Alibaba Cloud international balance & RAM AccessKey guide

Connect Alibaba Cloud international with minimal RAM permissions. Reconcile available credit, cash and currency safely—not a Model Studio-only wallet.

Awaiting live-account verification

Guide updated

Implemented from official endpoint, QueryAccountBalance, SDK, RAM and billing documentation reviewed 2026-10-17. Real international accounts, permissions, signed-in navigation and reconciliation await user testing. China-site validation does not transfer. No supplier login, model call or permission change was performed.

Required credentials
Dedicated international RAM user's AccessKey ID / AccessKey Secret
Monitoring currency
Explicit USD / CNY / JPY selection; exact reported currency, no conversion
What is monitored
Cloud account available credit · may include credit facilities, not cash
Only fixed read-only POST https://business.ap-southeast-1.aliyuncs.com/, QueryAccountBalance 2017-12-14, ACS3-HMAC-SHA256. No business parameters, body or redirects. Primary availableAmount comes from AvailableAmount; availableCashAmount, creditAmount, mybankCreditAmount and quotaLimit are separate. This international cloud billing account includes non-AI services—not a Model Studio wallet, project balance or single-key cap.

Check manually without hosting an AccessKey

  1. Sign in to international Billing and Cost Management; use Account > Billing Account to confirm the actual payer and currency.
  2. Read available credit, cash, credit facilities and bills separately. Confirm shared cloud scope; do not sum keys or projects.
  3. Compare like currency, scope and time. Unsupported currencies, unreported values and unsettled charges must remain distinct—do not convert.
Open official Alibaba Cloud international / Model Studio page(opens in a new tab)

Connect Alibaba Cloud international / Model Studio to Quota Monitor

  1. Confirm the international billing account and currency

    Open international Billing and Cost Management, then Account > Billing Account. Confirm this is the payer used by your application. Available credit may pay for Model Studio and other cloud services; it is not an AI-only wallet.

    Note the actual settlement currency. Only USD, CNY or JPY is supported here; use manual viewing for EUR, SGD, HKD or others. Do not change currency for monitoring. During console rollout, use the old console's New Console link only if present—do not guess signed-in paths.

  2. Have an existing administrator create a dedicated RAM user

    In international RAM, go to Identities > Users > Create User. Enter Logon Name and Display Name, for example QuotaMonitorBalance. Do not use the root account's AccessKey.

    Only Permanent AccessKey programmatic access is needed, not Console Access or administrator rights. Complete official security verification privately and acknowledge the long-lived-key risk. If you lack existing management rights, ask your existing administrator; do not elevate the monitoring user.

  3. Create the minimal read-only billing policy

    In Permissions > Policies > Create Policy, select JSON Editor. Paste the Version 1 policy below and name it QuotaMonitorBalanceRead. bss:DescribeAcccount contains three consecutive c characters; Resource * is the documented resource scope for this action.

    Do not substitute administrator, FullAccess, billing-write permissions or the newer bss:DescribeBillingAccount action. This connection calls only the 2017 API. The policy contains no account identifiers, keys, endpoints or real secrets.

    Alibaba Cloud international / Model Studio read-only policy JSON

    {
      "Version": "1",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "bss:DescribeAcccount"
          ],
          "Resource": "*"
        }
      ]
    }

    Copies the complete JSON without keys or account details.

  4. Attach the policy to the correct RAM user

    Return to Identities > Users and choose Attach Policy in that dedicated user's Actions. In Grant Permission, confirm the Principal, choose Account level / Entire Alibaba Cloud Account for Resource Scope, then choose QuotaMonitorBalanceRead under Custom Policy and confirm.

    Creating a policy does not grant it. Check the attached effective permission rather than choosing a resource group or adding administrative policies to troubleshoot. Your existing administrator performs this one-time setup; monitoring does not manage permissions.

  5. Save the matching AK/SK privately

    If user creation already generated a permanent AccessKey, use that pair instead of creating another. For an existing dedicated user, open user details > Credential > AccessKey > Create AccessKey, select the official use case and complete security confirmation.

    The full AccessKey Secret is normally shown only at creation; both values must be the same pair. Do not enable global user self-management of AccessKeys or supply STS SecurityToken, a model key or a full Authorization header. Respect the official two-key rotation limit.

  6. Select the international provider and actual currency

    In your Quota Monitor project, add a connection and select Alibaba Cloud international / Model Studio. Put the dedicated RAM AccessKey ID and AccessKey Secret in the two password fields. Explicitly choose USD, CNY or JPY to match the billing console.

    MCP secure credential-setup links use the same provider. Never put AK/SK in AI conversations or tool arguments. Credentials are encrypted; other views show only the last four characters. There are no region, arbitrary URL, project or key filters. The help drawer reuses this guide without reading or submitting input.

  7. Refresh and reconcile reported available credit

    After the first sync, confirm a new successful-query time, then compare Available Credit / AvailableAmount for that payer and currency. For example, 123.4567890123456789 USD is dollars, not cents. Zero and negative values retain their meaning.

    The main card is available credit, not cash. Reconcile AvailableCashAmount, CreditAmount, MybankCreditAmount and QuotaLimit separately. Missing/null means not returned, not zero or a term to add. The endpoint reports no model quota, reset time or final cost; providerAvailable remains unknown.

  8. Understand shared scope and version limits

    Equal amounts across keys or projects can represent the same shared billing account; never sum them. Model usage, packages, budgets, credit limits and China-site funds are different values.

    The separate 2023 GetFundAccountAvailableAmount API has different account and multi-currency fields. This integration intentionally fixes the documented 2017 endpoint and single permission. No automatic fallback or privilege expansion occurs; mismatched currency or an inapplicable account fails while retaining the old snapshot.

  9. Troubleshoot and rotate safely

    For 401/403 check the international provider, matching AK/SK, revocation, actual policy attachment and the spelling bss:DescribeAcccount. For AuthSiteFail, SignatureDoesNotMatch, InvalidTimeStamp or SignatureNonceUsed check site and server clock; wait before retrying 429. Do not test with paid model calls.

    Rotate only the dedicated monitoring credential through the secure form. Confirm success before retiring its old key; leave application credentials alone. Failed queries neither replace old amounts with zero nor refresh successful times. Share only redacted error codes—no Cookies, top-ups, upgrades or broader permissions.

What Quota Monitor reads from Alibaba Cloud international / Model Studio

  • The 2017 API documents only USD, CNY and JPY. Select the actual billing currency and require an exact response match. International settlement can also use EUR, SGD, HKD or other currencies; those are unsupported here. Never guess, convert or change settlement currency for monitoring.
  • China aliyun and international aliyun_global have separate credentials, fixed endpoints and verification status. There is no Singapore-to-China retry, automatic 2023 API switch or permission expansion.
  • Available credit may reflect credit facilities, refunds and unsettled charges; it is not withdrawable cash. Never reconstruct it by adding AvailableCashAmount, CreditAmount, MybankCreditAmount or QuotaLimit. Missing values mean unknown, not zero.
  • Cloud services, keys and Quota Monitor projects can share this billing account. Never sum duplicate connections. A billing account may also pay for other accounts; reconcile your actual payer scope.
  • Amounts are original-currency major units, not cents; exact decimal strings and signs are retained. No reset, expiry, model availability or final cost is inferred. Runway based on a user-entered daily burn is only an estimate.
  • The dashboard shows the latest successful snapshot. Manual refresh queries the provider again but cannot eliminate upstream billing delays. An old balance is not a new result after a failed query.

Alibaba Cloud international / Model Studio FAQ and troubleshooting

Is this Model Studio balance or pure cash?
Neither. AvailableAmount is the shared international cloud billing account's available credit, which may include credit facilities. Cash is separate; no funds are automatically allocated to a model, project or key.
Why choose currency? Are EUR, SGD and HKD supported?
The 2017 API documents USD, CNY and JPY only. An explicit selection and exact response match are required. Other currencies fail safely: no assumed USD, conversion or request to change settlement currency.
I created the policy but still receive 403
Creation is not attachment. Check Attach Policy for the dedicated RAM user, account-level scope, the effective custom policy and bss:DescribeAcccount (three consecutive c characters). Do not add administrator or FullAccess policies.
Why not use a model key, China AK or STS?
A Model Studio API key is not a RAM AK/SK. China and international accounts are separate. STS temporary credentials, arbitrary endpoints and user-selected regional routing are unsupported; changing a URL is not a workaround.
Why are amounts different or cash negative?
First match the payer, currency and query time, then compare AvailableAmount separately from cash and credit. Do not reconstruct, sum or infer cash from a credit limit. Positive available credit does not prove every model request will succeed.
What about timeouts, 429 or missing fields?
Wait and check official service status. A currency mismatch, missing/malformed amount or unsuccessful envelope retains the previous snapshot and successful time. Never publish AK/SK, signatures, raw responses or identity fields; share only redacted error codes.

Official Alibaba Cloud international / Model Studio references

Prepared by Quota Monitor, not an official provider tutorial. Interfaces and permissions may change; check official pages. Verification is limited to the scope stated here.

Monitor Alibaba Cloud international / Model Studio automatically

Checking a console by hand is easy to forget. Quota Monitor reads Alibaba Cloud international / Model Studio through its official API for you.

  • Refreshes every 10 minutes by default, and you can refresh manually at any time.
  • Low balances, invalid keys, and sync failures appear at the top of your overview.
  • Group accounts by project, and ask about balances from AI assistants such as Claude through remote MCP.
Start for free

Using the other site? View the Alibaba Cloud / Model Studio (China) setup guide