Alibaba Cloud Setup

The Pulumi Alibaba Cloud provider uses the Alibaba Cloud SDK to manage and provision resources.

Pulumi relies on the Alibaba Cloud SDK to authenticate requests from your computer to Alibaba Cloud. Your credentials are never sent to pulumi.com.

The Pulumi Alibaba Cloud Provider needs to be configured with Alibaba Cloud credentials before it can be used to create resources.

Configuring Credentials

Once obtained, there are two ways to communicate your authorization tokens to Pulumi:

  1. Set the environment variables ALICLOUD_ACCESS_KEY and ALICLOUD_SECRET_KEY:

    $ export ALICLOUD_ACCESS_KEY=XXXXXXXXXXXXXX
    $ export ALICLOUD_SECRET_KEY=YYYYYYYYYYYYYY
    
  2. Set them using configuration, if you prefer that they be stored alongside your Pulumi stack for easy multi-user access:

    $ pulumi config set alicloud:accessKey XXXXXXXXXXXXXX --secret
    $ pulumi config set alicloud:secretKey YYYYYYYYYYYYYY --secret
    

Remember to pass --secret when setting alicloud:secretKey and alicloud:accessKe so that they are properly encrypted. A full set of configuration parameters can be found listed on the Project README.