Release notes

Updated at:

Learn about new and updated Resource Access Management (RAM) features, including release dates, supported regions, and related documentation.

October 2025

Feature

Description

Release date

Region

References

Over-privileged access remediation

The Access Analyzer provides capabilities for over-privileged access remediation. When the analyzer identifies an identity with excessive permissions, it generates corresponding remediation advice to help you quickly reduce unused permissions and lower security risks.

2025-10

N/A

Govern permissions with Access Analyzer

Open Authorization (OAuth)

You can install the official Alibaba Cloud CLI application and assign an identity to it.

2025-10

N/A

Configure OAuth for Alibaba Cloud CLI

SourceIdentity

By setting SourceIdentity when assuming a RAM role to obtain an STS token, you can achieve identity traceability and fine-grained access control in complex scenarios such as role chaining.

2025-10

N/A

Tracing and access control with SourceIdentity

September 2025

Feature

Description

Release date

Region

References

Maximum idle time of an AccessKey pair

You can specify the maximum number of days an AccessKey pair (for either an Alibaba Cloud account or a RAM user) can be inactive before it is automatically disabled. This feature helps enhance the security of your AccessKey pairs.

2025-09

N/A

Manage RAM user security settings

OAuth management

The OAuth 2.1 protocol is supported.

2025-09

N/A

Create an application

RAM administrators can install official third-party applications and assign user access to these applications.

2025-09

N/A

Access analyzing

The scope of the access analyzer has been expanded. It now supports 55 privileges.

2025-09

N/A

Identify over-privileged identities

August 2025

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Edge Security Acceleration (ESA).

2025-08

N/A

Services that support RAM

RAM is available for XiYan GBI of Alibaba Cloud Model Studio.

RAM is available for Tongyi Photo-based Problem Solving Tutor.

RAM is available for Information Query Service.

RAM is available for License Manager.

Services that work with Security Token Service (STS)

STS is available for ESA.

2025-08

N/A

Services that work with STS

STS is available for XiYan GBI of Alibaba Cloud Model Studio.

STS is available for Tongyi Photo-based Problem Solving Tutor.

STS is available for Information Query Service.

STS is available for License Manager.

July 2025

Feature

Description

Release date

Region

References

Maximum idle time of a RAM user

You can specify the maximum number of days a RAM user can be inactive before their console logon is automatically disabled. This feature helps enhance the security of your RAM users.

2025-07

N/A

Manage RAM user security settings

Permission audit

The permission audit feature supports over 190 Alibaba Cloud services.

2025-07

N/A

Services that work with the permission audit feature

June 2025

Feature

Description

Release date

Region

References

Policies

The NotAction element is added to the policy. It specifies a list of actions that are excluded from a policy statement's Allow or Deny effect.

2025-06

N/A

Permission policy elements

March 2025

Feature

Description

Release date

Region

References

Configure AccessKey pair-based policies for network access controlNew feature

You can configure AccessKey pair-based policies for network access control to allow only specific IP addresses to call Alibaba Cloud API operations by using permanent AccessKey pairs. This way, API operations are called by using AccessKey pairs in a trusted network environment.

2025-03

N/A

AccessKey pair-level policies for network access control

January 2025

Feature

Description

Release date

Region

References

Passkeys

  • Users can bind passkeys to devices. This way, users can use the built-in verification capabilities of the devices for console logon authentication. The built-in verification capabilities include fingerprint recognition, facial recognition, and PIN code. If users use passkeys for console logon, Multi-factor authentication (MFA) is not required.

  • Users can use passkeys for MFA. Passkeys can work with passwords to implement two-factor authentication for console logon. Passkeys can also be used to authenticate identities when sensitive operations are performed in the console.

2025-01

N/A

What is a passkey?

October 2024

Feature

Description

Release date

Region

References

Access analyzing

  • The external access analyzer feature is supported. It helps identify allowed external access to resources in your resource directory or in the current account.

  • The over-privileged identity analyzer is supported. It helps identify over-privileged identities in your resource directory or in the current account.

2024-10

N/A

September 2024

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for ApsaraDB for SelectDB.

2024-09

N/A

Services that support RAM

Services that work with STS

STS is available for ApsaraDB for SelectDB.

2024-09

N/A

Services that work with STS

July 2024

Feature

Description

Release date

Region

References

Multi-factor authentication

A RAM user who is allowed to manage their own MFA devices can bind a secure phone to their account on the Security Information page.

2024-07

N/A

Bind a secure phone

August 2024

Feature

Description

Release date

Region

References

Access analyzing

The policy validation feature is introduced. When you create a policy, the system automatically checks whether the policy document is correct based on the policy syntax and security best practices.

2024-08

N/A

Validate policies

June 2024

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Cloud-native API Gateway.

2024-06

N/A

Services that work with RAM

Services that work with STS

STS is available for Cloud-native API Gateway.

2024-06

N/A

Services that work with STS

Permission audit

The permission audit feature allows you to check the permissions that are granted to a RAM identity and the time when the permissions were last accessed by the RAM identity. You can identify unused permissions based on the preceding information and securely revoke them. This way, the principle of least privilege for the RAM identity is achieved.

2024-06

N/A

Access audit overview

April 2024

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Network Intelligence Service (Netana).

2024-04

N/A

Services that work with RAM

RAM is available for the Smart Studio of Intelligent Education Platform.

RAM is available for Customer Self-Service Tools.

Services that work with STS

STS is available for Network Intelligence Service (Netana).

2024-04

N/A

Services that work with STS

STS is available for the Smart Studio of Intelligent Education Platform.

STS is available for Customer Self-Service Tools.

March 2024

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for the data resource platform.

2024-03

N/A

Services that work with RAM

RAM is available for Big Data Expert Service.

Services that work with STS

STS is available for the data resource platform.

2024-03

N/A

Services that work with STS

STS is available for Big Data Expert Service.

February 2024

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Serverless App Engine.

2024-02

N/A

Services that work with RAM

RAM is available for EMR Serverless Milvus.

Services that work with STS

STS is available for Serverless App Engine.

2024-02

N/A

Services that work with STS

STS is available for EMR Serverless Milvus.

December 2023

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for EMR Workflow.

2023-12

N/A

Services that work with RAM

RAM is available for EMR Notebook.

Services that work with STS

STS is available for EMR Workflow.

2023-12

N/A

Services that work with STS

STS is available for EMR Notebook.

November 2023

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Tongyi Xingchen.

2023-11

N/A

Services that work with RAM

Services that work with STS

STS is available for Tongyi Xingchen.

2023-11

N/A

Services that work with STS

October 2023

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Alibaba Cloud Container Compute Service (ACS).

2023-10

N/A

Services that work with RAM

Services that work with STS

STS is available for Alibaba Cloud Container Compute Service (ACS).

2023-10

N/A

Services that work with STS

August 2023

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Dedicated Large Language Model.

2023-08

N/A

Services that work with RAM

Services that work with STS

STS is available for Dedicated Large Language Model.

2023-08

N/A

Services that work with STS

May 2023

Feature

Description

Release date

Region

References

Permission diagnostics

The permission diagnostics feature is provided to troubleshoot access errors that are reported due to no permissions.

2023-05

N/A

March 2023

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Remote Service of Hybrid Cloud Storage.

2023-03

N/A

Services that support RAM

Services that work with STS

STS is available for Remote Service of Hybrid Cloud Storage.

2023-03

N/A

Services that work with STS

Multi-factor authentication

Secure phones and security email addresses are added as multi-factor authentication (MFA) methods for RAM users.

2023-03

N/A

STS

The ExternalId parameter is supported by STS. When you call an STS operation to assume a RAM role, you must specify the external ID of the RAM role. This helps prevent the confused deputy problem and enhance security during RAM role assuming.

2023-03

N/A

February 2023

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Resource Center.

2023-02

N/A

Services that support RAM

Services that work with STS

STS is available for Resource Center.

2023-02

N/A

Services that work with STS

Recycle bin

RAM supports the recycle bin feature. When you delete RAM users or the AccessKey pairs of RAM users, the RAM users or the AccessKey pairs are first moved to the recycle bin. Then, the RAM users or the AccessKey pairs are automatically deleted from the recycle bin on a regular basis. You can also manually delete or restore the RAM users or the AccessKey pairs from the recycle bin. This feature helps minimize the adverse impacts that are caused by accidental deletion of RAM users or AccessKey pairs.

2023-02

N/A

January 2023

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for EMR Serverless StarRocks.

2023-01

N/A

Services that work with RAM

Services that work with STS

STS is available for EMR Serverless StarRocks.

2023-01

N/A

Services that work with STS

MFA optimization

Only one verification code is required when you bind a virtual MFA device to a RAM user.

2023-01

N/A

Bind an MFA device for a RAM user

December 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for MetaVerse Cloud Gaming.

2022-12

N/A

Services that work with RAM

Services that work with STS

STS is available for MetaVerse Cloud Gaming.

2022-12

N/A

Services that work with STS

Tags

Tags can be added to RAM users. This way, you can manage the RAM users based on the tags.

2022-12

N/A

Tag a RAM user

November 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for IPv6 Gateway.

2022-11

N/A

Services that work with RAM

RAM is available for VPC peering connection.

RAM is available for NLP Basic Service 2.0.

RAM is available for CloudControl.

Services that work with STS

STS is available for IPv6 Gateway.

2022-11

N/A

Services that work with STS

STS is available for VPC peering connection.

STS is available for NLP Basic Service 2.0.

STS is available for CloudControl.

October 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Wuying Cloud Application.

2022-10

N/A

Services that work with RAM

Services that work with STS

STS is available for Wuying Cloud Application.

2022-10

N/A

Services that work with STS

Identity and permission governance

Based on enterprise cloud security practices, identity and permission governance continuously detects identity and permission security risks in your Alibaba Cloud account and its RAM users. It helps you identify governance gaps at the earliest opportunity and provides guidance to help you improve your identity and permission governance configurations in the cloud.

2022-10

N/A

Overview of identity and permission governance

September 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Tingwu.

2022-09

N/A

Services that work with RAM

RAM is available for Document Intelligence.

RAM is available for Dataset Acceleration Service.

Services that work with STS

STS is available for Tingwu.

2022-09

N/A

Services that work with STS

STS is available for Document Intelligence.

STS is available for Dataset Acceleration Service.

August 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for VPC prefix lists.

2022-08

N/A

Services that work with RAM

RAM is available for IoT Blockchain Hub.

RAM is available for Intelligent Computing Lingjun.

RAM is available for Energy Treasure.

Services that work with STS

STS is available for VPC prefix lists.

2022-08

N/A

Services that work with STS

STS is available for IoT Blockchain Hub.

STS is available for Intelligent Computing Lingjun.

STS is available for Energy Treasure.

July 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Cloud Data Transfer (CDT).

2022-07

N/A

Services that work with RAM

RAM is available for Network Load Balancer (NLB).

RAM is available for Elastic Block Storage (EBS).

RAM is available for LinkedMall.

Services that work with STS

STS is available for Cloud Data Transfer (CDT).

2022-07

N/A

Services that work with STS

STS is available for Network Load Balancer (NLB).

STS is available for Elastic Block Storage (EBS).

STS is available for LinkedMall.

MFA for abnormal logons only

The MFA for abnormal logons only option is added to the security settings of RAM users. If this option is selected, MFA is enforced only when the logon environment is untrusted, such as when the logon IP address or the logon device changes. In all other cases, MFA is not enabled.

2022-07

N/A

Manage the security settings of a RAM user

June 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Anycast Elastic IP Address.

2022-06

N/A

Services that work with RAM

RAM is available for GTS Expert Service - Intelligent Diagnosis.

RAM is available for Cloud Connector (CC5G).

Services that work with STS

STS is available for Anycast Elastic IP Address.

2022-06

N/A

Services that work with STS

STS is available for GTS Expert Service - Intelligent Diagnosis.

STS is available for Cloud Connector (CC5G).

May 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for CloudBox OSS storage.

2022-05

N/A

Services that work with RAM

Services that work with STS

STS is available for CloudBox OSS storage.

2022-05

N/A

Services that work with STS

April 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Intelligent Short Video Platform.

2022-04

N/A

Services that work with RAM

Services that work with STS

STS is available for Intelligent Short Video Platform.

2022-04

N/A

Services that work with STS

Custom policy creation by importing templates

Policy templates that are created based on years of business practices are provided. The policy templates are suitable for common scenarios. For example, RAM provides policy templates that are applicable to system administrators, financial personnel, and network administrators. You need to only import an appropriate policy template and modify the template based on your business requirements. This way, you can create a custom policy in a convenient manner.

2022-04

N/A

By importing a policy

March 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Machine Learning - Industry Plug-ins (PAI-Plugin).

2022-03

N/A

Services that work with RAM

RAM is available for Distributed Cloud Container Platform for Kubernetes (ACK One).

RAM is available for Virtual Digital Human Open Platform.

Services that work with STS

STS is available for Machine Learning - Industry Plug-ins (PAI-Plugin).

2022-03

N/A

Services that work with STS

STS is available for Distributed Cloud Container Platform for Kubernetes (ACK One).

STS is available for Virtual Digital Human Open Platform.

February 2022

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Service Catalog.

2022-02

N/A

Services that work with RAM

RAM is available for New Retail Intelligence Assistant.

RAM is available for Identity as a Service (IDaaS) (EIAM 2.0).

Services that work with STS

STS is available for Service Catalog.

2022-02

N/A

Services that work with STS

STS is available for New Retail Intelligence Assistant.

STS is available for Identity as a Service (IDaaS) (EIAM 2.0).

January 2022

Feature

Description

Release date

Region

References

DingTalk account integration

A RAM user can bind a DingTalk account and then use that DingTalk account to log on to Alibaba Cloud.

2022-01

N/A

Bind a DingTalk account to a RAM user

Services that work with RAM

RAM is available for Network Intelligence Service (NIS).

2022-01

N/A

Services that work with RAM

RAM is available for VMware Service.

Services that work with STS

STS is available for Network Intelligence Service (NIS).

2022-01

N/A

Services that work with STS

STS is available for VMware Service.

December 2021

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Compute Nest.

2021-12

N/A

Services that work with RAM

RAM is available for ApsaraDB RDS Global Active Database Cluster.

RAM is available for IoT Connectivity Service - IoT SIM Card.

RAM is available for Wuying Cloud Phone.

RAM is available for Optimization Solver.

Services that work with STS

STS is available for Compute Nest.

2021-12

N/A

Services that work with STS

STS is available for ApsaraDB RDS Global Active Database Cluster.

STS is available for IoT Connectivity Service - IoT SIM Card.

STS is available for Wuying Cloud Phone.

STS is available for Optimization Solver.

November 2021

Feature

Description

Release date

Region

References

OIDC-based SSO

OpenID Connect (OIDC)-based single sign-on (SSO) is supported. An enterprise can use an OIDC token that is issued by an identity provider (IdP) to call an Alibaba Cloud operation to assume a specific RAM role and use the OIDC token to obtain an STS token. Then, the enterprise can use the STS token to access Alibaba Cloud resources.

2021-11

N/A

Overview

MFA for sensitive operations

MFA is required for sensitive operations. If a RAM user for which MFA is enabled wants to perform a sensitive operation in the Alibaba Cloud Management Console, risk control is triggered and the RAM user is required to pass MFA again. The RAM user can perform the sensitive operation only after the RAM user enters a valid MFA verification code.

2021-11

N/A

Secondary identity verification for sensitive operations

Services that work with RAM

RAM is available for Cloud Connector (CCIoT).

2021-11

N/A

Services that work with RAM

RAM is available for Optimization Solver.

RAM is available for Alibaba Cloud Genomics Service (AGS).

Services that work with STS

STS is available for Cloud Connector (CCIoT).

2021-11

N/A

Services that work with STS

STS is available for Optimization Solver.

STS is available for Alibaba Cloud Genomics Service (AGS).

October 2021

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Game Security Box.

2021-10

N/A

Services that work with RAM

RAM is available for Enterprise Data Platform (CDP).

Services that work with STS

STS is available for Game Security Box.

2021-10

N/A

Services that work with STS

STS is available for Enterprise Data Platform (CDP).

STS is available for Mobile Development Platform (mPaaS).

STS is available for Cloud Call Center.

September 2021

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Interactive Live Streaming.

2021-09

N/A

Services that work with RAM

RAM is available for Cloud Governance Center (CGC).

Services that work with STS

STS is available for Interactive Live Streaming.

2021-09

N/A

Services that work with STS

STS is available for Cloud Governance Center (CGC).

STS is available for Mobile Analytics.

August 2021

Feature

Description

Release date

Region

References

CloudSSO

CloudSSO provides unified identity management and access control for multiple accounts based on the Alibaba Cloud resource directory (RD). You can use CloudSSO to centrally manage the users in your enterprise who access Alibaba Cloud, configure single sign-on (SSO) between your enterprise identity management system and Alibaba Cloud only once, and centrally configure the access permissions of all users on the accounts in a resource directory.

2021-08

China (Shanghai) and US (Silicon Valley)

What is CloudSSO?

Services that work with RAM

RAM is available for Copyright and Patent Service.

2021-08

N/A

Services that work with RAM

RAM is available for Optical Character Recognition.

RAM is available for Machine Translation.

RAM is available for CloudSSO.

RAM is available for Cloud Security Access Service.

RAM is available for Alibaba Mail.

Services that work with STS

STS is available for Copyright and Patent Service.

2021-08

N/A

Services that work with STS

STS is available for Optical Character Recognition.

STS is available for Machine Translation.

STS is available for CloudSSO.

STS is available for Intelligent Subtitles.

STS is available for ChatAPP Message.

STS is available for Cloud Security Access Service.

STS is available for Simple Application Server.

STS is available for Cloud Communications Network Acceleration.

STS is available for Application Real-Time Monitoring Service (ARMS).

STS is available for Enterprise Distributed Application Service (EDAS).

STS is available for Alibaba Mail.

STS is available for IoV Command Center.

STS is available for Fraud Detection.

July 2021

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for O&M Event Center.

2021-07

N/A

Services that work with RAM

RAM is available for BizWorks.

RAM is available for Identity Verification.

Services that work with STS

STS is available for O&M Event Center.

2021-07

N/A

Services that work with STS

STS is available for BizWorks.

STS is available for Identity Verification.

June 2021

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Hybrid Cloud Storage Array.

2021-06

N/A

Services that work with RAM

RAM is available for Gene Analysis Platform.

Services that work with STS

STS is available for Hybrid Cloud Storage Array.

2021-06

N/A

Services that work with STS

STS is available for Gene Analysis Platform.

STS is available for DataHub.

STS is available for SCDN.

May 2021

Feature

Description

Release date

Region

References

Services that work with STS

STS is available for Graph Database.

2021-05

N/A

Services that work with STS

STS is available for Mobile User Feedback.

STS is available for Personalized Recommendation.

April 2021

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Alibaba Cloud Public DNS.

2021-04

N/A

Services that support RAM

Services that work with STS

STS is available for Alibaba Cloud Public DNS.

2021-04

N/A

Services that work with STS

March 2021

Feature

Description

Release date

Region

References

FIDO U2F

FIDO Universal 2nd Factor (FIDO U2F) is a widely used MFA protocol that is created by the FIDO Alliance. U2F security keys are a type of MFA device that supports the U2F protocol. For more information, visit FIDO Alliance.

After a U2F security key is enabled, two authentication factors are required when a RAM user logs on to Alibaba Cloud.

  1. First factor: Enter the username and password of the RAM user.

  2. Second factor: Plug the U2F security key into a USB port on a computer and tap the key to complete the logon process.

2021-03

All regions

Services that work with RAM

RAM is available for CloudBox.

2021-03

N/A

Services that work with RAM

Services that work with STS

STS is available for Intelligent Outbound Robot.

2021-03

N/A

Services that work with STS

STS is available for CloudBox.

February 2021

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Intelligent Cloud Editor.

2021-02

N/A

Services that work with RAM

RAM is available for Infrastructure as Code (IaC).

RAM is available for Cloud Network Management.

Services that work with STS

STS is available for Intelligent Cloud Editor.

2021-02

N/A

Services that work with STS

STS is available for Infrastructure as Code (IaC).

STS is available for Cloud Network Management.

January 2021

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Intelligent Data Assistant.

2021-01

N/A

Services that work with RAM

RAM is available for Elastic Accelerated Computing Instances.

RAM is available for Holographic Space.

RAM is available for Privileged Access Service.

RAM is available for Short Video Production Platform.

Services that work with STS

STS is available for Elastic Accelerated Computing Instances.

2021-01

N/A

Services that work with STS

STS is available for Holographic Space.

STS is available for Privileged Access Service.

STS is available for Short Video Production Platform.

December 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Elastic Desktop Service (EDS).

2020-12

N/A

Services that work with RAM

Services that work with STS

STS is available for Elastic Desktop Service (EDS).

2020-12

N/A

Services that work with STS

October 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Cloud Architecture Design Tools.

2020-10

N/A

Services that work with RAM

RAM is available for the IoT security operations center.

RAM is available for Quota Center.

Services that work with STS

STS is available for Cloud Architecture Design Tools.

2020-10

N/A

Services that work with STS

STS is available for the IoT security operations center.

STS is available for Quota Center.

September 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for PrivateLink.

2020-09

N/A

Services that work with RAM

RAM is available for Industrial Brain Open Platform.

RAM is available for Tag Service.

RAM is available for Data Lake Formation.

Services that work with STS

STS is available for PrivateLink.

2020-09

N/A

Services that work with STS

STS is available for Industrial Brain Open Platform.

STS is available for Tag Service.

STS is available for Data Lake Formation.

August 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Intelligent SMS Parsing.

2020-08

N/A

Services that work with RAM

RAM is available for Album and Drive Service.

RAM is available for Teambition.

RAM is available for Smart Dual-Recording Quality Inspection.

Services that work with STS

STS is available for Intelligent SMS Parsing.

2020-08

N/A

Services that work with STS

STS is available for Album and Drive Service.

STS is available for Teambition.

STS is available for Smart Dual-Recording Quality Inspection.

July 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for PolarDB-X cloud-native distributed database.

2020-07

N/A

Services that work with RAM

RAM is available for Cloud Gaming Platform.

RAM is available for Natural Language Processing.

RAM is available for Lindorm.

Services that work with STS

STS is available for PolarDB-X cloud-native distributed database.

2020-07

N/A

Services that work with STS

STS is available for Natural Language Processing.

STS is available for Lindorm.

Resource group-based authorization in the RAM console

A RAM user, RAM user group, or RAM role can be granted permissions in the RAM or Resource Management console. The permissions on the resources of an Alibaba Cloud account or on a specific resource group can be granted. The permissions of a RAM user, RAM user group, or RAM role can also be revoked.

2020-07

All regions

N/A

June 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Distributed Identity Service (DIS).

2020-06

N/A

Services that work with RAM

RAM is available for Confidential Computing Service (C3S).

RAM is available for Time Series Database (TSDB) for InfluxDB.

RAM is available for Database File System (DBFS).

RAM is available for Address Standardization.

Services that work with STS

STS is available for Distributed Identity Service (DIS).

2020-06

N/A

Services that work with STS

STS is available for Confidential Computing Service (C3S).

STS is available for Time Series Database (TSDB) for InfluxDB.

STS is available for Database File System (DBFS).

STS is available for Address Standardization.

Version rotation of custom policies

When you modify a custom policy that has five versions in the RAM console, the earliest version that is not in use can be replaced with the latest version.

2020-06

All regions

Manage custom policy versions

May 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for EventBridge.

2020-05

N/A

Services that work with RAM

RAM is available for LedgerDB.

RAM is available for the image analysis and processing capability of Alibaba Cloud Vision AI Open Platform.

Services that work with STS

STS is available for EventBridge.

2020-05

N/A

Services that work with STS

STS is available for LedgerDB.

STS is available for the image analysis and processing capability of Alibaba Cloud Vision AI Open Platform.

Configuration of the maximum role session duration

The maximum role session duration can be configured in the RAM console. The configuration applies when you log on to the console by using role-based SSO or when you use the console or call an API operation to assume a RAM role.

2020-05

All regions

Set maximum session duration for a RAM role

March 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for Intelligent Speech Navigation.

2020-03

N/A

Services that work with RAM

RAM is available for CloudQuotation (CQ).

RAM is available for AnalyticDB for MySQL.

Services that work with STS

STS is available for Intelligent Speech Navigation.

2020-03

N/A

Services that work with STS

STS is available for CloudQuotation (CQ).

STS is available for Elastic High Performance Computing (E-HPC).

Service-linked roles

Service-linked roles are provided by Alibaba Cloud RAM. Service-linked roles can be used to simplify the process of authorizing an Alibaba Cloud service to access other services and use a specific feature. Alibaba Cloud RAM provides service-linked roles for such scenarios.

2020-03

All regions

Service-linked roles

User synchronization by using SCIM

You can synchronize account data from an enterprise directory to Alibaba Cloud RAM by using the System for Cross-domain Identity Management (SCIM) protocol together with an OAuth application.

2020-03

All regions

Synchronize accounts from an enterprise directory to Alibaba Cloud RAM by using SCIM

Configuration of the maximum role session duration

A new parameter named MaxSessionDuration is provided in API operations to specify the maximum session duration of a RAM role.

2020-03

All regions

February 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for IP geolocation library.

2020-02

N/A

Services that work with RAM

RAM is available for Phone Number Verification Service.

Services that work with STS

STS is available for IP geolocation library.

2020-02

N/A

Services that work with STS

STS is available for Dynamic Content Delivery Network (DCDN).

STS is available for Phone Number Verification Service.

January 2020

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for IoT Firmware Security Scan (FSS).

2020-01

N/A

Services that work with RAM

RAM is available for Alibaba Cloud Service Mesh (ASM).

RAM is available for EMAS Mobile DevOps.

Services that work with STS

STS is available for IoT Firmware Security Scan (FSS).

2020-01

N/A

Services that work with STS

STS is available for Alibaba Cloud Service Mesh (ASM).

STS is available for EMAS Mobile DevOps.

STS is available for ApsaraVideo Live.

STS is available for ApsaraDB for OceanBase.

December 2019

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for ApsaraDB for ClickHouse.

2019-12

N/A

Services that work with RAM

RAM is available for Server Migration Center (SMC).

Services that work with STS

STS is available for ApsaraDB for ClickHouse.

2019-12

N/A

Services that work with STS

November 2019

Feature

Description

Release date

Region

References

User credential report

A user credential report that contains the details of your Alibaba Cloud account and RAM users can be generated and downloaded in the RAM console. The details include console logon passwords, AccessKey pairs, and MFA devices.

2019-11-15

All regions

Get a user credential report

Services that work with RAM

RAM is available for Global Transaction Service.

2019-11

N/A

Services that work with RAM

Services that work with STS

STS is available for Message Center.

2019-11

N/A

Services that work with STS

STS is available for Advanced Database & Application Migration (ADAM).

STS is available for Cloud Backup.

October 2019

Feature

Description

Release date

Region

References

Services that work with RAM

RAM is available for ID Verification for Financial Services.

2019-10

N/A

Services that work with RAM

RAM is available for Multimedia AI.

RAM is available for AnalyticDB.

RAM is available for Mobile Development Platform (mPaaS).

Services that work with STS

STS is available for Cloud Enterprise Network (CEN).

2019-10

N/A

Services that work with STS

STS is available for E-MapReduce.

Services that work with STS

STS is available for Mobile Hotfix.

Services that work with STS

September 2019

Feature

Description

Release date

Region

References

Enabling or disabling of console logons for RAM users

The access of RAM users to the console can be enabled and disabled. You can retain the password, MFA, and other logon settings when you disable the access of RAM users to the console. You can also clear console logon settings.

2019-09-09

All regions

Manage RAM user logon settings

Services that work with RAM

RAM is available for Logic Composer.

2019-09

N/A

Services that support RAM

RAM is available for ApsaraDB for Cassandra.

RAM is available for Scalable Open Financial Architecture (SOFAStack).

RAM is available for ApsaraDB for OceanBase.

RAM is available for the resource management service.

Services that work with STS

STS is available for Hybrid Disaster Recovery.

2019-09

N/A

Services that work with STS

June 2019

Feature

Description

Release date

Region

References

Auxiliary domain names for user-based SSO

The configuration of user-based SSO can be simplified by using auxiliary domain names.

2019-06-28

All regions

Overview

May 2019

Feature

Description

Release date

Region

References

Open Authorization (OAuth) management

  • RAM supports the OAuth 2.0 protocol for user authentication and application authorization. Web applications and native applications can use OAuth to assume a user identity and access Alibaba Cloud.

  • OpenID Connect (OIDC) is an authentication protocol that is built on top of OAuth 2.0. An application can use OIDC to obtain the information of the Alibaba Cloud user who is logged on.

2019-05-31

All regions

Overview of OAuth applications

April 2019

Feature

Description

Release date

Region

References

SSO

Alibaba Cloud supports Security Assertion Markup Language (SAML) 2.0-based SSO. This feature is also known as identity federation. SSO can be implemented between an enterprise identity service and Alibaba Cloud.

2019-04-04

All regions

SSO overview

November 2018

Feature

Description

Release date

Region

References

RAM console

The RAM console is updated.

2018-11-15

All regions

What is RAM