Skip to main content

Authentication

AccessKey signature authentication for the Token Plan API

The Token Plan API is Alibaba Cloud OpenAPI, authenticated with AccessKey signatures (ACS3-HMAC-SHA256). Authorization: Bearer {API_KEY} is not supported.

Get credentials

1

Obtain an AccessKey

Create an AccessKey for your Alibaba Cloud account or a RAM user, and grant the RAM permissions required by the endpoint. We recommend storing the AccessKey in the environment variables ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET instead of hard-coding them.
2

Sign requests

Requests must carry the common headers x-acs-action, x-acs-version, x-acs-date, x-acs-content-sha256, x-acs-signature-nonce, and Authorization.
We recommend calling endpoints with an Alibaba Cloud SDK or OpenAPI Explorer to avoid computing signatures manually.

Usage

With OpenAPI Explorer, select the endpoint and method (POST), fill in the parameters, and send the request online — it also generates SDK samples in multiple languages.
Once configured, start with Create API Key.