Elastic Compute Service:export a custom image

Permissions required to export custom images

• ECS Access Permissions for OSS Resources

  Access Resource Access Management (RAM) with your Alibaba Cloud account to grant ECS the necessary permissions for accessing OSS resources by assuming the AliyunECSImageExportDefaultRole role.

• OSS Bucket Operation Permissions

  If you are using a RAM user, contact the Alibaba Cloud account owner to grant the RAM user operation permissions on OSS buckets.

  1. Create custom policies for a RAM user using an Alibaba Cloud account. For more information, see create custom policies in script edit mode.

     • Grant only read permissions on OSS buckets to a RAM user

       To create OSS buckets with an Alibaba Cloud account and use a RAM user to export custom images, you must grant the RAM user read permissions on OSS buckets. Below is an example policy:

       {
           "Version": "1",
           "Statement": [
               {
                   "Action": [
                       "oss:GetObject",
                       "oss:GetBucketLocation",
                       "oss:GetBucketInfo"
                   ],
                   "Resource": "*",
                   "Effect": "Allow"
               }
           ]
       }

     • Grant read and write permissions on OSS buckets to a RAM user

       To use a RAM user to create OSS buckets and export custom images, you must grant the RAM user read and write permissions on OSS buckets. Below is an example policy:

       {
           "Version": "1",
           "Statement": [
               {
                   "Action": [
                       "oss:GetObject",
                       "oss:GetBucketLocation",
                       "oss:GetBucketInfo"
                       "oss:GetObject",
                       "oss:PutObject",
                       "oss:DeleteObject",
                       "oss:GetBucketLocation",
                       "oss:AbortMultipartUpload",
                       "oss:ListMultipartUploads",
                       "oss:ListParts",
                       "oss:GetBucketInfo",
                       "oss:GetBucketUserQos"
                   ],
                   "Resource": "*",
                   "Effect": "Allow"
               }
           ]
       }

  2. Attach the policy to the RAM user using the Alibaba Cloud account. For more information, see grant permissions to a RAM user. To grant a RAM user read and write permissions on a specific OSS bucket, see tutorial example: use RAM policy to control access to OSS.

Procedure

1. Log on to the ECS console.

2. In the left-side navigation pane, choose Instances & Images > Images.

3. In the upper-left corner of the menu bar, select a region.

   Important

   Ensure the region matches the one where the bucket is located.

4. Optional: Grant ECS access permissions to OSS resources.

   When exporting an image for the first time, you must access Resource Access Management (RAM) with your Alibaba Cloud account and grant the necessary ECS permissions for OSS resources by assuming the AliyunECSImageExportDefaultRole role. If ECS already has OSS access permissions, this step will be skipped automatically.

   1. Locate the target image you want to export. In the Actions column, choose > Export Image.

   2. In the Cloud Resource Access Authorization dialog box, you can click Authorize.

   3. Locate the AliyunECSImageImportDefaultRole and AliyunECSImageExportDefaultRole roles, then click Agree To Authorize.

5. On the Custom Images tab, locate the desired image. In the Actions column, click > Export Image .

6. In the Export Image dialog box, configure the following parameters:

   • Optional: Choose the format for exporting the image. Supported formats include RAW, VHD, QCOW2, VDI, and VMDK.

     Note

     • The Set Exported Image Format feature is available only in certain regions, including India (Mumbai) Closed, Japan (Tokyo), Australia (Sydney), and others. In regions where this feature is not supported, images are exported in RAW format by default.

     • Images are exported in RAW format by default in regions where the Set Exported Image Format feature is not available.

   • OSS Bucket Address: Choose the OSS bucket located in the same region as your custom image.

   • OSS Object Address: Specify a prefix to name your custom image object.

     For instance, specifying Demo as the prefix results in the OSS bucket containing the exported custom image file named Demo-[system-generated file name].

7. Click OK to initiate the export of the custom image. The time needed to export a custom image depends on the image file sizes and the current number of export tasks in the queue. You can monitor the progress of the task using the task ID in Task Management, or log on to the OSS console to check the outcome.

   Before the task is completed, you can visit Task Management to locate and cancel the export of the custom image in the specified region.

What to do next