Alibaba Cloud resource inventory

Inventory Alibaba Cloud resources for Cortex XSIAM onboarding.

The onboarding process creates resources in the customer's Alibaba Cloud account using the Terraform authentication template. All resources are created at the account level.

Resource type	Resource name	Purpose
alicloud_ram_role	CortexPlatformRole	RAM role that Cortex XSIAM assumes via OIDC federation. Configured with a trust policy that accepts GCP OIDC tokens with the configured audience.
alicloud_ram_policy	Custom Policy	RAM policy with 46 read-only permissions across ECS, OSS, RAM, RDS, VPC, SLB, ActionTrail, CEN, and NAS services.
alicloud_ram_role_policy_attachment	Policy Attachment	Attaches the custom read-only policy to the CortexPlatformRole.
(OIDC Provider)	OIDC Identity Provider	Alibaba Cloud OIDC identity provider that trusts GCP OIDC tokens issued by Cortex XSIAM with the audience alibaba-cortex-wif-<tenantID>.