Alibaba Cloud CAS

Overview

AutoSSL can automatically upload newly issued SSL certificates directly to the Alibaba Cloud Certificate Management Service (CAS). This makes the certificate available for other Alibaba Cloud services to consume centrally.

For instructions on how to manage and run this deployment, please refer to the Deployment Management section.

Configuration Parameters

When you add or edit this deployment target in the AutoSSL console, you will note that:

This provider operates globally on your Alibaba Cloud account and does not require specific configuration parameters.

How it Works

When AutoSSL deploys a certificate to Alibaba Cloud CAS, it performs the following steps:

Upload Certificate:

• Uses the Alibaba Cloud CAS API (UploadUserCertificate) to upload the certificate and private key to your account.
• A unique certificate name is generated automatically (e.g., cert_from_autossl.dev_XXXXXX) to ensure uniqueness across your account.

Access Key Requirement

Required Permissions

The Access Key must belong to a RAM user with permissions to upload certificates to CAS.

You need to attach a custom policy to your RAM user with at least the following actions:

• yundun-cert:UploadUserCertificate

For more information on how to manage RAM permissions, please refer to the Alibaba Cloud RAM Policy Documentation.