Alibaba Cloud: The Practical Route Into Asia-Pacific

Two clouds, not one

This is the single most important thing to understand. Alibaba Cloud operates mainland China regions and international regions as effectively separate environments. They have different account systems, different consoles, different compliance requirements and different network characteristics.

• International regions — Singapore, Hong Kong, Tokyo, Sydney, Frankfurt, London, Dubai, Silicon Valley and others. These behave like any other global cloud. No special filing needed.
• Mainland China regions — Beijing, Shanghai, Hangzhou, Shenzhen and more. Hosting a public website here requires an ICP filing, and cross-border traffic is subject to national network controls.

Choosing the wrong side of that line is the mistake that costs weeks. Decide first whether you need to serve mainland China specifically, or the wider region.

ICP filing, briefly

An ICP filing is a registration with Chinese authorities required to host a publicly accessible website on mainland servers. It is tied to a domain, requires a legal entity presence, and takes time — commonly weeks. Without it, mainland hosting for a public site is not viable.

A very common architecture avoids the question entirely: host in Hong Kong or Singapore, accept the additional latency to mainland users, and skip the filing. Whether that is acceptable depends on how latency-sensitive your product is.

The core services

The mapping is close enough that experience on another cloud transfers quickly. Terminology and console layout differ, and some documentation reads as translated, but the concepts line up.

Pricing and commitment

ECS is sold pay-as-you-go, as subscription (monthly or yearly, cheaper for steady workloads), preemptible for interruptible batch work, and through savings plans. Subscription pricing is meaningfully below pay-as-you-go, so anything long-running should be on it.

International-region pricing is competitive with the major clouds rather than dramatically cheaper. The reason to choose Alibaba Cloud is reach into Asia-Pacific, not price.

Free trial

New international accounts get a trial with credit and a set of free-tier products for a limited window, enough to evaluate ECS, OSS and RDS properly. The verified trial account we list is on the Alibaba Cloud account page.

Securing the account

1. Change the password and enable multi-factor authentication on the root account.
2. Open RAM (Resource Access Management) and review users, groups and roles.
3. Check AccessKey pairs. Root AccessKeys are the highest-risk credential on the platform — delete them and use RAM users instead.
4. Create a RAM user for daily work with only the policies it needs.
5. Configure security groups tightly; the default can be more permissive than you expect.
6. Enable ActionTrail for an audit log of API activity.
7. Set a spending alert under Billing.

Step three is the important one. An AccessKey on the root account grants unrestricted API access and is the credential most worth eliminating on any inherited account.

Common questions

Where to go next

For a wider view of picking regions and edge strategy, see choosing a cloud region. The available trial account is on the Alibaba Cloud account page.