RAM authentication

Updated at:

Before a Resource Access Management (RAM) user can call Address Purification APIs, an Alibaba Cloud account must grant the necessary permissions by creating a custom policy in RAM and attaching it to the RAM user. The API authentication rules and procedure are as follows.

Procedure

1. Create a custom policy in Resource Access Management

image.png

2. Create the policy using the script editor. The script content is shown below.

image.png

image.png

The following table lists the Address Purification APIs that can be authorized and their resource descriptions.

Feature

API

Resource description

Address extraction

ExtractAddress

acs:address-purification::$accountid:*

Name extraction

ExtractName

acs:address-purification::$accountid:*

Phone number extraction

ExtractPhone

acs:address-purification::$accountid:*

Administrative region parsing

GetAddressDivisionCode

acs:address-purification::$accountid:*

ZIP code detection

GetZipcode

acs:address-purification::$accountid:*

Address structuring

StructureAddress

acs:address-purification::$accountid:*

Address correction

CorrectAddress

acs:address-purification::$accountid:*

Address completion

CompleteAddress

acs:address-purification::$accountid:*

Street address standardization

StreetStd

acs:address-purification::$accountid:*

Address outlier detection

GetAddressEvaluate

acs:address-purification::$accountid:*

Logistics waybill information extraction

ExtractExpress

acs:address-purification::$accountid:*

Address search

GetAddressSearch

acs:address-purification::$accountid:*

Address input suggestion

GetInputSearch

acs:address-purification::$accountid:*

Multi-address similarity comparison

GetAddressSimilarity

acs:address-purification::$accountid:*

Multi-source address normalization

OneIdAddress

acs:address-purification::$accountid:*

General latitude and longitude query (POI level)

GetAddressGeocode

acs:address-purification::$accountid:*

Coordinate system transformation

TransferCoord

acs:address-purification::$accountid:*

High-precision latitude and longitude query (building level)

HpGeocode

acs:address-purification::$accountid:*

Address type detection

ClassifyPOI

acs:address-purification::$accountid:*

POI prediction

PredictPOI

acs:address-purification::$accountid:*

Voice address input recognition

InputAsrAddress

acs:address-purification::$accountid:*

Conversational context address inference

AddressInference

acs:address-purification::$accountid:*

All feature APIs

*

acs:address-purification::$accountid:*

Example policy for the ExtractAddress API

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "address-purification:ExtractAddress",
      "Resource": "acs:address-purification:*:*:*"
    }
  ]
}

Example policy for all APIs

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "address-purification:*",
      "Resource": "acs:address-purification:*:*:*"
    }
  ]
}

3. On the Users tab under Identity Management, grant permissions to the target RAM user.

4. Select the custom policy you just created to complete the authorization.image.png