How to Configure Alibaba Cloud for Use with Cloud HAL Agent

Release date: 2020-10-22

About This Tutorial

This tutorial explains the basics of creating an Alibaba cloud account and AccessKey to use with Cloud HAL Agent. The Alibaba Cloud Resource Access Management (RAM) is an identity and access control service which allows you to centrally manage users and securely control access to your cloud resources. Before Cloud HAL Agent can communicate with Alibaba cloud, you must create an account with the correct permissions and generate an AccessKey.

If you are already familiar with Alibaba cloud, it may be possible to grant access using other methods such as the Alibaba cloud API.

Before starting, ensure you have an Alibaba cloud account with administrator access.

For more detailed instructions, please the official Alibaba Cloud Support page.

Creating a User Account with Alibaba Cloud

Log in to the RAM Console.
On the left panel, go to Identities > Users.
Click Create User.

The Create User window opens.
Configure the account settings.
1. Enter a Logon Name.
2. Enter a Display Name.
3. Optional: Select Console Password Logon.
  
  Note:
  This setting allows access to the Alibaba cloud web console. It is required for use with Cloud HAL Agent.
Click OK.

Alibaba Cloud creates the user account.

The AccessKeyID and AccessKeySecret are displayed on the next page. Save this information in a secure location; there is no way to retrieve it again, but you can always generate a new AccessKey.

Adding Permissions to an Alibaba Cloud Account

Go to the Users list.
Click the name of the created account.

The account details page opens.
Go to the Permissions tab.
Click Add Permissions.

The Add Permissions window opens.
Configure the permissions.
1. Use the default Authorization value.
2. Use the default Principal value.
3. Under Select Policy, click System Policy.
4. Enter AliyunECSFullAccess into the search bar.
5. Select the permissions.
6. Click OK.