The Resource Group service allows you to sort resources within an Alibaba Cloud account into different resource groups. This simplifies resource and permission management within an Alibaba Cloud account. This topic describes how to use Resource Group to sort resources within an Alibaba Cloud account into different resource groups. This topic also describes the operations that you can perform by resource group.
Prerequisites
The types of resources that you want to sort are supported by the Resource Group service. For more information, see Services that work with Resource Group.
Step 1: Create resource groups
You can create resource groups from dimensions such as department, project, and environment based on your business requirements.
-
Log in to the Resource Management console.
-
On the Resource Group page, click Create Resource Group.
-
Enter a Resource Group Identifier and a Display Name, and then click Confirm.
The resource group status changes to Creating.... After about three seconds, click the refresh icon
. The resource group is created when the status changes to Available.
Step 2: Sort resources into different resource groups
You can specify a resource group when you create a resource. You can also transfer an existing resource across resource groups to change the resource group to which the resource belongs.
Sort new resources
You can use one of the following methods to sort new resources:
-
Specify a resource group when you create a resource in the Alibaba Cloud Management Console. For more information, see the documentation of an Alibaba Cloud service.
-
Specify a resource group when you create a resource by calling an API operation. For more information, see the documentation of an Alibaba Cloud service.
The following example describes how to specify a resource group when you create a virtual private cloud (VPC) in the VPC console.
-
Log on to the VPC console.
-
Create a VPC. You must specify a resource group for the VPC.
In the Resource Group and Tags section, select the target Resource Group, such as Project A, from the Resource Group drop-down list.
For more information, see Create and manage a VPC.
Sort existing resources
Methods
You can use one of the following methods to sort existing resources:
-
Transfer an existing resource to the desired resource group on the Resource Search page or the Resource Group page of the Resource Management console.
-
Call the API operation provided by the Resource Group service to move multiple resources to a different resource group at a time or the API operation provided by an Alibaba Cloud service to move a resource of the service to a different resource group.
Impacts
Transferring resources across resource groups does not affect the resources. For example, after a resource is transferred across resource groups, the system does not restart the resource, and the network configurations and owner of the resource are not changed.
However, if you have an authorization policy that is created based on a resource group and transfer a resource from the resource group to another, the access permissions of RAM identities on the resource may be changed. For example, you grant operation permissions on resources in Resource Group A to members for Project A. In this case, the members can be used to access the resources. If a resource is transferred from Resource Group A to Resource Group B, the members can no longer be used to access the resource.
Procedure
The following example describes how to transfer a resource across resource groups on the Resource Group page of the Resource Management console.
-
Log on to the Resource Management console.
-
On the Resource Group page, find the target Resource Group and click Resource Management in the Actions column.
-
Click Transfer In, select the resources that you want to move into this group, and then click OK.
For some types of resources, you can enable the Transfer Associated Resources feature and configure transfer rules. If a transfer rule is triggered, the system automatically transfers associated resources of primary resources to resource groups to which the primary resources belong. For example, you can enable the Transfer Associated Resources feature and configure transfer rules for the associated resources of Elastic Compute Service (ECS) instances to allow the associated resources to be automatically transferred to resource groups to which ECS instances belong. The associated resources of ECS instances include cloud disks, elastic network interfaces (ENIs), and elastic IP addresses (EIPs). For more information, see Transfer Associated Resources.
Operations that you can perform by resource group
After resources are sorted into different resource groups, you can use other Alibaba Cloud services to perform access control, cost allocation, and automated O&M on the resources by resource group.
|
Service name |
Scenario |
Category |
References |
|
RAM |
Grant different RAM users permissions on specific resource groups to isolate resource access. |
Fine-grained access control |
|
|
Billing Management |
Create cost centers and query bills by resource group. |
Resource cost allocation |
|
|
Cloud Config |
Audit resource compliance in specific resource groups against multiple standards. |
Compliance audit |
Use resource groups and Cloud Config to audit compliance of resources based on multiple standards |
|
Tag |
Automatically inherit resource group tags for resources added to or created in the group. |
Resource management |
|
|
CloudMonitor |
Create CloudMonitor application groups from resource groups for centralized monitoring. |
O&M management |
|
|
Resource Orchestration Service (ROS) |
Select resource groups to identify resources for O&M, then use ROS for orchestrated management. |
O&M management |
Use resource groups and ROS to implement efficient O&M and management of resources |
|
CloudOps Orchestration Service (OOS) |
Select resource groups to identify resources for O&M, then use OOS for orchestrated management. |
O&M management |
Streamline O&M with resource groups and CloudOps Orchestration Service |