You can create an AccessKey pair for an Alibaba Cloud account or Resource Access Management (RAM) user. When you call API operations, an AccessKey pair is required to complete identity verification.

Background information

An AccessKey pair includes an AccessKey ID and AccessKey secret.
  • An AccessKey ID is used to identify a user.
  • An AccessKey secret corresponds to an AccessKey ID. You must keep the AccessKey secret confidential.
Notice We recommend you use a RAM user to perform operations. This prevents against the leakage of the AccessKey pair for an Alibaba Cloud account. The leakage of the AccessKey pair for an Alibaba Cloud account exposes all of the resources under the account to security risks.

Procedure

  1. Log on to the Alibaba Cloud console.
  2. Move the pointer over your account profile picture in the upper-right corner of the page, and click AccessKey.
  3. In the Security Tips dialog box, select Continue to Manage AccessKey or Get Started with RAM AccessKey.
    Notice We recommend you use a RAM user to perform operations. This prevents against the leakage of the AccessKey pair for an Alibaba Cloud account.
    • Obtain the AccessKey pair of an Alibaba Cloud account.
      1. Click Continue to Manage AccessKey.
      2. On the Security Management page, click Create AccessKey.
      3. On the Mobile Phone Verification page, obtain a verification code, complete the verification process, and then click OK.
      4. In the Create User AccessKey dialog box, view the AccessKey ID and AccessKey secret in the AccessKey Details section.

        You can click Save AccessKey Information to download the AccessKey pair.

    • Obtain the AccessKey pair of a RAM user
      1. Click Get started with RAM AccessKey.
      2. On the Users page of the RAM console, click Create User to create a user.

        If you obtain an AccessKey pair for an existing RAM user, skip this step.

      3. In the left-side navigation pane, choose Identities > Users and find the target user.
      4. Click the logon name of the user to go to the User Details page. Select the Authentication tab, and click Create AccessKey in the User AccessKeys section.
        Note
        • You can create a maximum of two AccessKey pairs or each RAM user.
        • After you create an AccessKey pair, you cannot view the AccessKey secret of the AccessKey pair by using the console. We recommend that copy the AccessKey pair when creating it and keep the AccessKey secret confidential to prevent against information leakage.
      5. On the Mobile Phone Verification page, obtain a verification code, complete the verification process, and then click OK.
      6. In the Create User AccessKey dialog box that appears, view the AccessKey ID and AccessKey secret in the AccessKey Details section.

        You can also click Download CSV File or Copy to save the AccessKey pair.