Skip to content

Latest commit

 

History

History
59 lines (39 loc) · 3.87 KB

getting-started.md

File metadata and controls

59 lines (39 loc) · 3.87 KB
Raw
slug sidebar_position
/
1

Getting started

Installation

lease go to the Releases page to download the latest version of the ack-ram-tool.

Configuration

Credentials

ack-ram-tool will search for credential information in the system in the following order：

  1. Automatically use credential information that exists in the environment variables（ Note: This tool also supports the credential-related environment variables supported by aliyun cli ）:
environment variables description
ALIBABA_CLOUD_ACCESS_KEY_ID、ALICLOUD_ACCESS_KEY、ALIBABACLOUD_ACCESS_KEY_ID、ALICLOUD_ACCESS_KEY_ID、ALIBABACLOUD_ACCESS_KEY_ID、ACCESS_KEY_ID access key id
ALIBABA_CLOUD_ACCESS_KEY_SECRET、ALICLOUD_SECRET_KEY、ALIBABACLOUD_ACCESS_KEY_SECRET、ALICLOUD_ACCESS_KEY_SECRET、ALIBABACLOUD_ACCESS_KEY_SECRET、ACCESS_KEY_SECRET access key secret
ALIBABA_CLOUD_SECURITY_TOKEN、ALICLOUD_ACCESS_KEY_STS_TOKEN、ALIBABACLOUD_SECURITY_TOKEN、ALICLOUD_SECURITY_TOKEN、ALIBABACLOUD_SECURITY_TOKEN、SECURITY_TOKEN sts token
ALIBABA_CLOUD_CREDENTIALS_URI credentials URI
ALIBABA_CLOUD_ROLE_ARN RAM Role ARN
ALIBABA_CLOUD_OIDC_PROVIDER_ARN OIDC Provider ARN
ALIBABA_CLOUD_OIDC_TOKEN_FILE OIDC Token File

  1. When credential information does not exist in the environment variables, if there is an aliyun cli configuration file ~/.aliyun/config.json (For details on the aliyun cli configuration file, please refer to the official documentation ) , the program will automatically use that configuration file.

  2. When the aliyun cli configuration file does not exist, the program will attempt to use the credential information configured in the ~/.alibabacloud/credentials file (which can be specified by the --profile-file flags):

$ cat ~/.alibabacloud/credentials

[default]
type = access_key
access_key_id = foo
access_key_secret = bar

Permissions

In order to use ack-ram-tool normally, you need to grant the necessary RAM permissions and RBAC permissions for the Alibaba Cloud RAM user or RAM role that uses this tool. For the minimum permission information required for each subcommand, please refer to Permissions.