API standard and pre-built SDKs in multi-language
This product (ResourceManager/2020-03-31) OpenAPI adopts an RPC-style signature mechanism. For implementation details, please refer to the Signature Mechanism documentation.To streamline development, we provide official SDKs for major programming languages. Using the SDK allows you to call APIs directly without worrying about low-level details such as request signatures, significantly lowering the barrier to entry and reducing integration complexity.
Custom signature
If your use case requires direct API integration with custom signatures, consult our technical support team first. Join our DingTalk support group (147535001692) to receive expert guidance.
Before you begin
An Alibaba Cloud account has full administrative privileges. A compromised AccessKey pair exposes all associated resources to unauthorized access, posing a significant security risk. To call APIs securely, create a Resource Access Management (RAM) user with API access only, configure its AccessKey pairs, and implement the principle of least privilege (PoLP) through RAM policies. Use the Alibaba Cloud account only when its permissions are explicitly required for specific scenarios.
Resource groups
| API | Title | Description |
|---|---|---|
| CreateResourceGroup | CreateResourceGroup | Creates a resource group. |
| DeleteResourceGroup | DeleteResourceGroup | Deletes a resource group. |
| UpdateResourceGroup | UpdateResourceGroup | Updates the basic information of a resource group. |
| ListResourceGroups | ListResourceGroups | Queries resource groups. |
| ListResources | ListResources | Queries resources that can be accessed by the current account in resource groups. |
| GetResourceGroup | GetResourceGroup | Queries the information of a resource group. |
| MoveResources | MoveResources | Moves resources from one resource group to another. You can move multiple resources that reside in different regions, are used by different Alibaba Cloud services, or belong to different resource groups. |
| EnableAutoGrouping | EnableAutoGrouping | Enables the Automatic Resource Transfer feature. After the feature is enabled, you can create, update, delete, and query transfer rules. |
| DisableAutoGrouping | DisableAutoGrouping | Disables the Automatic Resource Transfer feature. After the feature is disabled, existing custom transfer rules and existing transfer rules for associated resources are deleted. However, existing relationships between resources and resource groups are not affected. If you still want to use this feature, you can enable it again 1 minute later. |
| UpdateAutoGroupingConfig | UpdateAutoGroupingConfig | Updates the configuration of the Automatic Resource Transfer feature. You can update only the configuration of the Transfer Existing Associated Resources feature. |
| GetAutoGroupingStatus | GetAutoGroupingStatus | Queries the status of the Automatic Resource Transfer feature. |
| CreateAutoGroupingRule | CreateAutoGroupingRule | Creates a transfer rule. Custom transfer rules and transfer rules for associated resources are supported. |
| DeleteAutoGroupingRule | DeleteAutoGroupingRule | Deletes a transfer rule. |
| UpdateAutoGroupingRule | UpdateAutoGroupingRule | Updates a transfer rule. |
| ListAutoGroupingRules | ListAutoGroupingRules | Queries a list of transfer rules. |
| GetAutoGroupingRule | GetAutoGroupingRule | Queries the information about a transfer rule. |
| EnableAssociatedTransfer | EnableAssociatedTransfer | Enables the Transfer Associated Resources feature. |
| DisableAssociatedTransfer | DisableAssociatedTransfer | Disables the Transfer Associated Resources feature. |
| UpdateAssociatedTransferSetting | UpdateAssociatedTransferSetting | Updates the settings of the Transfer Associated Resources feature. |
| ListAssociatedTransferSetting | ListAssociatedTransferSetting | Queries the settings of the Transfer Associated Resources feature. |
| GetResourceGroupResourceCounts | GetResourceGroupResourceCounts | Queries the number of resources in a visible resource group. |
| ListAutoGroupingRemediations | ListAutoGroupingRemediations | Queries a list of automatic grouping remediation records. |
| GetResourceGroupAdminSetting | GetResourceGroupAdminSetting | Queries the configurations of a resource group administrator. |
| UpdateResourceGroupAdminSetting | UpdateResourceGroupAdminSetting | Updates the configurations of a resource group administrator. |
| LookupResourceGroupEvents | LookupResourceGroupEvents | Queries the events of resource groups. |
| EnableResourceGroupNotification | EnableResourceGroupNotification | Enables group event notification. |
| DisableResourceGroupNotification | DisableResourceGroupNotification | Disables group event notification. |
| GetResourceGroupNotificationSetting | GetResourceGroupNotificationSetting | Queries the notification settings of a resource group. |
| ListResourceGroupCapability | ListResourceGroupCapability | Queries whether a specific resource type or a given cloud service supports resource group events. |
| ListResourceGroupsWithAuthDetails | ListResourceGroupsWithAuthDetails | Queries resource groups and their user authorization information. |
Roles
| API | Title | Description |
|---|---|---|
| CreateRole | CreateRole | Creates a RAM role. |
| DeleteRole | DeleteRole | Deletes a RAM role. |
| UpdateRole | UpdateRole | Updates the information about a Resource Access Management (RAM) role. |
| GetRole | GetRole | Queries the information about a RAM role. |
| ListRoles | ListRoles | Queries a list of RAM roles. |
Service-linked roles
| API | Title | Description |
|---|---|---|
| CreateServiceLinkedRole | CreateServiceLinkedRole | Creates a service-linked role. |
| DeleteServiceLinkedRole | DeleteServiceLinkedRole | Deletes a service-linked role. |
| GetServiceLinkedRoleDeletionStatus | GetServiceLinkedRoleDeletionStatus | Queries the status of the task that is used to delete a service-linked role. |
Policies
| API | Title | Description |
|---|---|---|
| CreatePolicy | CreatePolicy | Creates a permission policy. |
| DeletePolicy | DeletePolicy | Deletes a permission policy. |
| SetDefaultPolicyVersion | SetDefaultPolicyVersion | Sets a default version for a permission policy. |
| AttachPolicy | AttachPolicy | Attaches a permission policy to an object, which can be a RAM user, RAM user group, or RAM role. After you attach a permission policy to an object, the object has the operation permissions on the resources in a specific resource group or within a specific Alibaba Cloud account. |
| DetachPolicy | DetachPolicy | Detaches a permission policy from an object. After you detach a policy from an object, the object does not have the operation permissions on the current resource group or the resources within the current account. |
| ListPolicies | ListPolicies | Queries a list of permission policies. |
| GetPolicy | GetPolicy | Queries the information about a permission policy. |
| ListPolicyAttachments | ListPolicyAttachments | Queries policy attachment records. |
| CreatePolicyVersion | CreatePolicyVersion | Creates a version for a permission policy. |
| DeletePolicyVersion | DeletePolicyVersion | Deletes a version of a permission policy. |
| ListPolicyVersions | ListPolicyVersions | Queries a list of versions of a policy. |
| GetPolicyVersion | GetPolicyVersion | Queries the information about a version of a permission policy. |
Tag
| API | Title | Description |
|---|---|---|
| TagResources | TagResources | Adds tags to resource groups or the members in a resource directory. |
| UntagResources | UntagResources | Removes tags from resource groups or the members in a resource directory. |
| ListTagResources | ListTagResources | Queries the tags that are added to resource groups or the members in a resource directory. |