Skip to content

How To Use the Aliyun (Alibaba Cloud) DNS Plugin

This plugin works against the Aliyun (Alibaba Cloud) DNS provider. It is assumed that you have already setup an account and registered the domains or zones you will be working against.


First, login to your account and go to the Security Management page. Click the Create Access Key link and make a note of the Key ID and Secret values.


It is also supported recommended to use RAM (Resource Access Management) users with more limited privileges instead of your root account key. More information about creating RAM users can be found here.

Using the Plugin

The Key ID is specified as a string using AliKeyId and the secret is specified as a SecureString using AliSecret.


The AliSecretInsecure parameter is deprecated and will be removed in the next major module version. If you are using it, please migrate to the Secure parameter set.

$secret = Read-Host "Secret" -AsSecureString
$pArgs = @{
    AliKeyId = 'asdf1234'
    AliSecret = $secret
New-PACertificate -Plugin Aliyun -PluginArgs $pArgs