---
title: "POST /target-create-alicloud"
method: POST
path: "/target-create-alicloud"
tags: ["Targets"]
---

# POST /target-create-alicloud

`POST /target-create-alicloud`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/target-create-alicloud`
- Auth: none declared

## Request body

- TargetCreateAliCloud
  - `access-key` string: AliCloud RAM access key secret
  - `access-key-id` string: AliCloud RAM access key ID
  - `delete_protection` string: Protection from accidental deletion of this object [true/false]
  - `description` string: Description of the object
  - `generate-external-id` boolean: A unique auto-generated value used in your AliCloud account when configuring the RAM role trust policy to securely delegate access to Akeyless. Relevant only when using GW cloud ID
  - `json` boolean: Set output format to JSON
  - `key` string: The name of a key that used to encrypt the target secret value (if empty, the account default protectionKey key will be used)
  - `lock-on-read` string: Lock this secret after each successful value read
  - `lock-ttl` string: Lock TTL in minutes
  - `max-versions` string: Set the maximum number of versions, limited by the account settings defaults.
  - `name` string, required: Target name
  - `region` string: AliCloud region. Selects the regional STS endpoint. If empty, the global STS endpoint is used
  - `role-arn` string: AliCloud RAM role ARN that the Gateway will assume in your AliCloud account (acs:ram::<account-id>:role/<role-name>), relevant only when using external ID
  - `rotate-on-unlock` string: Rotate this secret after it is unlocked
  - `session-token` string: Required only for temporary security credentials retrieved using STS
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication
  - `use-gw-cloud-identity` boolean: Use the Gateway cloud identity

## Response `201`

targetCreateAliCloudResponse wraps response body.

- TargetCreateOutput
  - `target_id` integer

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/infrastructure-connectivity.md) - [All operations](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/revisions/62dc62fea89d?raw)