Getting started
Installation
lease go to the Releases page to download the latest version of the ack-ram-tool.
Configuration
Credentials
ack-ram-tool will search for credential information in the system in the following order：
- Automatically use credential information that exists in the environment variables（ Note: This tool also supports the credential-related environment variables supported by aliyun cli ）:
| environment variables | description |
|---|---|
ALIBABA_CLOUD_ACCESS_KEY_ID、ALICLOUD_ACCESS_KEY、ALIBABACLOUD_ACCESS_KEY_ID、ALICLOUD_ACCESS_KEY_ID、ALIBABACLOUD_ACCESS_KEY_ID、ACCESS_KEY_ID | access key id |
ALIBABA_CLOUD_ACCESS_KEY_SECRET、ALICLOUD_SECRET_KEY、ALIBABACLOUD_ACCESS_KEY_SECRET、ALICLOUD_ACCESS_KEY_SECRET、ACCESS_KEY_SECRET | access key secret |
ALIBABA_CLOUD_SECURITY_TOKEN、ALICLOUD_ACCESS_KEY_STS_TOKEN、ALIBABACLOUD_SECURITY_TOKEN、ALICLOUD_SECURITY_TOKEN、ALIBABACLOUD_SECURITY_TOKEN、SECURITY_TOKEN | sts token |
ALIBABA_CLOUD_CREDENTIALS_URI | credentials URI |
ALIBABA_CLOUD_ROLE_ARN | RAM Role ARN |
ALIBABA_CLOUD_OIDC_PROVIDER_ARN | OIDC Provider ARN |
ALIBABA_CLOUD_OIDC_TOKEN_FILE | OIDC Token File |
-
When credential information does not exist in the environment variables, if there is an aliyun cli configuration file
~/.aliyun/config.json(For details on the aliyun cli configuration file, please refer to the official documentation ) , the program will automatically use that configuration file. -
When the aliyun cli configuration file does not exist, the program will attempt to use the credential information configured in the
~/.alibabacloud/credentialsfile (which can be specified by the--profile-fileflags):
$ cat ~/.alibabacloud/credentials
[default]
type = access_key
access_key_id = foo
access_key_secret = bar
Permissions
In order to use ack-ram-tool normally, you need to grant the necessary RAM permissions and RBAC permissions for the Alibaba Cloud RAM user or RAM role that uses this tool. For the minimum permission information required for each subcommand, please refer to Permissions.