API standard and pre-built SDKs in multi-language
This product (ResourceManager/2020-03-31) OpenAPI adopts an RPC-style signature mechanism. For implementation details, please refer to the Signature Mechanism documentation.To streamline development, we provide official SDKs for major programming languages. Using the SDK allows you to call APIs directly without worrying about low-level details such as request signatures, significantly lowering the barrier to entry and reducing integration complexity.
Custom signature
If your use case requires direct API integration with custom signatures, consult our technical support team first. Join our DingTalk support group (147535001692) to receive expert guidance.
Before you begin
An Alibaba Cloud account has full administrative privileges. A compromised AccessKey pair exposes all associated resources to unauthorized access, posing a significant security risk. To call APIs securely, create a Resource Access Management (RAM) user with API access only, configure its AccessKey pairs, and implement the principle of least privilege (PoLP) through RAM policies. Use the Alibaba Cloud account only when its permissions are explicitly required for specific scenarios.
Resource directory
| API | Title | Description |
|---|---|---|
| EnableResourceDirectory | EnableResourceDirectory | Enables a resource directory. |
| SendVerificationCodeForEnableRD | SendVerificationCodeForEnableRD | Sends a verification code to the mobile phone number bound to a newly created account when you use the account to enable a resource directory. |
| GetResourceDirectory | GetResourceDirectory | Queries the information of a resource directory. If you use a management account to call this API operation, the system returns the information of the resource directory that is enabled by using the management account. If you use a member to call this operation, the system returns the information of |
| DestroyResourceDirectory | DestroyResourceDirectory | Disables a resource directory. This operation cannot be undone. Therefore, exercise caution when you perform it. |
Folders
| API | Title | Description |
|---|---|---|
| CreateFolder | CreateFolder | Creates a folder. |
| GetFolder | GetFolder | Queries the information of a folder. |
| UpdateFolder | UpdateFolder | Changes the name of a folder. |
| DeleteFolder | DeleteFolder | Deletes a folder. |
| ListFoldersForParent | ListFoldersForParent | Queries the information of all subfolders of a folder. |
| ListAncestors | ListAncestors | Queries the information of all the parent folders of a specified folder. The system returns the information of the folders based on their top-down hierarchy. |
Members
| API | Title | Description |
|---|---|---|
| CreateResourceAccount | CreateResourceAccount | Creates a member of the resource account type. |
| UpdateAccount | UpdateAccount | Changes the display name of a member, or switches the type of a member. |
| GetAccount | GetAccount | Queries the information of a member. |
| GetPayerForAccount | GetPayerForAccount | Queries the information of a settlement account. |
| ListAccounts | ListAccounts | Queries all the members in a resource directory. |
| ListAccountsForParent | ListAccountsForParent | Queries the information of members in a folder. |
| MoveAccount | MoveAccount | Moves a member account from a folder to another. |
| RemoveCloudAccount | RemoveCloudAccount | Removes a member of the cloud account type. After you remove a member of the cloud account type, the member is no longer managed by the management account of the resource directory to which the member belonged. |
| BindSecureMobilePhone | BindSecureMobilePhone | Binds a mobile phone number to a member of the resource account type in a resource directory for security purposes. |
| SendVerificationCodeForBindSecureMobilePhone | SendVerificationCodeForBindSecureMobilePhone | Sends a verification code to the mobile phone number that you want to bind to a resource account in a resource directory for security purposes. |
| ChangeAccountEmail | ChangeAccountEmail | Changes the email address that is bound to a member. |
| RetryChangeAccountEmail | RetryChangeAccountEmail | Resends a verification email for the email address change of a member. |
| CancelChangeAccountEmail | CancelChangeAccountEmail | Cancels the email address change of a member. |
| CheckAccountDelete | CheckAccountDelete | Performs a member deletion check. |
| DeleteAccount | DeleteAccount | Deletes a member of the resource account type. |
| SetMemberDeletionPermission | SetMemberDeletionPermission | Enables or disables the member deletion feature. |
| GetAccountDeletionStatus | GetAccountDeletionStatus | |
| GetAccountDeletionCheckResult | GetAccountDeletionCheckResult | Queries the result of a member deletion check. |
| InviteAccountToResourceDirectory | InviteAccountToResourceDirectory | Invites an account to join a resource directory. |
| GetHandshake | GetHandshake | Queries the information of an invitation. |
| CancelHandshake | CancelHandshake | Cancels an invitation. |
| ListHandshakesForAccount | ListHandshakesForAccount | Queries the invitations that are associated with an account. |
| ListHandshakesForResourceDirectory | ListHandshakesForResourceDirectory | Queries invitations in a resource directory. |
| AcceptHandshake | AcceptHandshake | Accepts an invitation. |
| DeclineHandshake | DeclineHandshake | Rejects an invitation. |
Access control policies
| API | Title | Description |
|---|---|---|
| EnableControlPolicy | EnableControlPolicy | Enables the Control Policy feature. |
| GetControlPolicyEnablementStatus | GetControlPolicyEnablementStatus | Queries the status of the Control Policy feature. |
| DisableControlPolicy | DisableControlPolicy | Disables the Control Policy feature. |
| CreateControlPolicy | CreateControlPolicy | Creates a custom access control policy. |
| GetControlPolicy | GetControlPolicy | Queries the details of an access control policy. |
| UpdateControlPolicy | UpdateControlPolicy | Updates a custom access control policy. |
| DeleteControlPolicy | DeleteControlPolicy | Deletes a custom control policy. |
| AttachControlPolicy | AttachControlPolicy | Attaches an access control policy. |
| DetachControlPolicy | DetachControlPolicy | Detaches an access control policy. |
| ListControlPolicies | ListControlPolicies | Queries access control policies. |
| ListControlPolicyAttachmentsForTarget | ListControlPolicyAttachmentsForTarget | Queries the access control policies that are attached to a folder or member. |
| ListTargetAttachmentsForControlPolicy | ListTargetAttachmentsForControlPolicy | Queries the objects to which a specific control policy is attached. |
Trusted services
| API | Title | Description |
|---|---|---|
| ListTrustedServiceStatus | ListTrustedServiceStatus | Queries the trusted services that are enabled within an enterprise management account or delegated administrator account. |
| RegisterDelegatedAdministrator | RegisterDelegatedAdministrator | Specifies a member in a resource directory as a delegated administrator account of a trusted service. |
| DeregisterDelegatedAdministrator | DeregisterDelegatedAdministrator | Removes a delegated administrator account for a trusted service. |
| ListDelegatedAdministrators | ListDelegatedAdministrators | Queries delegated administrator accounts. |
| ListDelegatedServicesForAccount | ListDelegatedServicesForAccount | Queries the trusted services for which a member is specified as a delegated administrator account. |
Resource groups
| API | Title | Description |
|---|---|---|
| ListAutoGroupingRemediations | ListAutoGroupingRemediations | Queries a list of automatic grouping remediation records. |
| GetResourceGroupAdminSetting | GetResourceGroupAdminSetting | Queries the configurations of a resource group administrator. |
| UpdateResourceGroupAdminSetting | UpdateResourceGroupAdminSetting | Updates the configurations of a resource group administrator. |
| LookupResourceGroupEvents | LookupResourceGroupEvents | Queries the events of resource groups. |
| EnableResourceGroupNotification | EnableResourceGroupNotification | Enables group event notification. |
| DisableResourceGroupNotification | DisableResourceGroupNotification | Disables group event notification. |
| GetResourceGroupNotificationSetting | GetResourceGroupNotificationSetting | Queries the notification settings of a resource group. |
| ListResourceGroupCapability | ListResourceGroupCapability | Queries whether a specific resource type or a given cloud service supports resource group events. |
| ListResourceGroupsWithAuthDetails | ListResourceGroupsWithAuthDetails | Queries resource groups and their user authorization information. |
Tag
| API | Title | Description |
|---|---|---|
| TagResources | TagResources | Adds tags to resource groups or the members in a resource directory. |
| UntagResources | UntagResources | Removes tags from resource groups or the members in a resource directory. |
| ListTagResources | ListTagResources | Queries the tags that are added to resource groups or the members in a resource directory. |
| ListTagKeys | ListTagKeys | Queries tag keys. |
| ListTagValues | ListTagValues | Queries the tag values of a tag key. |
Others (not maintained)
| API | Title | Description |
|---|---|---|
| InitResourceDirectory | InitResourceDirectory | Enables a resource directory. After you enable a resource directory, the system automatically creates a root folder and sets the current account as the enterprise management account of the resource directory. The enterprise management account has all administrative permissions on this resource direc |
| CreateCloudAccount | CreateCloudAccount | Creates a cloud account. |
| PromoteResourceAccount | PromoteResourceAccount | Upgrades a resource account to a cloud account. |
| ResendPromoteResourceAccountEmail | ResendPromoteResourceAccountEmail | Resends an email that is used to confirm the upgrade from a resource account to a cloud account. |
| ResendCreateCloudAccountEmail | ResendCreateCloudAccountEmail | Resends an email that is used to confirm the creation of a cloud account. |
| CancelCreateCloudAccount | CancelCreateCloudAccount | Cancels the creation of a cloud account. |
| CancelPromoteResourceAccount | CancelPromoteResourceAccount | Cancels the upgrade from a resource account to a cloud account. |