When you hit a 403 or NoPermission error working with Alibaba Cloud, this skill jumps in to diagnose what's missing. It parses RAM permission errors, decodes diagnostic messages using the aliyun CLI, and figures out whether you're dealing with a missing action, an explicit deny, or a trust policy issue. You get a quick analysis path for common cases or a deep dive that runs gap analysis against your current policies. It then generates least-privilege recommendations and can help apply the fix. The workflow is structured around the aliyun CLI's RAM diagnostic commands, so you need version 3.3.3 or higher installed. Solid for teams managing complex Alibaba Cloud IAM setups where permission errors aren't always obvious from the raw error alone.
npx skills add https://github.com/aliyun/alibabacloud-aiops-skills --skill alibabacloud-ram-permission-diagnose