Integration profile

Discovery provider · Alibaba Cloud

Discover accounts and regional resources using RAM role delegation.

Demo baseline · November 13, 2026

Download PDF

Prerequisites

RAM role trusted for Qintorava discovery
Read-only policies for target services
Resource Directory access for multi-account discovery

Configuration steps

Create the cross-account RAM role
Attach resource read policies
Select accounts and regions
Validate role assumption

Provider fields

Field	Type	Requirement and options
Resource Directory ID `resourceDirectoryId`	text	Optional
Account IDs `accountIds`	tag_list	Required
RAM role ARN `roleArn`	text	Required
External ID `externalId`	text	Optional
Access-key secret alias `accessKeySecretAlias`	text	Optional
Regions `regions`	tag_list	Required
Resource types `resourceTypes`	tag_list	Optional

Verify and troubleshoot

Test with the narrowest supported non-production scope. Confirm that the connection test reaches the expected provider and that the preview or receipt matches the intended scope. Check identity, credential references, network access and provider permissions before retrying. Record the failure stage and redact sensitive payloads when escalating.