# Alibaba Cloud Resource Access Management API

> Alibaba Cloud Resource Access Management API on Apizie: 72 endpoints (Adds a Resource Access Management (RAM) user to a RAM user group, Calls the AttachPolicyToGroup operation to attach a permission to a specified user group, Calls the AttachPolicyToRole operation to add a permission to a specified role, Attaches an access policy to a specified user, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:aliyun-ram/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:aliyun-ram`
- Category: Cloud
- Status: byok
- Source: https://api.alibabacloud.com/product/ram
- Page: https://zieapi.vercel.app/api/cloud/aliyun-ram
- OpenAPI: https://zieapi.vercel.app/api/cloud/aliyun-ram/openapi.json

Alibaba Cloud OpenAPI for Resource Access Management (ram, version 2015-05-01). Calls are signed with ACS3-HMAC-SHA256 using your AccessKey ID and secret.

## Endpoints

### Adds a Resource Access Management (RAM) user to a RAM user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/add-user-to-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |
| GroupName | string | no | The name of the RAM user group |

### Calls the AttachPolicyToGroup operation to attach a permission to a specified user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/attach-policy-to-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System` or `Custom` |
| PolicyName | string | no | The name of the access policy |
| GroupName | string | no | The name of the user group |
| ResourceGroupId | string | no | The resource group ID |

### Calls the AttachPolicyToRole operation to add a permission to a specified role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/attach-policy-to-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System` or `Custom` |
| PolicyName | string | no | The name of the access policy |
| RoleName | string | no | The name of the role |
| ResourceGroupId | string | no | The resource group ID |

### Attaches an access policy to a specified user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/attach-policy-to-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System` or `Custom` |
| PolicyName | string | no | The name of the access policy |
| UserName | string | no | The username |
| ResourceGroupId | string | no | The resource group ID |

### Binds a multi-factor authentication (MFA) device to a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/bind-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SerialNumber | string | no | The serial number of the MFA device |
| UserName | string | no | The name of the RAM user |
| AuthenticationCode1 | string | no | The first authentication code |
| AuthenticationCode2 | string | no | The second authentication code |

### Allows a Resource Access Management (RAM) user to invoke ChangePassword to change their own console logon…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/change-password` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| OldPassword | string | no | The old console logon password of the Resource Access Management (RAM) user |
| NewPassword | string | no | The new console logon password of the Resource Access Management (RAM) user. The password must meet the password strength requirements.… |

### Deletes the alias of an Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/clear-account-alias` (byok)

### Invokes the CreateAccessKey operation to create an AccessKey pair for a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-access-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The username. When a Resource Access Management (RAM) user invokes this operation, an AccessKey pair is created for the RAM user by default |

### Creates a RAM user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | no | The name of the user group. The name must be 1 to 64 characters in length and can contain letters, digits, periods (.), hyphens (-), and… |
| Comments | string | no | The description. The value can be up to 128 characters in length |

### Enables console logon for a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-login-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |
| Password | string | no | The logon password of the RAM user. The password must meet the password strength requirements. For more information, see… |
| PasswordResetRequired | string | no | Specifies whether the RAM user has to change the password upon logon. Default value: `false` |
| MFABindRequired | string | no | Specifies whether the RAM user must bind a multi-factor authentication (MFA) device upon the next logon. Default value: `false` |

### Creates a custom policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyName | string | no | The name of the policy. The name must be 1 to 128 characters in length and can contain letters, digits, and hyphens (-) |
| Description | string | no | The description of the policy. The description must be 1 to 1,024 characters in length |
| PolicyDocument | string | no | The document of the policy. The document must be 1 to 6,144 characters in length. For more information about policy elements and sample… |
| Tag | string | no | The tags (JSON-encoded) |

### Creates a version for a policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-policy-version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyName | string | no | The name of the policy |
| PolicyDocument | string | no | The document of the policy. The document can be up to 6,144 bytes in length |
| SetAsDefault | string | no | Specifies whether to set this policy as the default policy. Default value: `false` |
| RotateStrategy | string | no | The rotation strategy of the policy. The rotation strategy can be used to delete an early policy version. Valid values: `None`: disables… |

### Creates a RAM role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | no | The name of the RAM role. The name must be 1 to 64 characters in length and can contain letters, digits, periods (.), and hyphens (-) |
| Description | string | no | The description of the RAM role. The description must be 1 to 1,024 characters in length |
| AssumeRolePolicyDocument | string | no | The trust policy. Specifies one or more principals that are allowed to assume the RAM role. The principals can be Alibaba Cloud accounts,… |
| MaxSessionDuration | integer | no | The maximum session duration of the RAM role. Valid values: 3600 to 43200. Unit: seconds. Default value: 3600. If this parameter is left… |
| Tag | string | no | The tags (JSON-encoded) |
| AllowConsoleLogin | string | no | Specifies whether the RAM role is allowed to log on to the console. Valid values: true: allowed false: not allowed |

### Creates a service-linked role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-service-linked-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ServiceName | string | yes | The cloud service name associated with the service-linked role. For more information, see the Cloud service identity column in… |
| CustomSuffix | string | no | The suffix of the role name. The total length of the role name (including the suffix) is 1 to 64 characters and can contain letters,… |
| Description | string | no | The description of the service-linked role. You can specify a role description only for service-linked roles that allow custom suffixes.… |

### Creates a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user. It must be 1 to 64 characters in length, and can contain letters, digits, periods (.), hyphens (-), and… |
| DisplayName | string | no | The display name of the RAM user. It must be 1 to 128 characters in length |
| MobilePhone | string | no | The mobile phone number of the RAM user. Format: \ -\ . This parameter applies only to the China site (aliyun.com) |
| Email | string | no | The email address of the RAM user. This parameter applies only to the China site (aliyun.com) |
| Comments | string | no | The description of the RAM user. It must be 1 to 128 characters in length |

### Creates a multi-factor authentication (MFA) device
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/create-virtual-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| VirtualMFADeviceName | string | no | The name of the MFA device. The name must be 1 to 64 characters in length, and can contain letters, digits, periods (.), and hyphens (-) |

### Decodes the diagnostic information from the response body of a request that is denied due to insufficient…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/decode-diagnostic-message` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EncodedDiagnosticMessage | string | no | The encoded diagnostic information obtained from the `AccessDeniedDetail.EncodedDiagnosticMessage` field in the response body when an API… |

### Deletes an AccessKey pair of a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-access-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |
| UserAccessKeyId | string | no | The AccessKey ID in the AccessKey pair that you want to delete.`` |

### Deletes a Resource Access Management (RAM) user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | no | The name of the RAM user group. If you want to query the name of a RAM user group, you can call the… |

### Disables console logon for a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-login-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |

### Deletes a policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyName | string | no | The name of the policy |
| CascadingDelete | string | no | Specifies whether to delete all versions of the policy. Valid values: true: deletes all versions of the policy. false: does not delete all… |

### Deletes a policy version
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-policy-version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyName | string | no | The name of the policy |
| VersionId | string | no | The ID of the policy version that you want to delete |

### Deletes a regular Resource Access Management (RAM) role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | no | The name of the RAM role |

### Deletes a service-linked role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-service-linked-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The role name |

### Deletes a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user. The name must be 1 to 64 characters in length, and can contain letters, digits, periods (.), hyphens (-), and… |

### Deletes a multi-factor authentication (MFA) device
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/delete-virtual-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SerialNumber | string | no | The serial number of the MFA device |

### Calls the DetachPolicyFromGroup operation to revoke a specified permission from a user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/detach-policy-from-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System` or `Custom` |
| PolicyName | string | no | The name of the access policy |
| GroupName | string | no | The name of the user group |
| ResourceGroupId | string | no | The resource group ID |

### Revokes a specified access policy from a role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/detach-policy-from-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System` or `Custom` |
| PolicyName | string | no | The access policy name |
| RoleName | string | no | The name of the role |
| ResourceGroupId | string | no | The resource group ID |

### Revokes a specified permission from a user by calling the DetachPolicyFromUser operation
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/detach-policy-from-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System` or `Custom` |
| PolicyName | string | no | The name of the access policy |
| UserName | string | no | The username |
| ResourceGroupId | string | no | The resource group ID |

### 产生最近访问信息
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/generate-service-last-accessed-details` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Arn | string | yes | The Arn |
| Granularity | string | no | The Granularity |

### Queries the last time when an AccessKey pair was used
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-access-key-last-used` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |
| UserAccessKeyId | string | no | The ID of the AccessKey pair |

### Queries the alias of an Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-account-alias` (byok)

### Queries the information of a user group by calling the GetGroup operation
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | no | The name of the user group |

### Invokes the GetLoginProfile operation to view the logon configuration of a Resource Access Management (RAM)…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-login-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The username |

### Queries the password policy of Resource Access Management (RAM) users, including the password strength
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-password-policy` (byok)

### Retrieves the information of a specified access policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System`, `Custom` |
| PolicyName | string | no | The name of the access policy |

### Retrieves a specific version of an access policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-policy-version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System`, `Custom` |
| PolicyName | string | no | The access policy name |
| VersionId | string | no | The ID of the target version |

### Retrieves the information about a role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | no | The name of the role. The name must be 1 to 64 characters in length and can contain letters, digits, periods (.), and hyphens (-) |

### Queries the security preferences
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-security-preference` (byok)

### 查询最后访问信息
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-service-last-accessed-details` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Marker | string | no | The Marker |
| MaxItems | integer | no | The MaxItems |
| JobId | string | yes | The JobId |

### Retrieves the template of a service-linked role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-service-linked-role-template` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ServiceName | string | no | The cloud service name. For more information, see the Cloud service identity column in https://help.aliyun.com/document_detail/461722.html |

### You can call the GetUser operation to query the details of a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user. The name is 1 to 64 characters in length and can contain letters, digits, periods (.), hyphens (-), and… |

### Queries the multi-factor authentication (MFA) device that is bound to a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/get-user-mfainfo` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |

### Lists the AccessKey pairs of a specified user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-access-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The username. If a Resource Access Management (RAM) user calls this operation without specifying this parameter, the AccessKey pairs of… |

### Lists the entities that reference an access policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-entities-for-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System` or `Custom` |
| PolicyName | string | no | The name of the access policy |

### Queries the list of user groups by calling the ListGroups operation
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Marker | string | no | The token for querying the next page of results. You do not need to specify `Marker` for the first API call. If the total number of… |
| MaxItems | integer | no | The maximum number of entries per page. Valid values: 1 to 100. Default value: 100 |

### Invokes the ListGroupsForUser operation to query the information about the groups to which a specified…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-groups-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The username of the Resource Access Management (RAM) user |

### Invokes the ListPolicies operation to list access policies
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System` and `Custom`. If this parameter is not specified, all access policies are listed |
| Marker | string | no | The marker. If the response is truncated, you can use `Marker` to obtain the content that starts from the position after the truncation… |
| MaxItems | integer | no | The number of entries to return. If the response is truncated because it reaches the `MaxItems` limit, the `IsTruncated` response… |
| Tag | string | no | The tags (JSON-encoded) |

### Lists the permission policies attached to a user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-policies-for-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | no | The name of the user group |

### Lists the access policies attached to a role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-policies-for-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | no | The name of the role |

### Queries the policies that are attached to a RAM user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-policies-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |

### Lists the versions of an access policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-policy-versions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | no | The type of the access policy. Valid values: `System`, `Custom` |
| PolicyName | string | no | The name of the access policy |

### Lists RAM roles
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Marker | string | no | The marker. If the response is truncated, you can use `Marker` to retrieve the content that starts from the position after the truncation… |
| MaxItems | integer | no | The number of entries to return. If the response is truncated because it reaches the `MaxItems` limit, the `IsTruncated` parameter is set… |
| Tag | string | no | The tags (JSON-encoded) |

### Queries the tags that are added to cloud resources which are Resource Access Management (RAM) roles and…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-tag-resources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ResourceType | string | no | The resource type. Enumerated values: role: RAM roles. policy: policies |
| ResourceNames | string | no | The names of the resources. You can specify up to 50 resource names (JSON-encoded) |
| Tag | string | no | The tags. You can specify up to 20 tags (JSON-encoded) |
| PageSize | integer | no | The number of entries per page. Valid values: 1 to 100 |
| NextToken | string | no | The pagination token that is used in the next request to retrieve a new page of results |

### Queries the information about all RAM users
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-users` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Marker | string | no | The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part |
| MaxItems | integer | no | The number of entries per page. If a response is truncated because it reaches the value of MaxItems, the value of `IsTruncatedg` will be… |

### Lists the Resource Access Management (RAM) users in a specified user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-users-for-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | no | The name of the user group |
| Marker | string | no | The marker. If the response is truncated, you can use this parameter to obtain the content that starts from the position after the… |
| MaxItems | integer | no | The maximum number of entries to return. If the response is truncated because it reaches the `MaxItems` limit, the `IsTruncated` response… |

### Queries multi-factor authentication (MFA) devices
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/list-virtual-mfadevices` (byok)

### Removes a Resource Access Management (RAM) user from a RAM user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/remove-user-from-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |
| GroupName | string | no | The name of the RAM user group |

### Configures an alias for an Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/set-account-alias` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AccountAlias | string | no | The alias of the Alibaba Cloud account. The alias must be 3 to 32 characters in length, and can contain lowercase letters, digits, and… |

### Specifies a version for a policy as the default version
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/set-default-policy-version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyName | string | no | The name of the policy |
| VersionId | string | no | The ID of the policy version that you want to set as the default version |

### Configures the password policy for Resource Access Management (RAM) users, including the password strength
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/set-password-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| MinimumPasswordLength | integer | no | The minimum number of characters in a password. Valid values: 8 to 32. Default value: 8 |
| RequireLowercaseCharacters | string | no | Specifies whether a password must contain one or more lowercase letters |
| RequireUppercaseCharacters | string | no | Specifies whether a password must contain one or more uppercase letters |
| RequireNumbers | string | no | Specifies whether a password must contain one or more digits |
| RequireSymbols | string | no | Specifies whether a password must contain one or more special characters |
| HardExpiry | string | no | Specifies whether a password will expire. Valid values: `true` and `false`. Default value: `false`. If you leave this parameter… |
| MaxPasswordAge | integer | no | The number of days for which a password is valid. If you reset a password, the password validity period restarts. Default value: 0. The… |
| PasswordReusePrevention | integer | no | The number of previous passwords that a RAM user is prevented from reusing. Default value: 0. The default value indicates that the RAM… |
| MaxLoginAttemps | integer | no | The maximum number of permitted logon attempts within one hour. The number of logon attempts is reset to zero if a RAM user changes the… |

### Configures the security preferences
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/set-security-preference` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EnableSaveMFATicket | string | no | Specifies whether to remember the multi-factor authentication (MFA) devices of Resource Access Management (RAM) users for seven days.… |
| AllowUserToChangePassword | string | no | Specifies whether RAM users can change their passwords. Valid values: true (default) false |
| AllowUserToManageAccessKeys | string | no | Specifies whether RAM users can manage their AccessKey pairs. Valid values: true false (default) |
| AllowUserToManagePublicKeys | string | no | Specifies whether RAM users can manage their public keys. Valid values: true false (default) This parameter is valid only for the Japan site |
| AllowUserToManageMFADevices | string | no | Specifies whether RAM users can manage their MFA devices. Valid values: true (default) false |
| LoginSessionDuration | integer | no | The validity period of the logon session of RAM users. Valid values: 1 to 24. Default value: 6. Unit: hours |
| LoginNetworkMasks | string | no | The subnet mask that specifies the IP addresses from which you can log on to the Alibaba Cloud Management Console. This parameter takes… |

### Adds tags to cloud resources which are Resource Access Management (RAM) roles and policies
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/tag-resources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ResourceType | string | no | The resource type. Enumerated values: role: RAM roles. policy: policies |
| ResourceNames | string | no | The names of the resources. You can specify up to 50 resource names (JSON-encoded) |
| Tag | string | no | The tags. You can specify up to 20 tags (JSON-encoded) |

### Unbinds a multi-factor authentication (MFA) device from a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/unbind-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | Specifies the username |

### Removes tags from cloud resources that are Resource Access Management (RAM) roles and policies
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/untag-resources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ResourceType | string | no | The resource type. Enumerated values: role: RAM roles. policy: policies |
| ResourceNames | string | no | The names of the resources. You can specify up to 50 resource names (JSON-encoded) |
| TagKeys | string | no | The keys of the tags. You can specify up to 20 tag keys (JSON-encoded) |
| All | string | no | Specifies whether to remove all tags from the resources. Enumerated values: true false |

### Changes the status of an AccessKey pair that belongs to a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/update-access-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |
| UserAccessKeyId | string | no | The AccessKey ID in the AccessKey pair whose status you want to change.`` |
| Status | string | no | The status of the AccessKey pair. Valid values: `Active` and `Inactive` |

### Modifies a Resource Access Management (RAM) user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/update-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | no | The name of the RAM user group |
| NewGroupName | string | no | The new name of the RAM user group. The name must be 1 to 64 characters in length and can contain letters, digits, periods (.), hyphens… |
| NewComments | string | no | The new description of the RAM user group. The new description must be 1 to 128 characters in length |

### Modifies the logon configurations of a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/update-login-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the RAM user |
| Password | string | no | The logon password of the RAM user. The password must meet the password strength requirements |
| PasswordResetRequired | string | no | Specifies whether the RAM user has to change the password upon logon |
| MFABindRequired | string | no | Specifies whether a multi-factor authentication (MFA) device must be bound to the RAM user upon logon |

### Modifies the description of a custom policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/update-policy-description` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyName | string | no | The name of the policy |
| NewDescription | string | no | The description of the policy. The description must be 1 to 1,024 characters in length |

### Updates the information of a RAM role
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/update-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | no | The name of the RAM role. The name must be 1 to 64 characters in length and can contain letters, digits, periods (.), and hyphens (-) |
| NewAssumeRolePolicyDocument | string | no | The trust policy of the RAM role |
| NewMaxSessionDuration | integer | no | The maximum session duration of the RAM role. Valid values: 3600 to 43200. Unit: seconds. Default value: 3600 |
| NewDescription | string | no | The description of the RAM role. The description must be 1 to 1,024 characters in length |
| NewAllowConsoleLogin | string | no | Specifies whether to allow the RAM role to log on to the console |

### Modifies information about a Resource Access Management (RAM) user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/update-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The username of the RAM user |
| NewUserName | string | no | The new username of the RAM user. The username must be 1 to 64 characters in length, and can contain letters, digits, periods (.), hyphens… |
| NewDisplayName | string | no | The new display name of the RAM user. The name must be 1 to 128 characters in length |
| NewMobilePhone | string | no | The new mobile phone number of the RAM user. Format: \ -\ . This parameter applies only to the China site (aliyun.com) |
| NewEmail | string | no | The new email address of the RAM user. This parameter applies only to the China site (aliyun.com) |
| NewComments | string | no | The new description of the RAM user. The description must be 1 to 128 characters in length |

### version
`POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/version` (byok)

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:aliyun-ram/add-user-to-group" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Alibaba Cloud Resource Access Management API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:aliyun-ram/add-user-to-group with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Alibaba Cloud Resource Access Management API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Alibaba Cloud Resource Access Management itself also needs your own key from aliyuncs.com.

### Can AI agents use the Alibaba Cloud Resource Access Management API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:aliyun-ram.

### What is the status of the Alibaba Cloud Resource Access Management API?
Needs your own provider key (bring your own key)