What is the Alicloud Security Kms skill?

It is a tool to manage Alibaba Cloud KMS resources via OpenAPI/SDK, covering listing, configuring, querying status, and troubleshooting.

How do I authenticate?

Use environment variables ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET, plus ALICLOUD_REGION_ID; or store credentials in ~/.alibabacloud/credentials.

Which APIs should I use for inventory vs mutation?

For inventory use List*/Describe* APIs; for mutations use Create*/Update*/Modify*/Set* APIs; for diagnosis use Get*/Query*/Describe*Status.

Alicloud Security Kms

Scanned

@cinience

npx machina-cli add skill @cinience/alicloud-security-kms --openclaw

Files (1)

SKILL.md

1.9 KB

Category: service

Key Management Service

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for KeyManagementService.

Workflow

Confirm region, resource identifiers, and desired action.
Discover API list and required parameters (see references).
Call API with SDK or OpenAPI Explorer.
Verify results with describe/list APIs.

AccessKey priority (must follow)

Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
Shared config file: ~/.alibabacloud/credentials

API discovery

Product code: Kms
Default API version: 2016-01-20
Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

Inventory/list: prefer List* / Describe* APIs to get current resources.
Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/alicloud-security-kms/

References

Sources: references/sources.md

Source

git clone https://clawhub.ai/cinience/alicloud-security-kmsView on GitHub

Overview

Manage Alibaba Cloud KeyManagementService resources through OpenAPI RPC or official SDKs. It supports listing resources, creating/updating configurations, querying status, and troubleshooting KMS workflows, enabling automation and reliable key management.

How This Skill Works

The skill uses Alibaba Cloud OpenAPI metadata and the Kms product code (default API version 2016-01-20) to manage resources via SDKs or OpenAPI Explorer. Typical workflow: confirm region and IDs, discover required APIs and parameters, call the API with a supported client, and verify results with describe/list APIs. It follows high-frequency patterns: inventory with List*/Describe*, mutations with Create*/Update*/Modify*/Set*, and diagnosis with Get*/Query*/Describe*Status.

When to Use It

Inventory current KMS keys, aliases, and configurations across a region.
Create, update, or configure KMS resources and policies.
Query the status of KMS resources or ongoing operations.
Troubleshoot KMS workflows or integration issues using diagnostic APIs.
Explore available KMS APIs and schemas via OpenAPI metadata for automation.

Quick Start

Step 1: Discover APIs with Python: python scripts/list_openapi_meta_apis.py
Step 2: Optional overrides: python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>
Step 3: Call APIs via SDK/OpenAPI Explorer and verify results with Describe/List APIs; artifacts saved under output/alicloud-security-kms/

Best Practices

Prefer List*/Describe* for fresh inventory before making changes.
Use Create*/Update*/Modify*/Set* for all mutations to ensure explicit configuration changes.
Define region and resource identifiers up front to avoid ambiguity.
Store credentials securely using environment variables (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET) or ~/.alibabacloud/credentials; respect region defaults.
Validate outcomes with subsequent Describe/Get calls and log results under output/alicloud-security-kms/.

Example Use Cases

Inventory all KMS keys and their statuses using List* APIs and save artifacts to output/alicloud-security-kms/.
Create a new KMS key or update its configuration via Update*/Set* APIs and confirm with Describe.
Query the status of a key or policy to ensure readiness before use.
Troubleshoot a KMS workflow by fetching Get*/Describe*Status data and correlating with logs.
Automate API discovery by running the provided Python script to generate OpenAPI metadata and store artifacts in the output directory.

Frequently Asked Questions

Add this skill to your agents