Cloudpods – Multi-Cloud Management

Docs: Cloud Accounts

Mon, 01 Jan 0001 00:00:00 +0000

The cloud management platform connects to different platforms through cloud accounts and syncs their resources for management. Cloud resources under an account belong to a domain; resources in different domains are isolated. Sharing allows other domains to use cloud account resources. When three-level permissions are not enabled, all cloud resources belong to the default domain.

Select cloud platform type

Choose the cloud platform type you need to connect and configure that platform:

Public cloud

Supports mainstream public cloud platforms, including Alibaba Cloud, AWS, Azure, Huawei Cloud, and Tencent Cloud.

Alibaba Cloud

Supports public cloud and finance cloud

AWS

Supports Global and China regions, and Organization accounts

Azure

Supports Global and China regions

Huawei Cloud

Huawei Cloud account configuration

Tencent Cloud

Tencent Cloud account configuration

Volcengine

Volcengine account configuration

UCloud

UCloud account configuration

Google

Supports BigQuery and Bucket billing data sources

China Telecom Cloud

China Telecom Cloud account configuration

Baidu Cloud account configuration

China Unicom Cloud

China Unicom Cloud account configuration

Kingsoft Cloud

Kingsoft Cloud account configuration

QingCloud

QingCloud account configuration

Oracle

Oracle account configuration

Private cloud

Supports private cloud platforms such as VMware, OpenStack, and ZStack.

VMware

Supports versions 5.0–7.0

OpenStack

Supports Mitaka and later

ZStack

Supports version 3.5.0 and later

ZettaKit

ZettaKit account configuration

Apsara Stack

Supports v3.12.0 and later

Cloudpods

Cloudpods account configuration

HCSO

HCSO account configuration

HCS

HCS account configuration

Nutanix

Supports V2

Proxmox

Proxmox account configuration

H3C

H3C account configuration

Object storage

Supports object storage platforms such as S3 and Ceph.

Supports MinIO and other S3-compatible storage

Ceph

Ceph account configuration

XSKY

XSKY account configuration

Common configuration parameters

All cloud platforms support the following common configuration:

Parameter	Description
Name	Cloud account name
Domain	Select the domain the cloud account belongs to. When the cloud account is private, all project users under the domain can use the cloud account to create resources.
Resource ownership method	Defaults to specified project; ownership by cloud project is also supported
Resource owner project	When resource ownership method is specified project, you can sync cloud account resources to a local project on the platform
Sync policy	When enabled, maps tags to projects and assigns resources to specified projects by rule
Exclude synced resources	When enabled, you can select resource types to exclude from sync
Proxy	Set this when the cloud account requires a proxy for normal access; leave empty for a direct connection
Read-only mode	When enabled, the cloud account only syncs resources and cannot run other tasks
Sharing scope	Set the sharing scope of the cloud account; defaults to not shared

Cloud account operations

Sync cloud account

Sync resource information from the cloud account.

Disabled cloud accounts do not support syncing.

Sync duration

The time required to sync a cloud account is closely related to the number of resources under the account:

Resource scale	Estimated sync time	Description
Few resources (<100)	1–5 minutes	Suitable for test environments or small projects
Medium resources (100–1000)	5–30 minutes	Suitable for typical enterprise environments
Large resources (1000–10000)	30 minutes–2 hours	Suitable for large enterprises or multi-cloud environments
Massive resources (>10000)	2 hours or more	Incremental or batched sync is recommended

Factors that affect sync time:

Resource count: More resources take longer to sync
Resource type: Sync complexity differs by resource type
Network latency: Quality of the network connection to the cloud platform
Cloud platform API limits: Some platforms limit API call frequency
Sync mode: Full sync takes longer than incremental sync

Optimization tips:

For cloud accounts with many resources, use incremental sync
Use “Exclude synced resources” to skip resource types you do not need
Run large-scale syncs during off-peak hours
Set automatic sync tasks to avoid waiting on manual sync

Sync a single cloud account

On the Cloud Accounts page, click “Sync cloud account” in the actions column for the cloud account to open the sync dialog.
Select the sync mode: full sync or incremental sync. Incremental sync only syncs newly added and deleted resources.
Select the resource types to sync, then click “OK”.

Batch sync

In the cloud account list, select one or more cloud accounts, click “Batch operations” above the list, then select “Sync cloud account”.
Select the sync mode: full sync or incremental sync. Incremental sync only syncs newly added and deleted resources.
Select the resource types to sync, then click “OK”.

Enable

Enable a cloud account in the “Disabled” state. Resources of a disabled cloud account cannot be used.

Enable one

On the cloud account page, click “More” in the row actions for the target cloud account, then choose “Enable”.
Confirm the action.

Enable in batch

In the cloud account list, select one or more cloud account (Disabled), then click “Enable” above the list.
Confirm the action.

Disable

Disable a cloud account in the “Enabled” state. Disable the cloud account before deleting it.

Disable one

On the cloud account page, click “More” in the row actions for the target cloud account, then choose “Disable”.
Confirm the action.

Disable in batch

In the cloud account list, select one or more cloud account (Enabled), then click “Disable” above the list.
Confirm the action.

Connection test

Test the account connection status and sync resource information from the cloud account. Disabled cloud accounts do not support this operation.

Connection test one

On the cloud account page, click “More” in the row actions for the target cloud account, then choose “Connection test”.
Confirm the action.

Connection test in batch

In the cloud account list, select one or more cloud account, then click “Connection test” above the list.
Confirm the action.

Set automatic sync

Set whether the cloud account enables automatic sync and the automatic sync interval. Automatic sync is an incremental sync of cloud account resources and supports resource sync and billing tasks.

Set automatic resource sync for a cloud account

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Automatic sync” to open the scheduled task dialog.
Select the Resource sync tab, click “Create”, and open the configure automatic resource sync page.
Configure the following parameters:
- Name: Scheduled task name.
- Type: Sync cloud account.
- Trigger frequency: Custom time for once, daily, weekly, or monthly.
- Trigger time: Select the specific trigger time.
- Valid period: Can be empty; leaving it unset means long-term validity.
Click “OK” to complete the operation.

Set billing tasks for a cloud account

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Automatic sync” to open the scheduled task dialog.
Select the Billing tasks tab, click “Create”, and open the configure billing task page.
Configure the following parameters:
- Task type: Supports pull billing, prepaid allocation, default project allocation, secondary pricing, and delete billing.
- Time range: Select the effective time range for the task type.
Click “OK” to complete the operation.

Set sync policy

Map tags to projects so that resources under the cloud account are assigned to specified projects by rule.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Set sync policy”.
Configure the following parameters:
- Resource ownership method: Defaults to specified project; ownership by cloud project is also supported.
- Resource owner project: When resource ownership method is specified project, you can sync cloud account resources to a local project on the platform.
- Sync policy: When enabled, maps tags to projects and assigns resources to specified projects by rule.
- Sync policy scope: Shown after the sync policy is turned on; supports resource tags and project tags.
Click “OK” to complete the operation.

Update account

Update the account and password information for the cloud account. Parameters differ by platform.

VMware cloud accounts do not currently support updating the account.

In the cloud account list, click “More” in the actions column for the cloud account, then select “Property settings – Update account”.
Modify the account and password information for the platform, then click “OK”.

Read-only mode

Set the cloud account to read-only mode. When enabled, the cloud account only syncs resources and cannot run other tasks.

VMware, JD Cloud, China Mobile Cloud, S3, Ceph, and XSKY do not support read-only mode.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Read-only mode”.
Set the read-only mode switch, then click “OK”.

Enable passwordless login for the cloud account. The system’s SAML information is synced to the cloud account, and the system becomes an identity provider for cloud login.

Public cloud platforms that currently support passwordless login: Alibaba Cloud, Tencent Cloud, Huawei Cloud, AWS, Azure, HCSO, and HCS.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Enable passwordless login”.
Click “OK” to complete the operation.

Set the sharing status of the cloud account.

Cloud account sharing scopes:

Not shared (private): Resources on the cloud account are available only to the domain the cloud account belongs to.
Share cloud subscription – partial: When sharing cloud subscriptions and specifying some domains, administrators can change the project on the subscription page and can only choose projects under the domains the subscription is shared with.
Share cloud subscription – all: When sharing cloud subscriptions to all domains, administrators can change the project on the subscription page and can choose projects under any domain.
Share cloud account – partial: The cloud account can be shared to specified domains (one or more); only users in the cloud account’s domain and the shared domains can use the cloud account.
Share cloud account – all: The cloud account can be shared to all domains; all users in the system can use the cloud account.

Conditions for setting sharing: all of the following must be met

The current user is in the admin console.

Three-level permissions are enabled on the platform.

The sharing scope of resources synced from a cloud account (except security groups) is affected by the cloud account’s sharing scope.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Set sharing”.
Configure sharing scope parameters.
Click “OK” to complete the operation.

Set proxy

Bind a proxy to an existing cloud account.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Set proxy”.
Select a proxy, then click “OK”.

Update billing

Update the billing file for the cloud account. Supported only for Alibaba Cloud, Huawei Cloud, AWS, Azure, Google, Tencent Cloud, JD Cloud, Volcengine, and Kingsoft Cloud.

In the cloud account list, click “More” in the actions column for the cloud account, then select “Billing settings – Update billing”.
Modify the billing file parameters for the platform, then click “OK”.

Set discount rate

Set a discount rate for a public cloud account. After the discount rate is set, the estimated price shown when users create public cloud resources is the discounted price.

Setting a discount rate on a public cloud account does not affect the actual billing cost on the public cloud.

The discounted price is shown only when creating resources within the cloud account’s sharing scope.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Billing settings – Set discount rate”.
Set the discount rate (discounted price = original price × (1 − discount rate)), then click “OK”.

Clone account

Create a new cloud account based on the configuration of an existing cloud account.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Clone account”.
Open the create cloud account page; parameters are the same as the original cloud account.
Modify the necessary parameters, then click “OK”.

Change project

Change the project the cloud account belongs to.

Changing the project is not allowed when the cloud account is shared.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Change project”.
Select the domain and project, then click “OK”.

Sync SKU

Sync SKU (specification) information from the cloud platform. Supported resource types: server SKU, cache SKU, database SKU, NAT SKU, and NAS SKU.

Disabled cloud accounts do not support syncing SKUs.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Property settings – Sync SKU”.
Select the resource types to sync and region (optional).
Click “OK” to start the sync.

Rerun billing

Re-pull billing data for a specified time range.

Supported only for cloud platforms with billing configuration.

On the Cloud Accounts page, click “More” in the actions column for the cloud account, then select “Billing settings – Rerun billing”.
Select the time range.
Click “OK” to start re-pulling billing.

Create subscription

Create an Azure subscription. Supported only for Azure cloud accounts.

You need to provide the subscription name, enrollment account ID, and offer type.

On the Cloud Accounts page, click “More” in the actions column for the Azure cloud account, then select “Property settings – Create subscription”.
Configure the following parameters:
- Name: Subscription name.
- Enrollment account ID: Azure enrollment account ID.
- Offer type: Subscription offer type.
Click “OK” to create the subscription.

Delete

Delete a cloud account. Disable the cloud account before deleting it. Deleting a cloud account on the platform does not affect resources on the cloud account.

When deleting, you can choose whether to also delete billing data.

Delete one

On the cloud account page, click “More” in the row actions for the target cloud account, then choose “Delete”.
Confirm the action.

Delete in batch

In the cloud account list, select one or more cloud account (Disabled), then click “Delete” above the list.
Confirm the action.

Cloud account details

On the Cloud Accounts page, click the cloud account name to open the cloud account details page. The details page includes the following tabs:

Basic information

View basic information about the cloud account:

User tags and external tags
Resource owner project (editable; opens the project mapping dialog)
Excluded resource types
Sharing scope
Brand
Account name and account ID
Proxy settings (clickable to open proxy details)
Enabled status
SAML authentication status
Read-only status
Last sync time

Additional information

Access URL
Health status
Discount rate (public cloud only)
Balance
Virtual machine count
Host count
Missing permissions (supports clear and export)

Details page tabs

Tab	Description
Details	Cloud account basic information
Hosts	Host list (IDC / private cloud only)
Usage	Resource usage information
Cloud subscriptions	Associated cloud subscription list
External projects	External project list
SAML users	SAML authentication users (shown conditionally)
Cloud users	Cloud users (shown conditionally; requires brand support)
Cloud groups	Cloud groups (shown conditionally; requires brand support)
Scheduled tasks	Scheduled sync task list
Tasks	Task history
Events	Event logs

Cloud account list filters

The cloud account list supports the following filters:

Filter	Description
ID	Cloud account ID
Name	Cloud account name
Description	Cloud account description
Enabled status	Enabled / Disabled
Status	Cloud account status
Health status	Healthy / Abnormal
Brand	Cloud platform brand
Account	Account name
Automatic sync	Whether automatic sync is enabled
Sharing mode	Sharing scope
Project domain	Domain the account belongs to
Created at	Creation time range

Public cloud billing collection rules

Only Alibaba Cloud, AWS, Azure, Huawei Cloud, Google, Volcengine, and Kingsoft Cloud support collecting billing by configuring billing file access information. Tencent Cloud can collect billing via API.
When users configure or modify billing file information, the current month’s billing is collected.
When billing is collected multiple times, the result of the last collection takes effect.

Docs: Create Alibaba Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list to open the create cloud account page.
Select Alibaba Cloud as the cloud platform, then click “Next: Configure cloud account”.
Configure the following parameters:
- Name: Alibaba Cloud account name.
- Account type: Currently supports connecting Alibaba Cloud public cloud and finance cloud accounts.
- Key ID / password: Connect to Alibaba Cloud via Access Key authentication. An Access Key consists of a key ID (Access Key ID) and a password (Access Key Secret). See How to obtain Alibaba Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify that the parameters are correct.
After a successful test, click “Next: Configure sync regions” to configure resource sync regions (all regions are synced by default).
After configuration, click “Next: Billing file access information (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Alibaba Cloud account.

To manage a public cloud platform on this platform, the cloud account must at least have management permissions on the resources you operate. Granting the cloud account management permissions for all platform features is recommended.

The domain of an added cloud account cannot be changed. To sync resources from the cloud account to another domain, delete the cloud account on the platform and add it again to the target domain. Deleting a cloud account on the platform only stops onboarding its resources and does not affect resources on the cloud account.

If the Alibaba Cloud account you add is new, enable the OSS service on Alibaba Cloud first.

If the Alibaba Cloud account has Resource Directory enabled and the credentials you enter are an AK/SK under a RAM sub-account (at least AliyunSTSAssumeRole, AccessAliyunOSSReadOnlyAccess, and AliyunResourceDirectoryReadOnlyAccess are required), sub-accounts under the entire Resource Directory are synced by default.

How to obtain Alibaba Cloud parameters

Obtain AccessKey with the primary account

Sign in to the Alibaba Cloud console with the primary account, click the profile icon in the upper right, expand the dropdown, and click “accesskeys” to open the security information management page.
On the security information management page, you can view existing AccessKey information or click “Create AccessKey” to create a new user AccessKey. When creating an AccessKey, Alibaba Cloud sends a verification code to the account contact’s phone; the AccessKey can be created only after verification succeeds.
The Access Key Secret is hidden by default. Click “Show”; Alibaba Cloud sends a verification code to the contact phone for the account. The Access Key Secret is displayed only after verification succeeds.

How a RAM sub-account obtains an Access Key

Sign in to the Alibaba Cloud console with the sub-account, click the profile icon in the upper right, expand the dropdown, and click “accesskey…” to open the security information management page.
On the security information management page, click “Create AccessKey” to create an AccessKey.
After creation succeeds, the AccessKeySecret is shown only once; save it promptly.

For an AccessKey that has already been created, the AccessKeySecret cannot be viewed again.

Permission configuration

To manage Alibaba Cloud resources through the platform, the cloud account needs sufficient permissions:

Permission description	Read-only	Read-write
Manage all Alibaba Cloud resources	ReadOnlyAccess	AdministratorAccess
Manage Elastic Compute Service (ECS)	AliyunECSReadOnlyAccess	AliyunECSFullAccess
Manage Virtual Private Cloud (VPC)	AliyunVPCReadOnlyAccess	AliyunVPCFullAccess
Manage Elastic IP Address (EIP)	AliyunEIPReadOnlyAccess	AliyunEIPFullAccess
Manage ECS elastic network interfaces	AliyunVPCNetworkIntelligenceReadOnlyAccess	AliyunECSNetworkInterfaceManagementAccess
Manage Object Storage Service (OSS)	AliyunOSSReadOnlyAccess	AliyunOSSFullAccess
Manage NAT Gateway	AliyunNATGatewayReadOnlyAccess	AliyunNATGatewayFullAccess
Manage Application Load Balancer (ALB)	AliyunALBReadOnlyAccess	AliyunALBFullAccess
Manage Server Load Balancer (SLB)	AliyunSLBReadOnlyAccess	AliyunSLBFullAccess
Manage ApsaraDB RDS	AliyunRDSReadOnlyAccess	AliyunRDSFullAccess
Manage ApsaraDB for Redis	AliyunKvstoreReadOnlyAccess	AliyunKvstoreFullAccess
Manage ActionTrail	AliyunActionTrailFullAccess	AliyunActionTrailFullAccess
Manage File Storage NAS	AliyunNASReadOnlyAccess	AliyunNASFullAccess
Manage Web Application Firewall (WAF)	AliyunYundunWAFReadOnlyAccess	AliyunYundunWAFFullAccess
Manage Resource Access Management (RAM)	AliyunRAMReadOnlyAccess	AliyunRAMFullAccess
Manage Public DNS	AliyunPubDNSReadOnlyAccess	AliyunPubDNSFullAccess
Manage Alibaba Cloud DNS	AliyunDNSReadOnlyAccess	AliyunDNSFullAccess
Manage enterprise finance	AliyunFinanceConsoleReadOnlyAccess	AliyunFinanceConsoleFullAccess
Manage CloudMonitor	AliyunCloudMonitorReadOnlyAccess	AliyunCloudMonitorFullAccess

How to grant permissions to a sub-account

Sign in to the Alibaba Cloud console with the primary account, click the profile icon in the upper right, expand the dropdown, and click “Access control” to open the access control page.
Click “User management” in the left menu to open the user management page.
On the user management page, click “Authorize” in the actions column for the target user to grant permissions.

Billing configuration

Cloud account type

Includes primary account and associated account. Before using an associated account, ensure the primary account has been imported to the platform, and select that primary account when using the associated account.

Bucket URL

URL of the bucket that stores billing files. See How to obtain the billing bucket URL?.

File prefix

When the billing bucket also stores files other than billing files, configure a file prefix to obtain only billing files from the bucket. For Alibaba Cloud, the billing file prefix is the account ID, which you can view under Account management – Security settings.

Billing analysis scope

Set the scope for the platform to analyze cloud account billing. Currently only accounts onboarded on this platform are supported.

Accounts onboarded on this platform: Collect billing for the primary account and its associated sub-accounts. If the primary account is used only as a payer for other accounts, billing files for those other accounts are discarded.

Collect billing immediately

By default, the platform automatically collects billing at 04:00 every day. When this option is enabled, billing is collected immediately after billing file access information is configured.

Time range

When “Collect billing immediately” is enabled, you can set a time range and collect billing for that range immediately. Collecting 1–6 months of billing is recommended; otherwise the large data volume may put pressure on the system and affect daily billing collection tasks.

How to obtain the billing bucket URL?

Alibaba Cloud international accounts do not have billing bucket configuration; contact Alibaba Cloud support to assist with pushing billing data.

Using an Alibaba Cloud primary account as an example, sign in to the Alibaba Cloud console with the primary account, click “Expenses” at the top, then “User Center” in the dropdown, and open the expenses user center page.
Click “Set billing data storage” to open the billing data storage page.
View and record the bucket names for BillingItemDetail and SplitItemDetailDaily. If they are not set, subscribe both billing reports to the same bucket on this page. After configuration, daily incremental billing data is stored on the corresponding OSS. Storing only billing files in that bucket is recommended.

Tags for resources such as Alibaba Cloud OSS do not appear in BillingItemDetail and are only shown in split billing. To analyze costs by tags, configure SplitItemDetailDaily to the bucket.

On the Object Storage page in the Alibaba Cloud console, view the overview of the corresponding bucket; the bucket domain name is the bucket URL.

Docs: Create AWS Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list to open the create cloud account page.
Select AWS as the cloud platform, then click “Next: Configure cloud account”.
Configure the following parameters:
- Name: AWS account name.
- Account type: Currently supports connecting AWS Global and China region accounts.
- Key ID / password: Key ID and password for connecting to AWS. See How to obtain AWS parameters. To onboard AWS Organization accounts, see How to onboard AWS Organizations accounts.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify that the parameters are correct.
After a successful test, click “Next: Configure sync regions” to configure resource sync regions (all regions are synced by default).
After configuration, click “Next: Billing file access information (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the AWS account.

How to obtain AWS parameters

Obtain AWS access keys

Sign in to the AWS Management Console with the AWS primary account (or a sub-account with Administrator Access), click “IAM”, and open the IAM dashboard.
Click “Users” in the left menu to open the user list, then click a user name to open the user details page. Choose a user with sufficient management permissions.
Click the “Security credentials” tab.
Click “Create access key”. In the create access key dialog, you can see the key information: key ID (Access Key ID) and password (Access Key Secret).

Private access keys are visible only at creation time. Copy and save them. If lost, create a new key.

Permission configuration

To manage AWS resources through the platform, the cloud account needs the following permissions:

Permission description	Read-only	Read-write
Manage all AWS resources	ReadOnlyAccess	AdministratorAccess
Manage Amazon EC2	AmazonEC2ReadOnlyAccess	AmazonEC2FullAccess
Manage Amazon VPC	AmazonVPCReadOnlyAccess	AmazonVPCFullAccess
Manage Amazon S3	AmazonS3ReadOnlyAccess	AmazonS3FullAccess
Manage Elastic Load Balancing (ELB)	ElasticLoadBalancingReadOnly	ElasticLoadBalancingFullAccess
Manage Amazon RDS	AmazonRDSReadOnlyAccess	AmazonRDSFullAccess
Manage Amazon ElastiCache	AmazonElastiCacheReadOnlyAccess	AmazonElastiCacheFullAccess
Manage AWS CloudTrail	AWSCloudTrailReadOnlyAccess	AWSCloudTrail_FullAccess
Manage Amazon EFS	AmazonElasticFileSystemReadOnlyAccess	AmazonElasticFileSystemFullAccess
Manage WAF	AWSWAFReadOnlyAccess	AWSWAFFullAccess
Manage IAM	IAMReadOnlyAccess	IAMFullAccess
Manage Amazon Route 53	AmazonRoute53ReadOnlyAccess	AmazonRoute53FullAccess
Manage billing and cost	AWSBillingReadOnlyAccess	Billing
Manage Amazon CloudWatch	CloudWatchReadOnlyAccess	CloudWatchFullAccess

Billing configuration

Cloud account type

Billing analysis scope

Set the scope for the platform to analyze cloud account billing. Includes accounts onboarded on this platform and all accounts.

Accounts onboarded on this platform: Collect billing for the primary account and its associated organization accounts. If the AWS account is used only as a payer for other AWS accounts, billing files for those other AWS accounts are discarded.
All billing: Collect all billing for the primary account. For billing entries whose corresponding cloud account cannot be found on the platform, the cloud subscription is shown as “this cloud account name – numeric ID of the cloud account associated with the billing entry”.

How to obtain the bucket URL?

New version (required for AWS accounts created after 2019/08/07)

Sign in to the AWS Management Console with the AWS primary account, click the username in the upper right, then “My Billing Dashboard”, and open the Billing and Cost Management dashboard.
Click “Cost & Usage Reports” in the left menu. On the AWS Cost and Usage Reports page, click “Create report” to open the create report page.
Configure the report name, select “Include resource IDs”, then click “Next” to open the delivery options page.
Configure the S3 bucket. You can select an existing bucket or create a new one.
Configure the report path prefix, set time granularity to “Hourly”, report version to “Create new report version”, and compression type to “ZIP”, then click “Next” to open the review page.
After confirming the configuration, record the S3 bucket and report path prefix shown in the red boxes, then click “Review and Complete” to finish configuration and create the report.
On the S3 storage management page in the AWS console, view the overview of any billing file in the corresponding bucket and record the object URL. The bucket URL is that URL with the file name removed.
The file prefix is the report path prefix from step 6.

Legacy version

Sign in to the AWS Management Console with the AWS primary account, click the username in the upper right, then “My Billing Dashboard”, and open the Billing and Cost Management dashboard.
Click “Billing preferences” in the left menu. On the preferences page, under “Cost management preferences”, view and record the S3 bucket for “Receive Billing Reports”.
On the S3 storage management page in the AWS console, view the overview of any billing file in the corresponding bucket and record the object URL. The bucket URL is that URL with the file name removed.
For AWS, the file prefix is the AWS account ID.

How to onboard AWS Organizations accounts?

Configure AWS Organizations: Use an AWS organization account to associate AWS accounts. You can create new AWS accounts or invite existing AWS accounts. Invited AWS accounts must have the “OrganizationAccountAccessRole” role.
Obtain access keys: Create access keys for an IAM user on the management account of the AWS organization account. Using a user with AdministratorAccess is recommended.

Configure AWS Organizations

Sign in to the AWS Management Console with the AWS primary account, click the username in the upper right, then “My Billing Dashboard”, and open the Billing and Cost Management dashboard.
Click “Consolidated Billing” on the right to open the AWS Organizations page.
On the AWS Organizations – AWS accounts page, add AWS accounts. Two ways to add an AWS account to an Organization are supported:
- Create AWS account: Set the AWS account name, the account owner’s email address, and the IAM role name (OrganizationAccountAccessRole), then click “Create AWS account”.
- Invite existing AWS account: Set the email address or account ID of the AWS account to invite, then click “Send invitation”.

How to add the OrganizationAccountAccessRole role to an AWS account?

Sign in to the AWS Management Console with the AWS primary account, click “IAM”, and open the IAM dashboard.
Click “Roles” on the right. On the roles page, click “Create role”.
Select “Another AWS account” as the trusted entity type, enter the account ID that manages the AWS Organization, then click “Next: Permissions”.
Attach the “AdministratorAccess” permission policy, then click “Next: Tags”.
Configure tags as needed. After configuration, click “Next: Review”.
Set the role name to “OrganizationAccountAccessRole”, then click “Create role”.

Docs: Create Azure Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list to open the create cloud account page.
Select Azure as the cloud platform, then click “Next: Configure cloud account”.
Configure the following parameters:
- Name: Azure account name.
- Account type: Currently supports connecting Azure Global, China, US Government, and Germany region accounts.
- Tenant ID / Client ID / Client secret: see How to obtain Azure parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify that the parameters are correct.
After a successful test, click “Next: Configure sync regions” to configure resource sync regions (all regions are synced by default).
After configuration, click “Next: Billing file access information (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Azure account.

Enable passwordless login: When enabled, the system becomes an identity provider for cloud login, enabling single sign-on from this system to the public cloud platform. Passwordless login is currently supported only for Azure Global; this option is shown only when the account type is Global.

How to obtain Azure parameters

Obtain Azure Tenant ID and Client information

Sign in to the Azure portal, search for and open “Microsoft Entra ID” (formerly Azure Active Directory), click “App registrations” in the left navigation, and open the app registrations page. Creating a dedicated application for the cloud management platform to call Azure APIs is recommended.

Click “New registration”. On the register an application page, set any name, set supported account types to “Accounts in this organizational directory only – Default Directory”, then click “Register”.

After creation succeeds, the system automatically opens the application details page. The Application (client) ID on this page is the required Client ID, and the Directory (tenant) ID is the required Tenant ID.

On the application details page, click “Certificates & secrets” to open the certificates and secrets page. Click “New client secret”.

In the add a client secret dialog, enter a description, select an expiration (up to 24 months), then click “Add” to create the client secret.

After saving succeeds, immediately copy the secret value shown on the page; this value is the required client secret.

Note: The client secret value is shown only once after creation and cannot be viewed again after you leave the page. Copy and store it securely immediately. After the secret expires, create a new one and update the Azure account configuration on the cloud management platform.

How to grant subscription permissions to the application

Sign in to the Azure portal, click “All services” in the left navigation, then select and click “Subscriptions” to open the subscriptions list.

Click the subscription to authorize to open the subscription details page.

Click “Access control (IAM)”. On the access control page, click “Add role assignment”.

On the “Role” tab, select “Owner”, then click “Next”. On the “Members” tab, assign access to “User, group, or service principal”, click “Select members”, search for the application name created in the previous step, select the application, click “Next”, then click “Review + assign”.

On the role assignments page, verify that subscription permissions have been granted to the application.

Application API permission settings

If you do not need to manage Azure users and groups, you can skip the following permissions.

Note: The Azure AD Graph API (graph.windows.net) is deprecated; use the Microsoft Graph API instead. On the application’s “API permissions” page, add Microsoft Graph application permissions.

Region	API permissions
Azure China	Directory.Read.All, Directory.ReadWrite.All, Domain.Read.All
Azure Global	Directory.Read.All, Directory.ReadWrite.All, Domain.Read.All, Domain.ReadWrite.All, Member.Read.Hidden, Policy.Read.All

Permission configuration

To manage Azure cloud resources, the cloud account needs the following permissions:

Permission description	Read-only	Read-write
Manage all resources	Reader	Owner
Manage virtual machine resources	-	Virtual Machine Contributor
Manage network resources	-	Network Contributor
Manage object storage	Storage Blob Data Reader	Storage Blob Data Owner
Manage cloud databases	Cloud SQL Viewer	Cloud SQL Admin
Manage Redis	Redis Enterprise Cloud Viewer	Redis Enterprise Cloud Admin
Manage file storage	Storage File Data SMB Share Reader	Storage File Data SMB Share Contributor
Manage resource policies and roles	-	Graph Owner, Resource Policy Contributor
Manage DNS	-	DNS Zone Contributor, Private DNS Zone Contributor
Manage billing and costs	Billing Reader, Cost Management Reader	Cost Management Contributor
Manage monitoring	Monitoring Reader	Monitoring Contributor

Billing configuration

Note: The Azure EA (Enterprise Agreement) reporting API has been fully retired. Configure a billing bucket (Cost Management export) or API billing sync instead. The EA account configuration below applies only where that method is still supported; prefer billing bucket configuration.

Billing bucket configuration

Cloud account type: Includes primary account and associated account
Bucket URL: URL of the bucket that stores billing files
File prefix: For Azure, the file prefix is the account ID
Billing analysis scope: Includes accounts onboarded on this platform and all accounts

API billing configuration

This method obtains billing data by calling the Azure Cost Management Generate Cost Details Report REST API. The application (service principal) must have Cost Management Reader or higher at the billing account level.

Configure billing API permissions

Sign in to the Azure portal, search for and open “Cost Management”.
On the Cost Management overview page, find and click your billing account.
On the billing account details page, click “Access control (IAM)” in the left menu to open the billing account access control page.
Click “Add” and select the “Billing account owner” role.

Note: You can also select “Billing account reader” (Cost Management Reader) or “Billing account contributor” (Cost Management Contributor). Following least privilege and using Cost Management Reader is recommended.
Wait a few minutes for permissions to take effect, then sync billing via the API.

EA account configuration (deprecated)

Note: The Azure EA reporting API has been fully retired. This method is for historical reference only. Use Billing bucket configuration to sync billing.

EA (Enterprise Agreement) account spending obtains billing information via enrollment number and key:

Enrollment number: Unique identifier associated with the online enterprise agreement, a number starting with V570
Key: API access key

How to obtain the Azure billing bucket

Click “Exports”, select a scope. Choose a group (root directory requires admin permissions) so that billing for all subscriptions in the group is merged into one file.

After selecting the group as scope, click “Create”, set export type to “Daily export of month-to-date costs”, and fill in other information as prompted.

After creation succeeds, you can manually trigger a billing job to ensure billing files exist in the billing bucket.

Find the storage account configured in the previous step and locate the corresponding billing bucket URL.

Click Containers, select the container specified in the billing job, then click the name to open details.

Click Properties to view the URL information.

How to obtain the Azure enrollment number and key (deprecated)

Note: The Azure EA reporting API has been fully retired. The following content is for historical reference only.

Sign in to the Azure China EA Portal or Azure EA Portal. After signing in, the number in the upper left is the enrollment number.

Click “Reports” in the left navigation, select the “Download usage > API Access Key” tab. The primary key on this page is the key.

Docs: Create Huawei Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Huawei Cloud, then click “Next: Configure cloud account”.
Configure:
- Name: Huawei Cloud account name.
- Key ID / Password: credentials for Huawei Cloud. See How to get Huawei Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Click “Next: Bill file access (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Huawei Cloud account.

How to get Huawei Cloud parameters

How to get a Huawei Cloud API key

New console

Log in to the Huawei Cloud console, hover over the username in the upper right, and choose “My Credentials”.
Click “Access Keys” on the left, then “Create Access Key”.
After verification, an Excel file named credentials is downloaded. Open it to get Access Key ID and Secret Access Key.

Legacy console

Log in to the Huawei Cloud console, hover over the username in the upper right, and choose “My Credentials”.
Open the “Manage Access Key” tab and click “Create Access Key”.
After verification, download the credentials Excel file and obtain Access Key ID and Secret Access Key.

Permission configuration

Permissions required to manage Huawei Cloud resources:

Permission note	Read-only	Read/write
Manage all Huawei Cloud resources (except IAM)	Tenant Guest	Tenant Administrator
Manage ECS	ECS ReadOnlyAccess	ECS FullAccess
Manage EVS	EVS ReadOnlyAccess	EVS FullAccess
Manage EPS	EPS ReadOnlyAccess	EPS FullAccess
Manage IMS	IMS ReadOnlyAccess	IMS FullAccess
Manage VPC	VPC ReadOnlyAccess	VPC FullAccess
Manage NAT Gateway	NAT ReadOnlyAccess	NAT FullAccess
Manage OBS	OBS ReadOnlyAccess	OBS Administrator
Manage ELB	ELB ReadOnlyAccess	ELB FullAccess
Manage RDS	RDS ReadOnlyAccess	RDS FullAccess
Manage DCS	DCS ReadOnlyAccess	DCS FullAccess
Manage CTS	CTS ReadOnlyAccess	CTS FullAccess
Manage SFS	SFS ReadOnlyAccess	SFS FullAccess
Manage WAF	WAF ReadOnlyAccess	WAF FullAccess
Manage IAM	IAM ReadOnlyAccess	Security Administrator
Manage DNS	DNS ReadOnlyAccess	DNS FullAccess
Manage Billing Center (BSS)	BSS Operator	BSS Administrator
Manage CES	CES ReadOnlyAccess	CES FullAccess

Billing configuration

How to get the bill bucket URL?

New console

On Huawei Cloud, open “Billing Center → Bills”.
Click “Overview” on the left. Under “Bill data storage” on the right, note the object storage name. If unset, enable bill data storage, configure an OBS bucket, and complete authorization.
In OBS, open the bucket overview; the access domain is the bucket URL.

Legacy console

On Huawei Cloud, open “More → Billing → Consumption overview”.
Click “Consumption data storage” on the left and note the bucket name. If unset, configure a bucket and complete authorization.
In OBS, open the bucket overview; the access domain is the bucket URL.

Docs: Create Tencent Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Tencent Cloud, then click “Next: Configure cloud account”.
Configure:
- Name: Tencent Cloud platform name.
- APP ID / Key ID / Password: APP ID uniquely maps to the account ID. See How to get Tencent Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Click “Next: Bill file access (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Tencent Cloud account.

If the Tencent Cloud account is new, enable COS on Tencent Cloud first.

How to get Tencent Cloud parameters

How to get a Tencent Cloud API key

Log in to the Tencent Cloud console, click “Cloud products” in the upper right, search for “Cloud API keys”, and open API key management.
On API key management, get APP ID, SecretId (key ID), and SecretKey (password).

Permission configuration

Permissions required to manage Tencent Cloud resources:

Permission note	Read-only	Read/write
Manage all Tencent Cloud resources	ReadOnlyAccess	AdministratorAccess
Manage CVM	QcloudCVMReadOnlyAccess	QcloudCVMFullAccess
Manage VPC	QcloudVPCReadOnlyAccess	QcloudVPCFullAccess
Manage EIP	-	QcloudEIPFullAccess
Manage COS	QcloudCOSReadOnlyAccess	QcloudCOSFullAccess
Manage CLB	QcloudCLBReadOnlyAccess	QcloudCLBFullAccess
Manage cloud databases	QcloudMariaDBReadOnlyAccess, etc.	QcloudMariaDBFullAccess, etc.
Manage Redis	QcloudRedisReadOnlyAccess	QcloudRedisFullAccess
Manage CloudAudit	QcloudAuditReadOnlyAccess	QcloudAuditFullAccess
Manage CFS	QcloudCFSReadOnlyAccess	QcloudCFSFullAccess
Manage WAF	QcloudWAFReadOnlyAccess	QcloudWAFFullAccess
Manage CAM	QcloudCamReadOnlyAccess	QcloudCamFullAccess
Manage private DNS	QcloudDNSPodReadOnlyAccess, etc.	QcloudPrivateDNSFullAccess, etc.
Manage finance-related content	-	QCloudFinanceFullAccess
Manage Monitor	QcloudMonitorReadOnlyAccess	QcloudMonitorFullAccess

Billing configuration

How to get the bill bucket URL

Log in to the Tencent Cloud console, open “Billing” → “Bills”.
Click “Bill storage”.
Note the bill storage bucket name. If unset, subscribe to a bucket on this page; daily incremental bill data syncs to COS. Prefer a bucket used only for bill files.
In Object Storage, open the bucket overview; the bucket domain is the bucket URL.

Docs: Create Volcano Engine Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Volcano Engine, then click “Next: Configure cloud account”.
Configure:
- Name: Volcano Engine account name.
- Key ID / Password: connect with Access Key (Access Key ID and Access Key Secret). See How to get Volcano Engine parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Click “Next: Bill file access (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Volcano Engine account.

If the Volcano Engine account is new, enable TOS on Volcano Engine first.

How to get Volcano Engine parameters

How to get a Volcano Engine API key

Log in to the Volcano Engine console, open personal info in the upper right, then click “API access keys”.
On the key list page, view existing AccessKeys or click “Create key”.
Access Key Secret is hidden by default. Click “Show”; Volcano Engine sends a verification code to the account contact. After verification, the Secret is shown.

Permission configuration

Permissions required to manage Volcano Engine resources:

Permission note	Read-only	Read/write
Manage all Volcano Engine resources	ReadOnlyAccess	AdministratorAccess

How to authorize a sub-account

Log in with the primary account, open personal info in the upper right, then click “Access control”.
Click “Users” on the left.
Click “Manage” for the user and grant permissions.

Billing configuration

How to get the bill bucket URL

Log in to the Volcano Engine console, open “Billing” → “Account overview”.
Click “Set automatic storage”.
Note the ChargeItemDetail bill bucket name. If unset, subscribe to a bucket on this page; daily incremental bill data syncs to TOS. Prefer a bucket used only for bill files.
In Object Storage, open the bucket overview; the bucket domain is the bucket URL.

Docs: Create UCloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select UCloud, then click “Next: Configure cloud account”.
Configure:
- Name: UCloud platform name.
- Public key / Private key: see How to get UCloud parameters.
- project_id: required for UCloud sub-accounts; not needed for the primary account.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Configure scheduled sync (optional), then click “OK” to create the UCloud account.

How to get UCloud parameters

How to get a UCloud API key

Log in to the UCloud console, click “All products” at the top, search for or select “Open API UAPI”.
Open the “API keys” tab. Click “Show” and complete SMS verification.
After phone verification, obtain the public and private key values.
For a sub-account, also get project_id from “Access control → User management → Sub-account details” (project ID under personal permissions / application projects).

Permission configuration

Permissions required to manage UCloud resources:

Permission policy	Description
AdministratorAccess	Super administrator

Docs: Create Google Account

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Ensure network connectivity between the platform and Google Cloud.
If the platform cannot reach Google Cloud directly, configure a proxy to access Google Cloud.

Procedure

On the Cloud Accounts page, click “Create” above the list to open the create cloud account page.
Select “Google” as the cloud platform, then click “Next: Configure cloud account”.
Configure the following parameters:
- Name: Google Cloud account name.
- project_id, private_key_id, private_key, client_email, and related parameters: see How to obtain Google parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify that the parameters are correct.
After a successful test, click “Next: Configure sync regions” to configure resource sync regions (all regions are synced by default).
After configuration, click “Next: Billing file access information (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Google Cloud account.

How to obtain Google parameters

How to obtain Google Cloud service account key information?

Onboard a specific project

Open the “IAM & Admin – IAM” page in the GCP Console and sign in.
Click “Select a project” at the top and choose the project to authorize.
In the left navigation pane, go to “IAM & Admin”, click “Service Accounts”, and open the service accounts page.
Click “Create service account” to open the create service account page.
Configure the service account name, service account ID, and description, then click “Create and continue”.
Select the Project – Owner or Project – Viewer role. Owner grants management permissions on the project; Viewer grants read-only permissions. Click “Continue”.
Granting users access to this service account does not affect the cloud management platform; configure as needed. After configuration, click “Continue”.
On the service accounts page, click the actions button on the right of the newly created service account, then click “Manage keys”.
On the keys page, click “Add key”, then in the dialog click “Create new key”, select key type “JSON”, and click “Create” to download the JSON key file.

Onboard multiple projects

To use the service account key obtained above to onboard multiple projects, follow these steps:

Open the “IAM & Admin – IAM” page in the GCP Console and select another project to onboard.
Click “Add” at the top, add the service account created above as a new member, set the role to Project – Owner or Project – Viewer, then click “Save”.
Repeat the steps above to onboard more projects.

Google Cloud APIs are project-scoped. When onboarding multiple Google Cloud projects, enable the related APIs in each project.

APIs required for managing Google Cloud on the platform:

After obtaining the key file, enable the Cloud Resource Manager API, Cloud Build API (for creating machines from custom images), and Compute Engine API for the authorized project in the Google API Library.

On the Cloud Resource Manager API page in the API Library, enable the Cloud Resource Manager API for the authorized project.
On the Cloud Build API page in the API Library, enable the Cloud Build API for the authorized project.

APIs required for managing Google Cloud RDS on the platform:

On the Cloud SQL Admin API page in the API Library, enable the Cloud SQL Admin API.

Permission configuration

To manage Google Cloud resources through the platform, the cloud account needs the following permissions:

Permission description	Read-only	Read-write
Manage all Google Cloud resources	Viewer	Editor
Manage compute instances	Compute Viewer	Compute Editor
Manage network resources	Compute Network Viewer	Compute Network Admin
Manage object storage resources	Storage Legacy Bucket Reader, Storage Object Viewer	Storage Admin
Manage cloud databases	Cloud SQL Viewer	Cloud SQL Admin
Manage Redis	Redis Enterprise Cloud Viewer	Redis Enterprise Cloud Admin
Manage logs	Logs Viewer	Logging Admin
Manage file storage	Cloud Filestore Viewer	Cloud Filestore Editor
Manage all custom roles in the project	Role Viewer	Role Administrator
Manage DNS	DNS Reader	DNS Administrator
Manage account billing	Billing Account Viewer	Billing Account Administrator
Manage monitoring	Monitoring Viewer	Monitoring Admin

Billing configuration

Billing data source

Select where Google billing data is stored: BigQuery or bucket. Google billing no longer supports bucket.

How to configure and obtain BigQuery settings on Google Cloud?

Sign in to the Google Cloud Console, click “Billing” in the left menu, and open the billing page.
Click “Billing export” in the left menu. Under the BIGQUERY EXPORT tab, enable detailed usage cost and configure the project and dataset name.
Click the dataset name to open BigQuery, expand the right-side nodes, select the partitioned table under the dataset name, then on that page click the “Details” tab at the top to obtain the table ID.
On the table details page, click “Edit details” in the upper right and set expiration to None. If an expiration is set, expired data will be cleaned from BigQuery; configure carefully.

How to obtain the billing file bucket URL and file prefix?

Sign in to the Google Cloud Console, click “Billing” in the left menu, and open the billing page.
Click “Billing export” in the left menu. On the billing page, click the “File export” tab, then view and record the storage partition name and report prefix.
Click “Storage / Browser” in the left menu. On the storage page, click the corresponding storage partition name, then click the “Overview” tab. The link URL is the bucket URL.

Docs: Create China Telecom Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select “China Telecom Cloud”, then click “Next: Configure cloud account”.
Configure:
- Name: China Telecom Cloud account name.
- Account type: global or China region accounts are supported.
- Key ID and password: see How to get China Telecom Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Configure scheduled sync (optional), then click “OK” to create the account.

China Telecom Cloud does not expose Type-2 node APIs, so some region information cannot be retrieved via API.

How to get China Telecom Cloud parameters

How to get a China Telecom Cloud API key?

Log in to the China Telecom Cloud console and open Security settings from user info in the upper right.
In Security settings, click user AccessKey to view it.

Docs: Create China Mobile Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Currently only resource sync is supported for China Mobile Cloud accounts; resource operations are not supported.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select “China Mobile Cloud”, then click “Next: Configure cloud account”.
Configure:
- Name: China Mobile Cloud account name.
- Key ID and password: see How to get China Mobile Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Configure scheduled sync (optional), then click “OK” to create the account.

How to get China Mobile Cloud parameters

How to get a China Mobile Cloud API key?

Log in to the China Mobile Cloud console, search for “AK management” under all products, and open AccessKey management.
Create a key or view Access key and Secret key for an existing key.

Permission configuration

Permissions required to manage China Mobile Cloud resources:

Permission policy	Description
Admin	Administrator role

Docs: Create JD Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Currently only resource sync is supported for JD Cloud accounts; resource operations are not supported.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select “JD Cloud”, then click “Next: Configure cloud account”.
Configure:
- Name: JD Cloud account name.
- Key ID and password: see How to get JD Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Click “Next: Bill file access (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the JD Cloud account.

How to get JD Cloud parameters

How to get a JD Cloud API key

Log in to the JD Cloud console, hover over the username in the upper right, and choose “Access Key management”.
View existing Access Key info, or click “Create” to create one, then “View” to get the Access Key Secret.

Billing configuration

JD Cloud bills are retrieved via API. Configure:

Collect bills immediately: by default the platform collects bills at 04:00 daily.
Time range: recommend collecting bills from the last 1–6 months.

Docs: Create Baidu Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Baidu Cloud, then click “Next: Configure cloud account”.
Configure:
- Name: Baidu Cloud platform name.
- Key ID / Password: connect with Access Key. See How to get Baidu Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Click “Next: Bill file access (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Baidu Cloud account.

How to get Baidu Cloud parameters

How to get a Baidu Cloud API key

Log in to the Baidu Cloud console with the primary account, open personal info in the upper right, then click “Security authentication” to open Access Key.
On the Access Key page, view existing keys or click “Create AccessKey”.
Access Key Secret is hidden by default. Click “Show”; Baidu Cloud sends a verification code to the account contact’s phone. After verification, the Secret is shown.

Docs: Create China Unicom Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select China Unicom Cloud, then click “Next: Configure cloud account”.
Configure:
- Name: China Unicom Cloud platform name.
- Key ID / Password: connect with Access Key. See How to get China Unicom Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Click “Next: Bill file access (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the China Unicom Cloud account.

How to get China Unicom Cloud parameters

How to get a China Unicom Cloud API key

Log in to the China Unicom Cloud console with the primary account, open personal info in the upper right, then click “Access control” to open IAM.
On IAM Access Control, click “Security settings” next to the username.
Click “Create access key”. China Unicom Cloud sends a verification code to the account contact’s phone; create the key after verification.

Docs: Create Kingsoft Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Kingsoft Cloud, then click “Next: Configure cloud account”.
Configure:
- Name: Kingsoft Cloud platform name.
- Key ID / Password: connect with Access Key. See How to get Kingsoft Cloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Click “Next: Bill file access (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the Kingsoft Cloud account.

If the Kingsoft Cloud account is new, enable object storage on Kingsoft Cloud first.

How to get Kingsoft Cloud parameters

How to get a Kingsoft Cloud API key

Log in to the Kingsoft Cloud console with the primary account, open personal info in the upper right, then click “Access Keys”.
Click “Create key”, then “Continue” in the risk warning dialog. Kingsoft Cloud sends a verification code to the account contact’s phone. After verification, the key dialog appears.

Billing configuration

How to get the Kingsoft Cloud bill bucket URL

Log in to the Kingsoft Cloud console, open “Billing” → “Account overview”.
Click “Set bill data storage”.
Note the billing-item detail bill bucket name. If unset, subscribe to a bucket on this page. Kingsoft Cloud requires a KS3 directory (custom input).
In Object Storage, open the bucket overview; the bucket domain is the bucket URL. When entering it in the cloud management platform, include the directory as well.

Docs: Create QingCloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select QingCloud, then click “Next: Configure cloud account”.
Configure:
- Name: QingCloud platform name.
- Key ID / Password: connect with API key (Access Key). See How to get QingCloud parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Click “Next: Bill file access (optional)” to configure billing parameters.
Configure scheduled sync (optional), then click “OK” to create the QingCloud account.

How to get QingCloud parameters

How to get a QingCloud API key

Log in to the QingCloud console with the primary account, click personal info in the upper right, then click “API keys”.
Click “Create”, then “Submit” in the dialog to generate an API key. You can download the private key.

Docs: Create Oracle Cloud Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select ORACLE, then click “Next: Configure cloud account”.
Configure:
- Name: ORACLE platform name.
- Key ID / Password: connect with an API key made of user, tenancy, and a key file. See How to get Oracle parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” (default: all regions).
Configure scheduled sync (optional), then click “OK” to create the ORACLE cloud account.

How to get Oracle parameters

How to get an Oracle API key

Log in to Oracle Cloud with the primary account, open personal info in the upper right, click “My profile”, then “API keys”.
Click “Add API key”, then “Add” in the dialog to generate a key. You can download the private key.
Click “Add” to get the user and tenancy values required by the cloud management platform, and import the private key downloaded earlier.

Docs: Create VMware Account

Mon, 01 Jan 0001 00:00:00 +0000

Supported versions

VMware 5.0–7.0 are supported.

VMware resource onboarding flow

Create a VMware cloud account. The platform automatically creates Layer 2 networks and IP subnets. Mapping:
- One vSwitch or Distributed vSwitch maps to one Layer 2 network;
- Contiguous IP ranges with the same VLAN under a Layer 2 network form one IP subnet;
After the account is added, if auto-created Layer 2 networks and IP subnets do not match your network design, merge wires and IP subnets based on the real VMware environment. Merging wires is irreversible; if misconfigured, delete the cloud account and add it again.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select VMware, then click “Next: Configure cloud account”.
Configure:
- Name: VMware account name.
- vCenter address: vCenter server domain or IP.
- Port: default 443.
- Account: vCenter admin username.
- Password: vCenter admin password.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the VMware cloud account and related IP subnets and start syncing resources.

If no resources appear after import, check whether a non-admin account was used.

Docs: Create OpenStack Account

Mon, 01 Jan 0001 00:00:00 +0000

Supported versions

OpenStack Mitaka and later are supported.

Notes

If the OpenStack auth URL is a domain name, configure DNS resolution on the control node; otherwise resources cannot be synced because the domain cannot be resolved.

Procedure

After creating an OpenStack account, the cloud management platform cannot obtain the true storage capacity on OpenStack. Set OpenStack storage capacity on the “Storage - Block storage” page to the real capacity as much as possible.

On the Cloud Accounts page, click “Create” above the list.
Select OpenStack, then click “Next: Configure cloud account”.
Configure:
- Name: OpenStack account name.
- Auth URL: OpenStack management auth URL, such as http://host:5000/v3.
- Account: OpenStack admin username, such as admin.
- Password: OpenStack admin password.
- Project: OpenStack project, such as admin.
- Domain Name: OpenStack domain name, such as default.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the OpenStack account.

Docs: Create ZStack Account

Mon, 01 Jan 0001 00:00:00 +0000

Supported versions

ZStack 3.5.0 and later are supported.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select ZStack, then click “Next: Configure cloud account”.
Configure:
- Name: ZStack account name.
- Auth URL: usually http://host:8080/, where host is the ZStack control node IP.
- Key ID: Access Key ID on ZStack.
- Password: Access Key Secret on ZStack.
- Common parameters: see Common configuration parameters.

Generate or use an Access Key on the ZStack management platform under “Platform management - Access Key”.

Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the ZStack account.

Docs: Create Alibaba Apsara Stack Account

Mon, 01 Jan 0001 00:00:00 +0000

This feature onboards Alibaba Apsara Stack private cloud. Currently only resource sync is supported.

Supported versions

Apsara Stack v3.12.0 and later.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Apsara Stack (Feitian), then click “Next: Configure cloud account”.
Configure:
- Name: Apsara Stack account name.
- Key ID / Password: connect with Access Key. See How to get Apsara Stack parameters.
- Secret ID: if the secret is NbzBaQ94MPzjZf5i and the highest visible organization ID is 4, enter NbzBaQ94MPzjZf5i/4.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the Apsara Stack private cloud account.

How to get Apsara Stack parameters

Get AccessKey on Apsara Stack

Only operations administrators and first-level organization administrators can get organization AccessKeys.

Log in to the ASCM console as an administrator.
In the top menu, click “Enterprise”.
In the left nav, click “Organization management”.
In the org tree, click the settings icon after the parent organization to add.
In the dropdown, choose “Get AccessKey”.
In the dialog, view the organization AccessKey.
To get organization ID, open browser developer tools, find the ListResourceGroup API response, and take the first organizationID.

Get Endpoint on Apsara Stack

In the address bar, open the ASO URL region-id.aso.intranet-domain-id.com and press Enter.
Enter username and password, click “Log in”, and open ASO.
In the left nav, click “Product O&M → Product list → Tianji” to open the Tianji console.
In Tianji, choose “Reports” in the left nav.
On “All reports”, search for “Service registration variables” and open it.
Click the icon next to Service and search for the product service.
In the Service Registration column, right-click and choose “Select more”.
On the “Details” page, view the product service Endpoint.

Docs: Create ZettaKit Account

Mon, 01 Jan 0001 00:00:00 +0000

Supported versions

Managing ZettaKit platforms is supported.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select ZettaKit, then click “Next: Configure cloud account”.
Configure:
- Name: ZettaKit account name.
- Auth URL: usually http://host:8080/, where host is the ZettaKit control node IP.
- Key ID: ZettaKit account.
- Password: ZettaKit password.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the ZettaKit account.

Docs: Create Cloudpods Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Cloudpods, then click “Next: Configure cloud account”.
Configure:
- Name: Cloudpods cloud account name.
- Auth URL: Keystone service URL. On a Cloudpods control node, get OS_AUTH_URL with ocadm cluster rcadmin. Usually http://domain(IP):30500/v3.
- Key ID / Password: connect with Access Key. See How to get Cloudpods parameters.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the Cloudpods account.

How to get Cloudpods parameters

Get an AccessKey on Cloudpods

Log in to Cloudpods, hover over the username in the upper right, then select “Access credentials”.
On AccessKey management, click “Create” to create an AccessKey.
For an existing AccessKey, the ID and Client Secret are the key ID and password.

Docs: Create HCSO Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select HCSO, then click “Next: Configure cloud account”.
Configure:
- Name: HCSO account name.
- Key ID / Password: connect to HCSO with Access Key. See How to get HCSO parameters.
- Default region / Endpoint domain: for iam.cn-north-1.test.com, iam is the identity service, cn-north-1 is the endpoint region, and test.com is the endpoint domain.
- Subnet DNS: default DNS for subnets in the environment; up to two, separated by commas.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the HCSO account.

How to get HCSO parameters

Get an AccessKey on HCSO

Log in to the HCSO console, hover over the username in the upper right, then select “My credentials”.
Click “Access keys” on the left, then click “Add access key”.
After verification, an Excel file named credentials is downloaded. Open it to get Access Key ID and Secret Access Key.

Docs: Create HCS Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select HCS, then click “Next: Configure cloud account”.
Configure:
- Name: HCS cloud account name.
- Notes: notes for the account.
- Key ID / Password: connect to HCS with Access Key. See How to get HCS parameters.
- Auth URL: HCS management auth URL, such as region1.example.com.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the HCS account.

How to get HCS parameters

Get an AccessKey on HCS

Log in to the HCS console, hover over the user in the upper right, then select “Personal settings”.
Click “Manage access keys” under basic information, then click “Add access key”.
After clicking “Add access key”, the access key file downloads locally (CSV). Open it to get Access Key ID and Secret Access Key.

Docs: Create Nutanix Account

Mon, 01 Jan 0001 00:00:00 +0000

Manage Nutanix platform resources. Nutanix V2 is supported.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Nutanix, then click “Next: Configure cloud account”.
Configure:
- Name: Nutanix cloud account name.
- Notes: notes for the account.
- Prism address: Nutanix Prism web console URL.
- Port: Prism web console port, default 9440.
- Account and password: credentials for the Prism web console.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the Nutanix account.

Docs: Create Proxmox Account

Mon, 01 Jan 0001 00:00:00 +0000

Proxmox resource onboarding flow

When creating a Proxmox cloud account, the platform does not sync Proxmox bridges as Layer-2 networks / IP subnets. Instead it prepares local networks from IPs on node NICs (including bridges):
- If an existing local IDC (e.g. KVM) IP subnet already covers those host IPs, reuse it and do not create a new one;
- Otherwise automatically create a Layer-2 network and IP subnet (names like {account-name}-proxmox-host-network);
- When syncing host NICs later, attach by NIC IP to the matching local Layer-2 network and record the bridge name (e.g. vmbr0).
After the account is added, if the auto-created Layer-2 network and IP subnet do not match your topology (for example they only cover host IPs, not VM ranges, or one Layer-2 was split into multiple segments), merge wires and merge IP subnets to match the real Proxmox network. Merging wires is irreversible; if misconfigured, delete the cloud account and add it again.
When syncing existing VMs, NICs match local IP subnets by VM IP and are not tied to Proxmox remote network IDs. Running VM IPs are obtained via QEMU Guest Agent.

Notes

Version upgrade

Note: If Proxmox cloud accounts were onboarded before upgrading to 4.0.4, delete those accounts after the upgrade and re-import using this document. 4.0.4 changed the Proxmox network and resource sync model; old accounts leave dirty data and may cause abnormal network, host, or VM status. Deleting a cloud account only removes platform management; Proxmox-side resources are unaffected.

Account onboarding

Enter only IP or domain for the access address (e.g. 192.168.1.10 or pve.example.com); do not include https://, path, or port. Port is a separate field (default 8006).
If the access address is a domain, cloud management control nodes must resolve it, or connection tests and sync fail.
Auth method maps to Proxmox Realm:
- PAM: Linux system user auth (commonly root). Required when creating VMs from local Glance images because remote system-disk mount depends on PAM users.
- PVE: Proxmox VE local user auth. Only for API operations such as resource sync; cannot remote-mount system disks.
Enter only the username in the account field; the platform appends @pam or @pve by auth method. Do not add the suffix yourself.
Prefer a PAM account with admin rights (e.g. root). Insufficient permissions may allow a successful connection test but fail to sync hosts, storage, or VMs, or block create/change operations on the platform.
The platform calls the Proxmox API over HTTPS and skips certificate verification, so self-signed certificates work.

Sync scope

Syncs QEMU VMs only, not LXC containers.
Syncs nodes (hosts), block storage, and ISO images; VPC uses the platform local Default VPC.
Only storage whose Content includes images is enabled as block storage; ISO images come from storage whose Content includes iso.
Does not sync Proxmox bridges as platform IP subnets; VMs and hosts use local Layer-2 networks / IP subnets. Creating or modifying bridges on Proxmox from the platform is not supported.
Does not sync or manage security groups, EIPs, snapshots, object storage, or load balancers.

VM management

Two image methods are supported when creating VMs:

Local Glance image (recommended): Choose a public or custom image from platform system images. The platform caches the image to Proxmox storage, then esxi-agent remote-mounts the system disk and injects login and other info so the guest can boot into the OS.
ISO image: Mount an ISO as a CD-ROM and create an empty disk. After creation the VM is powered off; power on and install the OS via VNC. Place the ISO in Proxmox storage beforehand, or cache it to the storage from the platform.

Deploy with a local Glance image

Creating a VM from a public or custom image is similar to VMware and does not use cloud-init:

Upload and cache the Glance image to Proxmox storage (first use of an image takes longer; cached images can be reused).
Create the VM on Proxmox and attach that system disk.
esxi-agent remote-mounts the system disk; host-deployer injects admin password, SSH keys, and NIC config into the disk filesystem.

Notes for this method:

Auth must be PAM: Remote system-disk mount uses a Linux system user (e.g. root@pam) to access Proxmox nodes. PVE users cannot log in to hosts; deploy fails with PVE auth.
esxi-agent: esxi-agent must be deployed and running (same service as for VMware). The esxi-agent node must reach the Proxmox API and storage, or remote mount and deploy fail.
No cloud-init required on the image: Password, keys, and IP are written directly to disk by host-deployer, same as local KVM and VMware.
VM must be powered off: Remote system-disk mount for deploy requires the VM to be off.
NIC: Choose a local IP subnet Layer-2-reachable to the target node. At create time the NIC attaches to the bridge recorded on that Layer-2 network (e.g. vmbr0); if none is recorded, default is vmbr0. Ensure the target node has that bridge and Layer-2 connectivity to the chosen IP subnet.

Tip: Glance images suit bulk delivery of packaged OSes; ISO suits interactive install or custom partitioning.

Running VM IPs come from QEMU Guest Agent. Without Guest Agent installed/enabled, IPs may be missing after sync.
Reinstall OS, bind security group, bind EIP, create snapshot, and migrate are not supported.
Attach disks only when the VM is powered off; detach can be done powered on or off. Creating cloud disks alone from the disk menu is not supported; data disks are added with VM create or add-disk on the VM.
Disk resize capacity must be an integer multiple of 1 GB; the VM may be on or off.
Adjusting CPU and memory can be done powered on or off.

Tip: If no resources appear after importing the account, check account permissions and whether QEMU VMs exist on Proxmox (LXC containers are not synced).

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Proxmox, then click “Next: Configure cloud account”.
Configure:
- Name: Proxmox cloud account name.
- Remarks: optional remarks.
- Access address: Proxmox console IP or domain, without protocol, path, or port.
- Port: Proxmox console port (default 8006).
- Auth method: PAM (Linux system user) or PVE (Proxmox VE local user). Must be PAM when creating VMs from Glance images with remote system-disk mount.
- Account / Password: Proxmox console username and password; do not include @pam / @pve in the account.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” and configure related parameters.
Click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the Proxmox cloud account, related IP subnets, and sync resources on the account.

Docs: Create H3C Account

Mon, 01 Jan 0001 00:00:00 +0000

Procedure

On the Cloud Accounts page, click “Create” above the list to open the create page.
Select H3C as the cloud platform, then click “Next: Configure cloud account”.
Configure:
- Name: H3C cloud account name.
- Notes: notes for the account.
- Endpoint: H3C console URL.
- Port: H3C console port, default 11000.
- Account and password: credentials for the H3C console.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Configure sync regions” and set related parameters.
Click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the H3C account.

Docs: Create S3 Account

Mon, 01 Jan 0001 00:00:00 +0000

S3 stands for Simple Storage Service. Before creating an S3 account, deploy an S3-compatible object storage server such as MinIO. For MinIO installation, see the reference link.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select S3, then click “Next: Configure cloud account”.
Configure:
- Name: S3 object storage server name.
- Endpoint: S3 object storage endpoint. For MinIO, use http://IP:9000.
- Key ID: Access Key.
- Password: Secret Key.
- Common parameters: see Common configuration parameters.

On the MinIO server, run the related commands to get Endpoint, Access Key, and Secret Key.

Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the S3 account.

Docs: Create Ceph Account

Mon, 01 Jan 0001 00:00:00 +0000

Connect and import Ceph object storage resources.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select Ceph, then click “Next: Configure cloud account”.
Configure:
- Name: Ceph object storage server name.
- Endpoint: Ceph object storage endpoint.
- Key ID: Ceph object storage key ID.
- Password: password for the key ID.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “OK” to create the Ceph account.

Docs: Create XSKY Account

Mon, 01 Jan 0001 00:00:00 +0000

Connect and import XSKY storage resources. XSKY object storage must exist in the environment.

Procedure

On the Cloud Accounts page, click “Create” above the list.
Select XSKY, then click “Next: Configure cloud account”.
Configure:
- Name: XSKY storage server name.
- Endpoint: XSKY storage endpoint.
- Key ID: XSKY object storage key ID.
- Password: password for the key ID.
- Common parameters: see Common configuration parameters.
Click “Connection test” to verify parameters.
After a successful test, click “Next: Scheduled sync (optional)” to configure scheduled sync.
Click “OK” to create the XSKY account.

Cloudpods – Multi-Cloud Management

Docs: Cloud Accounts

Select cloud platform type

Public cloud

Private cloud

Object storage

Common configuration parameters

Cloud account operations

Sync cloud account

Enable

Disable

Connection test

Set automatic sync

Set sync policy

Update account

Read-only mode

Enable passwordless login

Set sharing

Set proxy

Update billing

Set discount rate

Clone account

Change project

Sync SKU

Rerun billing

Create subscription

Delete

Cloud account details

Basic information

Additional information

Details page tabs

Cloud account list filters

Public cloud billing collection rules

Docs: Create Alibaba Cloud Account

Procedure

How to obtain Alibaba Cloud parameters

Obtain AccessKey with the primary account

How a RAM sub-account obtains an Access Key

Permission configuration

How to grant permissions to a sub-account

Billing configuration

Cloud account type

Bucket URL

File prefix

Billing analysis scope

Collect billing immediately

Time range

How to obtain the billing bucket URL?

Docs: Create AWS Account

Procedure

How to obtain AWS parameters

Obtain AWS access keys

Permission configuration

Billing configuration

Cloud account type

Billing analysis scope

How to obtain the bucket URL?

How to onboard AWS Organizations accounts?

Configure AWS Organizations

How to add the OrganizationAccountAccessRole role to an AWS account?

Docs: Create Azure Account

Procedure

How to obtain Azure parameters

Obtain Azure Tenant ID and Client information

How to grant subscription permissions to the application

Application API permission settings

Permission configuration

Billing configuration

Billing bucket configuration

API billing configuration

Configure billing API permissions

EA account configuration (deprecated)

How to obtain the Azure billing bucket

How to obtain the Azure enrollment number and key (deprecated)

Docs: Create Huawei Cloud Account

Procedure

How to get Huawei Cloud parameters

How to get a Huawei Cloud API key

Permission configuration

Billing configuration