Prepare your account

Before using Machine Translation, prepare an Alibaba Cloud account. This topic describes how to create an Alibaba Cloud account and configure RAM user permissions.

Prepare an Alibaba Cloud account

Step 1: Register an Alibaba Cloud account

1. Go to the Alibaba Cloud official website.

2. In the upper-right corner of the Alibaba Cloud website, click Sign Up Now.

3. On the Register Account page, follow the instructions to complete registration. The Alibaba Cloud account you create serves as the resource consumption account recognized by Alibaba Cloud and has full permissions for that account.

Step 2: Complete identity verification for your Alibaba Cloud account

To ensure smooth operations later, complete identity verification. You must verify your identity before purchasing or using Alibaba Cloud products.

Go to the Account Management page and follow the instructions to complete identity verification.

Step 3: Create an AccessKey pair

1. Go to the AccessKey Management page.

2. On the AccessKey management page, click Create AccessKey.

3. In the Do not recommend using Alibaba Cloud account AccessKey dialog box, review the risks and usage limits of creating a root account AccessKey. If you still want to proceed, check I understand the security risks of using an Alibaba Cloud account AccessKey , then click Continue using Alibaba Cloud account AccessKey .

4. In the Create AccessKey dialog box, save your AccessKey ID and AccessKey secret. Check I have saved my AccessKey secret , then click OK .

5. Click Close.

Prepare a RAM user

Step 1: Create a RAM user

1. Log on to the Resource Access Management (RAM) console using your Alibaba Cloud account.

2. In the navigation pane on the left, choose Identities > Users.

3. On the Users page, click Create User.

4. In the User Account Information section of the Create User page, enter a Logon Name and a Display Name.

   Note

   Click Add User to create multiple RAM users at once.

5. In the Access Mode section, select an access method.

• Console Access: Set a console logon password, password reset policy, and multi-factor authentication policy.

  Note

  If you set a custom logon password, it must meet password complexity requirements. For details about setting password strength rules, see Set RAM user password strength.

• OpenAPI Call Access: Automatically generates an AccessKey pair for the RAM user, enabling API or developer tool access to Alibaba Cloud. Note To protect account security, assign only one access method per RAM user. This prevents former team members from accessing Alibaba Cloud resources via AccessKey after leaving your organization.

6. Click OK.

7. In the Security Authentication dialog box, follow the instructions to complete verification.

Step 2: Create an AccessKey pair

1. In the navigation pane on the left, choose Identities > Users.

2. On the Users page, click the name of the target RAM user.

3. On the Authentication Management tab, in the AccessKey section, click Create AccessKey .

4. Review the AccessKey usage scenarios and recommendations. We strongly recommend following the guidance to choose a more suitable credential option. If you must create an AccessKey, select the relevant scenario, check I confirm that I must create an AccessKey , then click Continue Creation . The created AccessKey is not restricted by the selected scenario.

5. Complete security verification as prompted.

6. In the Create AccessKey dialog box, save your AccessKey ID and AccessKey secret, then click OK .

Step 3: Grant permissions to the RAM user

1. In the navigation pane on the left, choose Identities > Users.

2. On the Users page, click Add Permissions in the Actions column for the target RAM user.

3. In the Add Permissions panel, grant permissions to the RAM user.

   1. For Authorization Scope, select Entire Cloud Account.

   2. Enter the principal. The principal is the RAM user to whom you are granting permissions. The system auto-fills the current RAM user, but you can add other RAM users.

   3. Select an access policy.

      1. System policies

         1. Select System Policy and enter mt in the search box below. The system automatically matches Machine Translation-related system policies.

         2. Click the required policy in the policy list to add it to the Selected Policies list on the right. The following Machine Translation system policies are available for reference:

            Policy name	Note	Details
            AliyunMTFullAccess	Full access to Machine Translation (alimt)	Grants full access to all Machine Translation API operations and the console.
            AliyunMTReadOnlyAccess	Read-only access to Machine Translation (alimt)	Grants read-only access to all Machine Translation API operations and the console.

      2. Custom policies

         1. Add a custom policy.

         2. Select Custom Policy.

         3. Find the required custom policy in the policy list and add it to the Selected Policies list on the right.

         4. If the required custom policy is not in the list, create a new one manually.

         5. Create a custom policy.

            1. Click Create Policy.

            2. Select Script Editor.

            3. Create the required access policy, then click Continue Editing Basic Information.

            4. Enter the basic policy information, then click OK.

               Note

               A custom policy can specify one or more specific API operations.

               Note

               Example custom policy code:

               For example, the permission content requirements are as follows.

               1. The Alibaba Cloud account ID is 123456.

               2. Allow calling the Machine Translation General-purpose Edition API.

               Then the policy content is:

               {
                   "Statement": [
                       {
                           "Effect": "Allow",
                           "Action": "alimt:TranslateGeneral",
                           "Resource": "acs:alimt:*:123456:*"
                       }
                   ],
                   "Version": "1"
               }

               For more details about policy configuration, see Access policy management.

   4. Click OK.

   5. Click Done.

What to do next

After preparing your Alibaba Cloud account or RAM user, activate Machine Translation. For details, see Activate the service.