Alibabacloud Ram Permission Diagnose

When you hit a 403 or NoPermission error working with Alibaba Cloud, this skill jumps in to diagnose what's missing. It parses RAM permission errors, decodes diagnostic messages using the aliyun CLI, and figures out whether you're dealing with a missing action, an explicit deny, or a trust policy issue. You get a quick analysis path for common cases or a deep dive that runs gap analysis against your current policies. It then generates least-privilege recommendations and can help apply the fix. The workflow is structured around the aliyun CLI's RAM diagnostic commands, so you need version 3.3.3 or higher installed. Solid for teams managing complex Alibaba Cloud IAM setups where permission errors aren't always obvious from the raw error alone.

skills.sh installs: 555
GitHub stars: 289
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aliyun/alibabacloud-aiops-skills --skill alibabacloud-ram-permission-diagnose --agent claude-code

Installs into .claude/skills of the current project.

Files

RAM Permission Diagnosis and Repair

Installation

Pre-check: Aliyun CLI >= 3.3.3 required

Run aliyun version to verify >= 3.3.3. If not installed or version too low, run curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash to update, or see references/cli-installation-guide.md for installation instructions.

Pre-check: Aliyun CLI plugin update required

[MUST] run aliyun configure set --auto-plugin-install true to enable automatic plugin installation. [MUST] run aliyun plugin update to ensure that any existing plugins are always up-to-date.

SKILL.md on GitHub