Account security

Updated at:

Can I set an IP address whitelist?

Document Mind is an API service and does not support IP address whitelists. You can call the service from your server. If you are concerned that the AccessKey of your Resource Access Management (RAM) user may be exposed, you can create a RAM role and use a temporary account authorized by Security Token Service (STS) to call the service. For more information, see Call a service using a temporary account authorized by STS.

What are the IP addresses for Document Mind domain names?

To add the egress IP addresses of Document Mind domain names to your server's whitelist, use the following IP addresses:

docmind-api.cn-hangzhou.aliyuncs.com:

  • 218.244.137.0/24

  • 116.62.228.0/24

docmind-api.cn-beijing.aliyuncs.com:

  • 39.105.130.0/24

If your service code involves submitting local files, add openplatform.aliyuncs.com to the whitelist.

Is data transmitted by Document Mind encrypted?

The Document Mind service uses the standard Alibaba Cloud gateway. This provides end-to-end security for data transmission.

"NoPermission" error when calling an API

A "NoPermission" error occurs in the following situations:

  1. The RAM user that is used to make the API call does not have the required permissions. Log on to the RAM console and grant the AliyunDocmindFullAccess authorization policy to the RAM user. For more information, see Manage RAM user permissions.

  2. The account information used for the query operation is different from the account information used for the submit operation. Ensure that the same account is used for both the submit and query operations.