Resource groups allow you to sort resources in your Alibaba Cloud account into groups. This simplifies resource and permission management within your Alibaba Cloud account.
Features
Resource grouping
You can create resource groups to centrally manage various types of cloud resources across multiple regions within your Alibaba Cloud account. You can sort resources into groups based on dimensions such as department, project, and environment. For more information, see Best practices for designing resource groups and Best practices for resource grouping.
Authorization by resource group
You can grant permissions for different resource groups to different Resource Access Management (RAM) users within an Alibaba Cloud account.
Cost allocation by resource group
You can view billing data by resource group to facilitate cost allocation for different business operations.
Management methods
You can group new and existing resources using the following methods. For more information, see Best practices for resource grouping.
Resource scenario | Management method |
New resources | When you create a resource in an Alibaba Cloud service console, you can add the resource to a custom resource group. |
When you create a resource by calling an Alibaba Cloud service API, you can specify a custom resource group in the request parameters to add the resource to that group. | |
Existing resources | You can use the automatic transfer feature to automatically move resources that meet specific conditions to a specified resource group.
|
You can move resources to a target custom resource group in the Resource Center console or the Resource Group console. Resource Group and Resource Center both provide a unified view of resources across products and regions and allow you to search for and transfer resources. For more information, see Manually transfer resources. | |
You can manually transfer resources by calling the unified transfer API provided by Resource Group. The unified transfer API supports batch transfers of resources across regions, Alibaba Cloud services, and resource groups. | |
You can manually transfer resources by calling the transfer API provided by the specific Alibaba Cloud service. To find the API for a service, see the References column in Services that work with Resource Group. |
Integrated services
Alibaba Cloud service | Application scenario | Category | References |
Resource Access Management | Grant permissions on resources in different resource groups to different RAM users. This isolates resource permissions within an Alibaba Cloud account. | Fine-grained access control | |
Billing Center | Create cost centers based on resource groups to query and aggregate bills for resource instances by resource group. | Cost allocation | |
Cloud Config | Specify resource groups as the scope for rules to take effect. This enables resource compliance audits based on multiple standards. | Compliance audit | Use resource groups and Cloud Config to audit resource compliance based on multiple standards |
Tag | Use the automatic tag inheritance feature of resource groups. After you create a resource in or add a resource to a resource group, the resource automatically inherits the specified tags of the resource group. | Resource management | Use tag policies to automatically inherit tags from resource groups |
CloudMonitor | Create application groups in CloudMonitor based on resource groups. Add all instances from the specified resource groups to the application groups for monitoring and management. | Operations management | Use resource groups and CloudMonitor to monitor and manage resources for different lines of business |
Resource Orchestration Service (ROS) | Select resources for O&M based on resource groups. Use ROS to efficiently manage resource O&M. | Operations management | Use resource groups and Resource Orchestration Service for efficient resource O&M |
CloudOps Orchestration Service (OOS) | Select resources for O&M based on resource groups. Use CloudOps Orchestration Service (OOS) to efficiently manage resource O&M. | Operations management | Use resource groups and CloudOps Orchestration Service for efficient resource O&M |
Services that work with Resource Group
For more information, see Services that work with Resource Group.
Limits
Limitations | Maximum value | How to increase quota |
Number of resource groups | 30 | |
Number of characters for a resource group identifier | 50 | None |
Number of characters for a resource group name | 50 | None |
Number of custom transfer rules | 10 | None |
Number of transfer conditions in each custom transfer rule | 10 | None |
Billing
This service provides basic capabilities for cloud platforms and is free of charge. You need to pay separately for the purchased cloud products.