourceSnapshotDelivery or ResourceChangeDelivery must be specified.
    404 MissingParameter.ResourceSnapshotDelivery.CustomExpression The specified parameter ResourceSnapshotDelivery.CustomExpression is missing.
    404 MissingParameter.ResourceSnapshotDelivery.DeliveryTime The specified parameter ResourceSnapshotDelivery.DeliveryTime is missing.
    409 AlreadyExists.DeliveryName The DeliveryName Name already exists. The delivery name already exists.
    409 InvalidParameter.DeliveryName The specified parameter DeliveryName is not valid.
    409 InvalidParameter.DeliveryDescription The specified parameter DeliveryDescription is not valid.
    409 InvalidParameter.OverSizedDataOssTargetArn The specified parameter OverSizedDataOssTargetArn is not valid.
    409 InvalidParameter.DeliveryFilter.AccountScopes The specified parameter DeliveryFilter.AccountScopes is not valid. The specified parameter DeliveryFilter.AccountScopes is not valid.
    409 InvalidParameter.DeliveryFilter.ResourceTypes The specified parameter DeliveryFilter.ResourceTypes is not valid.
    409 InvalidParameter.ConfigurationSnapshotDelivery.TargetType The specified parameter ConfigurationSnapshotDelivery.TargetType is not valid.
    409 InvalidParameter.ResourceSnapshotDelivery.TargetArn The specified parameter ResourceSnapshotDelivery.TargetArn is not valid.
    409 InvalidParameter.ResourceSnapshotDelivery.DeliveryTime The specified parameter ResourceSnapshotDelivery.DeliveryTime is not valid.
    409 InvalidParameter.ResourceSnapshotDelivery.TargetType The specified parameter ResourceSnapshotDelivery.TargetType is not valid.
    409 InvalidParameter.ResourceChangeDelivery.TargetType The specified parameter ResourceChangeDelivery.TargetType is not valid.
    409 NoPermission.ResourceDirectory.MemberAccount ResourceDirectory Member Account is not authorized to perform this operation.
    409 InvalidParameter.CustomExpression Error: %s.

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.