Design or audit Alibaba Cloud identity, access, and security posture — RAM (users/groups/roles/policies), STS temporary credentials, KMS (Standard/Dedicated HSM), Secrets Manager, Cloud Config, Cloud Firewall, Security Center (Threat Detection), Anti-DDoS, ActionTrail, SDDP. Use when writing RAM policies, rotating secrets, scoping roles, or hardening an account.
