Group and manage resources in an Alibaba Cloud account using Resource Groups-Resource Management(ResourceManagement)-阿里云帮助中心

Prerequisites

The types of resources that you want to sort are supported by the Resource Group service. For more information, see Services that work with Resource Group.

Step 1: Create resource groups

Create resource groups based on your business requirements, such as by department, project, or environment.

Sign in to the Resource Management console.
On the Resource Group page, click Create Resource Group.
Enter the Resource Group Identifier and Display Name, then click Confirm.

For example, set the Resource Group Identifier to Project-A and the Resource Group Name to Project A.

After you complete the operation, the state of the resource group is Creating.... Wait about three seconds and click the refresh icon . If the state changes to Available, the resource group has been created successfully.

Step 2: Sort resources into different resource groups

Specify a resource group when you create a resource, or transfer an existing resource to a different resource group.

Sort new resources

You can use one of the following methods to sort new resources:

Specify a resource group when you create a resource in the Alibaba Cloud Management Console. For more information, see the documentation of an Alibaba Cloud service.
Specify a resource group when you create a resource by calling an API operation. For more information, see the documentation of an Alibaba Cloud service.

The following example shows how to specify a resource group when you create a virtual private cloud (VPC) in the VPC console.

Log on to the VPC console.
Create a VPC. You must specify a resource group for the VPC.

In the Resource Group and Tags section, select the target Resource Group, such as Project A, from the Resource Group drop-down list.

For more information, see Create and manage a VPC.

Sort existing resources

Methods

You can use one of the following methods to sort existing resources:

Transfer an existing resource to the desired resource group on the Resource Search page or the Resource Group page of the Resource Management console.
Call the API operation provided by the Resource Group service to move multiple resources to a different resource group at a time or the API operation provided by an Alibaba Cloud service to move a resource of the service to a different resource group.

Impacts

Transferring resources across resource groups does not affect the resources. For example, after a resource is transferred across resource groups, the system does not restart the resource, and the network configurations and owner of the resource are not changed.

However, if you have an authorization policy that is created based on a resource group and transfer a resource from the resource group to another, the access permissions of RAM identities on the resource may be changed. For example, you grant operation permissions on resources in Resource Group A to members for Project A. In this case, the members can be used to access the resources. If a resource is transferred from Resource Group A to Resource Group B, the members can no longer be used to access the resource.

Procedure

The following example shows how to transfer a resource to a different resource group on the Resource Group page of the Resource Management console.

Log on to the Resource Management console.
On the Resource Group page, find the target Resource Group and click Resource Management in the Actions column.
Click Transfer In, select the resources that you want to move into this group, and then click OK.

Note

For some types of resources, you can enable the Transfer Associated Resources feature and configure transfer rules. If a transfer rule is triggered, the system automatically transfers associated resources of primary resources to resource groups to which the primary resources belong. For example, you can enable the Transfer Associated Resources feature and configure transfer rules for the associated resources of Elastic Compute Service (ECS) instances to allow the associated resources to be automatically transferred to resource groups to which ECS instances belong. The associated resources of ECS instances include cloud disks, elastic network interfaces (ENIs), and elastic IP addresses (EIPs). For more information, see Transfer Associated Resources.

Operations that you can perform by resource group

After you organize resources into resource groups, you can perform access control, cost allocation, and automated O&M on resources by resource group.

Service name	Scenario	Category	References
RAM	Grant different RAM users permissions on specific resource groups to isolate resource access.	Fine-grained access control	Manage permissions with resource groups Control RAM user access to specific ECS instances
Billing Management	Create cost centers and query bills by resource group.	Resource cost allocation	View billing statements by resource group
Cloud Config	Audit resource compliance in specific resource groups against multiple compliance standards.	Compliance audit	Use resource groups and Cloud Config to audit compliance of resources based on multiple standards
Tag	Automatically inherit resource group tags for resources added to or created in the group.	Resource management	Enable automatic tag inheritance from a resource group
CloudMonitor	Create CloudMonitor application groups from resource groups for centralized monitoring.	O&M management	Manage and monitor resources across business lines
Resource Orchestration Service (ROS)	Identify O&M resources by resource group, then use ROS for orchestrated management.	O&M management	Use resource groups and ROS to implement efficient O&M and management of resources
CloudOps Orchestration Service (OOS)	Identify O&M resources by resource group, then use OOS for orchestrated management.	O&M management	Streamline O&M with resource groups and CloudOps Orchestration Service