Skip to content

Alibaba Cloud (Aliyun)

Summary

Alibaba Cloud (Aliyun) is Alibaba Group's cloud platform. It is the largest cloud provider in mainland China and runs 31 regions and 107 availability zones worldwide (2026-09-23). Its growth markets are Southeast Asia, the Middle East, Europe, and Latin America. It offers the full IaaS/PaaS range. The parts that stand out architecturally are multi-account governance (Resource Directory + Agentic Cloud Governance Center), transit networking (CEN + Transit Router, Express Connect Router), databases (PolarDB, PolarDB-X), and the Qwen AI stack. This hub summarizes the platform. The linked pages hold the recipes, look-up tables, and design rationale.

Key Facts

Attribute Detail
Owner Alibaba Group (cloud unit within Alibaba Cloud Intelligence)
Websites alibabacloud.com (international) / aliyun.com (mainland China). Separate accounts, contracts, and pricing
Footprint 31 regions, 107 AZs (Apsara Conference, 2026-09-23). Up from 29 regions / 91 AZs in 2025-09
Latest Version (tooling) Terraform provider aliyun/alicloud 1.293.0 (2026-09-17). CLI aliyun v3.5.1 (2026)
License / model Proprietary commercial cloud. Pay-as-you-go, subscription, and savings plans. CLI and Terraform provider are open source (Apache-2.0 / MPL-2.0)
IaC Terraform aliyun/alicloud provider, Resource Orchestration Service (ROS)
Multi-account Resource Directory (folders up to 5 levels) + Control Policies + Agentic Cloud Governance Center (renamed 2026-06-24)
Southeast Asia regions Singapore, Kuala Lumpur, Johor (2026-06), Jakarta (ap-southeast-5), Manila, Bangkok
Market position Largest IaaS provider in China. Global ranking varies by analyst and year (often cited 3rd or 4th). No current figure verified here

Architecture at a Glance

The compact diagram shows how accounts, networking, and workloads relate in a typical landing zone. The full diagrams are in Explanation.

flowchart LR
    RD["Resource Directory<br/>+ Governance Center"] --> NETACC["Network account<br/>CEN + Transit Routers"]
    RD --> WLACC["Workload accounts<br/>VPC, ECS, ACK, PolarDB"]
    RD --> SECACC["Security + Log Archive<br/>Cloud Firewall, ActionTrail, SLS"]
    WLACC -->|"TR VPC attachment"| NETACC
    NETACC -->|"Express Connect / ECR"| DC["On-prem DC"]
    NETACC -->|"inter-region TR link"| OTHER["Other regions"]
    WLACC -.->|"logs, audit"| SECACC

When Alibaba Cloud Fits

  • Operating in mainland China: It has the broadest domestic region coverage, ICP filing support, and MLPS compliance packages. China regions need an aliyun.com account and a local entity.
  • China + Southeast Asia footprints: Six Southeast Asian regions (including Jakarta with three data centers) plus private CEN links into mainland China over Alibaba's backbone.
  • Multi-cloud with a China leg: Pairs with AWS/GCP for global workloads while Alibaba serves China. See Multi-Cloud Governance.
  • AI workloads using Qwen models: Model Studio and PAI. Regional availability varies, so check the target region.

Key Strengths

  • Strongest cloud footprint in China (most regions, best connectivity between Chinese regions)
  • CEN with Enterprise Transit Routers, route maps, and a choice of bandwidth plans or pay-by-data-transfer for inter-region links
  • Express Connect Router (ECR) for global hybrid routing with BGP
  • PolarDB (up to 15 read-only nodes per cluster per older docs) and PolarDB Global Database Network for cross-region reads and DR
  • Resource Directory + Control Policies + Governance Center account factory, comparable to AWS Organizations + SCPs + Control Tower, with Terraform coverage (alicloud_governance_account, alicloud_resource_manager_*)

Key Gaps (vs. AWS/Azure)

  • Smaller footprint outside Asia. Sydney and Mumbai closed in 2024. Several newer regions launched with one or two zones
  • English documentation quality varies. Some docs appear first or only in Chinese
  • Smaller third-party ecosystem (marketplace, MSPs, community tooling)
  • International (alibabacloud.com) and mainland (aliyun.com) sites differ in features, pricing, and account model
  • Geopolitical and data-sovereignty review is common for Western customers

Recent Developments (2025-2026)

Date Development
2025-02 Mexico (Querétaro) region launched (2025-02-18). Second Thailand data center (2025-02-13)
2025-02 Alibaba Group commits about RMB 380 bn (~US$53 bn) over three years to cloud and AI infrastructure
2025-06 Second South Korea data center
2025-09 Apsara 2025: plans for first data centers in Brazil, France, and the Netherlands, plus capacity in Mexico, Japan, South Korea, Malaysia, and Dubai. New service centers in Indonesia and Germany
2025-10 Second Dubai data center begins operating
2026-06 Johor (Malaysia) region launched. France (Paris, eu-west-2, 2 AZs) region launched 2026-06-17. Cloud Governance Center renamed Agentic Cloud Governance Center (2026-06-24)
2026-07 "Agent Native Cloud" positioning for enterprise AI agents announced
2026-08 Third South Korea data center (2026-08-18). Brazil (São Paulo, sa-east-1) region launched (2026-08-27)
2026-09 Apsara 2026: 31 regions / 107 AZs. First regions in Turkey, Finland, and the Netherlands planned within 12 months. Expansion in Malaysia, Germany, UAE, France, and Hong Kong. Target of more than 20 GW data-center capacity by 2032

Topic Map

  • How-to Guides: credentials (OAuth, CloudSSO, OIDC, role chaining), Resource Directory and landing zone setup, control policies, CEN attachments, CLI recipes, monitoring, identity and security tasks, troubleshooting.
  • Reference: tooling versions, region IDs (international and mainland), closed regions, service mapping to AWS/GCP, service naming, connectivity matrix, limits, credential modes, ACK cluster types, security products, compliance facts.
  • Explanation: architecture patterns (single VPC, CEN hub-and-spoke, peering, Express Connect, multi-account, multi-region, DR, DMZ, landing zone) and the security model.

Sources

Questions

  • How does Governance Center compare to AWS Control Tower in maturity? Account vending (EnrollAccount, baselines) and guardrails exist, and the 2026 agentic release added AI governance checks. The depth of drift detection and remediation still needs a hands-on comparison. See Explanation: Landing Zone.
  • Terraform coverage for multi-account setups (answered): The provider creates RD members (alicloud_resource_manager_account, since v1.83.0), vends governed accounts (alicloud_governance_account, since v1.228.0), and manages control policies, CloudSSO, and delegated administrators. Governed accounts cannot be destroyed by Terraform. See How-to Guides.
  • Active-active write conflicts (answered): DTS two-way sync supports bidirectional replication with configurable conflict handling. DRC is Alibaba's internal replication platform and is not sold separately; DTS is the public service that grew out of it (checked 2026-09-27). See Explanation: Active-Active.
  • Jakarta and Johor zone IDs: The reported data-center counts are 3 (Jakarta) and 2 (Johor). The Johor region ID is not yet confirmed from an official source.
  • Current quotas: VPC attachments per TR are confirmed at 1,000. RAM users per account and security groups per VPC still need checking against Quota Center (see Reference: Published Limits).