# Official Sources — Alibaba Cloud Live RAM Policy Change Guard

Authoritative Alibaba Cloud documentation for RAM policy, role, and access management operations.

## Core References

- **RAM Overview** — https://www.alibabacloud.com/help/en/ram
  RAM architecture, principals (users, groups, roles), policy types, and trust relationships.

- **Create a Custom Policy** — https://www.alibabacloud.com/help/en/ram/user-guide/create-a-custom-policy
  Policy syntax, version management, and best practices for least-privilege custom policies.

- **Attach a Policy to a RAM Role** — https://www.alibabacloud.com/help/en/ram/user-guide/grant-permissions-to-a-ram-role
  How to attach and detach system and custom policies from RAM roles.

- **STS Overview** — https://www.alibabacloud.com/help/en/ram/user-guide/what-is-sts
  STS token issuance, TTL configuration, and how policy changes affect active STS sessions.

- **RAM Policy Language** — https://www.alibabacloud.com/help/en/ram/user-guide/policy-language
  RAM policy syntax reference, condition operators, and wildcard usage.

- **Resource Directory Overview** — https://www.alibabacloud.com/help/en/resource-management
  Multi-account governance, OU structure, and Control Policy hierarchy.

- **Control Policies** — https://www.alibabacloud.com/help/en/resource-management/user-guide/control-policy-overview
  Creating and managing Control Policies (service control policies) for Resource Directory OUs.

- **ActionTrail Overview** — https://www.alibabacloud.com/help/en/actiontrail
  Audit logging for RAM mutations, event structure, and querying RAM change events.

- **RAM Best Practices** — https://www.alibabacloud.com/help/en/ram/user-guide/ram-best-practices
  Least-privilege guidance, STS over access keys, and role-based access patterns.
