Preparations
This topic describes the preparations required for a data migration.
Step 1: Create a RAM user
As a security best practice, create a RAM user for data migration and grant it permissions based on the principle of least privilege.
If you are migrating data across different Alibaba Cloud accounts, create a dedicated RAM user in both the source and destination Alibaba Cloud accounts. Grant the necessary permissions to each RAM user and securely save their logon name, password, AccessKey ID, and AccessKey secret.
-
Log on to the RAM console.
-
In the left-side navigation pane, choose .
-
On the Users page, click Create User.
-
On the Create User page, in the User Account Information section, enter a Logon Name and Display Name.
-
In the Access Mode section, select Console Access and Programmatic access. Securely save the generated logon name, password, AccessKey ID, and AccessKey secret.
-
Console Access: Configure the console password, password reset requirements, and multi-factor authentication (MFA).
-
Access with a permanent AccessKey pair: An AccessKey pair is automatically generated for the RAM user, allowing access through APIs or other development tools.
-
Step 2: Add permissions
After creating the RAM user, find the user on the Users page. In the Actions column, click Add Permissions. Then, attach the AliyunOSSImportFullAccess system policy to the RAM user.