Alibaba Cloud China Balance and RAM AccessKey Setup

Connect Alibaba Cloud available funds with a minimal RAM policy, while keeping cash, credit, and Model Studio quotas distinct.

Live test reported

Guide updated

A user reported a successful China-site test on September 28, 2026. Specific amounts, the RAM policy used, and MCP reconciliation were not independently recorded. Verify your own account and permissions.

Required credentials
RAM AccessKey ID + AccessKey Secret
Monitoring currency
CNY · Chinese yuan
What is monitored
Available cloud funds · Not pure cash
Official AvailableAmount, read directly. Shared account funds may include credit; they are not cash or a Model Studio wallet. AvailableCashAmount, credit, MYbank credit, and ecosystem customer quota are shown separately, not added again.

Connect Alibaba Cloud / Model Studio (China) to Quota Monitor

  1. Identify the China-site paying account

    In Billing and Cost Management, open Account → Funds Account and check available funds and cash. Identify the actual payer for consolidated billing or partner payments.

  2. Create a dedicated RAM user and custom policy

    Create a programmatic-access user without console sign-in. In Permissions → Policies → Create Policy → Script, replace the default editor contents with the complete JSON below. Name it QuotaMonitorBalanceReadOnly. No account IDs or credentials belong in this policy.

    Use bss:DescribeAcccount exactly, including the three c characters in Acccount. Resource * is required by this action; it does not grant every action. AliyunBSSReadOnlyAccess is broader than this minimal policy. Do not grant payment, top-up, model, resource, or key-management permissions.

    Alibaba Cloud / Model Studio (China) read-only policy JSON

    {
      "Version": "1",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "bss:DescribeAcccount"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }

    Copies the complete JSON without keys or account details.

  3. Attach the policy to the user

    Creating a policy does not grant it. Under Identities → Users → Add Permissions, choose Entire Cloud Account and attach your custom QuotaMonitorBalanceReadOnly policy. This endpoint does not support resource-level scoping; do not limit it to a resource group.

    Only an administrator attaching the policy changes permissions. Check the selected user and explicit denies after a failed first sync; never switch to administrator keys.

  4. Create a matching AccessKey pair

    An administrator should create the user’s key under Credentials → AccessKey and securely save the ID and one-time-displayed Secret. Do not use Model Studio, primary-account, administrator, or STS temporary credentials. Never send keys in chat.

  5. Add the Alibaba Cloud connection

    Select Alibaba Cloud / Model Studio (China) and enter ID and Secret separately. Currency is CNY; no region or Model Studio project ID is needed. Both values are encrypted; only the ID’s last four characters are displayed.

  6. Compare available funds and cash separately

    Refresh and compare the main amount with the same account’s available funds. Expand details for cash and credit. Do not substitute cash or packs for available funds or add the fields again.

What Quota Monitor reads from Alibaba Cloud / Model Studio (China)

  • Alibaba Cloud China CNY accounts only, not international accounts or other currencies. Model Studio packs, free tokens, and Coding Plan quotas are excluded.
  • Projects and model keys may share funds. Verify the payer for enterprise, consolidated, or partner billing. Quota limits are not remaining cash. Missing details are not zero.
  • No model calls, top-ups, cloud changes, or RAM changes. Snapshots are subject to posting delays and cannot alone establish model availability.
  • The dashboard shows the latest successful snapshot. Manual refresh queries the provider again but cannot eliminate upstream billing delays. An old balance is not a new result after a failed query.

Alibaba Cloud / Model Studio (China) FAQ and troubleshooting

Why can I not use a Model Studio key?
Financial account queries require RAM AccessKey request signing, not a model Bearer key. Use an authorized RAM user in the same China-site account.
Why are credentials or permissions rejected?
Check matching active keys, the exact bss:DescribeAcccount action, explicit denies, and source restrictions. Share only redacted error codes and times; never grant administrator access to troubleshoot.
Why do available funds differ from cash?
They are separate fields affected by credit and unsettled charges. We preserve the official values. Different funding accounts, enterprise relationships, or query times can also explain differences.
What about international-site, currency, or time errors?
Only China CNY is supported. USD and JPY are never relabeled as CNY. Check site and credentials, and have an administrator investigate persistent clock errors. Failure retains the previous snapshot without writing zero.

Official Alibaba Cloud / Model Studio (China) references

Prepared by Quota Monitor, not an official provider tutorial. Interfaces and permissions may change; check official pages. Verification is limited to the scope stated here.

Monitor Alibaba Cloud / Model Studio (China) automatically

Checking a console by hand is easy to forget. Quota Monitor reads Alibaba Cloud / Model Studio (China) through its official API for you.

  • Refreshes every 10 minutes by default, and you can refresh manually at any time.
  • Low balances, invalid keys, and sync failures appear at the top of your overview.
  • Group accounts by project, and ask about balances from AI assistants such as Claude through remote MCP.
Start for free

Using the other site? View the Alibaba Cloud international / Model Studio setup guide