Create an AccessKey for a RAM user
You can create an AccessKey for an Alibaba Cloud account or a RAM user. An AccessKey is required to authenticate IQS API calls.
Background
An AccessKey consists of an AccessKey ID and an AccessKey Secret.
-
AccessKey ID: Identifies the user.
-
AccessKey Secret: A secret key used for user authentication. The AccessKey Secret must be kept confidential.
A leaked AccessKey of your Alibaba Cloud account poses a security risk to all your resources. To reduce this risk, we strongly recommend using the AccessKey of a RAM user for your operations.
Procedure
-
Log on to the RAM console.
-
In the left-side navigation pane, choose .
-
On the Users page, click the target RAM user's name.
-
On the Authentication tab, in the AccessKeys section, click Create AccessKey.
-
Read the use cases and recommendations for AccessKeys. Follow these recommendations to select a more suitable credential. If you must create an AccessKey, select a relevant use case, select the I understand that I must create an AccessKey pair checkbox, and then click Continue. The use case that you select does not affect the created AccessKey.
-
Complete the security verification as prompted.
-
In the Create AccessKey dialog box, save the AccessKey ID and AccessKey Secret, and then click OK.
Configure a network access restriction policy to limit the source IP addresses for API requests that use a permanent AccessKey. This confines AccessKey calls to trusted network environments and enhances security. We recommend identifying the network environment where the AccessKey will be used and then clicking Configure Network Access Policy. For detailed instructions, see Configure an AccessKey-level network access restriction policy for a RAM user.