# Adding Alibaba account

ALM requires the credentials below to allow access to specific Alibaba Cloud resources.

* AccessKeyID
* AccessKeySecret

We recommend you to use RAM user as Alibaba Cloud credentials to ALM. To create a RAM user, please follow the steps below:

**Step 1**: Log into your Alibaba Cloud console and find "Resource Access Management (RAM)" section, create the policy.

The contents of the policy can be checked on ALM:

![](https://1113837236-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LEMvLfZDvQFZLQc2YmY%2F-LEr0790a6jIWndlGoyb%2F-LEr0BJsxPuu01-0yPXM%2Fram-policy.png?alt=media\&token=465597a4-cfea-45c0-a648-deae0be63d46)

Copy the above the policy contents and create the policy on Alibaba Cloud console:

![](https://1113837236-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LEMvLfZDvQFZLQc2YmY%2F-LEr5ztLkb0q4ssQHOH3%2F-LEr4_GLpSqG53oRJQ0A%2Fcreate-ram-policy.png?alt=media\&token=ebc27ea8-3f80-4905-9883-55ef24aea124)

**Step 2**: Create the RAM user and attach the policy.

Create the RAM user:

![](https://1113837236-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LEMvLfZDvQFZLQc2YmY%2F-LEr5ztLkb0q4ssQHOH3%2F-LEr5US0uF5KvNUQM528%2Fcreate-ram-user.png?alt=media\&token=e268960c-3a10-4966-b158-7da94890665a)

Attach the previously created policy to the RAM user:

![](https://1113837236-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LEMvLfZDvQFZLQc2YmY%2F-LEr5ztLkb0q4ssQHOH3%2F-LEr6CGbzMed4C97h-ZH%2Fattach-ram-policy.png?alt=media\&token=f00e0ef8-c95c-4df6-b7d0-85444974cb40)

**Step 3**: Create an access key and enter it on ALM.

![](https://1113837236-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LEMvLfZDvQFZLQc2YmY%2F-LEr8BBLD_fjoIjpB1mV%2F-LEr8GVhU-_zjxcf31BG%2Fram-access-key.png?alt=media\&token=f1366d68-51e4-4a5a-af32-d917937e42be)

![](https://1113837236-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LEMvLfZDvQFZLQc2YmY%2F-LEr8kjfBRIqs3i4H7mI%2F-LEr9dpPdbnWS_opiTn8%2Fsetup-alibaba-credentials.png?alt=media\&token=9ce9b717-a581-413e-8773-b196bd1271cf)