This topic describes how to create and obtain an AccessKey pair for an Alibaba Cloud account or a Resource Access Management (RAM) user. When you call API operations, you must use the AccessKey pair to authenticate your identity.

Background information

An AccessKey pair consists of an AccessKey ID and an AccessKey secret.
  • The AccessKey ID is used to identify a user.
  • The AccessKey secret is used to encrypt and verify the signature string. You must keep the AccessKey secret confidential.
Warning If the AccessKey pair of your Alibaba Cloud account is disclosed, the security of your resources is compromised. We recommend that you use a RAM user to call API operations. This minimizes the possibility of disclosing the AccessKey pair of your Alibaba Cloud account.

Procedure

  1. Log on to the Alibaba Cloud Management Console with your Alibaba Cloud account.
  2. Move the pointer over the profile picture in the upper-right corner of the page, and click AccessKey Management.
  3. In the Note dialog box, click Use Current AccessKey Pair or Use AccessKey Pair of RAM User.
    Note dialog box
  4. Obtain the AccessKey pair of an account.
    • Obtain the AccessKey pair of your Alibaba Cloud account
      1. Click Use Current AccessKey Pair.
      2. On the AccessKey Management page, click Create AccessKey.
      3. In the Phone Verification dialog box, obtain the verification code, enter the code in the Verification Code field, and then click OK.
      4. In the Create AccessKey dialog box, view the AccessKey ID and AccessKey secret.

        You can click Download CSV File or Copy to download or copy the AccessKey pair.

        Create AccessKey
    • Obtain the AccessKey pair of a RAM user
      1. Click Use AccessKey Pair of RAM User. You are redirected to the RAM console.
      2. On the Users page of the RAM console, click Create User to create a RAM user. If you want to create an AccessKey pair for an existing RAM user, skip this step.
      3. In the left-side navigation pane of the RAM console, choose Identities > Users.
      4. Find the RAM user and click the user logon name. In the User AccessKeys section of the Authentication tab, click Create AccessKey.
      5. In the Phone Verification dialog box, obtain the verification code, enter the code in the Verification Code field, and then click OK.
      6. In the Create AccessKey dialog box, view the AccessKey ID and AccessKey secret.

        You can click Download CSV File or Copy to download or copy the AccessKey pair.

        Create AccessKey 1