Providers
Alibaba Cloud
Not yet scoredConnects with a RAM user access key — never the root account — with AssumeRole/STS strongly preferred for staging and production. Covers VPC, ECS, RDS, PolarDB, ACK, KMS, and WAF.
Production explicitly rejects any generate request asking for public internet bandwidth on greenfield ECS — the policy blocks it before a plan is even produced, not after apply.
- Greenfield ECS instances are private by default; staging and production reject any configuration requesting public internet bandwidth.
- Cost estimates prefer the real BSS OpenAPI billing endpoint, falling back to an ECS inventory × hourly-rate estimate when it's unavailable.
This provider isn't yet included in the capability maturity matrix — it has real Terraform generation and validation, but FinOps, drift, day-2, and copilot support aren't independently rated yet.
A minimal real resource
resource "alicloud_instance" "web" {
instance_type = "ecs.g6.large"
image_id = "centos_8_5_x64_20G_alibase.vhd"
internet_max_bandwidth_out = 0
}Under the hood
- backend/src/lib/cloud-provider.ts
- docs/providers/alicloud-production-readiness.md