# DaaS — Documentation as a Skill > Structured, agent-ready knowledge for 28 products. Each product below exposes intent-routed skills (how-to, API, troubleshooting) that AI agents can call directly. Query routing API: `POST https://company-skill.com/api/route` with `{"query": "..."}`. DaaS turns documentation into skills an LLM can act on. For any product, prefer the per-product page (rich, structured) and the /api/route endpoint (returns the single best skill for a query). ## Products - [AIRec](https://company-skill.com/p/airec): AIRec is a platform for deploying and managing AI recommendation systems on Apsara Stack. It supports end-to-end workflows including instance management, system and API deployment, network and security configuration, cer - [Alibaba Mail](https://company-skill.com/p/alimail): Alibaba Mail is a secure enterprise email service offering comprehensive capabilities across contact management, account and security settings, email configuration, delivery troubleshooting, composition, mailbox manageme - [Alibaba Cloud Linux](https://company-skill.com/p/alinux): Alibaba Cloud Linux is a Linux distribution optimized for cloud environments, offering enhanced performance, security, and integration with Alibaba Cloud services. It supports a wide range of use cases including AI/GPU w - [Bailian (Alibaba Cloud Model Studio)](https://company-skill.com/p/bailian): Bailian (Alibaba Cloud Model Studio) is a comprehensive AI platform providing APIs, console guides, and troubleshooting for large language models, multimodal generation, speech processing, and developer tools. - [Certificate Management Service (CAS)](https://company-skill.com/p/cas): Certificate Management Service (CAS) provides comprehensive capabilities for managing SSL/TLS certificates across public, private, and compliance use cases. It supports certificate lifecycle operations including creation - [EventBridge](https://company-skill.com/p/eb): EventBridge is a serverless event bus service that enables you to build event-driven architectures by routing events between sources and targets. It supports managing event buses, defining routing rules, delivering event - [Elastic Compute Service (ECS)](https://company-skill.com/p/ecs): Elastic Compute Service (ECS) provides scalable virtual servers for cloud workloads. This skill covers all ECS domains including Billing, Monitoring, Network, System Management, Cloud Assistant, Storage, Image Management - [Elasticsearch](https://company-skill.com/p/es): Elasticsearch is a distributed search and analytics engine capable of handling diverse workloads including full-text search, vector search, AI-powered retrieval, document ingestion, model deployment, and more. This skill - [Auto Scaling (ESS)](https://company-skill.com/p/ess): Auto Scaling (ESS) enables automatic adjustment of computing capacity based on demand. It supports managing scaling groups, ECS/ECI instances, scaling rules, lifecycle hooks, scheduled/event-triggered tasks, and integrat - [IDaaS (Identity as a Service)](https://company-skill.com/p/idaas): IDaaS (Identity as a Service) is a comprehensive identity and access management platform that enables organizations to manage users, applications, authentication flows, access control policies, federation, and more. It s - [OceanBase](https://company-skill.com/p/oceanbase): OceanBase is a distributed relational database that supports high availability, strong consistency, and horizontal scalability. It provides comprehensive capabilities across data loading, transaction management, SQL exec - [OpenSearch](https://company-skill.com/p/opensearch): OpenSearch is a powerful search and analytics platform that supports vector search, multimodal retrieval, agentic memory, knowledge base management, and AI-powered text generation. It provides comprehensive capabilities - [Object Storage Service (OSS)](https://company-skill.com/p/oss): Object Storage Service (OSS) provides scalable, secure, and durable cloud storage for unstructured data. It supports a wide range of capabilities including core object storage, access control, network security, image pro - [Platform for AI (PAI)](https://company-skill.com/p/pai): Platform for AI (PAI) is a comprehensive machine learning and AI development platform that supports end-to-end workflows including data management, model training, deployment, monitoring, and more. It offers rich capabil - [ApsaraDB RDS](https://company-skill.com/p/rds): ApsaraDB RDS is a fully managed relational database service supporting multiple engines including MySQL, PostgreSQL, SQL Server, and MariaDB. It provides comprehensive capabilities across instance management, backup/rest - [Apache RocketMQ](https://company-skill.com/p/rocketmq): Apache RocketMQ is a distributed messaging and streaming platform with low latency, high performance, and reliability. This skill covers three core domains: - [Terraform](https://company-skill.com/p/terraform): Terraform is an infrastructure as code (IaC) tool that enables users to safely and predictably create, change, and improve cloud infrastructure using declarative configuration files. This skill covers multiple domains in - [Alibabacloud](https://company-skill.com/p/alibabacloud): alibabacloud skills. - [Clerk](https://company-skill.com/p/clerk): clerk skills. - [Cloudflare](https://company-skill.com/p/cloudflare): cloudflare skills. - [DataWorks](https://company-skill.com/p/dataworks): dataworks skills. - [GitBook](https://company-skill.com/p/gitbook): gitbook skills. - [Notion](https://company-skill.com/p/notion): notion skills. - [Resend](https://company-skill.com/p/resend): resend skills. - [Stripe](https://company-skill.com/p/stripe): stripe skills. - [Supabase](https://company-skill.com/p/supabase): supabase skills. - [Twilio](https://company-skill.com/p/twilio): twilio skills. - [Vercel](https://company-skill.com/p/vercel): vercel skills. ## Cross-product combinations > 536 auto-discovered integration patterns that combine multiple products into end-to-end workflows. - [A/B Test Compliant Checkout Flows](https://company-skill.com/p/_combos/a-b-test-compliant-checkout-flows-917b83): vercel + stripe. A developer uses Vercel feature flags to gradually roll out and A/B test new payment checkout experiences, while managing Stripe financial data compliance (GDPR redaction, SCA exem - [AI Agent Manages Notion CMS for Vercel Site](https://company-skill.com/p/_combos/ai-agent-manages-notion-cms-for-vercel-site-e41629): notion + alinux + bailian. Build a Bailian AI agent that autonomously creates and updates content in Notion via MCP tool calling, with Notion serving as a headless CMS that feeds a Vercel-hosted frontend app - [AI Agent with Notion via MCP](https://company-skill.com/p/_combos/ai-agent-with-notion-via-mcp-84aab0): bailian + notion. Build an AI agent on Alibaba Cloud Bailian that connects to Notion as an MCP tool, enabling the LLM to read, search, and write Notion pages and databases through natural language t - [AI Content Engine with Public Site and Enterprise Search](https://company-skill.com/p/_combos/ai-content-engine-with-public-site-and-enterpris-9db7c8): alinux. A Bailian AI agent autonomously generates and curates Notion content via MCP tool calling, where Notion acts as a unified headless CMS simultaneously feeding a Vercel-hosted public - [AI Content Platform on Managed Infrastructure](https://company-skill.com/p/_combos/ai-content-platform-on-managed-infrastructure-265158): alinux + ecs. Terraform provisions the full infrastructure stack (ECS compute, OSS storage, RDS databases, Elasticsearch clusters, OceanBase) while Bailian AI agents autonomously generate and cu - [AI Content Platform with Search and Frontend](https://company-skill.com/p/_combos/ai-content-platform-with-search-and-frontend-d3ca31): alinux + notion. Bailian AI agents autonomously curate knowledge content in Notion (secured via IDaaS M2M auth), a parallel pipeline ingests that content into Elasticsearch with PAI-trained ranking - [AI Content Platform with Site and Search](https://company-skill.com/p/_combos/ai-content-platform-with-site-and-search-7bf25b): alinux. A Bailian AI agent autonomously manages all organizational content in Notion, simultaneously publishing marketing pages to a Vercel-hosted public website and ingesting knowledge ar - [AI-Driven Search Knowledge Platform](https://company-skill.com/p/_combos/ai-driven-search-knowledge-platform-803ad0): alinux + ecs + bailian. Bailian AI agents autonomously create and curate knowledge content in Notion (secured via IDaaS M2M auth), while a parallel pipeline ingests that content into Elasticsearch with PA - [AI Model with Edge API Gateway](https://company-skill.com/p/_combos/ai-model-with-edge-api-gateway-82b873): alinux + cloudflare. Deploy an AI inference model on Alibaba Cloud Linux (Alinux) as the backend, then deploy a Cloudflare Worker as an edge proxy/API gateway to route and cache client requests to the - [AI Notion Bot with Team Notifications](https://company-skill.com/p/_combos/ai-notion-bot-with-team-notifications-362bbb): notion + eb. A developer authenticates a Notion integration, builds an AI-powered agent that reads and processes Notion workspace content, then wires EventBridge to push notifications (e.g., ne - [AI-Powered Contact Center Intelligence Platform](https://company-skill.com/p/_combos/ai-powered-contact-center-intelligence-platform-cbbc60): eb + dataworks + bailian. A developer builds a full-stack contact center intelligence platform where Bailian ASR transcribes live support calls in real-time, EventBridge ingests both transcription streams a - [AI-Powered Notion App on Vercel](https://company-skill.com/p/_combos/ai-powered-notion-app-on-vercel-a88e74): notion + vercel. A developer authenticates with the Notion API, builds an AI-powered integration (e.g., semantic search or content generation over Notion pages), and deploys the resulting web appli - [AI Recommendation Platform with RAG Explanations](https://company-skill.com/p/_combos/ai-recommendation-platform-with-rag-explanations-8803cd): airec + alinux + bailian. Deploy a custom inference model on Alibaba Cloud Linux with OpenSearch vector retrieval and AIRec orchestration for recommendations, while integrating a Bailian-hosted LLM to gener - [AIRec with Custom Models and Semantic Search](https://company-skill.com/p/_combos/airec-with-custom-models-and-semantic-search-fe8869): airec + alinux. Train and serve custom embedding/ranking models on Alibaba Cloud Linux instances, deploy those embeddings into OpenSearch for vector-based semantic retrieval, then layer AIRec on t - [App User Auth with Database Backend](https://company-skill.com/p/_combos/app-user-auth-with-database-backend-294893): idaas + rds. Build a web or mobile application using IDaaS for user authentication (SMS login, 2FA, social login) while storing user profiles and application data in RDS, requiring database acc - [Application with Transactional DB and Search Backend](https://company-skill.com/p/_combos/application-with-transactional-db-and-search-bac-ebb66c): rds + opensearch. A developer building an application (e.g., e-commerce or content platform) uses RDS as the primary transactional database and OpenSearch as the search/analytics engine, and needs t - [Auth email delivery troubleshooting](https://company-skill.com/p/_combos/auth-email-delivery-troubleshooting-976ab1): clerk + resend. A developer using Clerk for user authentication troubleshoots sign-up failures caused by verification and password-reset emails landing in spam via Resend, fixing both the auth err - [Authenticated Embedded Documentation Portal](https://company-skill.com/p/_combos/authenticated-embedded-documentation-portal-a64abf): gitbook + idaas. A SaaS team publishes product documentation on GitBook, embeds it into their customer portal, and gates access behind IDaaS-configured authentication (social login, 2FA) so only au - [Authenticated SaaS with embedded docs](https://company-skill.com/p/_combos/authenticated-saas-with-embedded-docs-3db922): gitbook + idaas. Build a SaaS product with IDaaS user authentication (social login, 2FA) and embed personalized GitBook documentation that shows content based on the authenticated user's identity a - [Auto Scaling Event Delivery Pipeline](https://company-skill.com/p/_combos/auto-scaling-event-delivery-pipeline-4357f5): ess + eb. Set up an Auto Scaling group integrated with SLB and RDS for a scalable application tier, then configure EventBridge to capture scaling activity events and deliver them to external - [Auto Scaling Group Data Protection with Monitoring](https://company-skill.com/p/_combos/auto-scaling-group-data-protection-with-monitori-122c14): eb + ecs + ess. Configure automatic snapshots and disk backup policies for ECS instances within an Auto Scaling group while protecting mission-critical instances from termination, then route all b - [Auto-Scaling Production Stack with RAG Search](https://company-skill.com/p/_combos/auto-scaling-production-stack-with-rag-search-be1c2d): alinux. A DevOps team uses Terraform to deploy a hardened production web stack (VPC, ECS, OSS, RDS, SLB) with SSL certificates, MLPS compliance, and ESS auto scaling, then adds Elasticsear - [Auto-Scaling Web Cluster Deployment](https://company-skill.com/p/_combos/auto-scaling-web-cluster-deployment-659c6b): terraform + ess + ecs. Provision a full web application stack (VPC, ECS, SLB, RDS) via Terraform, then configure Auto Scaling to manage ECS instances and integrate them with SLB for load balancing and RD - [Automated ECS Operations and DR Setup](https://company-skill.com/p/_combos/automated-ecs-operations-and-dr-setup-60cd7f): alinux + ecs. Provision and configure Alibaba Cloud Linux ECS instances at scale, use Cloud Assistant to remotely execute configuration and maintenance scripts across the fleet, and set up autom - [Automated employee database provisioning](https://company-skill.com/p/_combos/automated-employee-database-provisioning-64a9f0): eb + rds. When a new employee is onboarded in HR systems, EventBridge captures the event and triggers automated creation of RDS database accounts with role-appropriate permissions, eliminati - [Bailian Notion Agent Behind Cloudflare Edge Gateway](https://company-skill.com/p/_combos/bailian-notion-agent-behind-cloudflare-edge-gate-163e34): cloudflare + notion + bailian. A developer builds a secure AI agent on Alibaba Cloud Bailian that accesses Notion data via MCP tools authenticated through IDaaS keyless OIDC, then deploys a Cloudflare Worker as - [Bailian RAG + ES Chatbot with EventBridge Alerts](https://company-skill.com/p/_combos/bailian-rag-es-chatbot-with-eventbridge-alerts-873dcb): eb + es + bailian. Build a complete RAG pipeline using Bailian for document ingestion, chunking, and embedding, deploy a RAG chatbot application on Elasticsearch as the vector search engine, and inte - [Batch Network Tuning Across ECS Fleet](https://company-skill.com/p/_combos/batch-network-tuning-across-ecs-fleet-4c3e90): ecs + alinux. Use ECS Cloud Assistant to remotely execute network optimization scripts (TCP tuning, SMC enablement, XPS configuration) across a fleet of Alibaba Cloud Linux instances, standardiz - [Batch Pipeline with Closed-Loop Multi-Channel Notification](https://company-skill.com/p/_combos/batch-pipeline-with-closed-loop-multi-channel-no-ec172e): eb + alinux + dataworks. ECS runs batch data processing jobs and uploads results to OSS; EventBridge independently detects file arrivals in OSS, then fans out notifications via Twilio (SMS/WhatsApp) and Re - [Bidirectional DingTalk-Lark ECS Provisioning Loop](https://company-skill.com/p/_combos/bidirectional-dingtalk-lark-ecs-provisioning-loo-9c34b9): eb + alinux. DingTalk or Lark approval events (e.g., new hire onboarding, resource request) flow into EventBridge, which triggers ECS Cloud Assistant provisioning scripts, then routes completio - [Branded SaaS Auth-to-Payment Onboarding Flow](https://company-skill.com/p/_combos/branded-saas-auth-to-payment-onboarding-flow-048510): clerk + stripe. A developer builds a SaaS application where users sign up through a custom Clerk authentication flow and then complete subscription payment via Stripe, with both UIs styled to matc - [Branded SaaS Onboarding with Custom Stripe Elements](https://company-skill.com/p/_combos/branded-saas-onboarding-with-custom-stripe-eleme-eab729): clerk + stripe. Build a complete SaaS onboarding flow where users authenticate via Clerk and subscribe via Stripe, with the Stripe payment form fully customized using the Appearance API to achieve - [CDP with External Service Alerting](https://company-skill.com/p/_combos/cdp-with-external-service-alerting-8fd368): eb + dataworks. Build a monitored customer data platform where EventBridge fans real-time events into Supabase for ingestion and Twilio for CRM sync, while simultaneously routing critical business - [CI/CD-Automated Enterprise Stack with Search and Compliance](https://company-skill.com/p/_combos/ci-cd-automated-enterprise-stack-with-search-and-82a935): cas + alinux. A DevOps team establishes a Terraform CI/CD pipeline (e.g., GitLab CI) to continuously deploy and maintain a full enterprise production stack — VPC, ECS cluster, OSS, RDS, SLB with - [CI/CD-Automated RAG-Enabled Secure Production Stack](https://company-skill.com/p/_combos/ci-cd-automated-rag-enabled-secure-production-st-30e7b2): cas + alinux. A DevOps team establishes GitLab CI/CD Terraform pipelines to continuously provision and maintain a full production stack (VPC, ECS cluster, OSS, RDS, SLB) with SSL certificates, M - [CI/CD-Automated Secure Web Stack Deployment](https://company-skill.com/p/_combos/ci-cd-automated-secure-web-stack-deployment-4c5f3c): ecs + cas + terraform. A DevOps team establishes Terraform CI/CD automation to continuously deploy and maintain a production web stack (VPC, ECS cluster, OSS, SLB) with SSL certificates and security hard - [CI/CD-Automated Terraform Infrastructure Deployment](https://company-skill.com/p/_combos/ci-cd-automated-terraform-infrastructure-deploym-bf3afe): terraform + ecs. A DevOps engineer configures Terraform authentication credentials for Alibaba Cloud, provisions a full infrastructure stack (VPC, ECS cluster, storage), then automates the entire T - [CI/CD Terraform Full-Stack with Security Hardening](https://company-skill.com/p/_combos/ci-cd-terraform-full-stack-with-security-hardeni-a12154): ecs + alinux. A DevOps engineer sets up a CI/CD pipeline (e.g., GitLab CI) that automates the entire Terraform lifecycle — from credential configuration through provisioning a full web applicati - [Closed-Loop Infrastructure Alert with Delivery Verification](https://company-skill.com/p/_combos/closed-loop-infrastructure-alert-with-delivery-v-50872d): resend + dataworks + eb. Combine full-stack ECS/RDS observability and analytics lake ingestion (skill 4) with EventBridge-driven multi-channel fan-out plus closed-loop delivery receipt tracking (skill 2): - [Closed-Loop Multi-Channel Notification Pipeline](https://company-skill.com/p/_combos/closed-loop-multi-channel-notification-pipeline-b18bac): eb + dataworks. Orchestrate EventBridge rules to fan out business events (order placed, payment completed) to Twilio for SMS/WhatsApp and Resend for branded email delivery, then close the loop by - [Cloud DB Migration to Full-Stack Observability Platform](https://company-skill.com/p/_combos/cloud-db-migration-to-full-stack-observability-p-0653ab): eb + dataworks + bailian. A team migrates databases to the cloud (OSS backup → RDS import → Elasticsearch sync) with EventBridge pushing real-time migration status alerts, then seamlessly repurposes the sam - [Cloud DB Migration with Real-Time Status Alerts](https://company-skill.com/p/_combos/cloud-db-migration-with-real-time-status-alerts-b98fdb): eb + es. A team executes a full cloud migration (OSS backup upload → RDS import → Elasticsearch sync → cross-region replication) while wiring EventBridge to push real-time status notificati - [Cloud DB Migration with Search and Replication](https://company-skill.com/p/_combos/cloud-db-migration-with-search-and-replication-5d792c): es + oss + rds. A team executes a full cloud migration by uploading on-premises database backups to OSS, importing into RDS, syncing to Elasticsearch for full-text search, and then using RDS data - [Cloud DB Migration with Unified Observability](https://company-skill.com/p/_combos/cloud-db-migration-with-unified-observability-4f5422): eb + dataworks. A team executes a full cloud database migration (OSS backup → RDS import → Elasticsearch sync) with EventBridge pushing real-time migration status alerts, then seamlessly transitio - [Cloud Migration to Unified Full-Stack Observability](https://company-skill.com/p/_combos/cloud-migration-to-unified-full-stack-observabil-4a8abc): dataworks. A team migrates their on-premises database to Alibaba Cloud (OSS→RDS, OceanBase, Elasticsearch) with EventBridge-based infra monitoring, then extends the same event backbone to ing - [Cloud Migration with AI Search and Recommendations](https://company-skill.com/p/_combos/cloud-migration-with-ai-search-and-recommendatio-f00279): bailian + airec. A team migrates legacy databases to Alibaba Cloud using ECS snapshots staged through OSS into RDS, then builds a document-aware application layering Bailian OCR extraction, Elastic - [Complete Domain Email Infrastructure Setup](https://company-skill.com/p/_combos/complete-domain-email-infrastructure-setup-d5499a): clerk + alimail + rds. A developer onboarding a new domain first verifies it in Resend with DNS records (SPF/DKIM/DMARC) and optimizes deliverability through domain warming, then hardens the same domain' - [Complete Email Troubleshooting and Deliverability Workflow](https://company-skill.com/p/_combos/complete-email-troubleshooting-and-deliverabilit-86f20e): alimail + resend. A developer experiencing email issues first resolves sending failures (550/SMTP errors), configures SPF/DKIM/DMARC authentication, optimizes deliverability for inbox placement, the - [Complete Production Resilience Stack](https://company-skill.com/p/_combos/complete-production-resilience-stack-fc83d7): alinux. Deploy a Terraform-provisioned hardened HTTPS web stack (VPC, ECS cluster, OSS, SLB with CAS SSL certificates, RDS), then layer both local ECS data protection (automatic snapshot p - [Complete Production Stack: Deploy, Harden, Protect, Monitor](https://company-skill.com/p/_combos/complete-production-stack-deploy-harden-protect--268739): alinux. A DevOps team uses Terraform to provision a full hardened production web stack (VPC, ECS, OSS, RDS, SLB with SSL), applies MLPS 2.0 compliance hardening, baselines performance with - [Complete User Authentication with 2FA](https://company-skill.com/p/_combos/complete-user-authentication-with-2fa-e01b31): twilio + idaas. Configure IDaaS as the central authentication platform for social logins and SSO, then integrate Twilio Verify API to deliver SMS-based two-factor authentication for enhanced secur - [Compliant DR Production Stack with Performance Baseline](https://company-skill.com/p/_combos/compliant-dr-production-stack-with-performance-b-a4e607): alinux. A DevOps team uses Terraform to provision a hardened production web stack (VPC, ECS cluster, RDS, OSS, SLB with SSL), applies MLPS 2.0 compliance hardening for regulatory requireme - [Compliant ECS with Automated Certificate Lifecycle](https://company-skill.com/p/_combos/compliant-ecs-with-automated-certificate-lifecyc-1ffd3b): cas + alinux + airec. Deploy production ECS instances with security hardening and MLPS 2.0 compliance baselines, then establish private PKI infrastructure to automate the full certificate lifecycle (iss - [Compliant Enterprise Infra + Custom RAG Stack](https://company-skill.com/p/_combos/compliant-enterprise-infra-custom-rag-stack-08191c): bailian + alinux. A DevOps team uses Terraform to provision an MLPS 2.0-compliant enterprise infrastructure (VPC, ECS, RDS, OSS), then deploys a fully custom RAG system on top—fine-tuning both a dom - [Compliant Infra with ML Search and Identity](https://company-skill.com/p/_combos/compliant-infra-with-ml-search-and-identity-148b67): es + alinux + ecs. A DevOps engineer uses Terraform to provision MLPS 2.0 compliant infrastructure (VPC, ECS, RDS, OSS, Elasticsearch), then the platform team layers IDaaS for end-user authentication - [Compliant Infra with ML Search and SCIM Onboarding](https://company-skill.com/p/_combos/compliant-infra-with-ml-search-and-scim-onboardi-968659): alinux. A DevOps team provisions MLPS 2.0 compliant infrastructure (VPC, ECS, RDS, OSS, Elasticsearch) via Terraform with IDaaS authentication and PAI-powered ML search, then layers an eve - [Compliant Keyless RAG Platform End-to-End](https://company-skill.com/p/_combos/compliant-keyless-rag-platform-end-to-end-c97b06): es + alinux. A DevOps team uses Terraform to provision MLPS 2.0 compliance-hardened infrastructure (VPC, ECS, RDS, OSS, Elasticsearch), then deploys a keyless RAG application on that stack usin - [Compliant ML Platform with Enterprise Onboarding](https://company-skill.com/p/_combos/compliant-ml-platform-with-enterprise-onboarding-ed35ea): eb + alinux. Deploy a full MLPS 2.0-compliant production stack (VPC, ECS, RDS, OSS, SSL-terminated SLB, Elasticsearch RAG pipeline) via Terraform, then automatically provision enterprise users - [Compliant Platform with Authenticated Docs](https://company-skill.com/p/_combos/compliant-platform-with-authenticated-docs-2281a1): gitbook + alinux. Terraform-provision an MLPS 2.0 compliant enterprise platform (ECS, RDS, OSS, Elasticsearch, IDaaS, PAI), then embed GitBook documentation into the resulting portal with IDaaS SSO - [Compliant Production Platform with Enterprise SCIM Onboarding](https://company-skill.com/p/_combos/compliant-production-platform-with-enterprise-sc-6e1f83): ecs + cas + alinux. A platform team uses Terraform to deploy a full MLPS 2.0-compliant production stack (VPC, ECS, OSS, RDS, SLB with SSL, Elasticsearch RAG pipeline), then layers an automated enterpr - [Compliant Terraform Stack with Keyless RAG Search](https://company-skill.com/p/_combos/compliant-terraform-stack-with-keyless-rag-searc-e92d22): alinux. A DevOps team first uses Terraform with OIDC-based keyless authentication via IDaaS to provision a full production stack (VPC, ECS, OSS, SLB, RDS) with SSL certificates and MLPS 2. - [Configure and optimize ECS networking for production](https://company-skill.com/p/_combos/configure-and-optimize-ecs-networking-for-produc-8c379e): ecs + alinux. A developer deploying a high-throughput production application on ECS first configures infrastructure-level networking (security groups, ENIs, public IPs) and then tunes the OS-lev - [Cross-Channel GDPR Data Deletion Pipeline](https://company-skill.com/p/_combos/cross-channel-gdpr-data-deletion-pipeline-b3ae33): stripe + twilio. When a customer submits a GDPR/PSD3 data deletion request, automate redaction of their financial records in Stripe while simultaneously resolving and purging their unified profile - [Cross-Engine RAG with Hybrid Retrieval and Personalized Recommendations](https://company-skill.com/p/_combos/cross-engine-rag-with-hybrid-retrieval-and-perso-68feb9): airec. A team fine-tunes custom embedding and reranking models on PAI, deploys them via Bailian for neural reranking across both Elasticsearch and OpenSearch engines, implements hybrid re - [Cross-Platform GDPR Compliance Orchestration](https://company-skill.com/p/_combos/cross-platform-gdpr-compliance-orchestration-3de6b2): stripe + eb + twilio. When a user submits a data deletion request, Stripe processes the financial data redaction, EventBridge routes the compliance event to external endpoints, and Twilio's unified cust - [Custom LLM + Embeddings Full RAG System](https://company-skill.com/p/_combos/custom-llm-embeddings-full-rag-system-a5d543): alinux + bailian. A developer uses PAI to both fine-tune a domain-specific LLM and train custom embedding models, builds a vector retrieval pipeline with OpenSearch/Elasticsearch and OSS, then deplo - [Custom LLM RAG with Intelligent Recommendations](https://company-skill.com/p/_combos/custom-llm-rag-with-intelligent-recommendations-dc3d7b): alinux + airec. A developer fine-tunes both a domain-specific LLM and custom embedding/reranking models on PAI, builds an optimized vector retrieval and neural reranking pipeline with OpenSearch/E - [Custom ML OCR-to-Recommendations RAG Pipeline](https://company-skill.com/p/_combos/custom-ml-ocr-to-recommendations-rag-pipeline-05916c): airec + es. A developer trains domain-specific embedding models on PAI using proprietary corpus data, feeds those custom models into a pipeline where Bailian OCR-extracts text from scanned doc - [Custom Model-Enhanced RAG Recommendation Platform](https://company-skill.com/p/_combos/custom-model-enhanced-rag-recommendation-platfor-ec855c): airec + alinux. A developer fine-tunes a custom embedding and reranking model on PAI, deploys it to Bailian for Elasticsearch neural reranking, then builds on that optimized search layer a full RA - [Custom Model-Powered AIRec Recommendations](https://company-skill.com/p/_combos/custom-model-powered-airec-recommendations-27de4e): pai + airec. Deploy a custom ranking or scoring model on PAI-EAS for online inference, then integrate it with AIRec as the personalization backend—PAI handles model serving with auto-scaling wh - [Custom Model RAG Chatbot with Recommendations](https://company-skill.com/p/_combos/custom-model-rag-chatbot-with-recommendations-6374f2): alinux + opensearch + airec. A developer fine-tunes custom embedding and reranking models on PAI, deploys them to Bailian as managed inference endpoints, configures Elasticsearch with neural reranking plus BM2 - [Custom Model RAG Platform Across ES and OpenSearch](https://company-skill.com/p/_combos/custom-model-rag-platform-across-es-and-opensear-538cd4): alinux + es + airec. A developer fine-tunes custom embedding and reranking models on PAI, deploys them to Bailian for neural reranking across both Elasticsearch and OpenSearch engines, then builds on t - [Custom Model Search Optimization Across ES and OpenSearch](https://company-skill.com/p/_combos/custom-model-search-optimization-across-es-and-o-57737b): alinux + es. A developer fine-tunes a custom embedding or reranking model on PAI, deploys it to Bailian as a managed inference endpoint for OpenSearch neural reranking, and additionally configu - [Custom RAG Pipeline: Train Embeddings to Deploy Application](https://company-skill.com/p/_combos/custom-rag-pipeline-train-embeddings-to-deploy-a-956ae5): es + bailian + oss. A developer trains custom embedding models using PAI on domain-specific datasets, builds a vector search pipeline with OpenSearch and Elasticsearch storing embeddings in OSS, then - [Custom RAG Pipeline with Deployed Frontend](https://company-skill.com/p/_combos/custom-rag-pipeline-with-deployed-frontend-ba57d2): es + bailian + alinux. A developer trains custom embedding models on PAI using domain-specific datasets, builds a vector search pipeline with OpenSearch and Elasticsearch storing embeddings in OSS, then - [Custom RAG: Train Embeddings to Production App](https://company-skill.com/p/_combos/custom-rag-train-embeddings-to-production-app-9bbc6d): es + bailian + oss. Train custom domain-specific embedding models on PAI, build vector indexes in OpenSearch/Elasticsearch with documents stored in OSS, then deploy the production RAG retrieval applic - [Custom RAG Training to Personalized Production Search](https://company-skill.com/p/_combos/custom-rag-training-to-personalized-production-s-0a7078): airec + alinux + bailian. A team trains domain-specific embedding models and fine-tunes LLMs on PAI using curated datasets, deploys a production-grade hybrid retrieval pipeline (custom vector + BM25 with re - [Custom RAG with Edge-Optimized Model Serving](https://company-skill.com/p/_combos/custom-rag-with-edge-optimized-model-serving-ae9be3): alinux + airec + bailian. Train custom embedding models on PAI and orchestrate a RAG application via Bailian across OpenSearch/Elasticsearch/OSS, then deploy the generative inference endpoint on PAI's manag - [Custom RAG with Optimized Search Relevance](https://company-skill.com/p/_combos/custom-rag-with-optimized-search-relevance-707e4a): alinux + bailian. A developer builds a full custom RAG system — training both a domain-specific LLM and custom embedding models on PAI, with vector retrieval via OpenSearch/Elasticsearch and OSS — t - [Custom RAG with Tuned Search Relevance](https://company-skill.com/p/_combos/custom-rag-with-tuned-search-relevance-4d65bd): bailian + alinux + opensearch. Build a fully custom RAG pipeline (fine-tuned LLM on PAI deployed to Bailian, custom embeddings, OpenSearch vector store) and then tune the OpenSearch retrieval layer — BM25 weight - [Custom Search Relevance Model Pipeline](https://company-skill.com/p/_combos/custom-search-relevance-model-pipeline-1d5c69): bailian + alinux + es. A developer fine-tunes a custom embedding or reranking model on PAI using domain-specific search data, deploys it as a managed inference endpoint on Bailian, then integrates it int - [Custom-Trained Embedding Models Powering RAG Inference](https://company-skill.com/p/_combos/custom-trained-embedding-models-powering-rag-inf-e2006f): es + alinux. Train domain-specific embedding models on PAI and store optimized vector indexes in OSS (Skill 1), then feed those custom embeddings into a fully custom RAG pipeline where a fine-t - [Custom-Trained Models Power ES RAG App](https://company-skill.com/p/_combos/custom-trained-models-power-es-rag-app-7bada1): bailian + es + alinux. Fine-tune domain-specific LLM and embedding models on PAI (Skill 3's custom training pipeline), then deploy a RAG chatbot application using Elasticsearch as the retrieval engine th - [Custom-Trained OCR RAG Pipeline](https://company-skill.com/p/_combos/custom-trained-ocr-rag-pipeline-324afe): es + airec + alinux. A team trains domain-specific embedding models and fine-tunes LLMs on PAI, then builds an end-to-end document intelligence pipeline that ingests scanned PDFs/images via Bailian OCR - [Custom-Trained RAG with Event Pipeline and Edge Serving](https://company-skill.com/p/_combos/custom-trained-rag-with-event-pipeline-and-edge--3d05fe): airec + alinux. A platform team uses EventBridge + DataWorks for continuous data ingestion feeding PAI-trained custom embedding and reranking models (Combo 4's domain-specific training), then depl - [Custom-Trained RAG with Personalized Recommendation Layer](https://company-skill.com/p/_combos/custom-trained-rag-with-personalized-recommendat-224893): airec + alinux + bailian. A team trains domain-specific embedding models and fine-tunes LLMs on PAI, deploys a hybrid retrieval pipeline (vector + BM25) into OpenSearch, then layers AIRec on top to deliver - [Customer Intelligence Platform with App Monitoring](https://company-skill.com/p/_combos/customer-intelligence-platform-with-app-monitori-9c5f30): dataworks. EventBridge captures customer interaction events and routes them simultaneously to Twilio for real-time profile synchronization (enabling personalized omnichannel engagement), to D - [Data-Driven Vector Index Pipeline with Notification](https://company-skill.com/p/_combos/data-driven-vector-index-pipeline-with-notificat-3c25e3): ecs + alinux + oss. Supabase database changes (e.g., new document embeddings inserted) trigger Edge Functions that route events through EventBridge to invoke ECS Cloud Assistant commands, which batch- - [Data-Pipeline RAG Production Platform](https://company-skill.com/p/_combos/data-pipeline-rag-production-platform-4f1f79): cas + alinux. A platform team uses Terraform to deploy an MLPS-hardened, auto-scaling production stack (ECS, ESS, SLB, CAS SSL on Alinux), then layers DataWorks-orchestrated ETL pipelines that f - [Database-Driven Auto Scaling Pipeline](https://company-skill.com/p/_combos/database-driven-auto-scaling-pipeline-a6a3cf): rds + eb + ess. Monitor RDS database performance metrics, stream those events through EventBridge in real-time with monitoring alerts configured, and automatically trigger ECS Auto Scaling when da - [Debug ECS App Database Connectivity](https://company-skill.com/p/_combos/debug-ecs-app-database-connectivity-c055cb): ecs + rds. A web application hosted on ECS fails to connect to its RDS backend; the developer troubleshoots OS-level connectivity and driver issues on the ECS instance while simultaneously ve - [Debug slow AI job querying database](https://company-skill.com/p/_combos/debug-slow-ai-job-querying-database-c71aa4): pai + oceanbase. An AI training or inference job on PAI reads data from OceanBase (or RDS) and runs slowly; the developer monitors the PAI job to identify resource bottlenecks, discovers slow datab - [Decoupled Batch Pipeline with Event-Driven Verification](https://company-skill.com/p/_combos/decoupled-batch-pipeline-with-event-driven-verif-27f69e): ecs + alinux + eb. ECS batch processes data and uploads results to OSS, while EventBridge independently monitors the OSS bucket for new file arrivals and triggers Resend email notifications to stakeh - [Deploy and Debug Alinux ECS with Networking](https://company-skill.com/p/_combos/deploy-and-debug-alinux-ecs-with-networking-ef7f29): alinux + ecs. Launch an Alibaba Cloud Linux ECS instance, configure its networking (ENI, security groups, public IP), tune kernel parameters for performance, and troubleshoot any OS-level or con - [Deploy and Network-Configure ECS Server](https://company-skill.com/p/_combos/deploy-and-network-configure-ecs-server-08baa5): alinux + ecs. A developer provisions a new Alibaba Cloud Linux ECS instance for an application server and immediately configures its networking — assigning security group rules, binding an elast - [Deploy and Troubleshoot SSL for AIRec HTTPS](https://company-skill.com/p/_combos/deploy-and-troubleshoot-ssl-for-airec-https-22a31f): airec + cas. A developer configures HTTPS for their AIRec recommendation service by deploying an SSL certificate, then encounters browser certificate warnings or validation failures that requir - [Deploy Complete RAG System with AI Models](https://company-skill.com/p/_combos/deploy-complete-rag-system-with-ai-models-d62047): alinux + es. Deploy AI models (embeddings and LLM) on Alibaba Cloud Linux for inference serving, then deploy a RAG application using Elasticsearch as the vector knowledge base that calls these - [Deploy, Diagnose, and Protect Full Production Stack](https://company-skill.com/p/_combos/deploy-diagnose-and-protect-full-production-stac-b764eb): alinux + ecs. A DevOps team uses Terraform to provision a hardened production web stack (VPC, ECS cluster, OSS, SLB with SSL, RDS) with MLPS 2.0 compliance, performs full-stack performance diagn - [Deploy Enterprise RAG Application Stack](https://company-skill.com/p/_combos/deploy-enterprise-rag-application-stack-457815): terraform + es + rds. Use Terraform to provision the underlying cloud infrastructure (VPC, ECS clusters, networking), deploy a RAG AI application on Elasticsearch for vector-based knowledge retrieval, a - [Deploy Full Platform with Secure Search and Deep Tuning](https://company-skill.com/p/_combos/deploy-full-platform-with-secure-search-and-deep-f2308c): alinux. A DevOps team first provisions a complete production web application stack via Terraform (VPC, ECS cluster, RDS, OSS, SLB with SSL) and performs deep RDS query optimization, then e - [Deploy Full Stack Then Protect Data](https://company-skill.com/p/_combos/deploy-full-stack-then-protect-data-854d60): alinux + ecs. Use Terraform to provision a hardened production web stack (VPC, ECS cluster, OSS, SLB with SSL, RDS) with security hardening and performance baselining, then configure comprehensi - [Deploy Full Stack with Deep RDS Optimization](https://company-skill.com/p/_combos/deploy-full-stack-with-deep-rds-optimization-95533b): alinux + rds. A DevOps team provisions a complete production web application stack using Terraform (VPC, ECS cluster, RDS, OSS, SLB with SSL), performs full-stack performance diagnosis across al - [Deploy HTTPS Across App and AIRec](https://company-skill.com/p/_combos/deploy-https-across-app-and-airec-8e170d): cas + airec. A developer enables HTTPS for their entire platform by deploying SSL certificates to general cloud infrastructure (ECS, SLB, CDN) via CAS while also configuring HTTPS specifically - [Deploy Notion AI Integration on Cloudflare Workers](https://company-skill.com/p/_combos/deploy-notion-ai-integration-on-cloudflare-worke-ce6b4d): notion + cloudflare. A developer builds a custom Notion AI integration (e.g., an AI agent that reads/writes Notion pages via MCP or OAuth), configures the Cloudflare Worker's environment variables and - [Deploy optimized ECS with tuned networking](https://company-skill.com/p/_combos/deploy-optimized-ecs-with-tuned-networking-4203d3): alinux + ecs. A developer provisions an Alibaba Cloud Linux ECS instance, configures its networking (ENI, security groups, public IP), and then applies network performance tuning (TCP TIME-WAIT - [Deploy production-ready ECS web server](https://company-skill.com/p/_combos/deploy-production-ready-ecs-web-server-28169a): terraform + ecs + alinux. Use Terraform to provision VPC and ECS infrastructure, then configure networking (security groups, EIP, ENIs) for web traffic, tune the Alinux OS kernel for production performance, - [Deploy Production Stack and Optimize Full-Stack Performance](https://company-skill.com/p/_combos/deploy-production-stack-and-optimize-full-stack--730039): alinux + rds + cas. A DevOps team provisions a complete production web application stack using Terraform (VPC, ECS cluster, RDS, OSS, SLB with SSL), then when the deployed application experiences perf - [Deploy Production Stack Then Debug DB Connectivity](https://company-skill.com/p/_combos/deploy-production-stack-then-debug-db-connectivi-624922): ecs + cas + alinux. A DevOps team provisions a complete production web stack (VPC, ECS cluster, RDS, OSS, SLB with SSL) using Terraform, then troubleshoots application-level database connectivity issu - [Deploy Production Stack with Deep RDS Tuning](https://company-skill.com/p/_combos/deploy-production-stack-with-deep-rds-tuning-5fd224): alinux + rds. A DevOps team provisions a complete production web application stack using Terraform (VPC, ECS cluster, RDS, OSS, SLB with SSL), then performs deep database performance optimizatio - [Deploy Production Stack with Full-Stack Performance Tuning](https://company-skill.com/p/_combos/deploy-production-stack-with-full-stack-performa-96e871): alinux. A DevOps team provisions a complete production web application stack using Terraform (VPC, ECS cluster, RDS, OceanBase, OSS, SLB with SSL), then performs comprehensive performance - [Deploy Secure Stack with DR Then Baseline Performance](https://company-skill.com/p/_combos/deploy-secure-stack-with-dr-then-baseline-perfor-8eb57f): alinux + cas. A DevOps team uses Terraform to provision a hardened production web stack (VPC, ECS cluster, RDS, OSS, SLB) with SSL certificates, MLPS 2.0 compliance, cross-region disaster recove - [Deploy Stack, Lock Down DB, Verify Connectivity](https://company-skill.com/p/_combos/deploy-stack-lock-down-db-verify-connectivity-173611): alinux + cas. A DevOps team provisions a full production web stack via Terraform, configures granular multi-tier RDS accounts and role-based permissions (app, analytics, admin), then systematica - [Deploy, Tune, Monitor Production Stack End-to-End](https://company-skill.com/p/_combos/deploy-tune-monitor-production-stack-end-to-end-8767af): alinux + cas. A DevOps team first provisions a hardened production stack via Terraform with SSL and MLPS 2.0 compliance, then performs full-stack performance diagnosis and kernel tuning to estab - [Deploy Web App Backend with Database](https://company-skill.com/p/_combos/deploy-web-app-backend-with-database-707247): rds + ecs. A developer provisions an ECS instance with proper security group rules to allow database connectivity, creates an RDS instance for the application backend, and sets up database ac - [Distributed Transaction Full-Channel Stakeholder Notifications](https://company-skill.com/p/_combos/distributed-transaction-full-channel-stakeholder-83a60d): eb + dataworks. An e-commerce platform processes orders via OceanBase distributed transactions coordinated by RocketMQ, then upon successful commit, EventBridge fans out across all stakeholder cha - [Distributed Transaction to Customer Notification Pipeline](https://company-skill.com/p/_combos/distributed-transaction-to-customer-notification-4e8265): oceanbase + es + rocketmq + eb. An e-commerce or financial system uses RocketMQ transactional messages to coordinate order placement with OceanBase distributed transactions, then upon successful commit, routes th - [Distributed Transaction via RocketMQ and OceanBase](https://company-skill.com/p/_combos/distributed-transaction-via-rocketmq-and-oceanba-507cba): rocketmq + oceanbase. An e-commerce or financial system uses RocketMQ transactional messages to coordinate order placement with OceanBase distributed transactions — a half-message is sent, the local Oce - [Document AI: OCR to RAG to Recommendations](https://company-skill.com/p/_combos/document-ai-ocr-to-rag-to-recommendations-43acdc): bailian + alinux + airec. A developer uploads raw scanned documents to OSS, uses Bailian OCR to extract text and structured data, deploys OpenSearch embedding models to vectorize content for RAG retrieval, - [Document AI RAG Pipeline](https://company-skill.com/p/_combos/document-ai-rag-pipeline-31b42e): bailian + es. A developer extracts text and structured data from unstructured source documents (PDFs, scanned images) using Bailian's document extraction, ingests the processed content into Elas - [Document AI RAG with Semantic Recommendations](https://company-skill.com/p/_combos/document-ai-rag-with-semantic-recommendations-d48dc9): bailian + airec. A developer extracts text and structured data from unstructured documents (PDFs, scanned images) using Bailian's document understanding, builds a RAG knowledge base and retrieval p - [Document-Aware App with AI Recommendations](https://company-skill.com/p/_combos/document-aware-app-with-ai-recommendations-d7fdb8): bailian + airec. A developer builds a full-stack application using Supabase/RDS as the primary datastore for structured records and document metadata, uses Bailian OCR to extract content from uploa - [Document-Aware App with RAG and Recommendations](https://company-skill.com/p/_combos/document-aware-app-with-rag-and-recommendations-28ecb8): bailian + airec. A developer builds a full document-aware application using Supabase for structured CRUD and Bailian OCR for document extraction, indexes content in Elasticsearch for keyword search - [Document-Aware App with RAG Recommendations](https://company-skill.com/p/_combos/document-aware-app-with-rag-recommendations-6d294b): bailian + airec. A developer builds a full-stack application using Supabase as the primary CRUD datastore, extracts text from uploaded documents (PDFs, scanned images) via Bailian's document unders - [Document-Aware App with Unified Search](https://company-skill.com/p/_combos/document-aware-app-with-unified-search-058124): es + bailian. A developer builds an application using Supabase as the primary CRUD datastore for both structured records and metadata extracted from uploaded documents (via Bailian OCR/document - [Document Extraction to RAG Chatbot Pipeline](https://company-skill.com/p/_combos/document-extraction-to-rag-chatbot-pipeline-c495d5): bailian + es. A developer extracts text and structured data from unstructured documents (PDFs, scanned images) using Bailian's document understanding, ingests the extracted content into Elastics - [Document Extraction to Searchable Index Pipeline](https://company-skill.com/p/_combos/document-extraction-to-searchable-index-pipeline-6e55f7): bailian + es. A developer extracts text and structured data from PDFs, scanned images, and other documents using Bailian's document understanding capabilities, then ingests the processed content - [Document-Grounded RAG with Secure Storage](https://company-skill.com/p/_combos/document-grounded-rag-with-secure-storage-466f69): cloudflare + alinux. Build a complete RAG application that stores source documents in an OSS bucket secured behind a Cloudflare Worker edge proxy, indexes them as vector embeddings in OpenSearch for re - [Document RAG Chatbot with Semantic Recommendations](https://company-skill.com/p/_combos/document-rag-chatbot-with-semantic-recommendatio-6bf9a4): bailian + airec. A developer extracts text from unstructured documents (PDFs, scanned images) using Bailian, builds a RAG knowledge base indexed in Elasticsearch, deploys a conversational chatbot o - [Domain Email Authentication Setup](https://company-skill.com/p/_combos/domain-email-authentication-setup-b2438b): alimail + resend. A developer configures their domain's DNS records (SPF, DKIM, DMARC) to authenticate both Resend for transactional application emails and Alibaba Mail for corporate communication o - [Dual-Frontend RAG Agent Platform with Notion Actions](https://company-skill.com/p/_combos/dual-frontend-rag-agent-platform-with-notion-act-ab1f7c): bailian. An enterprise deploys a customer-facing Vercel web app and an internal ECS admin service, both authenticating via IDaaS OIDC to invoke Bailian-hosted AI agents that retrieve docume - [Dual-Path Event Platform: Search and Analytics](https://company-skill.com/p/_combos/dual-path-event-platform-search-and-analytics-021eb9): eb + dataworks. A developer configures EventBridge as a unified event backbone that simultaneously streams real-time business events (order updates, user activity) to OpenSearch for low-latency se - [E-Commerce: Distributed Transactions + Search + RAG](https://company-skill.com/p/_combos/e-commerce-distributed-transactions-search-rag-bc3eaa): oceanbase + rocketmq + es. An e-commerce platform processes orders using OceanBase distributed transactions coordinated by RocketMQ transactional messages (with ordered delivery guarantees for inventory upda - [E-Commerce OCR-Enriched Catalog Search + Transactions](https://company-skill.com/p/_combos/e-commerce-ocr-enriched-catalog-search-transacti-46878b): es + airec. An e-commerce platform ingests scanned supplier catalogs, product spec sheets, and invoices via Bailian OCR into Elasticsearch, while simultaneously processing customer orders thro - [ECS Backup Events to External Systems](https://company-skill.com/p/_combos/ecs-backup-events-to-external-systems-84ef34): ecs + eb. Configure automatic snapshots and disk backup policies on ECS instances, then use EventBridge to deliver backup completion, failure, or deletion events to external APIs for monitor - [ECS Batch Processing with OSS Storage and Email Notification](https://company-skill.com/p/_combos/ecs-batch-processing-with-oss-storage-and-email--3ca827): ecs + oss + resend. A developer schedules a data processing script on ECS instances via Cloud Assistant, the script uploads processed output files to OSS, and then triggers a Resend email notification - [ECS Fleet Provisioning and Remote Operations](https://company-skill.com/p/_combos/ecs-fleet-provisioning-and-remote-operations-9dfc75): alinux + ecs. A DevOps engineer provisions Alibaba Cloud Linux ECS instances with optimized kernel parameters and performance tuning, then uses Cloud Assistant to batch-execute deployment script - [ECS Fleet Provisioning with Automated Data Protection](https://company-skill.com/p/_combos/ecs-fleet-provisioning-with-automated-data-prote-392e60): alinux + ecs. Provision and configure Alibaba Cloud Linux ECS instances with optimized kernel parameters and deployment scripts via Cloud Assistant, then immediately establish automatic snapshot - [ECS Golden Image Pipeline Setup](https://company-skill.com/p/_combos/ecs-golden-image-pipeline-setup-bfb94d): alinux + ecs. A DevOps engineer provisions an Alibaba Cloud Linux ECS instance, configures its networking (security groups, ENIs, public IP) for the target environment, hardens and tunes it, the - [ECS-Hosted App Calling Bailian Agent with Notion](https://company-skill.com/p/_combos/ecs-hosted-app-calling-bailian-agent-with-notion-463a2e): bailian. An application running on ECS or ACK calls Bailian model APIs using IDaaS OIDC-based keyless M2M authentication, while the Bailian-hosted AI agent itself securely reads and writes - [ECS Image Lifecycle with Team Notifications](https://company-skill.com/p/_combos/ecs-image-lifecycle-with-team-notifications-84c85a): ecs + eb. A DevOps team creates and manages custom ECS golden images for standardized application deployments, then wires EventBridge to capture image lifecycle events (creation, sharing, en - [ECS Snapshot Archival to OSS for DR](https://company-skill.com/p/_combos/ecs-snapshot-archival-to-oss-for-dr-0d4e90): ecs + oss. Configure automatic snapshots and snapshot-consistent groups for ECS disks, then export snapshot-based custom images to OSS buckets for long-term archival, cross-region replication - [ECS Snapshot Protection with OSS Archival DR](https://company-skill.com/p/_combos/ecs-snapshot-protection-with-oss-archival-dr-803e23): ecs + bailian + eb. Configure automatic snapshots and disk backup policies for ECS instances (including snapshot-consistent groups for multi-disk consistency), then automatically export those snapshot - [Edge-Split Search Ranking A/B Pipeline](https://company-skill.com/p/_combos/edge-split-search-ranking-a-b-pipeline-9ec848): cloudflare + es + alinux + airec. Cloudflare Workers assign visitors to experiment groups via cookies at the CDN edge, then proxy search requests to Elasticsearch clusters running different ranking configurations, - [Edge-to-Search A/B Testing Pipeline](https://company-skill.com/p/_combos/edge-to-search-a-b-testing-pipeline-5eee6e): cloudflare + es. Use Cloudflare Workers to assign users to experiment groups at the edge via cookies, then route search queries to different Elasticsearch ranking configurations for end-to-end sear - [Elasticsearch + Bailian RAG Application](https://company-skill.com/p/_combos/elasticsearch-bailian-rag-application-2a3c90): es + bailian. Build a RAG knowledge base and retrieval pipeline on Bailian (document ingestion, chunking, embedding, reranking), then deploy a full RAG chatbot application using Elasticsearch as - [Email Domain Lifecycle: Setup to Troubleshooting](https://company-skill.com/p/_combos/email-domain-lifecycle-setup-to-troubleshooting-741deb): resend + alimail. A developer provisioning a new sending domain configures DNS authentication (SPF/DKIM/DMARC) via Resend, optimizes deliverability through domain warming, then uses Alibaba Mail dia - [Email Sending and Deliverability Troubleshooting](https://company-skill.com/p/_combos/email-sending-and-deliverability-troubleshooting-8ed1e4): alimail + resend. A developer deploying transactional email infrastructure first resolves SMTP sending failures (550/554 errors, SPF issues), then optimizes deliverability settings to ensure emails - [Employee Onboarding with Auto-Scaling Infrastructure](https://company-skill.com/p/_combos/employee-onboarding-with-auto-scaling-infrastruc-35b76b): eb + alinux. When HR systems onboard new employees, EventBridge triggers automated RDS database account provisioning with role-based permissions, while simultaneously monitoring RDS performance - [End-to-End AI Recommendation Pipeline](https://company-skill.com/p/_combos/end-to-end-ai-recommendation-pipeline-896221): alinux + opensearch + airec. Deploy a custom inference model on Alibaba Cloud Linux, deploy an embedding model in OpenSearch for vector-based candidate retrieval, and deploy AIRec as the recommendation orchest - [End-to-End Document Intelligence Pipeline](https://company-skill.com/p/_combos/end-to-end-document-intelligence-pipeline-f087d9): es + bailian. Upload raw documents (PDFs, scanned images) to OSS for durable storage, use Bailian's document understanding to extract text and structured data via OCR, index the processed conten - [End-to-End Ingest-React-Scale Data Platform](https://company-skill.com/p/_combos/end-to-end-ingest-react-scale-data-platform-c04b01): alinux + dataworks. DataWorks and EventBridge ingest and transform streaming business events into a monitored RDS/Supabase store with auto-scaling (Skill 4), while Supabase Edge Functions simultaneous - [End-to-End Keyless AI Agent Pipeline](https://company-skill.com/p/_combos/end-to-end-keyless-ai-agent-pipeline-e3ae9d): bailian. An application running on ECS or ACK calls Bailian Model APIs keylessly via IDaaS OIDC M2M tokens, while the Bailian-hosted AI agent in turn calls external tools and APIs via MCP w - [End-to-End Keyless Terraform Compliant Search Platform](https://company-skill.com/p/_combos/end-to-end-keyless-terraform-compliant-search-pl-232129): idaas + alinux. A DevOps team establishes OIDC-based keyless Terraform authentication via IDaaS as the foundation, progressively layers a hardened production stack with SSL certificates and RDS, d - [End-to-End RAG: Knowledge Base to Deployed Pipeline](https://company-skill.com/p/_combos/end-to-end-rag-knowledge-base-to-deployed-pipeli-754299): bailian + es + opensearch. Use Bailian to ingest documents, chunk, embed, and build a managed RAG knowledge base with retrieval pipelines, then deploy OpenSearch as the vector retrieval engine and Bailian as - [End-to-End RAG with Tuned Hybrid Retrieval](https://company-skill.com/p/_combos/end-to-end-rag-with-tuned-hybrid-retrieval-12899e): es + bailian + airec. A developer builds a complete RAG pipeline by first ingesting raw documents from OSS through OpenSearch embedding models into Elasticsearch vector indexes (Skill 3), then layers on - [End-to-End Trained RAG Platform with Event-Driven Serving](https://company-skill.com/p/_combos/end-to-end-trained-rag-platform-with-event-drive-3fc547): eb + dataworks + airec. Use Terraform to deploy the full ML pipeline (EventBridge + DataWorks ingestion → PAI training of custom embeddings/rerankers → production RAG on Elasticsearch/Bailian) from Combo - [End-to-End Vector Search Pipeline](https://company-skill.com/p/_combos/end-to-end-vector-search-pipeline-7d95e0): oss + opensearch. Upload source documents to OSS, deploy an embedding model on OpenSearch to generate vector embeddings from those documents, then store and index the resulting vectors in OSS for si - [Enterprise AI Platform SSO Onboarding](https://company-skill.com/p/_combos/enterprise-ai-platform-sso-onboarding-4fff85): idaas + pai. An enterprise platform admin uses IDaaS to provision SSO and assign which employees can access PAI as an application, then configures fine-grained PAI workspace roles and RAM polic - [Enterprise Autonomous AI Content Platform](https://company-skill.com/p/_combos/enterprise-autonomous-ai-content-platform-808b24): notion + bailian + alinux. A Bailian AI agent secured with IDaaS keyless M2M authentication autonomously creates and updates Notion content via MCP tool calling (no human-in-the-loop), with Notion serving as - [Enterprise DB Migration with Document-Aware Unified Search](https://company-skill.com/p/_combos/enterprise-db-migration-with-document-aware-unif-8ab711): es + bailian + ecs + alinux. An enterprise migrates on-premises databases to Alibaba Cloud (OSS staging → RDS → OceanBase + ES) while simultaneously building a Bailian-powered document OCR pipeline with Supaba - [Enterprise Document Intelligence and Discovery Platform](https://company-skill.com/p/_combos/enterprise-document-intelligence-and-discovery-p-662350): bailian + airec. A developer extracts text and structured data from unstructured enterprise documents (PDFs, scanned images, contracts) using Bailian's document understanding, ingests the processed - [Enterprise Identity and Onboarding Notification Pipeline](https://company-skill.com/p/_combos/enterprise-identity-and-onboarding-notification--eafdd8): idaas + eb. A developer integrates SSO for an enterprise application via IDaaS, configures multi-factor and social authentication methods for users, then wires EventBridge to automatically pus - [Enterprise Live Commerce with Full Speech Intelligence](https://company-skill.com/p/_combos/enterprise-live-commerce-with-full-speech-intell-484ae6): bailian. A production-grade live commerce platform combines distributed order processing (OceanBase/RocketMQ) with comprehensive speech intelligence: live stream ASR transcripts route simul - [Enterprise Migration with Document AI Search and Recommendations](https://company-skill.com/p/_combos/enterprise-migration-with-document-ai-search-and-3b501c): airec + bailian + alinux. An enterprise migrates legacy on-premises databases and infrastructure to Alibaba Cloud using Terraform-provisioned ECS/RDS/OceanBase with OSS staging, then builds a unified docume - [Enterprise Migration with Intelligent Document Platform](https://company-skill.com/p/_combos/enterprise-migration-with-intelligent-document-p-df7d87): bailian + airec + alinux. An enterprise migrates on-premises databases to Alibaba Cloud (OSS staging → RDS → OceanBase + ES for structured data) while simultaneously building a Bailian-powered document OCR - [Enterprise ML Platform with RAG and SCIM Onboarding](https://company-skill.com/p/_combos/enterprise-ml-platform-with-rag-and-scim-onboard-ce09a9): alinux. A DevOps team provisions MLPS 2.0 compliant infrastructure via Terraform, layers IDaaS authentication and PAI-powered custom fine-tuned RAG search, then wires EventBridge-driven SC - [Enterprise Platform RBAC and Automated SCIM Onboarding](https://company-skill.com/p/_combos/enterprise-platform-rbac-and-automated-scim-onbo-553933): alinux. A DevOps team provisions MLPS 2.0 compliant infrastructure via Terraform with IDaaS corporate SSO and Clerk fine-grained RBAC to define role-based access policies, then wires Event - [Enterprise Platform with Auth, ML, and Custom RAG](https://company-skill.com/p/_combos/enterprise-platform-with-auth-ml-and-custom-rag-8818d6): alinux. A DevOps team uses Terraform to provision MLPS 2.0-compliant infrastructure (VPC, ECS, RDS, OSS, Elasticsearch), layers IDaaS for end-user authentication and PAI for ML model train - [Enterprise Platform with Docs and SCIM Onboarding](https://company-skill.com/p/_combos/enterprise-platform-with-docs-and-scim-onboardin-7fd7db): eb + alinux. A DevOps team deploys MLPS-compliant infrastructure via Terraform, layers IDaaS SSO with Clerk RBAC and EventBridge-triggered SCIM provisioning, then embeds GitBook premium documen - [Enterprise Platform with Notion AI Agent Frontend](https://company-skill.com/p/_combos/enterprise-platform-with-notion-ai-agent-fronten-d5de87): bailian + alinux. A DevOps team provisions MLPS 2.0-compliant enterprise infrastructure via Terraform (ECS, RDS, OSS, CAS SSL, IDaaS, PAI/Bailian RAG pipeline), then builds a user-facing Notion AI a - [Enterprise RAG with Bailian and Vector Search](https://company-skill.com/p/_combos/enterprise-rag-with-bailian-and-vector-search-d244d7): bailian + es + opensearch. A developer builds a complete enterprise RAG system by using Bailian to orchestrate the knowledge base construction and retrieval pipeline logic, while leveraging the existing vect - [Enterprise RAG with Monitoring and Alerting](https://company-skill.com/p/_combos/enterprise-rag-with-monitoring-and-alerting-768127): airec + es + bailian. A developer builds a complete enterprise RAG system using Bailian for knowledge base orchestration and vector search infrastructure (OpenSearch/ES), then integrates EventBridge to - [Enterprise RBAC with Automated SCIM Onboarding](https://company-skill.com/p/_combos/enterprise-rbac-with-automated-scim-onboarding-a515da): alinux. A DevOps team uses Terraform to provision MLPS 2.0 compliant infrastructure, layers IDaaS for corporate SSO and Clerk for fine-grained RBAC, then wires EventBridge-triggered SCIM p - [Enterprise Search with AI Content Pipeline](https://company-skill.com/p/_combos/enterprise-search-with-ai-content-pipeline-c32607): alinux + ecs. Combine the ML-powered search platform (RDS + Elasticsearch + PAI + IDaaS infrastructure) with the autonomous Notion content pipeline, so Bailian AI agents continuously generate an - [Enterprise Search with SSO and In-App RBAC](https://company-skill.com/p/_combos/enterprise-search-with-sso-and-in-app-rbac-d839cc): clerk + idaas + es + ecs. An enterprise builds a secure search platform where IDaaS provides corporate SSO authentication and Elasticsearch RAM policies secure the search backend, while Clerk layers fine-gr - [Enterprise Speech Intelligence with Business Analytics](https://company-skill.com/p/_combos/enterprise-speech-intelligence-with-business-ana-384019): bailian. An enterprise deploys the live speech transcription search pipeline (Bailian ASR → EventBridge → OpenSearch + DataWorks) for real-time meeting/broadcast indexing, then extends it w - [Enterprise SSO with In-App RBAC](https://company-skill.com/p/_combos/enterprise-sso-with-in-app-rbac-12b8f9): clerk + idaas. An enterprise SaaS application uses IDaaS as the corporate identity provider for SSO and application-level access gating, while Clerk handles fine-grained in-app role-based access - [Event Analytics Platform with OSS Archival](https://company-skill.com/p/_combos/event-analytics-platform-with-oss-archival-24f233): eb + dataworks. Extend the event-driven analytics and search platform by adding OSS as a long-term archival tier: EventBridge captures all business and infrastructure events, DataWorks transforms - [Event archival to OSS via EventBridge](https://company-skill.com/p/_combos/event-archival-to-oss-via-eventbridge-d0474a): oss + eb. Configure EventBridge to deliver system or custom events into an OSS bucket for long-term archival and audit, then manage and download those stored event objects using OSS tools. - [Event-Driven Analytics and Search Platform](https://company-skill.com/p/_combos/event-driven-analytics-and-search-platform-f8f6f4): eb + dataworks. A developer builds a comprehensive event-driven platform where EventBridge captures real-time business events (orders, user activity, IoT telemetry), streams them to DataWorks for - [Event-Driven Analytics Pipeline to Elasticsearch](https://company-skill.com/p/_combos/event-driven-analytics-pipeline-to-elasticsearch-a47d5b): eb + es. Route cloud events via EventBridge into Elasticsearch for search and analytics, configuring the EventBridge event target alongside Elasticsearch RAM/STS access control so the pipel - [Event-Driven Automated Email Notification Pipeline](https://company-skill.com/p/_combos/event-driven-automated-email-notification-pipeli-38a7a1): eb + resend. Use EventBridge to capture system or business events (e.g., order completed, compliance request submitted) and route them to Resend via an API destination to deliver templated tran - [Event-Driven Customer Data Platform with Analytics](https://company-skill.com/p/_combos/event-driven-customer-data-platform-with-analyti-f5407a): eb + dataworks. Use EventBridge as the central event bus to fan out customer interaction events to two parallel destinations: stream events in real-time into Supabase via DataWorks for analytics d - [Event-Driven Customer Profile Sync](https://company-skill.com/p/_combos/event-driven-customer-profile-sync-beea6d): eb + twilio. Use EventBridge to capture customer interaction events from multiple sources and deliver them via API destination to Twilio, automatically updating unified customer profiles in rea - [Event-Driven Database Scaling Pipeline](https://company-skill.com/p/_combos/event-driven-database-scaling-pipeline-dd331f): rds + eb + ess. A developer monitors RDS database performance metrics (CPU, connections, slow queries) and routes critical database events through EventBridge to custom alert channels, while confi - [Event-Driven ECS Automation via EventBridge](https://company-skill.com/p/_combos/event-driven-ecs-automation-via-eventbridge-c82622): ecs + eb. When an external event occurs in DingTalk or Lark (e.g., new employee onboarding, approval workflow), EventBridge captures the event and triggers remote shell commands on ECS insta - [Event-Driven ECS Instance Monitoring](https://company-skill.com/p/_combos/event-driven-ecs-instance-monitoring-3ce004): ecs + eb. Configure ECS instance networking and use EventBridge to capture instance state change events (like network failures, health checks, or security group modifications) and route them - [Event-Driven Email Notification Pipeline](https://company-skill.com/p/_combos/event-driven-email-notification-pipeline-83e4c5): eb + resend. Use EventBridge to capture cloud resource events (e.g., certificate expiry alerts, instance state changes) as event sources, then route them to Resend-managed email templates to se - [Event-driven embedding inference pipeline](https://company-skill.com/p/_combos/event-driven-embedding-inference-pipeline-624fe7): eb + opensearch. Deploy an embedding model in OpenSearch to serve vector embeddings, then configure EventBridge to automatically deliver new document events (e.g., OSS uploads) to the inference API - [Event-Driven Identity Provisioning Pipeline](https://company-skill.com/p/_combos/event-driven-identity-provisioning-pipeline-a495d4): idaas + eb. Provision users from corporate identity provider (AD/Okta/Entra ID) into IDaaS via SCIM, then use EventBridge to deliver user lifecycle events (create/update/delete) to external HR - [Event-Driven Media Platform with Analytics](https://company-skill.com/p/_combos/event-driven-media-platform-with-analytics-bf5717): eb + dataworks. A video streaming platform uploads content to OSS where EventBridge triggers HLS transcoding and simultaneously streams all upload/processing events into DataWorks for ETL, enablin - [Event-Driven Media Processing Pipeline](https://company-skill.com/p/_combos/event-driven-media-processing-pipeline-66b40c): oss + eb. A developer uploads video files to OSS for HLS streaming transcoding, while EventBridge watches for new uploads in real time and delivers processing-completion events to an externa - [Event-Driven ML Feature Pipeline Platform](https://company-skill.com/p/_combos/event-driven-ml-feature-pipeline-platform-61b6e5): pai + dataworks + ecs. A platform team uses Terraform to deploy both a self-scaling event data pipeline (EventBridge ingestion, DataWorks transformation, RDS/ESS storage) and PAI workspaces in a unified - [Event-Driven Notification with Delivery Tracking](https://company-skill.com/p/_combos/event-driven-notification-with-delivery-tracking-90f288): resend + dataworks + eb. Use EventBridge to fan out business events (order placed, payment completed) to Twilio SMS/WhatsApp and Resend email for outbound notifications, then ingest and validate the return - [Event-Driven OSS Upload Email Notifications](https://company-skill.com/p/_combos/event-driven-oss-upload-email-notifications-a06279): oss + eb + resend. Files uploaded to OSS trigger EventBridge rules that call Resend's API as an external destination, automatically sending email notifications to stakeholders while archiving event l - [Event-Driven RAG Knowledge Base Pipeline](https://company-skill.com/p/_combos/event-driven-rag-knowledge-base-pipeline-6fa59f): es + eb. Deploy a RAG AI application on Elasticsearch and wire EventBridge to automatically trigger document ingestion and index updates when new files arrive in storage, creating a fully e - [Event-Driven RAG Platform with Edge Serving](https://company-skill.com/p/_combos/event-driven-rag-platform-with-edge-serving-173e4f): airec + alinux. Combine the EventBridge+DataWorks data ingestion pipeline (Skill 2) feeding PAI-trained custom embeddings/rerankers (Skill 4), deployed via Terraform, with Cloudflare edge-served i - [Event-Driven Transactional Email Pipeline](https://company-skill.com/p/_combos/event-driven-transactional-email-pipeline-d58f51): resend + eb. Configure EventBridge event sources and rules to capture application events, deliver them to Resend's API as an external destination, and use managed Resend templates to send templ - [Event-Orchestrated GDPR Deletion Audit Pipeline](https://company-skill.com/p/_combos/event-orchestrated-gdpr-deletion-audit-pipeline-0c113f): stripe + eb. EventBridge receives customer deletion request events and orchestrates the existing Stripe+Twilio cross-channel GDPR redaction pipeline, then delivers completion confirmations and - [Event Pipeline to Production RAG Platform](https://company-skill.com/p/_combos/event-pipeline-to-production-rag-platform-d21287): dataworks + alinux + airec. A platform team uses Terraform to deploy an event-driven data ingestion pipeline (EventBridge + DataWorks + RDS/ESS) that feeds training data into PAI, where custom embedding and r - [EventBridge Multi-Channel Notification Orchestration](https://company-skill.com/p/_combos/eventbridge-multi-channel-notification-orchestra-a5042b): eb + twilio. Configure EventBridge rules with multiple external API destinations to fan out application events (e.g., order placed, user registered) to both Twilio for SMS/WhatsApp notification - [Feature-Flag Controlled Payment Rollout](https://company-skill.com/p/_combos/feature-flag-controlled-payment-rollout-817e59): stripe + vercel + alinux. A developer uses Vercel's feature flag management system to create, configure, and control gradual rollouts of Stripe checkout experiences, combining general A/B testing infrastruc - [Filtered Supabase Monitor with Full-Stack Alerts](https://company-skill.com/p/_combos/filtered-supabase-monitor-with-full-stack-alerts-bf1ef5): eb + dataworks. A Supabase Edge Function queries and filters database changes (e.g., only high-value orders or VIP user signups), then sends matched events to EventBridge which fans out simultaneo - [Fine-Tune and Deploy Custom AI Model](https://company-skill.com/p/_combos/fine-tune-and-deploy-custom-ai-model-2f2ddc): bailian + alinux. A developer fine-tunes a large language model on Bailian using domain-specific data, then deploys the resulting custom model on an Alibaba Cloud Linux instance for production infer - [Fine-Tune Model, Deploy, Enhance Search](https://company-skill.com/p/_combos/fine-tune-model-deploy-enhance-search-1bc7dd): bailian + alinux + opensearch + es. A developer fine-tunes a custom embedding or reranking LLM on PAI, deploys it as a managed inference endpoint on Bailian, then integrates that endpoint with OpenSearch to perform n - [Fine-Tune Model & Optimize OpenSearch Relevance](https://company-skill.com/p/_combos/fine-tune-model-optimize-opensearch-relevance-f10601): alinux + es + opensearch. A developer fine-tunes a custom embedding/reranking model on PAI, deploys it via Bailian as a managed inference endpoint, integrates it with OpenSearch for neural reranking, and ad - [Fine-Tune on PAI, Deploy via Bailian](https://company-skill.com/p/_combos/fine-tune-on-pai-deploy-via-bailian-eb4485): pai + bailian. A developer fine-tunes a custom LLM on PAI using proprietary data, then deploys the resulting model as a managed inference endpoint on Bailian for integration into their applicatio - [Fix Email Sending and Improve Deliverability](https://company-skill.com/p/_combos/fix-email-sending-and-improve-deliverability-5d0546): alimail + resend. A developer experiencing email sending failures (550/SPF errors) configures SPF/DKIM/DMARC authentication records on their domain, then optimizes deliverability to ensure emails la - [Full Custom RAG: Custom LLM + Custom Embeddings](https://company-skill.com/p/_combos/full-custom-rag-custom-llm-custom-embeddings-75fbf5): alinux + bailian. Fine-tune a domain-specific LLM on PAI and deploy it to Bailian as a managed inference endpoint, while simultaneously training custom embedding models on PAI to power a vector sear - [Full Custom RAG with Deployed Frontend](https://company-skill.com/p/_combos/full-custom-rag-with-deployed-frontend-7534a1): bailian + alinux. Fine-tune a domain-specific LLM and train custom embedding models on PAI, build a vector search pipeline with OpenSearch/Elasticsearch and OSS, deploy the inference backend via Bai - [Full Email Domain Setup and Delivery Troubleshooting](https://company-skill.com/p/_combos/full-email-domain-setup-and-delivery-troubleshoo-f57f9c): resend + alimail. A developer onboarding a new sending domain first verifies it in Resend by configuring DNS records (SPF/DKIM/DMARC), then optimizes deliverability and inbox placement through domai - [Full Email Infrastructure Setup and Deliverability](https://company-skill.com/p/_combos/full-email-infrastructure-setup-and-deliverabili-9a1d9c): resend + alimail. A developer verifies their domain in Resend for transactional emails, coordinates SPF/DKIM/DMARC records across both Resend and Alibaba Mail for corporate communication on the same - [Full Enterprise AI Platform with Automated Onboarding](https://company-skill.com/p/_combos/full-enterprise-ai-platform-with-automated-onboa-2c5967): alinux. A DevOps team provisions MLPS 2.0-compliant infrastructure via Terraform with SSL and IDaaS, automates employee onboarding via SCIM/Clerk synced through EventBridge, builds a DataW - [Full Enterprise Digital Transformation Platform](https://company-skill.com/p/_combos/full-enterprise-digital-transformation-platform-d88f4e): bailian + airec + alinux. An enterprise executes a complete digital transformation: migrating on-premises databases to Alibaba Cloud via Terraform-provisioned infrastructure (Alinux ECS, CAS, RDS, OceanBase - [Full Enterprise Platform: Identity, RAG, DR, Observability](https://company-skill.com/p/_combos/full-enterprise-platform-identity-rag-dr-observa-53ce3f): alinux. A DevOps team Terraform-provisions an MLPS 2.0-compliant production stack (VPC, ECS, OSS, RDS, SLB with SSL via CAS), layers IDaaS for end-user identity and PAI-backed RAG for AI s - [Full Enterprise Platform with Automated Onboarding](https://company-skill.com/p/_combos/full-enterprise-platform-with-automated-onboardi-5622d3): alinux + clerk. A DevOps team uses Terraform to provision MLPS 2.0 compliant infrastructure (VPC, ECS, RDS, OSS, Elasticsearch), layers IDaaS for corporate SSO and Clerk for fine-grained RBAC, dep - [Full Production Stack with RAG Search and Operations](https://company-skill.com/p/_combos/full-production-stack-with-rag-search-and-operat-e4849c): alinux. A DevOps team uses Terraform to deploy a complete MLPS 2.0-compliant production environment with SSL certificates, then adds an Elasticsearch-based RAG document search pipeline, an - [Full Production Stack with SSL and RAG Search](https://company-skill.com/p/_combos/full-production-stack-with-ssl-and-rag-search-50664b): alinux + cas. A DevOps team uses Terraform to provision a complete MLPS 2.0-hardened production web stack (VPC, ECS cluster, OSS, RDS, SLB with HTTPS via CAS certificates), then layers Elasticse - [Full Production Stack with SSL, Database, and Disaster Recovery](https://company-skill.com/p/_combos/full-production-stack-with-ssl-database-and-disa-495876): alinux + cas. A DevOps team uses Terraform to provision a complete hardened production web application (VPC, ECS cluster, OSS, SLB, RDS database) with SSL certificates via CAS and MLPS 2.0 compl - [Full-Spectrum Commerce and Customer Intelligence Platform](https://company-skill.com/p/_combos/full-spectrum-commerce-and-customer-intelligence-189b26): bailian + airec. A live commerce enterprise combines an OCR-powered supplier catalog pipeline with ASR-driven voice checkout during broadcasts, while simultaneously running customer service call tr - [Full-Stack App: Vercel Frontend + Supabase Backend](https://company-skill.com/p/_combos/full-stack-app-vercel-frontend-supabase-backend-cd5035): vercel + supabase. A developer builds a full-stack web application hosting their frontend and API routes on Vercel while using Supabase for the database and Edge Functions for backend logic close to - [Full-Stack Application Performance Diagnosis](https://company-skill.com/p/_combos/full-stack-application-performance-diagnosis-2bda23): alinux + rds. When an application hosted on Alibaba Cloud Linux experiences performance degradation, developers need to diagnose both system-level issues (CPU spikes, memory pressure, I/O bottle - [Full-Stack Application Performance Optimization](https://company-skill.com/p/_combos/full-stack-application-performance-optimization-da4c27): alinux + oceanbase + rds. When an application experiences slowdowns, developers need to diagnose and optimize the entire stack: troubleshoot system-level bottlenecks (CPU, memory, I/O) on Alibaba Cloud Linu - [Full-Stack Application Security Hardening](https://company-skill.com/p/_combos/full-stack-application-security-hardening-41b97b): alinux + rds + oss. A DevOps engineer deploying a production web application on Alibaba Cloud hardens the Alinux compute layer for MLPS 2.0 compliance, locks down RDS with IP whitelists restricted to - [Full-Stack Custom RAG: Train to Production](https://company-skill.com/p/_combos/full-stack-custom-rag-train-to-production-e68446): es + alinux + bailian. A team trains domain-specific embedding models and fine-tunes LLMs on PAI using curated datasets, builds a hybrid retrieval pipeline combining custom-trained vector embeddings with - [Full-Stack Customer Intelligence Platform with ECS Compute](https://company-skill.com/p/_combos/full-stack-customer-intelligence-platform-with-e-64e56a): dataworks. Combine the Customer Intelligence Platform (EventBridge→Twilio for CRM sync, OpenSearch for search, Supabase+DataWorks for analytics, with app monitoring) with the Unified Customer - [Full-Stack Disaster Recovery for Cloud Infrastructure](https://company-skill.com/p/_combos/full-stack-disaster-recovery-for-cloud-infrastru-c98f3e): ecs + rds. Set up comprehensive disaster recovery covering both the compute layer (ECS disk snapshots, snapshot-consistent groups, auto-snapshot policies) and the database layer (RDS automate - [Full-Stack Disaster Recovery for ECS and RDS](https://company-skill.com/p/_combos/full-stack-disaster-recovery-for-ecs-and-rds-850770): alinux + ecs + eb + rds. Provision and configure Alibaba Cloud Linux ECS instances with automated snapshot policies for disk-level protection, then layer in RDS automatic backup with cross-region replicati - [Full-Stack Document AI: OCR to Recommendations](https://company-skill.com/p/_combos/full-stack-document-ai-ocr-to-recommendations-871ebe): airec + bailian. A developer uploads raw scanned documents (PDFs, images) to OSS, processes them through Bailian's OCR to extract text and structured data, indexes the content into Elasticsearch, l - [Full-Stack Enterprise ML Search Platform](https://company-skill.com/p/_combos/full-stack-enterprise-ml-search-platform-53c80c): eb + alinux + ecs. A DevOps engineer uses Terraform to provision MLPS 2.0 compliant infrastructure (VPC, ECS, RDS, OSS, Elasticsearch), then the platform team deploys an intelligent ML-powered search - [Full-Stack Enterprise Search with ML and RBAC](https://company-skill.com/p/_combos/full-stack-enterprise-search-with-ml-and-rbac-59f93a): clerk + alinux + ecs. An enterprise builds a complete intelligent search platform combining ML-powered search (RDS for transactional data, Elasticsearch for search, PAI for model training) with a dual-l - [Full-Stack Infra and App Event Notification Pipeline](https://company-skill.com/p/_combos/full-stack-infra-and-app-event-notification-pipe-55680e): eb + twilio. Unify ECS/RDS infrastructure health alerts and Supabase application-level database events (e.g., new orders, signups) into a single EventBridge fan-out pipeline that routes urgent - [Full-Stack Live Commerce Intelligence Platform](https://company-skill.com/p/_combos/full-stack-live-commerce-intelligence-platform-87a422): airec + bailian. Combines the OCR-to-Analytics pipeline (Combo 2) with the transactional e-commerce catalog system (Combo 3) to build a complete live commerce platform: supplier catalogs are OCR-in - [Full-Stack Migration and Modernization with Unified Search](https://company-skill.com/p/_combos/full-stack-migration-and-modernization-with-unif-8d77c8): es + bailian + ecs. A team migrating legacy infrastructure to Alibaba Cloud protects the source ECS database with snapshots and stages backups in OSS before importing to RDS, while simultaneously buil - [Full-stack ML recommendation pipeline](https://company-skill.com/p/_combos/full-stack-ml-recommendation-pipeline-d3e52f): airec + alinux. Deploy AIRec as the managed recommendation engine while deploying custom ranking or embedding models on Alibaba Cloud Linux instances for inference, combining them into an end-to-e - [Full-Stack Monitoring with Multi-Channel Alert Orchestration](https://company-skill.com/p/_combos/full-stack-monitoring-with-multi-channel-alert-o-8e321d): eb + twilio. Pipe ECS and RDS state changes and performance metrics through EventBridge rules that fan out to both Twilio for urgent SMS/WhatsApp on-call escalation and Resend for structured br - [Full-Stack Notifications with Delivery Tracking](https://company-skill.com/p/_combos/full-stack-notifications-with-delivery-tracking-52634d): eb + dataworks. Supabase database events (new orders, user registrations) trigger EventBridge to fan out notifications across DingTalk for internal ops teams, Resend for customer emails, and Twili - [Full-Stack Notion AI Agent with Deployed Frontend](https://company-skill.com/p/_combos/full-stack-notion-ai-agent-with-deployed-fronten-33dde2): bailian + notion. A developer builds a complete Notion AI agent system end-to-end: Notion OAuth app and MCP server on the Notion side, Bailian-hosted AI agent with IDaaS keyless M2M authentication f - [Full-Stack Observability with Analytics and Branded Alert Routing](https://company-skill.com/p/_combos/full-stack-observability-with-analytics-and-bran-3787c6): eb + dataworks. Stream ECS/RDS infrastructure events and Supabase business events through EventBridge into DataWorks for long-term ETL analytics and OpenSearch for log analysis, while simultaneous - [Full-Stack Observability with Analytics and Business Events](https://company-skill.com/p/_combos/full-stack-observability-with-analytics-and-busi-5dca1d): eb + dataworks. Unify ECS/RDS infrastructure health and Supabase application-level business events (orders, signups) into a single EventBridge pipeline that fans out real-time alerts via Twilio SM - [Full-Stack Observability with Analytics Lake and Multi-Channel Alert Orchestration](https://company-skill.com/p/_combos/full-stack-observability-with-analytics-lake-and-085ef4): eb + dataworks. Unify ECS/RDS infrastructure monitoring through EventBridge to simultaneously fan out real-time critical alerts via Twilio SMS/WhatsApp and Resend branded email to on-call teams, w - [Full-Stack Observability with Analytics Lake](https://company-skill.com/p/_combos/full-stack-observability-with-analytics-lake-b3515d): eb + dataworks. Extend the unified ECS+RDS EventBridge observability pipeline (real-time multi-channel alerting via SMS/email) by adding a DataWorks-orchestrated ingestion stream into Supabase as - [Full-Stack Observability with Auto-Scaling and Search Enrichment](https://company-skill.com/p/_combos/full-stack-observability-with-auto-scaling-and-s-50a788): dataworks. Combine the ESS auto-scaling event tracking and OpenSearch index-health monitoring from combo 1 with combo 3's focused ECS/RDS infrastructure alerting and DataWorks analytics lake, - [Full-Stack Observability with Multi-Channel Alerts](https://company-skill.com/p/_combos/full-stack-observability-with-multi-channel-aler-7b61ca): eb. Monitor both ECS compute instances and RDS databases through a unified EventBridge event pipeline, streaming state changes and performance metrics (CPU spikes, slow queries, instan - [Full-Stack Observability with Search and Archival](https://company-skill.com/p/_combos/full-stack-observability-with-search-and-archiva-c2985f): eb + dataworks. EventBridge ingests infrastructure events from ECS/RDS and application events from Supabase, then DataWorks transforms and fans them out simultaneously to OpenSearch for real-time - [Full-Stack RAG: Train, Deploy Infra, Launch Frontend](https://company-skill.com/p/_combos/full-stack-rag-train-deploy-infra-launch-fronten-cf00c0): bailian + alinux. A team trains custom embedding models and fine-tunes LLMs on PAI, builds hybrid vector+BM25 retrieval with OpenSearch/Elasticsearch, provisions reproducible ECS/RDS/OpenSearch infr - [Full-Stack RAG with Edge-Served Global Inference](https://company-skill.com/p/_combos/full-stack-rag-with-edge-served-global-inference-125949): airec + alinux. Train custom domain-specific embedding models and fine-tune LLMs on PAI, build a hybrid retrieval pipeline combining vector search with BM25 keyword search across OpenSearch and El - [Full-Stack Search Platform with Dual-Layer Security](https://company-skill.com/p/_combos/full-stack-search-platform-with-dual-layer-secur-f038fc): es + ecs + alinux. An enterprise builds an ML-powered search platform on RDS+Elasticsearch+PAI, then secures it at both layers: programmatic RDS account and permission management for service-to-servi - [Full-Stack Secure Notion AI Agent](https://company-skill.com/p/_combos/full-stack-secure-notion-ai-agent-95bd90): bailian + idaas + notion. A developer first builds a Notion AI integration (OAuth app, MCP server, worker) on the Notion side, then wires it into a Bailian-hosted AI agent that calls the Notion MCP tool, wi - [Full-Stack Security Hardening for Compliance](https://company-skill.com/p/_combos/full-stack-security-hardening-for-compliance-552dbb): rds + alinux. A developer deploying a web application on Alibaba Cloud Linux servers backed by RDS needs to harden both the OS-level compliance baseline (MLPS 2.0, CVE patches) and the database - [Full-Stack User Auth with SMS 2FA](https://company-skill.com/p/_combos/full-stack-user-auth-with-sms-2fa-bc74e1): idaas + twilio + rds. A developer builds a complete user authentication system: IDaaS is configured as the identity provider with multiple login methods (social login, SMS login), Twilio Verify API is i - [Full-Stack Web App with Event Data Pipeline](https://company-skill.com/p/_combos/full-stack-web-app-with-event-data-pipeline-6cc891): dataworks + alinux + eb. Deploy a production web application (ECS, ESS, OSS, OpenSearch) via Terraform with EventBridge as its event backbone, then layer on a self-scaling DataWorks data pipeline that inge - [Fully Branded SaaS Auth and Payment](https://company-skill.com/p/_combos/fully-branded-saas-auth-and-payment-1e5957): stripe + clerk. Build a SaaS application where both Clerk authentication screens and Stripe payment forms are fully customized using their respective Appearance APIs to match your brand, creating - [Golden Image to Secure Production Stack](https://company-skill.com/p/_combos/golden-image-to-secure-production-stack-41c2b1): alinux. A DevOps team first builds a hardened Alibaba Cloud Linux golden image (OS hardening, security tuning, application baseline), then uses Terraform to deploy a complete HTTPS web fle - [Golden Image to Terraform-Scaled Infrastructure](https://company-skill.com/p/_combos/golden-image-to-terraform-scaled-infrastructure-b93327): alinux + terraform. A DevOps engineer first builds a hardened, pre-configured Alibaba Cloud Linux golden image (OS hardening, security tuning, application baseline), then writes Terraform manifests th - [Guaranteed Multi-Channel Notifications with Delivery Tracking](https://company-skill.com/p/_combos/guaranteed-multi-channel-notifications-with-deli-d75119): rocketmq + dataworks + eb. Use RocketMQ transactional messages to durably queue critical business events, route them through EventBridge to fan out across Twilio SMS/WhatsApp and Resend email, then close the - [Hardened Production Stack with Auto Scaling](https://company-skill.com/p/_combos/hardened-production-stack-with-auto-scaling-7d6574): ecs + terraform + cas + alinux. A DevOps team uses Terraform to provision a complete production web stack (VPC, ECS cluster, OSS, RDS, SLB) with SSL certificate management via CAS and MLPS compliance hardening on - [Hardened Web App with Event Analytics](https://company-skill.com/p/_combos/hardened-web-app-with-event-analytics-d6e88e): eb + dataworks + alinux. Provision a security-hardened, MLPS-compliant production infrastructure (VPC, ECS cluster, RDS, SLB, CAS certificates, Alinux) via Terraform, then deploy the auto-scaling web appli - [Hardened Web App with Self-Scaling Event Pipeline](https://company-skill.com/p/_combos/hardened-web-app-with-self-scaling-event-pipelin-73eed5): dataworks + alinux. Provision a security-hardened, MLPS-compliant production infrastructure (VPC, ECS cluster, RDS, SLB, CAS certificates, Alinux) via Terraform, deploy the auto-scaling web applicatio - [HTTPS-Secured Web App with Search](https://company-skill.com/p/_combos/https-secured-web-app-with-search-6db4bd): alinux. Terraform provisions a complete production stack (VPC, ECS cluster, OSS, RDS, SLB), CAS manages SSL certificates for HTTPS termination, MLPS 2.0 compliance hardening is applied acr - [Hybrid Search: Structured Data + Semantic RAG](https://company-skill.com/p/_combos/hybrid-search-structured-data-semantic-rag-e053d8): es + rds. A platform migrates its relational database (products, inventory, user records) to ApsaraDB RDS and syncs structured data to Elasticsearch for keyword-based catalog search, while s - [Hybrid Search with RAG Answer Generation](https://company-skill.com/p/_combos/hybrid-search-with-rag-answer-generation-e56f9a): es + opensearch. Build a hybrid search system using Elasticsearch and OSS for vector+keyword retrieval, then layer OpenSearch's RAG pipeline on top to generate natural language answers from the ret - [Hybrid Vector + Keyword Search System](https://company-skill.com/p/_combos/hybrid-vector-keyword-search-system-3cb028): oss + es. Build a hybrid search application that stores embedding vectors in OSS for similarity search while using Elasticsearch with relevance tuning (synonyms, reranking) for keyword searc - [Infrastructure Monitoring, Alerting, and Analytics Lake](https://company-skill.com/p/_combos/infrastructure-monitoring-alerting-and-analytics-2ca15f): eb + dataworks. Unify ECS and RDS observability through EventBridge to simultaneously fan out real-time alerts via Twilio SMS/WhatsApp and Resend email to on-call teams, while orchestrating a para - [Intelligent Search and ML Data Platform](https://company-skill.com/p/_combos/intelligent-search-and-ml-data-platform-51c7d6): es + rds + pai + oceanbase. An enterprise builds a search-powered intelligent application using RDS as the central transactional data store, Elasticsearch for search and analytics, and PAI for ML model traini - [Keyless M2M Access to Bailian Model APIs](https://company-skill.com/p/_combos/keyless-m2m-access-to-bailian-model-apis-283f9c): bailian + idaas. A developer running an application on ECS or ACK needs to call Bailian (Model Studio) model APIs but wants to eliminate hardcoded API keys. They combine IDaaS OIDC-based M2M authen - [Keyless M2M Auth for PAI Models](https://company-skill.com/p/_combos/keyless-m2m-auth-for-pai-models-de23a0): pai + idaas. A developer builds an AI application on ACK or ECS that calls PAI Model Studio for inference, using IDaaS OIDC-based keyless M2M authentication to eliminate hardcoded AK/SK while c - [Keyless RAG Agent with External Tool Actions](https://company-skill.com/p/_combos/keyless-rag-agent-with-external-tool-actions-bf80c1): bailian + idaas. An ECS/ACK-hosted application retrieves documents from RDS and Elasticsearch keylessly via IDaaS OIDC, feeds retrieved context to a Bailian AI Agent (also authenticated via IDaaS M - [Keyless RAG App with Search and AI Inference](https://company-skill.com/p/_combos/keyless-rag-app-with-search-and-ai-inference-c0d501): idaas + bailian + dataworks. A developer builds a RAG (Retrieval-Augmented Generation) application on ECS/ACK where RDS stores source documents, Elasticsearch powers semantic retrieval, and PAI/Bailian Model S - [Keyless Terraform Deploy with Performance Tuning and DR](https://company-skill.com/p/_combos/keyless-terraform-deploy-with-performance-tuning-29017c): alinux. A DevOps team configures OIDC-based keyless Terraform authentication via IDaaS to eliminate static credentials, provisions a hardened production stack (VPC, ECS, RDS, OSS, SLB with - [Keyless Terraform MLPS-Compliant Stack with RAG Search](https://company-skill.com/p/_combos/keyless-terraform-mlps-compliant-stack-with-rag--93e51e): alinux. A DevOps team first configures Terraform with OIDC-based keyless authentication via IDaaS to eliminate static credentials, provisions a full MLPS 2.0-hardened production stack (VPC - [Keyless Terraform to Hardened Production Stack with DR](https://company-skill.com/p/_combos/keyless-terraform-to-hardened-production-stack-w-0bcc4a): cas + alinux. A DevOps team first configures Terraform with OIDC-based keyless authentication via IDaaS for secure infrastructure-as-code access, then uses that authenticated Terraform setup to - [Keyless Terraform to Production with Advanced DR](https://company-skill.com/p/_combos/keyless-terraform-to-production-with-advanced-dr-8ada27): alinux. A DevOps team first configures Terraform with OIDC-based keyless authentication via IDaaS for secure IaC access, then provisions a complete hardened production stack (VPC, ECS clus - [Legacy Migration to Full AI Document Platform](https://company-skill.com/p/_combos/legacy-migration-to-full-ai-document-platform-fbfc56): airec. A team migrates legacy databases via ECS snapshots staged through OSS into RDS (infrastructure layer from Combo 1), then trains domain-specific embedding models on PAI to power a B - [Legacy Migration with Custom AI App and Recommendations](https://company-skill.com/p/_combos/legacy-migration-with-custom-ai-app-and-recommen-0e70de): bailian + airec. A team migrates legacy databases via ECS snapshots staged through OSS into RDS, trains domain-specific embedding models on PAI to power a Bailian OCR document pipeline, then builds - [Legacy Migration with Custom AI Document Intelligence](https://company-skill.com/p/_combos/legacy-migration-with-custom-ai-document-intelli-e39811): airec + bailian. A team migrates legacy databases to Alibaba Cloud via ECS snapshot staging through OSS into RDS, then trains domain-specific embedding models on PAI to power a Bailian OCR document - [Lightweight RAG with Edge-Served Generation](https://company-skill.com/p/_combos/lightweight-rag-with-edge-served-generation-290f9c): alinux + opensearch. Deploy an embedding model directly within OpenSearch for query-time vector retrieval, then host a generative LLM on Alibaba Cloud Linux behind a Cloudflare Worker edge proxy to for - [Live Commerce Intelligence with App Backend](https://company-skill.com/p/_combos/live-commerce-intelligence-with-app-backend-19b8c9): bailian + airec. A live commerce platform combines OCR-based supplier catalog ingestion and ASR-driven voice checkout (#3) with a multi-destination event backbone (#4) that simultaneously feeds tra - [Live Commerce Platform with Unified Observability and Alert Orchestration](https://company-skill.com/p/_combos/live-commerce-platform-with-unified-observabilit-2ebe28): dataworks + bailian. An enterprise live commerce platform (OceanBase/RocketMQ orders, Bailian ASR speech intelligence) feeds all commerce, speech, and infrastructure events through EventBridge into Dat - [Live Commerce Platform with Voice Intelligence](https://company-skill.com/p/_combos/live-commerce-platform-with-voice-intelligence-7625a6): es + bailian + dataworks. An e-commerce platform processes orders via OceanBase/RocketMQ distributed transactions with real-time product search (Elasticsearch/OpenSearch), while live commerce streams are tr - [Live Commerce Voice Intelligence Platform](https://company-skill.com/p/_combos/live-commerce-voice-intelligence-platform-094949): bailian. An e-commerce platform combines the Bailian ASR + EventBridge speech transcription backbone (Skills 1-3) with Skill 4's distributed transaction layer (OceanBase/RocketMQ) and live- - [Live Commerce with Content Search and Unified Observability](https://company-skill.com/p/_combos/live-commerce-with-content-search-and-unified-ob-398202): dataworks + bailian. An enterprise live commerce platform ingests product videos and documents into OSS, where EventBridge fans out to HLS transcoding for live stream replay and OpenSearch vector embed - [Live Commerce with Full Observability and Archival](https://company-skill.com/p/_combos/live-commerce-with-full-observability-and-archiv-8e6b7a): eb + dataworks + bailian. An enterprise live commerce platform (distributed OceanBase/RocketMQ orders + Bailian ASR speech intelligence) feeds all commerce, speech, and infrastructure events through EventBr - [Live Commerce with Speech Intelligence and Alert Orchestration](https://company-skill.com/p/_combos/live-commerce-with-speech-intelligence-and-alert-549bc2): bailian + dataworks. Enterprise live commerce platform combines distributed order processing (OceanBase/RocketMQ) and Bailian ASR speech intelligence routing transcripts to OpenSearch/Supabase/DataWork - [Live Speech and Business Events Unified Platform](https://company-skill.com/p/_combos/live-speech-and-business-events-unified-platform-8bcddf): bailian + dataworks. Transcribe live audio streams via Bailian speech recognition into EventBridge, then merge those transcription events with broader business events (orders, user activity, IoT teleme - [Live Speech Transcription Search and Analytics Pipeline](https://company-skill.com/p/_combos/live-speech-transcription-search-and-analytics-p-9343cd): bailian + dataworks. Transcribe live audio streams (meetings, broadcasts) using Bailian speech recognition, pipe transcription events through EventBridge as a unified backbone, then dual-path index the - [Media Processing with Completion Notification Tracking](https://company-skill.com/p/_combos/media-processing-with-completion-notification-tr-d0892c): eb + dataworks. A developer uploads video to OSS triggering EventBridge-driven HLS transcoding (skill 1), and upon processing completion EventBridge fans out delivery receipts via Twilio SMS and R - [Meeting Intelligence Platform with Speech Analytics and Monitoring](https://company-skill.com/p/_combos/meeting-intelligence-platform-with-speech-analyt-34a5d2): dataworks + bailian. A developer builds a meeting intelligence platform where Bailian ASR transcribes live meetings and customer calls in real-time, EventBridge routes transcriptions alongside structur - [Migrate DB to RDS and Add Elasticsearch Search](https://company-skill.com/p/_combos/migrate-db-to-rds-and-add-elasticsearch-search-bbb777): rds + es. A team migrates their self-managed relational database to ApsaraDB RDS as the primary data store, then ingests relevant data into Elasticsearch to power full-text search and analyt - [Migrate DB to RDS with EventBridge status notifications](https://company-skill.com/p/_combos/migrate-db-to-rds-with-eventbridge-status-notifi-80af37): rds + eb. A DevOps team migrates their self-managed database to ApsaraDB RDS and wires EventBridge to push real-time migration status events (success, failure, progress) to their DingTalk or - [Migrate from RDS to OceanBase](https://company-skill.com/p/_combos/migrate-from-rds-to-oceanbase-5ec703): rds + oceanbase. A developer migrates an existing database workload from ApsaraDB RDS (e.g. MySQL) to OceanBase for distributed scalability, using the RDS skill to export/source the data and the Oc - [Migrate On-Prem DB to Cloud with Search](https://company-skill.com/p/_combos/migrate-on-prem-db-to-cloud-with-search-ff2027): oceanbase + rds + es + oss. A team migrates their on-premises or self-managed database to ApsaraDB RDS by uploading backup files to OSS as a staging layer, importing the data into RDS, and then syncing that d - [Migrate Self-Managed DB to RDS via OSS](https://company-skill.com/p/_combos/migrate-self-managed-db-to-rds-via-oss-30c08e): oss + rds. A developer migrates a self-managed database to ApsaraDB RDS by first uploading database backup or dump files to an OSS bucket as a staging layer, then triggering RDS's built-in da - [ML Embedding Pipeline with Vector Search](https://company-skill.com/p/_combos/ml-embedding-pipeline-with-vector-search-b27b79): pai + oss. Use PAI to preprocess training datasets and train embedding models, then store the generated vector embeddings into OSS vector indexes to power a semantic similarity search service - [ML Pipeline Monitoring with EventBridge Alerts](https://company-skill.com/p/_combos/ml-pipeline-monitoring-with-eventbridge-alerts-7ab363): pai + oceanbase + eb. A data scientist running ML training jobs on PAI that read from RDS extends pipeline monitoring with automated multi-channel alerting — routing PAI job failures, GPU bottlenecks, a - [ML Pipeline Monitoring with Intelligent Alert Escalation](https://company-skill.com/p/_combos/ml-pipeline-monitoring-with-intelligent-alert-es-fe7260): eb + pai. A data scientist running ML training jobs on PAI that read from RDS gets comprehensive pipeline monitoring where PAI job failures and GPU bottlenecks trigger urgent Twilio SMS/What - [ML Pipeline with PAI and RDS Data Access](https://company-skill.com/p/_combos/ml-pipeline-with-pai-and-rds-data-access-f95ede): pai + rds. A data science team configures PAI workspace roles and RAM policies so their ML training jobs can access feature data stored in an ApsaraDB RDS instance, requiring both PAI permiss - [ML-Powered Search Platform with Identity Access Control](https://company-skill.com/p/_combos/ml-powered-search-platform-with-identity-access--5faf13): es + ecs. An enterprise builds an intelligent search and ML platform using RDS as the transactional data store, Elasticsearch for search, and PAI for model training, then layers IDaaS on top - [ML-Powered Semantic Search Pipeline](https://company-skill.com/p/_combos/ml-powered-semantic-search-pipeline-b3728a): pai + oss + es. Use PAI to preprocess training data and train embedding models, then store generated embeddings as vector indexes in OSS for similarity search, optionally combining with Elasticsea - [ML Search Platform on Hardened Production Stack](https://company-skill.com/p/_combos/ml-search-platform-on-hardened-production-stack-ac65c3): idaas + alinux + ecs. A DevOps team first provisions a complete production web infrastructure (VPC, ECS cluster, OSS, SLB, RDS with SSL) via Terraform with granular multi-tier database access control, t - [ML Search Platform with SMS 2FA Authentication](https://company-skill.com/p/_combos/ml-search-platform-with-sms-2fa-authentication-acc565): idaas + ecs. An enterprise deploys an intelligent search and ML platform using RDS, Elasticsearch, and PAI for data and model training, secures user access with IDaaS identity management, and i - [ML Training Pipeline End-to-End Monitoring](https://company-skill.com/p/_combos/ml-training-pipeline-end-to-end-monitoring-7e87d8): pai + rds. A data scientist runs ML training jobs on PAI that read/write large datasets in RDS. When training is slow or fails, they need to monitor PAI job metrics (GPU utilization, training - [ML Training Pipeline with Search Serving Layer](https://company-skill.com/p/_combos/ml-training-pipeline-with-search-serving-layer-760ca5): pai + ecs + es. A developer building an intelligent search application configures both the ML training pipeline (PAI workspace roles and RAM policies to access RDS feature data for model training) - [MLPS-Compliant OCR Document Intelligence Platform](https://company-skill.com/p/_combos/mlps-compliant-ocr-document-intelligence-platfor-961702): es + airec + alinux. A DevOps team uses Terraform to provision a complete MLPS 2.0-hardened production stack (VPC, ECS cluster, OSS, RDS, SLB with HTTPS via CAS certificates, Elasticsearch for RAG), th - [MLPS-Compliant Platform with Identity and RAG](https://company-skill.com/p/_combos/mlps-compliant-platform-with-identity-and-rag-b1ff7b): cas + alinux. A DevOps team first provisions a full MLPS 2.0-compliant enterprise infrastructure (VPC, ECS with auto-scaling, RDS, OSS, SLB with SSL via CAS, Alinux hardening) using Terraform, t - [MLPS-Compliant Web App with Data Pipeline](https://company-skill.com/p/_combos/mlps-compliant-web-app-with-data-pipeline-b293e5): dataworks + alinux. Provision a security-hardened, MLPS-compliant production infrastructure (VPC, ECS cluster, RDS, SLB, CAS certificates, Alinux) via Terraform, then deploy a self-scaling web applica - [Monitored Batch and Real-Time Search Platform](https://company-skill.com/p/_combos/monitored-batch-and-real-time-search-platform-76bb3a): dataworks. A developer builds a comprehensive data platform where DataWorks orchestrates batch ETL jobs to populate OpenSearch indexes for search, while EventBridge streams real-time events s - [Monitored Dual-Path Event Platform with Search and Supabase](https://company-skill.com/p/_combos/monitored-dual-path-event-platform-with-search-a-a3c317): dataworks. A developer configures EventBridge as a unified event backbone that simultaneously streams real-time business events to OpenSearch for low-latency search indexing and to DataWorks - [Monitored Event-Driven Customer Data Platform](https://company-skill.com/p/_combos/monitored-event-driven-customer-data-platform-e7f8ea): eb + dataworks. Combine real-time event ingestion into Supabase with parallel Twilio CRM sync via EventBridge fan-out, while applying deep Supabase monitoring to track ingestion throughput, query - [Monitored Infrastructure Alerts with Supabase Analytics](https://company-skill.com/p/_combos/monitored-infrastructure-alerts-with-supabase-an-99d0e9): eb + dataworks. Deploy ECS and RDS resources whose state-change events flow through EventBridge to simultaneously fan out urgent alerts via Twilio SMS/WhatsApp and Resend email to on-call teams, w - [Monitored Multi-Destination Customer Event Platform](https://company-skill.com/p/_combos/monitored-multi-destination-customer-event-platf-50dd62): dataworks. Combine EventBridge fan-out to simultaneously stream business events to OpenSearch for real-time customer search indexing, to Supabase for monitored analytics storage with throughp - [Monitored Real-Time Supabase Ingestion Pipeline](https://company-skill.com/p/_combos/monitored-real-time-supabase-ingestion-pipeline-f25edd): dataworks + supabase. Configure EventBridge and DataWorks to stream real-time business events into Supabase as the destination database, then use Supabase monitoring to track ingestion throughput, query - [Monitored Unified Customer Intelligence Platform](https://company-skill.com/p/_combos/monitored-unified-customer-intelligence-platform-9cf4d5): eb + dataworks. EventBridge captures customer interaction events and fans them out simultaneously to Twilio for real-time CRM profile sync, DataWorks for ETL into both Supabase (real-time analytic - [Multi-Channel Notification Webhook Pipeline](https://company-skill.com/p/_combos/multi-channel-notification-webhook-pipeline-188bbb): twilio + resend. Build a unified notification event pipeline that receives, validates, and processes incoming webhooks from both Twilio (SMS delivery receipts, inbound messages) and Resend (email d - [Multi-Channel Notifications from Supabase Events](https://company-skill.com/p/_combos/multi-channel-notifications-from-supabase-events-6cea11): eb. A Supabase Edge Function detects database changes and sends webhook events to EventBridge, which routes alerts to DingTalk for internal team notification while simultaneously trigg - [Multi-Destination Event Platform with Monitoring](https://company-skill.com/p/_combos/multi-destination-event-platform-with-monitoring-013f1b): dataworks + eb. Configure EventBridge as a unified event backbone that simultaneously streams business events to OpenSearch for real-time search indexing, routes streams through DataWorks for batc - [Multi-Modal Content Platform with Search and Streaming](https://company-skill.com/p/_combos/multi-modal-content-platform-with-search-and-str-b003fb): eb + dataworks. A content platform uploads both video and text documents to OSS, where EventBridge routes each content type to its specialized processing pipeline — videos undergo HLS transcoding - [Multi-Modal Platform with Database-Driven Notifications](https://company-skill.com/p/_combos/multi-modal-platform-with-database-driven-notifi-0b7106): eb + dataworks. A content platform ingests both documents (vectorized into OpenSearch for semantic search) and videos (HLS-transcoded with processing status tracked in Supabase), where database ch - [Multi-Modal Platform with Guaranteed Notifications](https://company-skill.com/p/_combos/multi-modal-platform-with-guaranteed-notificatio-b64855): dataworks. A unified content platform ingests documents (vectorized into OpenSearch for semantic search) and videos (HLS-transcoded with Supabase status tracking), where all database change e - [Multi-Tier Keyless AI Platform with Dual Frontends](https://company-skill.com/p/_combos/multi-tier-keyless-ai-platform-with-dual-fronten-ce308c): bailian. An enterprise deploys a dual-tier AI agent system: a customer-facing web app on Vercel and an internal ECS-hosted admin service both authenticate via IDaaS OIDC to invoke Bailian-h - [Notion AI Agent with Custom RAG Knowledge Base](https://company-skill.com/p/_combos/notion-ai-agent-with-custom-rag-knowledge-base-bddd72): alinux + notion + bailian. Extend the full-stack Notion AI agent (Skill 3) with a custom RAG pipeline (Skill 4): train domain-specific embedding models on PAI, build a vector knowledge base in OpenSearch/OSS - [Notion AI CMS on Vercel](https://company-skill.com/p/_combos/notion-ai-cms-on-vercel-d897b6): vercel + notion. Build a Notion AI-powered content integration (custom AI agent that reads/writes Notion pages) and connect it to a Vercel-hosted frontend application, using Notion as a headless CM - [Notion Knowledge Base to RAG Chatbot](https://company-skill.com/p/_combos/notion-knowledge-base-to-rag-chatbot-7d3760): notion + es. A developer organizes enterprise documentation in a Notion database, then deploys an Elasticsearch-based RAG chatbot that ingests and retrieves from that structured knowledge to an - [Notion-to-Elasticsearch RAG via Bailian Pipeline](https://company-skill.com/p/_combos/notion-to-elasticsearch-rag-via-bailian-pipeline-56a20e): es + bailian + airec. A developer organizes enterprise documentation in Notion databases, uses Bailian to build a full RAG pipeline (document extraction, chunking, embedding, reranking) over that struct - [Observable Multi-Modal Content Platform](https://company-skill.com/p/_combos/observable-multi-modal-content-platform-0d5525): dataworks + eb. A production multi-modal content platform processes video uploads (HLS transcoding) and documents (vector embedding into OpenSearch) via EventBridge pipelines, while simultaneously - [OCR Catalog to Live Commerce Voice Platform](https://company-skill.com/p/_combos/ocr-catalog-to-live-commerce-voice-platform-db5ae6): es + airec + bailian. A live commerce platform first ingests scanned supplier catalogs, spec sheets, and invoices via Bailian OCR into Elasticsearch/OpenSearch to build a searchable product index, then - [OCR Catalog + Voice-Driven Live Commerce Platform](https://company-skill.com/p/_combos/ocr-catalog-voice-driven-live-commerce-platform-7ff7f9): eb + airec + bailian. Supplier catalogs are OCR-ingested via Bailian into Elasticsearch/OpenSearch for searchable product data, while live commerce streams are simultaneously transcribed via Bailian ASR - [OCR Document Intelligence with Personalized Search](https://company-skill.com/p/_combos/ocr-document-intelligence-with-personalized-sear-2533d0): airec + alinux. A team trains domain-specific embedding models on PAI, builds an OCR-powered document ingestion pipeline using Bailian to process scanned PDFs and images, deploys hybrid vector+BM2 - [OCR Documents with Personalized Retrieval](https://company-skill.com/p/_combos/ocr-documents-with-personalized-retrieval-7433f6): alinux + airec. A team trains domain-specific embedding models on PAI, ingests scanned PDFs and images via Bailian OCR into a hybrid vector+BM25 retrieval pipeline in OpenSearch, then layers AIRec - [OCR-Enhanced Hybrid RAG Pipeline](https://company-skill.com/p/_combos/ocr-enhanced-hybrid-rag-pipeline-f952fd): bailian + airec + es. A developer uploads raw scanned documents (PDFs, images) to OSS, uses Bailian's document understanding to perform OCR and extract structured text, indexes the processed content int - [OCR Extract and Index for Search](https://company-skill.com/p/_combos/ocr-extract-and-index-for-search-f11cc4): bailian + es. A developer extracts text and structured data from unstructured documents (PDFs, scanned images) using Bailian's document understanding, then ingests the extracted content into Ela - [OCR-Ingested Custom RAG with Fine-Tuned LLM](https://company-skill.com/p/_combos/ocr-ingested-custom-rag-with-fine-tuned-llm-8c1cfc): es + alinux + airec. A team trains domain-specific embedding models and fine-tunes a custom LLM on PAI, deploys the LLM to Bailian as a managed inference endpoint, then builds an end-to-end document in - [OCR-to-Analytics Live Commerce Intelligence Platform](https://company-skill.com/p/_combos/ocr-to-analytics-live-commerce-intelligence-plat-de2cb9): bailian + airec. A live commerce platform ingests supplier catalogs via Bailian OCR into Elasticsearch/OpenSearch, runs live broadcasts with ASR-driven voice checkout powered by OceanBase/RocketMQ - [OCR-to-Live-Commerce Full Pipeline](https://company-skill.com/p/_combos/ocr-to-live-commerce-full-pipeline-07d3b4): bailian + airec. Supplier catalogs are OCR-ingested via Bailian into Elasticsearch/OpenSearch to build a searchable product database, which then feeds a production-grade live commerce platform wher - [OIDC-Authenticated Terraform Production Stack with SSL](https://company-skill.com/p/_combos/oidc-authenticated-terraform-production-stack-wi-bf7de0): alinux + cas. A DevOps team first configures Terraform with OIDC-based keyless authentication via IDaaS to eliminate static AK/SK credentials, then uses that secure Terraform setup to provision - [OIDC-Secured Terraform Stack with Twilio Alerting](https://company-skill.com/p/_combos/oidc-secured-terraform-stack-with-twilio-alertin-18da7b): alinux + cas. A DevOps team first configures Terraform with OIDC keyless authentication via IDaaS to eliminate static credentials, then provisions a full hardened production stack (VPC, ECS, RDS - [OIDC Terraform Foundation with Compliant RAG](https://company-skill.com/p/_combos/oidc-terraform-foundation-with-compliant-rag-ccb856): alinux. A DevOps team first establishes OIDC-authenticated Terraform as their secure provisioning pipeline (eliminating static AK/SK via IDaaS), then uses that trusted pipeline to deploy a - [On-Prem DB Migration to Full-Stack Search Application](https://company-skill.com/p/_combos/on-prem-db-migration-to-full-stack-search-applic-25dd1c): es + ecs. A team migrates their on-premises database to the cloud by uploading backups to OSS and importing into RDS as a validated staging layer, then fans out from RDS to OceanBase for dis - [On-Prem DB to OceanBase and Elasticsearch](https://company-skill.com/p/_combos/on-prem-db-to-oceanbase-and-elasticsearch-87de98): ecs + es. A team migrates their on-premises database to the cloud by uploading backups to OSS and importing into RDS as a validated staging layer, then fans out from RDS to both OceanBase fo - [On-Prem DB to OceanBase via RDS Staging](https://company-skill.com/p/_combos/on-prem-db-to-oceanbase-via-rds-staging-b023f3): oceanbase + es + oss. A team migrates a self-managed on-premises database to the cloud in two stages: first uploading backup files to OSS and importing into ApsaraDB RDS as a validated staging layer, th - [On-Prem Migration with OCR-Enhanced RAG Search](https://company-skill.com/p/_combos/on-prem-migration-with-ocr-enhanced-rag-search-dfb3f0): es + ecs + airec. A team migrates their on-premises database—including structured records and references to scanned documents—to Alibaba Cloud by staging backups in OSS and importing into RDS/OceanB - [On-Prem Migration with Search and Observability](https://company-skill.com/p/_combos/on-prem-migration-with-search-and-observability-bdd709): oceanbase + es + ecs + dataworks. A team migrates their on-premises database to the cloud via OSS backup and RDS staging, fans out to both OceanBase for distributed OLTP and Elasticsearch for full-text search, then - [On-Prem Migration with Sustained Operational Monitoring](https://company-skill.com/p/_combos/on-prem-migration-with-sustained-operational-mon-d272c3): dataworks + eb. A team migrates their on-premises database to cloud via OSS backup into RDS, fans out to OceanBase for distributed OLTP and Elasticsearch for full-text search, then layers a sustai - [OSS Document Store for OpenSearch RAG Pipeline](https://company-skill.com/p/_combos/oss-document-store-for-opensearch-rag-pipeline-847274): oss + opensearch. Upload knowledge base documents (PDFs, text files, markdown) to OSS as the durable source-of-truth storage layer, then build a RAG pipeline with OpenSearch that chunks, embeds, and - [PAI Inference with Edge API Gateway](https://company-skill.com/p/_combos/pai-inference-with-edge-api-gateway-039c57): alinux + pai + opensearch. Deploy an ML model on PAI's managed inference service for auto-scaling and model versioning, then front it with a Cloudflare Worker edge proxy (leveraging the existing Alinux+Cloud - [PAI-Preprocessed Hybrid Search RAG Pipeline](https://company-skill.com/p/_combos/pai-preprocessed-hybrid-search-rag-pipeline-50948e): opensearch + pai + alinux + es. A developer preprocesses and versions raw document corpora in PAI (deduplication, text cleaning, feature encoding, statistical analysis) to ensure data quality, then feeds the clea - [PAI-Preprocessed RAG Vector Search Pipeline](https://company-skill.com/p/_combos/pai-preprocessed-rag-vector-search-pipeline-ef0547): pai + opensearch + oss. A developer preprocesses and versions raw document corpora in PAI (deduplication, text cleaning, feature encoding, statistical analysis), then deploys an embedding model via OpenSe - [Payment Rollout with Templated Email Notifications](https://company-skill.com/p/_combos/payment-rollout-with-templated-email-notificatio-f9d4c1): vercel + resend. A developer A/B tests Stripe checkout variants using Vercel feature flags, sending variant-specific transactional emails (payment confirmation, receipt, failure notice) through Res - [Phone 2FA with Auth Error Handling](https://company-skill.com/p/_combos/phone-2fa-with-auth-error-handling-013170): twilio + clerk. A developer builds a complete user authentication flow for a web app using Twilio Verify API to implement SMS-based two-factor authentication, while using Clerk to manage the front - [Pre-Migration Snapshot Safety for Database Migration](https://company-skill.com/p/_combos/pre-migration-snapshot-safety-for-database-migra-3e771f): ecs + rds. A developer migrating a self-managed database from an ECS instance to ApsaraDB RDS first configures automatic snapshots and a rollback policy on the ECS disk hosting the source dat - [Production Email Infrastructure Setup](https://company-skill.com/p/_combos/production-email-infrastructure-setup-a4b98e): alimail + resend. A developer configuring a new domain's email infrastructure sets up SPF/DKIM/DMARC authentication records to prevent spoofing, then warms up the domain and optimizes deliverability - [Production Personalized RAG with Full Infrastructure](https://company-skill.com/p/_combos/production-personalized-rag-with-full-infrastruc-ea7212): alinux + es + airec. A team trains custom embedding models and fine-tunes LLMs on PAI, deploys a hybrid retrieval pipeline with AIRec-powered personalized recommendations via OpenSearch, then provision - [Production RAG Platform with Neural Reranking and Infrastructure-as-Code](https://company-skill.com/p/_combos/production-rag-platform-with-neural-reranking-an-6e7440): airec + alinux. A team trains custom embedding and reranking models on PAI, deploys a hybrid retrieval pipeline (vector + BM25) with Bailian neural reranking into OpenSearch/Elasticsearch, builds - [Production RAG with Edge-Served Inference](https://company-skill.com/p/_combos/production-rag-with-edge-served-inference-a4f07c): alinux + opensearch + bailian. Train custom embedding models on PAI and deploy them inside OpenSearch for query-time vector inference, build a retrieval pipeline across Elasticsearch and OSS, then serve the gene - [Production-Ready Infrastructure: Provision, Protect, Monitor](https://company-skill.com/p/_combos/production-ready-infrastructure-provision-protec-ef2a1c): ecs + eb + alinux + rds. A DevOps engineer provisions a complete web application stack (VPC, ECS, OSS, RDS) via Terraform with MLPS 2.0 compliance hardening, then layers on cross-region disaster recovery ( - [Production Stack Deploy with Observability Lake](https://company-skill.com/p/_combos/production-stack-deploy-with-observability-lake-c2698f): ecs + alinux + dataworks. Terraform-provision a hardened production stack (VPC, ECS cluster, OSS, SLB with SSL, RDS) with baseline DR, then extend the EventBridge monitoring into a DataWorks-orchestrated an - [Production Web Stack with Multi-Tier Database Access Control](https://company-skill.com/p/_combos/production-web-stack-with-multi-tier-database-ac-72f216): rds + cas + alinux. A DevOps team provisions a complete production web application stack (VPC, ECS cluster, OSS, SLB, RDS with SSL) using Terraform, then configures granular database accounts and role - [Protected Scaling Instance Backup and Recovery](https://company-skill.com/p/_combos/protected-scaling-instance-backup-and-recovery-e41d25): ess + ecs. Mark mission-critical ECS instances in an Auto Scaling group as protected from termination or place them in standby, then configure automatic snapshot policies and snapshot-consist - [Provision and Harden Production ECS Server](https://company-skill.com/p/_combos/provision-and-harden-production-ecs-server-c4a1d0): alinux + ecs. A developer provisions a new Alibaba Cloud Linux ECS instance, configures its networking (security groups, elastic IPs, ENIs) to make it reachable and secure, then sets up automati - [Provision Infrastructure and Deploy AI Models with RAG](https://company-skill.com/p/_combos/provision-infrastructure-and-deploy-ai-models-wi-4b202b): bailian + alinux + es. Use Terraform to provision enterprise cloud infrastructure (VPC, ECS clusters, RDS, networking), then deploy custom AI embedding and LLM models on Alibaba Cloud Linux instances for - [Provision Production Stack Then Diagnose Performance](https://company-skill.com/p/_combos/provision-production-stack-then-diagnose-perform-230eb9): alinux + cas + ecs. A DevOps team first provisions a hardened production web stack (VPC, ECS cluster, RDS, OSS, SLB with SSL) using Terraform, then performs full-stack performance diagnosis across the - [Provision Secure Full Stack Then Diagnose Performance](https://company-skill.com/p/_combos/provision-secure-full-stack-then-diagnose-perfor-9fedd3): alinux + cas + ecs. A DevOps team uses Terraform to provision a hardened production web stack (VPC, ECS cluster, OSS, SLB with SSL, RDS) with full security hardening, then immediately performs full-st - [Publish then SSO-Gate Documentation Portal](https://company-skill.com/p/_combos/publish-then-sso-gate-documentation-portal-64271a): gitbook + alinux. A developer first publishes a GitBook documentation site with custom domain and GitHub sync, then embeds it into their customer-facing portal and integrates IDaaS SSO so only authe - [RAG AI Chatbot with Deployed Frontend](https://company-skill.com/p/_combos/rag-ai-chatbot-with-deployed-frontend-a78f13): es + vercel. Deploy a RAG knowledge-base chatbot backend on Alibaba Cloud Elasticsearch, then deploy the chatbot's web frontend to Vercel for public or internal user access — forming a complete - [RAG Chatbot with DingTalk Alerts](https://company-skill.com/p/_combos/rag-chatbot-with-dingtalk-alerts-c1290b): es + eb. Deploy a RAG-powered knowledge base chatbot using Elasticsearch for enterprise Q&A, and integrate EventBridge to send low-confidence answers or user feedback notifications to DingT - [RAG Chatbot with Personalized Recommendations](https://company-skill.com/p/_combos/rag-chatbot-with-personalized-recommendations-0691a9): bailian + airec. A developer extracts text from unstructured documents (PDFs, scanned images) via Bailian OCR, indexes content into Elasticsearch to power a RAG chatbot for question answering, then - [RAG Chatbot with Semantic Recommendations Platform](https://company-skill.com/p/_combos/rag-chatbot-with-semantic-recommendations-platfo-40c489): bailian + airec. A developer extracts text from unstructured enterprise documents using Bailian, ingests content into Elasticsearch, then deploys both a conversational RAG chatbot for direct Q&A an - [RAG-Enhanced Notion AI Agent on Vercel](https://company-skill.com/p/_combos/rag-enhanced-notion-ai-agent-on-vercel-a23a04): bailian. A developer builds a full-stack AI agent where a Vercel-deployed frontend calls a Bailian-hosted agent that combines Notion MCP tools for document management with a RAG pipeline (R - [RAG Pipeline: Embedding Search + LLM Inference](https://company-skill.com/p/_combos/rag-pipeline-embedding-search-llm-inference-b49ee9): pai + opensearch. Deploy an embedding model in OpenSearch for vector similarity retrieval, then deploy a large language model via PAI for online inference, combining both into a retrieval-augmented - [RAG Pipeline with Retrieval and Generation](https://company-skill.com/p/_combos/rag-pipeline-with-retrieval-and-generation-a17b40): opensearch + bailian. Deploy an embedding model in OpenSearch to power vector-based document retrieval, then deploy a fine-tuned LLM on Bailian as the generation endpoint — together forming a Retrieval- - [RAG-Powered Semantic Recommendation Platform](https://company-skill.com/p/_combos/rag-powered-semantic-recommendation-platform-f30993): es + opensearch + airec. Build a complete knowledge discovery platform where documents stored in OSS are embedded via OpenSearch and indexed in Elasticsearch for RAG-based search, then the same semantic em - [RDS Observability Pipeline via EventBridge](https://company-skill.com/p/_combos/rds-observability-pipeline-via-eventbridge-868821): rds + eb. A developer monitors ApsaraDB RDS performance metrics (CPU, slow queries, connections), streams those database events in real time through EventBridge, and configures alert rules o - [RDS Performance Monitoring and Optimization Pipeline](https://company-skill.com/p/_combos/rds-performance-monitoring-and-optimization-pipe-89d0e0): rds + alinux. A DBA continuously monitors RDS instance metrics (CPU, slow queries, IOPS) to detect performance degradation, then uses diagnostic tools to identify root causes like missing indexe - [RDS Performance Monitoring with Automated Alerting](https://company-skill.com/p/_combos/rds-performance-monitoring-with-automated-alerti-67a631): rds + eb. A developer sets up continuous RDS performance monitoring to track CPU, slow queries, and connection metrics, configures EventBridge alert rules to trigger notifications when thres - [Real-Time Data Pipeline to Search](https://company-skill.com/p/_combos/real-time-data-pipeline-to-search-19d45e): dataworks + eb + opensearch. Use DataWorks to orchestrate batch ETL jobs that land transformed data into OSS/MaxCompute, configure EventBridge to stream real-time events into the same OSS landing zone, and the - [Real-Time Event-Driven Data Pipeline](https://company-skill.com/p/_combos/real-time-event-driven-data-pipeline-4095a4): eb + dataworks. A developer configures EventBridge to capture and stream real-time business events (e.g., order placements, IoT telemetry) and then uses DataWorks to route those streams into the a - [Real-time Event-Driven RAG Application](https://company-skill.com/p/_combos/real-time-event-driven-rag-application-a9f3e9): es + eb. Deploy a RAG chatbot on Elasticsearch that processes incoming events in real-time via EventBridge, enabling automated knowledge base queries triggered by streaming events like cust - [Real-Time Event-Driven Search Pipeline](https://company-skill.com/p/_combos/real-time-event-driven-search-pipeline-d30e38): eb + opensearch + es. Configure EventBridge to stream application events in real-time, deliver them to an external API destination or OSS bucket, set up OpenSearch to ingest that data as a managed sourc - [Real-Time Event-Driven Search Pipeline](https://company-skill.com/p/_combos/real-time-event-driven-search-pipeline-d98074): opensearch + eb. A developer builds a real-time search pipeline by configuring EventBridge to stream business events (e.g., order updates, user activity) and deliver them to an external API destina - [Real-Time OSS Event Monitoring Pipeline](https://company-skill.com/p/_combos/real-time-oss-event-monitoring-pipeline-a4dec4): oss + eb. Configure OSS access logging to capture all bucket activity, then set up EventBridge to stream those storage events in real-time to downstream consumers for automated alerting, ano - [Real-time speech transcription event pipeline](https://company-skill.com/p/_combos/real-time-speech-transcription-event-pipeline-cd4bdd): bailian + eb. Transcribe live audio streams (meetings, broadcasts) using Bailian speech recognition, then configure EventBridge to stream transcription events in real-time to downstream systems - [Reliable Event-Driven Multi-Channel Notifications](https://company-skill.com/p/_combos/reliable-event-driven-multi-channel-notification-1bd2c6): rocketmq + eb + twilio. Use RocketMQ with transactional delivery guarantees to reliably process business events (e.g., order confirmations), route those events through EventBridge's API destination to Twi - [Reliable Multi-Channel Notification Pipeline](https://company-skill.com/p/_combos/reliable-multi-channel-notification-pipeline-04b59a): rocketmq + twilio. Use RocketMQ with delivery guarantees to durably queue notification events, tag them with metadata for routing, consume them with a listener, and dispatch across SMS/email/push via - [Reliable Multi-Channel Transactional Notification Pipeline](https://company-skill.com/p/_combos/reliable-multi-channel-transactional-notificatio-ea96e7): eb + dataworks. Use RocketMQ's transactional message guarantees to reliably process critical business events (e.g., order confirmations, payment completions), then route through EventBridge to fan - [Reliable Video Platform with Guaranteed Notifications](https://company-skill.com/p/_combos/reliable-video-platform-with-guaranteed-notifica-22da42): dataworks. Video upload to OSS triggers HLS transcoding with status tracked in Supabase; database change events are durably queued via RocketMQ transactional messages, then routed through Eve - [Route Cloud Events to Notion Database](https://company-skill.com/p/_combos/route-cloud-events-to-notion-database-f0572f): notion + eb. A developer authenticates a Notion integration to obtain API credentials, then configures EventBridge to receive events from an external service (e.g., DingTalk HR notifications), - [SaaS Auth and Subscription Billing](https://company-skill.com/p/_combos/saas-auth-and-subscription-billing-3769b8): clerk + stripe. Build a SaaS application where users authenticate via Clerk (custom sign-up/sign-in flow) and then subscribe to a paid plan via Stripe Elements, with both UIs customized to match t - [SaaS Search Platform with Billing and Enterprise Identity](https://company-skill.com/p/_combos/saas-search-platform-with-billing-and-enterprise-4f0f7b): clerk + ecs. A B2B SaaS company builds an intelligent search and ML-powered analytics platform on Alibaba Cloud (Elasticsearch, PAI, RDS) with IDaaS managing internal workforce access, while cu - [Safe Cloud Migration with Search and HA](https://company-skill.com/p/_combos/safe-cloud-migration-with-search-and-ha-06d667): es + ecs. A team protects their source ECS-hosted database with automatic snapshots and rollback policies, then stages backups in OSS, imports into RDS, syncs to Elasticsearch for search, an - [Safe DB Modernization to OceanBase and Elasticsearch](https://company-skill.com/p/_combos/safe-db-modernization-to-oceanbase-and-elasticse-143611): es + ecs. A team protects their ECS-hosted source database with automatic snapshots and rollback policies, stages backups in OSS, validates in RDS, then fans out to both OceanBase for distri - [Scalable Web App Infrastructure Setup](https://company-skill.com/p/_combos/scalable-web-app-infrastructure-setup-22bf16): ess + ecs. Deploy a production web application by configuring Auto Scaling with properly networked ECS instances, integrating the scaling group with SLB for load distribution and RDS for data - [Scanned Document Intelligence and RAG Pipeline](https://company-skill.com/p/_combos/scanned-document-intelligence-and-rag-pipeline-b621a5): es + bailian + opensearch. Upload raw scanned documents and PDFs to OSS as durable source-of-truth storage, use Bailian's document understanding to extract text and structured data via OCR, index the process - [Scanned Document OCR to RAG Knowledge Base](https://company-skill.com/p/_combos/scanned-document-ocr-to-rag-knowledge-base-e9236a): es + alinux + bailian. A developer uploads raw scanned documents (PDFs, images) to OSS, uses Bailian's document understanding to extract text via OCR, generates vector embeddings through OpenSearch, inde - [Scanned Document RAG Intelligence System](https://company-skill.com/p/_combos/scanned-document-rag-intelligence-system-51ad69): es + opensearch + alinux + bailian. Upload raw scanned PDFs and images to OSS, use Bailian's OCR and document understanding to extract text and structured data, then feed the cleaned content into an OpenSearch-embedd - [Scanned Document RAG with Vector Search](https://company-skill.com/p/_combos/scanned-document-rag-with-vector-search-a928cd): es + bailian + alinux. Upload scanned PDFs and images to OSS, use Bailian document understanding to OCR-extract text and structured data, then deploy OpenSearch embedding models to vectorize the extracte - [SCIM Onboarding with SSO Docs and ML Search Platform](https://company-skill.com/p/_combos/scim-onboarding-with-sso-docs-and-ml-search-plat-a20c68): eb + ecs. Enterprise users are provisioned via SCIM from AD/Okta into IDaaS, triggering EventBridge to send Resend welcome emails and DingTalk alerts containing links to IDaaS-SSO-protected - [SCIM Onboarding with SSO Docs and Multi-Channel Alerts](https://company-skill.com/p/_combos/scim-onboarding-with-sso-docs-and-multi-channel--8c832f): eb. Corporate users are provisioned from AD/Okta into IDaaS via SCIM, triggering EventBridge to simultaneously send a Resend welcome email containing a link to IDaaS-SSO-protected GitB - [SCIM Provisioning with Transactional Email Alerts](https://company-skill.com/p/_combos/scim-provisioning-with-transactional-email-alert-491f3e): eb + idaas. Provision users from a corporate identity provider (AD/Okta/Entra ID) into IDaaS via SCIM, then use EventBridge to route user lifecycle events (create/update/delete) both to downst - [Search-Enabled Data Platform Access Setup](https://company-skill.com/p/_combos/search-enabled-data-platform-access-setup-ab092c): rds + es. A developer building a search-powered application sets up RDS as the transactional data store and Elasticsearch as the search/analytics layer, configuring database accounts for the - [Secure AI Agent with Notion Integration](https://company-skill.com/p/_combos/secure-ai-agent-with-notion-integration-0675e0): bailian + idaas + notion. A developer builds an AI agent on Alibaba Cloud Bailian that reads and writes Notion data via MCP tool integration, and secures the agent service's outbound API calls using IDaaS M - [Secure AI Agent with Tool Integration](https://company-skill.com/p/_combos/secure-ai-agent-with-tool-integration-20ae85): bailian + idaas. Build an AI agent on Bailian that calls external tools and APIs via MCP, using IDaaS for secure keyless machine-to-machine authentication (OIDC/JWT) instead of hardcoding access ke - [Secure AI Recommendation App Full Stack](https://company-skill.com/p/_combos/secure-ai-recommendation-app-full-stack-79837c): airec + cas + rds. A developer deploying an AIRec-powered recommendation service uses CAS to obtain and deploy an SSL certificate to AIRec for HTTPS, configures RDS security (IP whitelist + SSL encry - [Secure AI Search Platform with Autonomous Content Pipeline](https://company-skill.com/p/_combos/secure-ai-search-platform-with-autonomous-conten-cac850): ecs + es + alinux. An enterprise deploys a complete intelligent knowledge platform where IDaaS manages secure user authentication and access control, Elasticsearch serves ML-ranked search results tra - [Secure App with Structured and Semantic Search](https://company-skill.com/p/_combos/secure-app-with-structured-and-semantic-search-469afa): es. An enterprise builds a secure data-driven application with RDS (IP whitelists, SSL) as the transactional backend synced to Elasticsearch for structured full-text search, while simu - [Secure Auth to Compliant Production Stack](https://company-skill.com/p/_combos/secure-auth-to-compliant-production-stack-af31aa): cas + alinux. A DevOps team first configures Terraform with OIDC-based keyless authentication via IDaaS for secure infrastructure-as-code access, then uses that authenticated setup to provision - [Secure Compliant Database Hosting Stack](https://company-skill.com/p/_combos/secure-compliant-database-hosting-stack-dcfdf2): alinux + rds. A developer provisions and hardens an Alibaba Cloud Linux ECS host with MLPS 2.0 compliance baselines, then configures the backend RDS instance with IP whitelists, SSL encryption, - [Secure Database Stack with Compliance Hardening](https://company-skill.com/p/_combos/secure-database-stack-with-compliance-hardening-d80bc7): rds + alinux. A developer provisions a compliant application stack by hardening the Alibaba Cloud Linux host to meet MLPS 2.0 baselines, then secures the backing RDS instance with IP whitelists - [Secure ECS App Tier with Encrypted OceanBase Database](https://company-skill.com/p/_combos/secure-ecs-app-tier-with-encrypted-oceanbase-dat-978411): alinux + oceanbase. Deploy and harden ECS instances running Alibaba Cloud Linux with MLPS 2.0 compliance baselines and secure networking, then connect them to an OceanBase database cluster configured - [Secure ECS Deployment with Compliance](https://company-skill.com/p/_combos/secure-ecs-deployment-with-compliance-62c949): ecs + alinux. Deploy ECS instances with proper networking (security groups, ENIs, public IPs) then harden the Alibaba Cloud Linux OS with security policies and MLPS 2.0 compliance baselines for - [Secure ECS Services with Private mTLS Certificates](https://company-skill.com/p/_combos/secure-ecs-services-with-private-mtls-certificat-c2dd51): cas + ecs. Set up a private PKI to issue internal mTLS certificates, deploy those certificates to ECS instances, and configure ECS networking (security groups, ENIs) to enforce encrypted serv - [Secure ECS Web Server Provisioning](https://company-skill.com/p/_combos/secure-ecs-web-server-provisioning-7a92df): ecs + cas. A developer creates standardized custom ECS images to bake in application dependencies and server configuration, then launches instances from those images and deploys SSL certifica - [Secure ECS with Backup and Compliance](https://company-skill.com/p/_combos/secure-ecs-with-backup-and-compliance-eeb1d5): ecs + alinux. Set up production ECS instances running Alibaba Cloud Linux with security hardening and MLPS 2.0 compliance baselines, then configure automatic snapshot policies for data protectio - [Secure Enterprise Document AI with Recommendations](https://company-skill.com/p/_combos/secure-enterprise-document-ai-with-recommendatio-8a5d27): airec + bailian. An enterprise deploys a security-hardened platform (RDS with SSL/IP whitelists, CAS certificates, Terraform IaC) that ingests scanned documents via OSS and Bailian OCR, indexes con - [Secure Enterprise Platform with SSL, Auth, and RAG](https://company-skill.com/p/_combos/secure-enterprise-platform-with-ssl-auth-and-rag-facd98): alinux. A DevOps team uses Terraform to provision MLPS 2.0-compliant infrastructure (VPC, ECS cluster, RDS, OSS, SLB), secures it with SSL certificates via CAS for HTTPS, layers IDaaS for - [Secure Enterprise Search Platform Access](https://company-skill.com/p/_combos/secure-enterprise-search-platform-access-008f60): idaas + es. Build an enterprise search application where IDaaS manages user authentication, role assignments, and application-level authorization for end users, while Elasticsearch access cont - [Secure ML Search Platform with RAG and Dual-Layer Security](https://company-skill.com/p/_combos/secure-ml-search-platform-with-rag-and-dual-laye-797949): ecs + alinux. An enterprise provisions MLPS 2.0-compliant infrastructure via Terraform, builds an ML-powered search platform on RDS+Elasticsearch+PAI, secures it with dual-layer access control ( - [Secure Multi-Service Search Platform with Account Management](https://company-skill.com/p/_combos/secure-multi-service-search-platform-with-accoun-87e450): es + ecs + rds. An enterprise builds a search-powered intelligent application using RDS as the central transactional data store (with programmatic account and permission management), Elasticsearch - [Secure Notion AI Agent Deployed on Vercel](https://company-skill.com/p/_combos/secure-notion-ai-agent-deployed-on-vercel-8866d3): bailian + notion. A developer builds a secure AI agent on Alibaba Cloud Bailian that reads and writes Notion data via MCP tool integration with IDaaS-based keyless OIDC authentication, then deploys - [Secure Notion AI Agent on Vercel](https://company-skill.com/p/_combos/secure-notion-ai-agent-on-vercel-73e22f): bailian + notion. Build a production-ready Notion AI agent using Bailian as the LLM backend with IDaaS OIDC authentication, then deploy the complete web application to Vercel with edge hosting and s - [Secure OCR-Enhanced Enterprise App with Hybrid Search](https://company-skill.com/p/_combos/secure-ocr-enhanced-enterprise-app-with-hybrid-s-d184de): es + airec + alinux. An enterprise builds a secure application with RDS (SSL, IP whitelists) for transactional data, uploads scanned documents to OSS for Bailian OCR and structured text extraction, the - [Secure OSS Delivery via Cloudflare Worker](https://company-skill.com/p/_combos/secure-oss-delivery-via-cloudflare-worker-41294a): cloudflare + oss. Deploy a Cloudflare Worker as an edge proxy in front of an OSS bucket, configure the Worker with OSS endpoint and credentials as environment variables or secrets, and lock down the - [Secure Production Stack with DR and Monitoring](https://company-skill.com/p/_combos/secure-production-stack-with-dr-and-monitoring-cbb078): alinux + ecs + cas. A DevOps team uses Terraform to provision a hardened production web stack (VPC, ECS cluster, RDS, OSS, SLB) with SSL certificates and MLPS 2.0 compliance, then layers cross-region - [Secure Production Stack with Multi-Channel Alerting and Analytics Lake](https://company-skill.com/p/_combos/secure-production-stack-with-multi-channel-alert-c97710): alinux + dataworks. A DevOps team first uses Terraform to provision a hardened production web stack (VPC, ECS cluster, RDS, OSS, SLB) with SSL certificates, MLPS 2.0 compliance, and cross-region disas - [Secure RAG App with SSL](https://company-skill.com/p/_combos/secure-rag-app-with-ssl-058d7c): es + cas. Deploy a production RAG chatbot on Elasticsearch, then deploy an SSL certificate to secure its public API endpoint so end users can access the knowledge base over HTTPS. - [Secure RAG App with SSL](https://company-skill.com/p/_combos/secure-rag-app-with-ssl-e74519): es + cas. Deploy a RAG chatbot application on Elasticsearch, then apply for and deploy an SSL/TLS certificate to secure it with HTTPS for production use. - [Secure RAG Chatbot Deployment](https://company-skill.com/p/_combos/secure-rag-chatbot-deployment-1a0300): es + ecs + cas. Deploy a production RAG AI chatbot on Elasticsearch, configure ECS instance networking (security groups, public IP, ENIs) to make the service accessible, and deploy SSL certificate - [Secure RAG Stack with Keyless Auth](https://company-skill.com/p/_combos/secure-rag-stack-with-keyless-auth-5470a6): ecs + alinux + dataworks. A DevOps team uses Terraform to provision a full production stack with SSL certificates, MLPS 2.0 compliance, and an Elasticsearch RAG search pipeline, then secures the RDS and Ela - [Secure RDS backend with Elasticsearch search](https://company-skill.com/p/_combos/secure-rds-backend-with-elasticsearch-search-0df277): rds + es. A developer builds a data-driven application where RDS serves as the secure transactional database (with IP whitelists and SSL encryption configured), and relevant records are peri - [Secure Search App with Keyless M2M Auth](https://company-skill.com/p/_combos/secure-search-app-with-keyless-m2m-auth-da68ec): es + dataworks + idaas. A developer builds a data-driven application on ECS/ACK where RDS serves as the secure transactional database and Elasticsearch powers full-text search, using IDaaS OIDC to enable - [Secure Search Deploy then Full-Stack Diagnosis](https://company-skill.com/p/_combos/secure-search-deploy-then-full-stack-diagnosis-223eba): alinux. A DevOps team provisions a hardened production search stack with keyless OIDC-based M2M authentication via Terraform (ECS, RDS, Elasticsearch, SSL, VPC), then when the deployed sea - [Secure Terraform Auth to SSL Web Stack](https://company-skill.com/p/_combos/secure-terraform-auth-to-ssl-web-stack-dd10f4): idaas + alinux + cas. A developer first configures Terraform with OIDC-based keyless authentication via IDaaS for secure infrastructure-as-code access, then uses that authenticated Terraform setup to pr - [Secure Terraform Infrastructure Provisioning](https://company-skill.com/p/_combos/secure-terraform-infrastructure-provisioning-febde3): terraform + idaas. A developer first configures Terraform authentication credentials (AccessKey or OIDC-based keyless auth via IDaaS) for Alibaba Cloud, then uses Terraform to provision a full infras - [Secure Two-Tier ECS and RDS Deployment](https://company-skill.com/p/_combos/secure-two-tier-ecs-and-rds-deployment-fb6728): alinux + rds. Deploy and harden ECS instances with proper security groups, ENIs, and MLPS 2.0 compliance baselines for the application tier, then configure RDS database security with IP whitelis - [Secure Web Stack Provisioning with SSL](https://company-skill.com/p/_combos/secure-web-stack-provisioning-with-ssl-cc4ac3): terraform + cas + rds. A developer uses Terraform to provision a full web application stack (VPC, ECS instances, SLB load balancer, RDS database), then issues private SSL certificates via CAS and deploys - [Secure Web Stack with Data Protection](https://company-skill.com/p/_combos/secure-web-stack-with-data-protection-3bfd39): alinux + cas. A DevOps team uses Terraform to provision a complete hardened web stack (VPC, ECS cluster, OSS, SLB) with SSL certificates via CAS and security hardening, then configures comprehen - [Secure Web Stack with Enhanced Disaster Recovery](https://company-skill.com/p/_combos/secure-web-stack-with-enhanced-disaster-recovery-60895b): alinux + ecs. A DevOps team uses Terraform to provision a complete hardened web stack (VPC, ECS cluster, OSS, SLB, SSL via CAS) with baseline snapshot policies, then layers on advanced ECS data - [Self-Improving Content Platform with Edge-Served Custom RAG](https://company-skill.com/p/_combos/self-improving-content-platform-with-edge-served-899cd2): dataworks + airec. An enterprise content platform ingests documents and videos through EventBridge with RocketMQ-guaranteed notifications (Combo 3's reliable pipeline), while the same ingestion event - [Self-Improving Multi-Modal Platform with Edge Serving](https://company-skill.com/p/_combos/self-improving-multi-modal-platform-with-edge-se-c0ba78): dataworks + eb + airec. A content platform ingests documents and videos via OSS+EventBridge, performing real-time HLS transcoding and OpenSearch vectorization while simultaneously feeding processed data t - [Self-Scaling Real-Time Data Pipeline](https://company-skill.com/p/_combos/self-scaling-real-time-data-pipeline-6e3c25): eb + dataworks. Build a real-time event-driven data pipeline using EventBridge and DataWorks to ingest and transform business events into a database, while simultaneously monitoring that database' - [Semantic Search-Powered Recommendation System](https://company-skill.com/p/_combos/semantic-search-powered-recommendation-system-5bbd35): opensearch + airec. Deploy an embedding model on OpenSearch to enable vector-based semantic retrieval, then deploy AIRec service on top of it to build a recommendation engine that leverages semantic s - [Serverless Elasticsearch Ingestion Endpoint](https://company-skill.com/p/_combos/serverless-elasticsearch-ingestion-endpoint-85f4e9): cloudflare + es. Deploy a Cloudflare Worker as a serverless edge endpoint that receives incoming data (webhooks, form submissions, IoT telemetry) and ingests documents into Elasticsearch in real-ti - [Snapshot-Lifecycle-Managed ECS Fleet Network Optimization](https://company-skill.com/p/_combos/snapshot-lifecycle-managed-ecs-fleet-network-opt-d1bac5): alinux + ecs. Establish enterprise snapshot governance (auto-snapshot policies, snapshot-consistent groups, backup schedules) across an ECS fleet, then safely roll out Alibaba Cloud Linux networ - [Snapshot-Protected Cloud Migration with Search](https://company-skill.com/p/_combos/snapshot-protected-cloud-migration-with-search-c1430c): ecs + es. A team migrating a self-managed database from ECS first configures automatic snapshots and rollback policies on the source ECS disk, then uploads backups to OSS as a staging layer, - [Snapshot-Protected Database Migration to RDS](https://company-skill.com/p/_combos/snapshot-protected-database-migration-to-rds-48bde6): ecs + rds. A developer first configures automatic disk snapshots and a rollback policy on the ECS instance hosting their self-managed database as a safety net, then uses RDS data migration to - [Snapshot-Protected ECS Maintenance with Log Archival](https://company-skill.com/p/_combos/snapshot-protected-ecs-maintenance-with-log-arch-a9b8d5): ecs + oss. Before running a risky batch maintenance script on ECS instances via Cloud Assistant, automatically create disk snapshots for rollback protection, execute the script, then upload e - [Snapshot-Protected ECS Network Optimization with Logging](https://company-skill.com/p/_combos/snapshot-protected-ecs-network-optimization-with-0ffcd1): ecs + alinux. Before applying Alibaba Cloud Linux network performance tuning (SMC acceleration, TCP TIME-WAIT reduction, XPS configuration) across a fleet of ECS instances via Cloud Assistant, a - [Snapshot-Safe Migration to OceanBase and Elasticsearch](https://company-skill.com/p/_combos/snapshot-safe-migration-to-oceanbase-and-elastic-a46889): es + ecs. A team first configures automatic disk snapshots and rollback policies on their source ECS-hosted database as a safety net, then uploads backups to OSS as a staging layer, imports - [Speech Intelligence Multi-Destination Platform with Monitoring](https://company-skill.com/p/_combos/speech-intelligence-multi-destination-platform-w-92301b): dataworks + bailian. An enterprise builds a single EventBridge backbone that ingests live speech transcription events (via Bailian ASR for meetings, broadcasts, and call centers) alongside diverse busi - [Speech Intelligence with Search, App, and Archival](https://company-skill.com/p/_combos/speech-intelligence-with-search-app-and-archival-13496b): eb + dataworks + bailian. Bailian ASR generates live speech transcription events that EventBridge ingests alongside business events; DataWorks transforms and fans them out simultaneously to OpenSearch for r - [SSL Platform with Granular DB Access Control](https://company-skill.com/p/_combos/ssl-platform-with-granular-db-access-control-a470ad): alinux. A DevOps team uses Terraform to provision an MLPS 2.0-compliant production platform (VPC, ECS cluster, RDS, OSS, SLB with CAS-managed SSL certificates, and IDaaS identity), then co - [SSL-Secured Enterprise RAG with SCIM Onboarding](https://company-skill.com/p/_combos/ssl-secured-enterprise-rag-with-scim-onboarding-349ea6): alinux. A DevOps team provisions MLPS 2.0-compliant infrastructure via Terraform, secures all endpoints with SSL certificates via CAS, layers IDaaS for user authentication and PAI-powered - [SSL-Secured Platform with Dual-Layer Security and RAG](https://company-skill.com/p/_combos/ssl-secured-platform-with-dual-layer-security-an-2e08e0): ecs + alinux. A DevOps team uses Terraform to provision MLPS 2.0-compliant infrastructure (VPC, ECS, RDS, OSS, SLB), hardens it with SSL certificates via CAS for HTTPS and IDaaS for end-user aut - [SSO-Protected Docs with Automated Onboarding Alerts](https://company-skill.com/p/_combos/sso-protected-docs-with-automated-onboarding-ale-e18601): gitbook + eb. A SaaS team embeds GitBook premium documentation into their product portal protected by IDaaS SSO, then wires EventBridge to automatically send DingTalk or email onboarding notific - [SSO-Protected Embedded Documentation](https://company-skill.com/p/_combos/sso-protected-embedded-documentation-646b86): gitbook + idaas. A SaaS developer embeds GitBook documentation directly into their product portal and integrates IDaaS SSO so that only authenticated enterprise customers can access premium or priv - [Static Site with AI Backend](https://company-skill.com/p/_combos/static-site-with-ai-backend-990f4c): cloudflare + alinux. Deploy a static web application on Cloudflare Workers as the frontend, connected to an AI/ML model deployed on Alibaba Cloud Linux for backend inference capabilities. - [Supabase Alerts Drive Human-Approved ECS Actions](https://company-skill.com/p/_combos/supabase-alerts-drive-human-approved-ecs-actions-95f45a): alinux + eb. Supabase database changes trigger Edge Functions that notify the ops team via DingTalk through EventBridge; when a team member approves or responds in DingTalk, that event is captu - [Supabase Change to Email and Team Alerts](https://company-skill.com/p/_combos/supabase-change-to-email-and-team-alerts-bf1bd1): eb + dataworks. When a record is inserted or updated in Supabase, an Edge Function posts a structured event to EventBridge, which fans out simultaneously to Resend for a templated transactional em - [Supabase Changes Trigger Processing and Tracked Notifications](https://company-skill.com/p/_combos/supabase-changes-trigger-processing-and-tracked--47f5a4): eb + alinux + dataworks. Supabase database inserts or updates fire Edge Functions through EventBridge, which simultaneously executes data-processing shell commands on ECS via Cloud Assistant and fans out s - [Supabase Data Events Drive ECS Server Actions](https://company-skill.com/p/_combos/supabase-data-events-drive-ecs-server-actions-15617c): eb + alinux + ecs. Supabase database changes trigger Edge Functions that route matched events through EventBridge, which then executes remote shell commands on ECS instances via Cloud Assistant — cre - [Supabase Data Monitor with DingTalk Alerts](https://company-skill.com/p/_combos/supabase-data-monitor-with-dingtalk-alerts-7bde70): supabase + eb. A Supabase Edge Function queries and filters Supabase data on each insert or update, then sends matched results as webhook events to EventBridge, which routes notifications to Ding - [Supabase-Driven ECS Operations with Alerts and Auto Scaling](https://company-skill.com/p/_combos/supabase-driven-ecs-operations-with-alerts-and-a-6b3983): alinux + eb. Supabase database changes trigger Edge Functions that route matched events through EventBridge to simultaneously execute remote ECS commands via Cloud Assistant, notify the operati - [Supabase Event Full-Stack Stakeholder Notifications](https://company-skill.com/p/_combos/supabase-event-full-stack-stakeholder-notificati-1742b4): eb + twilio. A Supabase Edge Function detects database changes (e.g., new order, user registration) and sends webhook events to EventBridge, which fans out to DingTalk for internal operations t - [Supabase Events Trigger Notifications and Server Actions](https://company-skill.com/p/_combos/supabase-events-trigger-notifications-and-server-bb950d): eb + dataworks + alinux. Supabase database changes (e.g., high-value orders or infrastructure alerts) trigger Edge Functions that route matched events through EventBridge, which simultaneously fans out to - [Supabase Incident Auto-Remediate with Scaling and Reporting](https://company-skill.com/p/_combos/supabase-incident-auto-remediate-with-scaling-an-edc5fe): alinux. A Supabase database anomaly triggers Edge Functions that fan out through EventBridge to notify ops via DingTalk and customers via Resend/Twilio, auto-scale ECS capacity via ESS to - [Supabase Incident Notify Approve Remediate Report](https://company-skill.com/p/_combos/supabase-incident-notify-approve-remediate-repor-77f27e): ecs + dataworks + eb + alinux. A Supabase database anomaly (e.g., data corruption, unauthorized access) triggers Edge Functions that fan out through EventBridge to alert the ops team via DingTalk and notify affe - [Supabase Incident Response with Auto-Scaling](https://company-skill.com/p/_combos/supabase-incident-response-with-auto-scaling-eb4fee): alinux. Supabase database anomalies trigger Edge Functions that fan out through EventBridge to alert ops via DingTalk and notify affected customers via Resend/Twilio; after human approval, - [Supabase Ingestion with Auto-Scaling Ops](https://company-skill.com/p/_combos/supabase-ingestion-with-auto-scaling-ops-b871fd): eb + alinux + dataworks. Stream real-time business events into Supabase via DataWorks and EventBridge with continuous monitoring, then immediately react to newly ingested Supabase records via Edge Function - [Supabase Monitoring to Approved ECS Remediation](https://company-skill.com/p/_combos/supabase-monitoring-to-approved-ecs-remediation-48c60a): eb + dataworks + alinux. Supabase Edge Functions continuously monitor and filter database changes, routing matched events through EventBridge to DingTalk for ops team alerting; when an incident requires in - [Supabase-to-Elasticsearch Search Pipeline](https://company-skill.com/p/_combos/supabase-to-elasticsearch-search-pipeline-ee5260): supabase + es. A developer uses Supabase as the primary CRUD datastore, then ingests structured records into Elasticsearch to leverage its advanced full-text search and analytics capabilities bey - [Terraform Auto-Scaling Production Web Stack with SSL](https://company-skill.com/p/_combos/terraform-auto-scaling-production-web-stack-with-494432): eb + dataworks + cas. Use Terraform to provision a complete production-ready web application that combines ESS-driven auto-scaling (with EventBridge event rules triggering scale actions) and a hardened - [Terraform Auto-Scaling Web App with Storage](https://company-skill.com/p/_combos/terraform-auto-scaling-web-app-with-storage-991564): ess + ecs + terraform. A developer uses Terraform to deploy a production-ready web application stack combining VPC, security groups, ECS instances with Auto Scaling for dynamic compute capacity, OSS buck - [Terraform基础设施+弹性伸缩部署](https://company-skill.com/p/_combos/terraform-c035e7): terraform + ess. A developer uses Terraform to provision foundational cloud infrastructure (VPC, ECS instances, storage), then creates an Auto Scaling group to ensure the deployed compute layer can - [Terraform Enterprise App with Secure Search](https://company-skill.com/p/_combos/terraform-enterprise-app-with-secure-search-e08b2e): alinux + es. A DevOps engineer uses Terraform to provision a complete web application infrastructure (VPC, ECS, OSS, RDS) with MLPS 2.0 compliance hardening, then layers Elasticsearch on top to - [Terraform Enterprise App with SSL, Search, and Compliance](https://company-skill.com/p/_combos/terraform-enterprise-app-with-ssl-search-and-com-4dc517): alinux. A DevOps team uses Terraform to provision a complete production web stack (VPC, ECS cluster, OSS, RDS, SLB), applies SSL certificate management via CAS for HTTPS and MLPS 2.0 compl - [Terraform Enterprise Auto-Scaling Production Stack](https://company-skill.com/p/_combos/terraform-enterprise-auto-scaling-production-sta-bb4815): ecs + cas. A DevOps team uses a unified Terraform workflow to provision a complete enterprise-grade web platform — VPC, ECS cluster with Auto Scaling for dynamic capacity, OSS for static asse - [Terraform Enterprise Stack with MLPS Compliance](https://company-skill.com/p/_combos/terraform-enterprise-stack-with-mlps-compliance-1f6a9e): cas + alinux. A DevOps team uses Terraform to deploy a full enterprise platform (VPC, ECS cluster with ESS auto-scaling, RDS, OSS, SLB with SSL via CAS), then applies Alinux-based MLPS 2.0 compl - [Terraform Enterprise Stack with SSL, Search, and Compliance](https://company-skill.com/p/_combos/terraform-enterprise-stack-with-ssl-search-and-c-5ec574): alinux. A DevOps team uses Terraform to provision a complete production web stack (VPC, ECS cluster, OSS storage, RDS database, SLB load balancer), secures it with SSL certificates via CAS - [Terraform Full-Stack App with Database and Storage](https://company-skill.com/p/_combos/terraform-full-stack-app-with-database-and-stora-456737): ecs + terraform + es. A developer uses Terraform to automate provisioning of a complete production web application stack — VPC, ECS instances, RDS database, and OSS buckets — then configures security gr - [Terraform Full-Stack Deploy with Security Hardening](https://company-skill.com/p/_combos/terraform-full-stack-deploy-with-security-harden-b8beba): terraform + ecs + oss. A developer uses Terraform to provision a complete web application stack (VPC, ECS instances, OSS buckets) in one automated workflow, then configures ECS networking (security group - [Terraform Full-Stack Web App with Event Pipeline](https://company-skill.com/p/_combos/terraform-full-stack-web-app-with-event-pipeline-d6da16): eb + dataworks + ecs. Use Terraform to provision a complete production platform combining auto-scaling ECS web servers with OSS static storage as the user-facing tier, EventBridge as the event backbone, - [Terraform Full Stack with Compliance and RAG Search](https://company-skill.com/p/_combos/terraform-full-stack-with-compliance-and-rag-sea-9096d9): alinux. A DevOps team progressively builds a production environment using Terraform: first provisioning core infrastructure (VPC, ECS cluster, OSS, RDS) with MLPS 2.0 compliance hardening - [Terraform Full Stack with SSL and Compliance](https://company-skill.com/p/_combos/terraform-full-stack-with-ssl-and-compliance-6c302d): alinux + cas. A DevOps team uses Terraform to provision a complete production web stack (VPC, ECS cluster, OSS storage, RDS database, SLB load balancer), then applies both SSL certificate manage - [Terraform HTTPS Web Server with SSL](https://company-skill.com/p/_combos/terraform-https-web-server-with-ssl-e8f63e): terraform + cas + ecs. Use Terraform to provision a complete web stack (VPC, ECS instances, SLB, security groups), then deploy SSL certificates to enable HTTPS on the provisioned load balancer or ECS ser - [Terraform IaC with ECS Post-Provisioning Hardening](https://company-skill.com/p/_combos/terraform-iac-with-ecs-post-provisioning-hardeni-863601): alinux + ecs + terraform. A DevOps engineer uses Terraform to declaratively provision the full infrastructure stack (VPC, vSwitch, security groups, ECS instances, elastic IPs, and storage), then applies Ali - [Terraform IDaaS M2M Auth Setup](https://company-skill.com/p/_combos/terraform-idaas-m2m-auth-setup-d3dd87): terraform + idaas. Use Terraform to provision cloud infrastructure (ECS/ACK clusters) while configuring IDaaS for secure machine-to-machine authentication, enabling keyless OIDC/JWT-based service-to- - [Terraform Infra with SCIM Onboarding Pipeline](https://company-skill.com/p/_combos/terraform-infra-with-scim-onboarding-pipeline-ee1c9f): eb + alinux. A DevOps team uses Terraform to provision MLPS 2.0 compliant infrastructure (VPC, ECS, RDS, OSS, Elasticsearch, IDaaS), then the platform team layers a SCIM-based enterprise onboar - [Terraform Infra with SSO, RBAC, and ML Search](https://company-skill.com/p/_combos/terraform-infra-with-sso-rbac-and-ml-search-725a21): ecs + alinux + clerk + es. A DevOps team uses Terraform to provision MLPS 2.0 compliant infrastructure (VPC, ECS, RDS, OSS, Elasticsearch), then the platform team layers IDaaS for corporate SSO authenticatio - [Terraform Production Stack with Auto Scaling](https://company-skill.com/p/_combos/terraform-production-stack-with-auto-scaling-4aa3d0): ecs + ess + cas. A DevOps team first uses Terraform to provision a complete production web stack (VPC, ECS cluster, OSS, SLB, RDS, SSL certificates with security hardening), then configures Auto Sc - [Terraform Production Stack with Compliance and Performance](https://company-skill.com/p/_combos/terraform-production-stack-with-compliance-and-p-bf0ab6): cas + alinux. A DevOps team uses Terraform to provision a complete hardened production web stack (VPC, ECS cluster, OSS, RDS, SLB with SSL certificates), then applies MLPS 2.0 compliance hardeni - [Terraform Production Stack with SSL and MLPS Compliance](https://company-skill.com/p/_combos/terraform-production-stack-with-ssl-and-mlps-com-690fce): alinux + ecs + cas. A DevOps team uses Terraform to provision a complete production web application stack (VPC, ECS cluster, OSS storage, SLB load balancer, RDS database) with SSL certificates for HTT - [Terraform Production Stack with SSL, Compliance, and RAG Search](https://company-skill.com/p/_combos/terraform-production-stack-with-ssl-compliance-a-0b4636): alinux. A DevOps team uses Terraform to provision a full production web application stack (VPC, ECS cluster, OSS, SLB, RDS) with SSL certificates for HTTPS and MLPS 2.0 compliance hardenin - [Terraform Production Web Stack with Database and SSL](https://company-skill.com/p/_combos/terraform-production-web-stack-with-database-and-3e2c50): cas + ecs. A DevOps team uses Terraform to provision a complete production web application stack — VPC, ECS cluster, OSS storage, SLB load balancer, and RDS database — with security hardening - [Terraform Provision Then Configure ECS Networking](https://company-skill.com/p/_combos/terraform-provision-then-configure-ecs-networkin-f0c73b): ecs + terraform. A developer uses Terraform to provision a multi-component cloud stack (VPC, ECS instances, storage), then performs post-deployment network configuration on the ECS instances — bind - [Terraform Provision then MLPS 2.0 Harden](https://company-skill.com/p/_combos/terraform-provision-then-mlps-2-0-harden-f82580): ecs + terraform + alinux. A DevOps engineer uses Terraform to provision a complete production stack (VPC, Alinux compute instances, OSS storage, RDS databases) in one automated workflow, then applies MLPS 2 - [Terraform-Provisioned Auto Scaling Web Cluster](https://company-skill.com/p/_combos/terraform-provisioned-auto-scaling-web-cluster-13b65e): terraform + ess + ecs. Use Terraform to declaratively provision a complete auto-scaling web application stack on Alibaba Cloud — including VPC, security groups, ECS instances with proper networking, and - [Terraform-Provisioned Compliant RAG Notion AI Agent](https://company-skill.com/p/_combos/terraform-provisioned-compliant-rag-notion-ai-ag-a2150f): bailian + alinux. A platform team uses IDaaS-based keyless Terraform (Skill 4) to provision a hardened, MLPS-compliant production infrastructure stack (VPC, RDS, Elasticsearch, SSL via CAS), then de - [Terraform-Provisioned Database-Driven Auto Scaling](https://company-skill.com/p/_combos/terraform-provisioned-database-driven-auto-scali-a7f689): eb + terraform. Use Terraform to declaratively provision the complete auto-scaling infrastructure—VPC, ECS instances, RDS databases, ESS scaling groups, and EventBridge event rules—as a single rep - [Terraform-Provisioned ECS with EventBridge Event Delivery](https://company-skill.com/p/_combos/terraform-provisioned-ecs-with-eventbridge-event-70371e): terraform + ecs + eb. A developer uses Terraform to provision a full infrastructure stack (VPC, subnets, security groups, ECS instances), configures the ECS networking (ENIs, security group rules), and - [Terraform-Provisioned Keyless RAG Platform](https://company-skill.com/p/_combos/terraform-provisioned-keyless-rag-platform-7b9d22): dataworks + alinux + bailian + ecs. A DevOps team uses Terraform with IDaaS OIDC to provision a hardened production stack (ECS, RDS, Elasticsearch, VPC, SSL), then deploys a RAG application on that infrastructure whe - [Terraform-provisioned PAI workspace access](https://company-skill.com/p/_combos/terraform-provisioned-pai-workspace-access-40c527): terraform + pai. An ML platform team uses Terraform to automate PAI workspace provisioning, first configuring Terraform's Alibaba Cloud credentials (AK/SK or STS), then codifying PAI workspace role - [Terraform-Provisioned Production Stack with DB Migration and RAG](https://company-skill.com/p/_combos/terraform-provisioned-production-stack-with-db-m-b596cb): ecs + alinux + es. A DevOps team first uses Terraform to provision a complete MLPS 2.0-hardened production infrastructure (VPC, ECS cluster, OSS, RDS, SLB with CAS-managed HTTPS certificates), then e - [Terraform-Provisioned RAG Infrastructure Deployment](https://company-skill.com/p/_combos/terraform-provisioned-rag-infrastructure-deploym-aa9c4e): terraform + es. Use Terraform to provision the underlying Alibaba Cloud infrastructure (VPC, ECS cluster, Elasticsearch cluster, security groups) and then deploy a RAG AI application on top of tha - [Terraform-provisioned RDS with managed accounts](https://company-skill.com/p/_combos/terraform-provisioned-rds-with-managed-accounts-9d2803): terraform + rds. A DevOps engineer configures Terraform authentication against Alibaba Cloud, then uses Terraform to provision an ApsaraDB RDS instance and declaratively manage its database account - [Terraform-Provisioned Secure RAG Chatbot Platform](https://company-skill.com/p/_combos/terraform-provisioned-secure-rag-chatbot-platfor-b468bb): cas + alinux. A developer first uses Terraform to provision the full infrastructure foundation — VPC, ECS instances, SLB load balancer, RDS database, and private SSL certificates via CAS — then - [Terraform-Provisioned Secure Search with Keyless M2M](https://company-skill.com/p/_combos/terraform-provisioned-secure-search-with-keyless-4c7cc9): dataworks + alinux + ecs. A DevOps team first uses Terraform with OIDC-based keyless authentication via IDaaS to provision a hardened production stack (ECS, RDS, Elasticsearch, SSL certificates, VPC), then - [Terraform-Provisioned Self-Scaling Event Data Pipeline](https://company-skill.com/p/_combos/terraform-provisioned-self-scaling-event-data-pi-8f8fb4): eb + dataworks. Use Terraform to declaratively provision the complete self-scaling data pipeline infrastructure—VPC, ECS instances, RDS databases, ESS scaling groups, EventBridge event rules, and - [Terraform Scalable Web App with Event-Driven Data Platform](https://company-skill.com/p/_combos/terraform-scalable-web-app-with-event-driven-dat-25dccf): ecs + terraform + dataworks. Use Terraform to provision a complete production stack — VPC, ECS Auto Scaling group, and OSS buckets for static assets — then layer EventBridge as a unified event backbone that ro - [Terraform Secure Web Stack with SSL](https://company-skill.com/p/_combos/terraform-secure-web-stack-with-ssl-d82149): ecs + terraform + cas. A DevOps team uses Terraform to provision a complete web application stack (VPC, ECS cluster, OSS storage, SLB) with security hardening (security groups, ENIs, access controls), th - [Terraform SSL-Secured Auto-Scaling Web Platform](https://company-skill.com/p/_combos/terraform-ssl-secured-auto-scaling-web-platform-ed4ff6): ecs + cas. A DevOps team uses Terraform to provision a complete production web platform combining auto-scaling compute (ECS + ESS with dynamic scaling policies), static asset storage (OSS), l - [Terraform Stack with Speech-Business Event Intelligence](https://company-skill.com/p/_combos/terraform-stack-with-speech-business-event-intel-b3d02f): ecs + bailian + alinux. An enterprise provisions a production web stack (VPC, ECS, RDS, OSS, security groups) via Terraform, then immediately layers a unified EventBridge backbone that ingests both Bailia - [Terraform Web App with Event Data Platform](https://company-skill.com/p/_combos/terraform-web-app-with-event-data-platform-a35e12): eb + dataworks + ecs. Use Terraform to provision a production auto-scaling web application stack with VPC, ECS, ESS, and OSS, then configure EventBridge as the application's unified event backbone that - [Terraform Web Stack + Event Data Pipeline](https://company-skill.com/p/_combos/terraform-web-stack-event-data-pipeline-0827c7): supabase + bailian + ecs + alinux. A developer first uses Terraform to provision the foundational production stack (VPC, ECS, RDS, OSS with security groups), then layers EventBridge and DataWorks on top to create a - [Terraform Web Stack with Database Compliance Hardening](https://company-skill.com/p/_combos/terraform-web-stack-with-database-compliance-har-648f46): alinux + ecs. A DevOps engineer uses Terraform to provision a complete web application infrastructure (VPC, ECS instances, OSS storage), then adds an RDS database and applies comprehensive MLPS - [Train and Deploy ML Model Pipeline](https://company-skill.com/p/_combos/train-and-deploy-ml-model-pipeline-eab66b): pai + alinux. Train a machine learning model on PAI platform, then deploy the trained model to Alibaba Cloud Linux instances for production inference serving. - [Train Custom Model, Optimize ES Relevance](https://company-skill.com/p/_combos/train-custom-model-optimize-es-relevance-4b291c): alinux + es. A developer fine-tunes a custom embedding or reranking model on PAI, deploys it to Bailian as a managed inference endpoint, then configures Elasticsearch to leverage that model for - [Train-to-Production RAG and Recommendation Platform](https://company-skill.com/p/_combos/train-to-production-rag-and-recommendation-platf-874a00): airec + alinux. Train custom embedding, reranking, and LLM models on PAI, deploy them via Bailian for neural search and Alinux for custom inference, build a hybrid BM25+vector retrieval pipeline w - [Trained RAG with Lightweight Edge Generation](https://company-skill.com/p/_combos/trained-rag-with-lightweight-edge-generation-bbf2e3): alinux + airec. Train domain-specific embedding models and fine-tune LLMs on PAI, build a hybrid BM25+vector retrieval pipeline across OpenSearch and Elasticsearch, then deploy the generative mode - [Transactional Order Processing with RocketMQ](https://company-skill.com/p/_combos/transactional-order-processing-with-rocketmq-e19295): rocketmq + eb. Build a distributed order processing system that sends transactional messages with custom metadata (order tags, keys) for guaranteed delivery, then consumes and acknowledges messag - [Unified Cloud Event Observability with Search and Archival](https://company-skill.com/p/_combos/unified-cloud-event-observability-with-search-an-55e761): eb + dataworks. EventBridge centralizes both OSS bucket access events and ECS/RDS infrastructure plus Supabase application events into a unified observability pipeline where DataWorks transforms a - [Unified Customer Event Platform with Search, Analytics, and Notifications](https://company-skill.com/p/_combos/unified-customer-event-platform-with-search-anal-992e30): eb + dataworks. EventBridge acts as a central event bus that fans out customer interaction events (sign-ups, purchases, support tickets) simultaneously to Supabase for real-time analytics dashboar - [Unified Customer Intelligence Platform](https://company-skill.com/p/_combos/unified-customer-intelligence-platform-cd8f5a): eb + dataworks. EventBridge captures customer interaction events and routes them simultaneously to Twilio for real-time profile synchronization (enabling personalized omnichannel engagement) and t - [Unified Data-Ops Automation from Supabase Events](https://company-skill.com/p/_combos/unified-data-ops-automation-from-supabase-events-fa011d): alinux + dataworks. Supabase database changes trigger Edge Functions that route through EventBridge to simultaneously execute data-processing commands on ECS, send customer-facing SMS/WhatsApp/email n - [Unified Data Platform: Search + RAG Answers](https://company-skill.com/p/_combos/unified-data-platform-search-rag-answers-997f98): es + opensearch. Migrate structured business data (products, inventory, records) to ApsaraDB RDS, build a hybrid retrieval layer combining Elasticsearch keyword search with OSS-hosted vector embedd - [Unified Infra and App Observability with Analytics](https://company-skill.com/p/_combos/unified-infra-and-app-observability-with-analyti-431269): eb + dataworks. Combine the Supabase application-event pipeline (orders, signups, schema changes) with the analytics-lake observability combo so that a single EventBridge backbone simultaneously f - [Unified Speech and Business Event Analytics Platform](https://company-skill.com/p/_combos/unified-speech-and-business-event-analytics-plat-514094): dataworks + bailian. A developer builds a comprehensive event-driven platform that ingests both live speech streams (meetings, broadcasts transcribed via Bailian ASR) and structured business events (or - [Unified Speech and Business Event Intelligence Platform](https://company-skill.com/p/_combos/unified-speech-and-business-event-intelligence-p-bc60bc): bailian + dataworks. An enterprise builds a single EventBridge backbone that ingests both live speech transcription events (via Bailian ASR for meetings, broadcasts, and call centers) and diverse busin - [Unified Speech-Business Intelligence with Compliance Archival](https://company-skill.com/p/_combos/unified-speech-business-intelligence-with-compli-31bffd): bailian + dataworks. An enterprise builds a unified EventBridge backbone ingesting both Bailian ASR speech transcription events and diverse business events (orders, IoT), simultaneously routing them to - [Upload Files to OSS, Index in Elasticsearch](https://company-skill.com/p/_combos/upload-files-to-oss-index-in-elasticsearch-e9ec4b): oss + es. A developer uploads documents (PDFs, logs, JSON records) to OSS for durable raw storage, then triggers an ingestion pipeline that pushes parsed document content and metadata into E - [User Registration with Phone Verification and Welcome Email](https://company-skill.com/p/_combos/user-registration-with-phone-verification-and-we-228d48): twilio + resend. A developer builds a user registration flow that verifies the user's phone number via Twilio Verify API for 2FA/phone authentication, then sends a welcome or confirmation email usi - [Vector Index Rebuild with Full-Stack Notifications](https://company-skill.com/p/_combos/vector-index-rebuild-with-full-stack-notificatio-5128ea): dataworks + eb + alinux. When new document embeddings are inserted into Supabase, an Edge Function routes events through EventBridge to simultaneously trigger ECS Cloud Assistant commands that batch-rebuil - [Vector Search Pipeline with Embedding Model](https://company-skill.com/p/_combos/vector-search-pipeline-with-embedding-model-b964a1): opensearch + oss. Deploy an embedding model via OpenSearch to generate text embeddings, then store and index those vectors in OSS for similarity search retrieval — forming a complete semantic search - [Vector Search RAG Pipeline on Alibaba Cloud](https://company-skill.com/p/_combos/vector-search-rag-pipeline-on-alibaba-cloud-96d675): oss + opensearch + es. A developer uploads raw documents to OSS, deploys an embedding model via OpenSearch to generate vector embeddings, creates and manages vector indexes in OSS, then ingests the enric - [Video Platform Media Processing with Ops Alerts](https://company-skill.com/p/_combos/video-platform-media-processing-with-ops-alerts-ce4f5d): dataworks + eb. Build a video platform where user uploads to OSS trigger EventBridge-driven HLS transcoding with completion notifications sent via Twilio/Resend, while simultaneously unifying ECS/ - [Video Platform with Closed-Loop Notification Tracking](https://company-skill.com/p/_combos/video-platform-with-closed-loop-notification-tra-1509f7): dataworks + eb. Video uploads to OSS trigger HLS transcoding with status tracked in Supabase; RocketMQ transactional messages ensure completion notifications reach users via Twilio SMS and Resend - [Video Platform with Database-Triggered Notifications](https://company-skill.com/p/_combos/video-platform-with-database-triggered-notificat-8ee9a1): dataworks. Video upload to OSS triggers HLS transcoding, processing status is written to Supabase, and database events fan out multi-channel notifications (DingTalk for ops, Resend email for - [Web App with Self-Scaling Event Processing Pipeline](https://company-skill.com/p/_combos/web-app-with-self-scaling-event-processing-pipel-113d80): dataworks + eb + alinux. Use Terraform to provision a production auto-scaling web application (VPC, ECS, ESS, OSS) with EventBridge as its unified event backbone, then extend the event routing into DataWor ## Capabilities - [Skill routing API](https://company-skill.com/api/route): POST a natural-language query, get the best-matching skill back. Or GET `https://company-skill.com/api/route?q=` to search the whole catalog in one call. - [MCP servers](https://company-skill.com/api/mcp/): drop-in Model Context Protocol servers, one per product. - [Sitemap](https://company-skill.com/sitemap.xml): every citable product & intent page. - [API docs](https://company-skill.com/docs): full endpoint reference. ## Full skill content ### airec # AIRec Skill ## I want to... (Common User Intents) - **Deploy AIRec service (Deploy AIRec service)** — End-to-end service deployment via console or automation → `skills/airec/intent/airec-deploy-service/SKILL.md` (2 alternative paths) - **Troubleshoot AIRec deployment failures (Troubleshoot AIRec deployment failures)** — Diagnose and resolve stuck deployments or errors → `skills/airec/intent/airec-troubleshoot-failure/SKILL.md` (2 alternative paths) - **Configure network for AIRec deployment (Configure network for AIRec deployment)** — Set up IP pools, out-of-band networks, and switches → `skills/airec/intent/airec-configure-airec/SKILL.md` (2 alternative paths) - **Manage HTTPS certificates for AIRec (Manage HTTPS certificates for AIRec)** — Create, deploy, and bind certificates using custom CA → `skills/airec/intent/airec-manage-certificates/SKILL.md` (2 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Instance Management | api | airec-instance | Register nonstandard models, invoke lifecycle operations programmatically | | Instance Management | guide | airec-instance | Deploy cloud products, configure installation info, check machine status via console | | Instance Management | troubleshooting | airec-instance | Diagnose deployment/installation failures, enforce security policies | | API Deployment | troubleshooting | airec-api | Analyze and resolve API deployment error logs | | System Management | troubleshooting | airec-system | Troubleshoot IPMI and hardware interface command errors | | Network Configuration | guide | airec-network | Configure IP pools, out-of-band networks, and verify switch auto-configuration | | System Deployment | troubleshooting | airec-deployment | Resolve general AIRec system deployment failures | | Network Security | guide | airec-security | Create and deploy HTTPS certificates for secure communication | | Certificate Management | guide | airec-cert | Issue/verify certificates using customer CA; export service mappings | | Deployment | guide | airec-deploy | Deploy AIRec service via Apsara Stack ASI console | | Post-Deployment Configuration | guide | airec-postdeploy | Configure AIRec behavior after initial deployment | | Logging and Monitoring | guide | airec-logging | Change Kibana display language and manage monitoring views | | Deployment Planning | guide | airec-planning | Perform business and infrastructure planning before deployment | | Network Device Management | guide | airec-netdevice | Create and manage network device inventories | | Cluster Management | guide | airec-cluster | Generate cluster planning files for resource allocation | | Platform Configuration | guide | airec-platform | Configure Apsara Stack Agility PaaS platform settings | ## Intent Routing Guide Route user queries based on **domain** and **skill type**: - **High-level user goals** (e.g., "How do I deploy AIRec?", "Why did my deployment fail?") → **Intent skills** (recommended starting point) - **API/SDK/code/programming/endpoint/REST/request/call/interface/method/function/integration/programmatic/client/library/invoke/execute/operation/service call/web API/HTTP request/JSON payload/response handling/authentication/authorization** → **api** skills - **console/dashboard/UI/page/wizard/form/click/control panel/management interface/web interface/navigation/menu/button/tab/section/workflow/step-by-step/setup/configuration page/monitoring view/status page/task list/deployment console/machine view/resource panel/network view/switch panel/certificate management/SSL/TLS/HTTPS setup/security policy/CA system/certificate authority/PKI/digital certificate/signature verification/trust chain/certificate mapping/service binding/service rollout/product activation/initial setup/onboarding/post-install/tuning/optimization/customization/policy setup/feature enablement/integration setup/Kibana/language settings/UI localization/monitoring tool/log viewer/analytics interface/capacity planning/business requirements/resource estimation/topology design/infrastructure blueprint/planning file/survey input/device inventory/network asset/switch list/router catalog/hardware registry/device onboarding/asset tracking/cluster planning/node assignment/resource grouping/topology file/scaling configuration/high availability setup/zone mapping/PaaS configuration/platform tuning/service mesh/runtime settings/integration points/API gateway setup** → **guide** skills - **troubleshoot/error/FAQ/diagnose/failure/issue/fix/problem/debug/resolve/symptom/root cause/log analysis/alert/exception/crash/timeout/rollback/recovery/health check/validation error/deployment stuck/service down/state mismatch/configuration error/IPMI/hardware interface/boot device/PXE/out-of-band** → **troubleshooting** skills Specific domain keywords: - **Instance Management**: machine, instance, clone, rolling task, OPS, desired state, installation tags, nonstandard model - **API Deployment**: AIRec API, endpoint deployment, API logs - **System Management**: IPMI, chassis, lan print, bootdev, PXE, out-of-band - **Network Configuration**: IP pool, switch, in-band, out-of-band network - **Deployment**: ASI console, deploy AIRec service, delivery, IDC check - **Certificate & Security**: HTTPS, SSL, CA, PKI, certificate mapping, self-signed - **Post-Deployment**: configure AIRec, tuning, policy, feature enablement - **Logging**: Kibana, language, log viewer - **Planning**: business planning, survey file, capacity - **Cluster/Device**: cluster planning file, network device list, topology - **Platform**: Apsara Stack Agility, PaaS, service mesh, API gateway ## General Information ### API Access (for api skills) - **Base URL**: Depends on deployment environment (see domain-specific docs) - **Authentication**: Typically uses API keys or OAuth tokens (configured per service) - **SDK Installation**: Install the official AIRec SDK via package manager (details in `airec-instance` api skill) ### Console Access (for guide skills) - **Console URL**: Access via Apsara Stack ASI console (URL provided during onboarding) - **Login**: Use your Apsara Stack administrator credentials - **Navigation**: Use left-side menu to access domains like Deployment, Network, Security, Instances, etc. ## Frequently Asked Questions **Q: Should I use the API or the console for deploying AIRec?** A: Use the **console** for initial setup, guided workflows, and visual monitoring. Use the **API** for automation, integration into CI/CD pipelines, or bulk operations. **Q: Where do I start if I’m new to AIRec?** A: Begin with an **intent skill** (e.g., "Deploy AIRec service")—it routes you to the right combination of guide and troubleshooting content. **Q: How do I troubleshoot a deployment that’s stuck?** A: Check **Instance Management > troubleshooting** for rolling task failures, or **System Deployment > troubleshooting** for broader issues. Also see the intent skill "Troubleshoot AIRec deployment failures". **Q: Can I use my own certificate authority (CA) with AIRec?** A: Yes—use the **Certificate Management > guide** skill to issue and verify certificates using your CA, and map them to services. **Q: What permissions do I need in the console?** A: You need **Administrator** or **Deployment Operator** roles in Apsara Stack. Specific actions may require additional granular permissions (documented in each guide skill). ### alimail # Alibaba Mail Skill ## 我想做什么 (Common User Intents) - **排查邮件未收到的问题 (Troubleshoot why an email was not received)** — Diagnose missing or undelivered inbound emails → `skills/alimail/intent/alimail-troubleshoot-received/SKILL.md` (3 alternative paths) - **解决邮件发送失败的问题 (Resolve email sending failure issues)** — Fix outbound email rejections, authorization errors, or delivery failures → `skills/alimail/intent/alimail-resolve-failure/SKILL.md` (3 alternative paths) - **恢复邮箱账户登录访问 (Recover access to mailbox login)** — Unlock accounts, reset passwords, or resolve 2FA/login blocks → `skills/alimail/intent/alimail-recover-access/SKILL.md` (3 alternative paths) - **配置安全的邮件通信 (Set up secure email communication)** — Enable S/MIME, digital signatures, and encrypted email transmission → `skills/alimail/intent/alimail-configure-communication/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |----------|------|----------|------| | Contact Management | guide | alimail-contacts | Manage and convert address book formats (CSV, TXT, vCard), sync contacts, and manage distribution lists. | | Account Management | guide | alimail-account | View and update account info, set time zone, configure profile, and manage login preferences including QR code login. | | Account Management | troubleshooting | alimail-account | Resolve login failures, unlock disabled accounts, recover access, and fix authentication issues. | | Security | guide | alimail-security | Configure passwords, trusted devices, S/MIME certificates, spam filters, blacklists/whitelists, and view logon logs. | | Security | troubleshooting | alimail-security | Reset passwords/security questions, disable unusual login alerts, handle spam bounces, and prevent legitimate emails from being marked as spam. | | Email Configuration | guide | alimail-configuration | Set up email clients (Outlook, Foxmail, iPhone), configure DNS records (SPF, DKIM, DMARC, MX), manage time zones, and activate domains. | | Email Configuration | troubleshooting | alimail-service | Fix client setup issues, resolve login page access problems, and recover contact info when historical emails are unavailable. | | Email Delivery | guide | alimail-compatibility | Prevent Winmail.dat attachments and ensure cross-client email rendering compatibility. | | Email Delivery | troubleshooting | alimail-email-delivery | Diagnose and fix sending/receiving failures due to SPF, MX, blacklists, size limits, frequency throttling, or policy rejections. | | Email Composition | guide | alimail-composition | Compose and send emails, use AI writing assistance, manage attachments, CC/BCC, and rich text formatting. | | Email Management | guide | alimail-email | Manage folders, rules, signatures, forwarding, vacation replies, IMAP/POP scope, nicknames, and mailbox notifications. | | Email Management | troubleshooting | alimail-email | Recover missing emails after POP3 use, fix sent-folder sync issues, and check mailbox capacity/space problems. | | Integration | guide | alimail-integration | Migrate email data (including from Exchange) and integrate with Outlook via add-ins. | | Productivity Tools | guide | alimail-calendar | Create tasks, notes, and set up calendar reminders and event notifications. | | Interface Customization | guide | alimail-customization | Change display language, skin/theme, and customize the look and feel of the mailbox interface. | ## Intent Routing Guide Use the following guidelines to route user queries to the appropriate skill type: - **High-level user intents** (e.g., "How do I recover my account?" or "Why wasn’t my email received?") → **Intent skills** (recommended starting point; see "Common User Intents" above). - **API/SDK/code/programming/endpoint/REST** → **api skills** (Note: No pure API skills exist in this product; all programmatic access is handled via DNS/email protocols covered in guide/troubleshooting skills). - **Console/UI/dashboard/page/click/settings/wizard/form** → **guide skills** - **Error/troubleshoot/FAQ/diagnose/fix/failure/issue/bounce/reject** → **troubleshooting skills** Domain-specific keyword routing: - **Contact Management**: contacts, address book, import, export, CSV, TXT, vCard, group, distribution list, sync - **Account Management**: account info, profile, time zone, QR code login, 2FA, SSO, WebAuthn, personal/business settings - **Security**: password, trusted device, S/MIME, certificate, encryption, spam filter, blacklist, whitelist, logon logs, security questions - **Email Configuration**: IMAP, POP, SMTP, Outlook, Foxmail, iPhone, DNS, MX, SPF, DKIM, DMARC, CNAME, TXT, email client, server settings - **Email Delivery**: delivery failure, bounce, 550/552/553 errors, external domain, size limit, frequency, DLP, compliance, auditor rejection - **Email Composition**: compose, send, AI writer, attachment, CC, BCC, subject, signature, HTML/plain text - **Email Management**: folder, rule, forwarding, vacation reply, out-of-office, nickname, reply-to, read receipt, IMAP scope, POP retrieval, sent folder - **Integration**: Outlook plugin, migrate, Exchange, Foxmail, third-party, data transfer - **Productivity Tools**: calendar, reminder, task, note, to-do, meeting, event - **Interface Customization**: theme, skin, language, dark mode, font, layout, appearance ## General Information ### Console Access - **Webmail URL**: Typically `https://mail.yourdomain.com` (configured during domain setup) - **Login**: Use your full email address and password. Postmaster accounts can be used for domain-level access if CNAME resolution fails. - **Navigation**: Most settings are accessible via the gear icon (⚙️) or user profile menu in the top-right corner of the web interface. ### Email Protocols & DNS - **IMAP**: `imap.mxhichina.com` (SSL/TLS on port 993) - **POP3**: `pop3.mxhichina.com` (SSL/TLS on port 995) - **SMTP**: `smtp.mxhichina.com` (SSL/TLS on port 465 or STARTTLS on 587) - **DNS Records**: Required records include MX, SPF (TXT), DKIM (CNAME/TXT), and DMARC (TXT). Use the Alibaba Mail admin console to generate exact values. ### Authentication - Password-based login is standard. - Two-factor authentication (2FA) supports TOTP, FIDO2/WebAuthn, and security keys. - QR code login is available on the webmail login page for mobile-assisted sign-in. ## Frequently Asked Questions **Q1: When should I use the console vs. troubleshoot via DNS/email protocols?** Use the **guide skills** for UI-based tasks (e.g., setting up forwarding or changing your password). Use **troubleshooting skills** when you encounter delivery errors, login blocks, or configuration issues that require diagnostic steps (e.g., checking SPF records or mailbox capacity). **Q2: How do I recover my account if I’m locked out?** Start with the intent skill **“Recover access to mailbox login”**. This covers password resets, unlocking disabled accounts, and resolving 2FA failures. **Q3: Why are my emails being marked as spam?** This is typically due to missing or incorrect SPF/DKIM/DMARC records. Use the **Email Delivery troubleshooting skill** to validate DNS settings and request delisting if needed. **Q4: Can I access my email on mobile or desktop clients?** Yes. Use the **Email Configuration guide skill** to set up IMAP/POP on Outlook, Foxmail, or iPhone. Ensure “Save sent emails to webmail” is enabled if you want client-sent messages visible online. **Q5: How do I prevent emails from disappearing after using POP3?** By default, POP3 deletes messages from the server after download. In your email client settings, enable “Leave a copy on the server.” For existing issues, see the **Email Management troubleshooting skill**. ### alinux # Alibaba Cloud Linux Skill ## I Want To (Common User Intents) - **Deploy AI models for inference or training** — Run Qwen, DeepSeek, or PyTorch models on GPU/CPU using AC2 containers → `skills/alinux/intent/alinux-deploy-model/SKILL.md` (3 alternative paths) - **Diagnose and resolve system performance issues** — Investigate high CPU/memory, scheduling jitter, or container resource discrepancies → `skills/alinux/intent/alinux-troubleshoot-performance/SKILL.md` (3 alternative paths) - **Manage ECS instance creation, configuration, and maintenance** — Tune kernel parameters, set hostname, handle time sync, or optimize vCPU pinning → `skills/alinux/intent/alinux-manage-lifecycle/SKILL.md` (3 alternative paths) - **Configure system security policies and compliance baselines** — Apply hardening, set up MLPS 2.0 Level 3 compliance, or manage CVE notifications → `skills/alinux/intent/alinux-configure-compliance/SKILL.md` (2 alternative paths) - **Optimize network performance and connectivity** — Enable SMC, adjust TCP TIME-WAIT, or configure XPS for low-latency networking → `skills/alinux/intent/alinux-optimize-performance/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Instance Management | api | alinux-instance | Programmatic control of kernel settings, memory limits, and instance features | | Instance Management | guide | alinux-instance | Create, configure, and manage ECS instances via console (e.g., hostname, migration, GPU setup) | | Instance Management | cli | alinux-instance | Execute commands for security updates, THP reclaim, hotpatching, and diagnostics | | Instance Management | troubleshooting | alinux-instance | Resolve boot failures, OOM events, package manager crashes, and time sync issues | | Networking | guide | alinux-network | Configure SMC, TCP tuning, DNS, NICs, and policy-based routing in the console | | Networking | cli | alinux-network | Use nmcli, ip, and other tools to manage interfaces and monitor SMC | | Networking | troubleshooting | alinux-network | Diagnose packet loss, SMC faults, BBR congestion, and routing problems | | AI and GPU Workloads | guide | alinux-ai | Deploy and monitor AI models (Qwen, DeepSeek) on CPU/GPU using optimized images | | AI and GPU Workloads | troubleshooting | alinux-gpu | Fix GPU driver loading, container access, and profiling issues | | Confidential Computing | guide | alinux-confidential | Run confidential containers using Inclavare Containers | | Cluster Management | guide | alinux-cluster | Manage ACK clusters, RBAC, kubeconfig, and node labeling | | Cluster Management | troubleshooting | alinux-cluster | Diagnose unhealthy nodes and cluster access problems | | System Performance | guide | alinux-system | Tune dirty pages, enable GPU profiling, and track process hotspots | | System Performance | cli | alinux-system | Clear page cache and monitor resources via command line | | System Performance | troubleshooting | alinux-system | Fix scheduling latency, memory fragmentation, and io_uring issues | | Storage and Filesystem | guide | alinux-storage | Create EROFS images, tune writeback, and monitor disk I/O latency | | Storage and Filesystem | troubleshooting | alinux-storage | Resolve ext4 "no space" errors, NFS performance, and OverlayFS permission issues | | System Monitoring and Logging | guide | alinux-monitoring | View crash logs, enable PSI, and configure alert policies | | System Monitoring and Logging | cli | alinux-monitoring | Use kdumpctl and SysAK to inspect system state | | System Monitoring and Logging | troubleshooting | alinux-monitoring | Diagnose df/du disk space reporting discrepancies | | System Diagnosis and Troubleshooting | guide | alinux-diagnosis | Run one-click diagnostics, analyze OOM events, and configure SysOM | | System Diagnosis and Troubleshooting | troubleshooting | alinux-system_diagnosis_and_troubleshooting | Fix kernel crashes, vmcore generation, and dentry leaks | | Security and Compliance | guide | alinux-security | Apply hardening, configure baseline checks, and subscribe to CVE alerts | | Security and Compliance | troubleshooting | alinux-security | Patch vulnerabilities (e.g., CVE-2021-22555) and resolve integrity errors | | Software and Kernel Management | guide | alinux-software | Install Python, curl, or Alibaba Cloud Compiler | | Software and Kernel Management | troubleshooting | alinux-software | Resolve Ansible installation and kernel hotpatch conflicts | | OS Integration | guide | alinux-integration | Submit OS adaptation certification for Alibaba Cloud compatibility | | System Support | guide | alinux-support | Access technical support services for Alibaba Cloud Linux | | Automation and Task Management | guide | alinux-automation | Define complex tasks via files and use OS Copilot for intelligent operations | ## Intent Routing Guide - **High-level user intents (e.g., "How to deploy AI models", "Diagnose slow system")** → intent skills (recommended starting point) - **API/SDK/code/programming/endpoint/REST/request** → api skills - **Console/dashboard/UI/page/settings/configuration/wizard/click/GUI/portal/web interface** → guide skills - **Command/CLI/terminal/shell/bash/script/flag/option/tool/utility** → cli skills - **Error/troubleshoot/FAQ/diagnose/failure/issue/fix/problem/solution/debug/root cause** → troubleshooting skills Domain-specific routing keywords: - **Instance Management**: instance, ECS, kernel, memory, swap, hostname, migration, CentOS, live patch, hotpatch, SysOM, OS Copilot - **Networking**: network, TCP, SMC, BBR, XPS, NIC, DNS, IPv6, NAT, VPC, firewall, ACL, latency, throughput - **AI and GPU Workloads**: AI, GPU, NVIDIA, CUDA, PyTorch, TensorFlow, Qwen, DeepSeek, LLM, inference, training, vLLM, TensorRT - **Confidential Computing**: confidential computing, Inclavare, enclave, remote attestation, SGX - **Cluster Management**: ACK, Kubernetes, cluster, RBAC, kubeconfig, namespace, pod, node label, role binding - **System Performance**: performance, CPU, memory, I/O, latency, hotspot, compaction, watermark, NUMA, cgroup, slab - **Storage and Filesystem**: storage, disk, EROFS, ext4, NFS, LVM, quota, inode, du, df, fragmentation - **System Monitoring and Logging**: monitoring, logging, kdump, crash dump, vmcore, alert, metric, health, PSI, SysAK - **Security and Compliance**: security, compliance, CVE, hardening, MLPS, baseline, audit, vulnerability, patch - **Software and Kernel Management**: software, package, DNF, YUM, Python, Ansible, compiler, dependency, repository - **OS Integration**: OS certification, adaptation, compatibility, ISV - **System Support**: support, ticket, service, assistance - **Automation and Task Management**: automation, task, workflow, OS Copilot, file-based, complex operation ## General Information ### API Access (for api skills) - **Base URL**: Not applicable — Alibaba Cloud Linux API operations are typically performed via ECS or ACK service APIs. - **Authentication**: Use Alibaba Cloud AccessKey ID and Secret with appropriate RAM permissions. - **SDK Installation**: Install the Alibaba Cloud SDK for your language (e.g., `pip install alibabacloud_ecs20140526`) and configure credentials via environment variables or config files. - **Environment Variables**: Set `ALIBABA_CLOUD_ACCESS_KEY_ID` and `ALIBABA_CLOUD_ACCESS_KEY_SECRET`. ### Console Access (for guide skills) - **Console URL**: https://ecs.console.aliyun.com/ (for instances), https://cs.console.aliyun.com/ (for ACK clusters) - **Login**: Use your Alibaba Cloud account or RAM user credentials. - **Navigation**: Most instance and OS-level configurations are found under **Instances & Images > Instances**, then select an instance and use tabs like **Security Groups**, **Disks**, or **Monitoring**. OS-specific settings may require SSH access or use of built-in tools like OS Copilot. ## Frequently Asked Questions **Q: When should I use the API vs. the console?** A: Use the **API** for automation, infrastructure-as-code (e.g., Terraform), or integrating with custom applications. Use the **console** for one-off configurations, exploratory setup, or when guided workflows (e.g., migration wizards) are available. **Q: How do I get started with troubleshooting?** A: Start with the **intent skills** if you have a clear goal (e.g., “fix slow performance”). Otherwise, use **troubleshooting** sub-skills matching your symptom (e.g., OOM, boot failure, network hang). **Q: Where do I find CLI commands for common tasks?** A: Refer to the **cli** sub-skills (e.g., `alinux-instance` for YUM/security updates, `alinux-network` for nmcli). Many guide skills also include equivalent CLI alternatives. **Q: How do I handle kernel updates without downtime?** A: Use **kernel live patching** (hotpatch) via the `livepatch-mgr` CLI tool (see `alinux-instance` cli skill) or configure it through the console (guide skill). **Q: Can I use Alibaba Cloud Linux for compliance requirements?** A: Yes — use **compliance-ready images** (e.g., MLPS 2.0 Level 3) available in the console. Configure baseline checks and audit policies via the **Security and Compliance** guide skill. ### bailian # Bailian Skill ## Common User Intents - **Fine-tune a large language or multimodal model** — Customize models with your own data → `skills/bailian/intent/bailian-fine-model/SKILL.md` (2 alternative paths) - **Deploy custom or fine-tuned AI models as endpoints** — Host models for production inference → `skills/bailian/intent/bailian-deploy-model/SKILL.md` (2 alternative paths) - **Build RAG knowledge bases and retrieval pipelines** — Create retrieval-augmented generation systems → `skills/bailian/intent/bailian-build-system/SKILL.md` (2 alternative paths) - **Transcribe, recognize, and translate speech audio** — Process audio files and real-time speech → `skills/bailian/intent/bailian-transcribe-speech/SKILL.md` (3 alternative paths) - **Integrate external tools, MCP servers, and web search into AI agents** — Connect LLMs to external data and tools → `skills/bailian/intent/bailian-integrate-mcp/SKILL.md` (2 alternative paths) - **Manage API access credentials, keys, and network security** — Secure your API access and configure VPC → `skills/bailian/intent/bailian-manage-security/SKILL.md` (2 alternative paths) - **Extract and understand information from documents and images** — Perform OCR and document data mining → `skills/bailian/intent/bailian-extract-documents/SKILL.md` (2 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Text and Code Generation | api | bailian-text | Generate text, chat, and conduct deep research using large language models. | | Text and Code Generation | guide | bailian-llm | Console guides for LLM setup, framework integration, and prompt engineering. | | Text and Code Generation | troubleshooting | bailian-text | Diagnose and resolve text generation API errors and rate limits. | | Image, Video, and 3D Generation | api | bailian-media | Generate and edit images, videos, and 3D models via API. | | Image, Video, and 3D Generation | guide | bailian-image-gen | Console guides for image editing, prompt engineering, and API testing. | | Image, Video, and 3D Generation | troubleshooting | bailian-image | Troubleshoot image generation and editing API issues. | | Speech and Audio Processing | api | bailian-asr | Transcribe audio, perform real-time ASR, and synthesize speech. | | Speech and Audio Processing | guide | bailian-asr | Mobile SDK integration and performance optimization guides. | | Speech and Audio Processing | troubleshooting | bailian-asr | Diagnose speech recognition and synthesis errors. | | Translation and Localization | api | bailian-translation | Real-time speech translation, machine translation, and OCR. | | Multimodal Understanding and Interaction | api | bailian-multimodal | Analyze images, videos, audio, and documents using vision models. | | Search, Retrieval, and Embeddings | api | bailian-search | Web search, knowledge retrieval, and vector embeddings. | | Search, Retrieval, and Embeddings | guide | bailian-search | Configure Web Search MCP and console settings. | | Model Training and Data Management | api | bailian-model | Fine-tune, deploy, and manage models and files via API. | | Model Training and Data Management | guide | bailian-model | Console guides for model deployment, fine-tuning, and dataset management. | | Platform, Security, and Operations | api | bailian-access | Manage temporary API keys, async tasks, and RSA encryption. | | Platform, Security, and Operations | guide | bailian-access | Configure API keys, VPC, permissions, and monitoring in the console. | | Developer Tools and Support | api | bailian-integration | Connect LLMs to external tools using Model Context Protocol (MCP). | | Developer Tools and Support | guide | bailian-integration | Quick start guides and IDE integrations (Cursor, Cline, Dify). | | Developer Tools and Support | troubleshooting | bailian-ide | Troubleshoot AI coding tools, API access, and platform FAQs. | ## Intent Routing Guide **Route by Skill Type:** - "API, SDK, code, programming, endpoint, REST, WebSocket" → `api` skills - "Console, dashboard, UI, page, settings, click, wizard" → `guide` skills - "Error, troubleshoot, FAQ, fix, diagnose, exception, failure" → `troubleshooting` skills - "High-level user goals (e.g., how to deploy a model, build RAG)" → `intent` skills (recommended starting point) **Route by Domain:** - **Text and Code Generation:** LLM, Qwen, chat completions, deep research, text generation, prompt, DeepSeek, GLM. - **Image, Video, and 3D Generation:** Text-to-image, video generation, Wan, FLUX, 3D model, inpainting, FaceChain, AnimateAnyone. - **Speech and Audio Processing:** ASR, TTS, CosyVoice, Paraformer, speech recognition, voice cloning, audio transcription. - **Translation and Localization:** LiveTranslate, machine translation, speech translation, OCR, Qwen-MT. - **Multimodal Understanding:** Qwen-VL, visual reasoning, GUI automation, document analysis, Qwen-Audio. - **Search, Retrieval, and Embeddings:** RAG, web search, embeddings, rerank, knowledge retrieval, vector database. - **Model Training and Data Management:** Fine-tuning, model deployment, batch inference, dataset, LoRA, custom model. - **Platform, Security, and Operations:** API key, VPC, private link, billing, permissions, guardrails, workspace. - **Developer Tools and Support:** MCP, Cursor, Cline, Dify, IDE integration, coding plan, Cherry Studio. ## General Information ### API and SDK Configuration - **Base URL:** Use `https://dashscope.aliyuncs.com/compatible-mode/v1` for OpenAI-compatible text and multimodal endpoints. Specific endpoints are required for asynchronous tasks and WebSocket streaming. - **Authentication:** Pass your API key in the `Authorization: Bearer ` header, or set the `DASHSCOPE_API_KEY` environment variable. - **SDK Installation:** Install the native SDK via `pip install dashscope` or use the standard OpenAI SDK via `pip install openai` (configured with the Bailian base URL). ### Console and UI Operations - **Console Access:** Access the Bailian (Model Studio) console through the Alibaba Cloud portal. - **Navigation:** Use the left-hand navigation menu to switch between the Model Gallery, API Key management, Fine-tuning tasks, and Application centers. - **Workspaces:** Resources, datasets, and API keys are scoped to specific workspaces. Always verify you are operating within the correct workspace before generating keys or deploying models. ## Frequently Asked Questions 1. **How do I choose between the API and the Console?** Use the Console (guide skills) for visual configuration, dataset management, prompt testing, and obtaining API keys. Use the API (api skills) for programmatic integration, automated workflows, and building production applications. 2. **Where do I find my API key?** Navigate to the API Key management page in the console. You can create keys scoped to specific workspaces. For programmatic short-term access, refer to the temporary API key documentation in the Platform Administration skill. 3. **Which SDK should I use for text generation?** You can use the native `dashscope` SDK or the standard `openai` SDK by pointing the base URL to the Bailian OpenAI-compatible endpoint. Both are fully supported for Qwen and third-party models. 4. **How do I handle rate limits and API errors?** Check the troubleshooting skills for specific HTTP status codes (like 429). Implement exponential backoff in your code and review your workspace quota and concurrency limits in the console dashboard. 5. **Can I use third-party models like DeepSeek or GLM?** Yes, Bailian provides OpenAI-compatible API endpoints for various third-party models. Refer to the Text and Code Generation API skill for specific model IDs, pricing, and endpoint configurations. ### cas # Certificate Management Service Skill ## I Want To (Common User Intents) - **Apply for an SSL/TLS certificate** — Request new public or private certificates → `skills/cas/intent/cas-apply-certificate/SKILL.md` (2 alternative paths) - **Deploy SSL certificate to servers or cloud resources** — Install certificates on ECS, Apache, Nginx, IIS, RDS, etc. → `skills/cas/intent/cas-deploy-certificate/SKILL.md` (4 alternative paths) - **Troubleshoot SSL/TLS certificate issues** — Fix browser warnings, handshake failures, validation errors → `skills/cas/intent/cas-troubleshoot-issues/SKILL.md` (3 alternative paths) - **Manage private CA and private certificates** — Create and administer internal CAs and issue private certs → `skills/cas/intent/cas-manage-certificates/SKILL.md` (2 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Certificate Management | api | cas-certificate | Manage SSL/TLS certificates programmatically: create, query, deploy, renew, revoke, and manage orders, CSRs, client/server/CA certs, and tags. | | Certificate Management | guide | cas-certificate | Apply, deploy, renew, and manage certificates via console workflows, including domain validation, quota purchase, and certificate sharing. | | Certificate Management | troubleshooting | cas-certificate | Resolve certificate errors, validation failures, renewal issues, trust problems, and FAQs. | | Network Security | guide | cas-network | Configure HTTPS, TLS versions, cipher suites, and deploy certificates to web servers (Apache, Nginx, IIS, Tomcat) and cloud services (RDS, EMQX). | | Network Security | troubleshooting | cas-network | Diagnose SSL handshake failures, browser compatibility issues, server restart errors, and OCSP/CRL problems. | | Website Security | troubleshooting | cas-website | Troubleshoot domain conflicts and configuration issues with website proxy HTTPS. | | Instance Management | api | cas-instance | Manage CAS service instances: create, delete, update, list, refund, and configure access keys and quotas. | | Web Server Management | guide | cas-webserver | Install and configure IIS Manager and other web server components for certificate deployment. | ## Intent Routing Guide Use the following guidelines to route user queries to the appropriate skill type: - **High-level user goals (e.g., "How do I apply for a certificate?" or "Why is my site insecure?")** → Start with **intent skills** (recommended). - **API/SDK/code/programming/endpoint/REST** → Route to **api** skills. - **Console/UI/dashboard/page/wizard/click/configuration** → Route to **guide** skills. - **Error/troubleshoot/FAQ/fix/diagnose/failure/warning** → Route to **troubleshooting** skills. Domain-specific routing keywords: - **Certificate Management**: certificate, SSL, TLS, CA, CSR, DV, OV, EV, PCA, compliance, quota, order, renew, revoke, deploy, apply, manage, tag, client cert, server cert, root CA, sub-CA - **Network Security**: HTTPS, TLS config, cipher suite, mutual TLS, one-way TLS, Apache, Nginx, IIS, Tomcat, RDS SSL, mod_ssl, http_ssl_module, Apple ATS, EMQX, Tengine - **Website Security**: website proxy HTTPS, domain conflict, binding, duplicate domain - **Instance Management**: instance, service instance, refund instance, cloud access key, resource quota - **Web Server Management**: IIS Manager, Windows server, web administration, server component, IIS installation ## General Information ### API Access (for api skills) - **Base URL**: `https://cas..aliyuncs.com` - **Authentication**: Use AccessKey ID and Secret via standard Alibaba Cloud signature method (v1.0). - **SDK Installation**: Available via official Alibaba Cloud SDKs (Python, Java, Go, etc.). Install using package managers (e.g., `pip install alibabacloud_cas2020`). - **Environment Variables**: Set `ALIBABA_CLOUD_ACCESS_KEY_ID` and `ALIBABA_CLOUD_ACCESS_KEY_SECRET`. ### Console Access (for guide skills) - **Console URL**: https://cas.console.aliyun.com - **Login**: Use your Alibaba Cloud account credentials. - **Navigation**: Certificates are organized by region. Use left-side menu for: Certificates, Private CA, Compliance CA, Orders, Quotas, and Deployment Jobs. ## Frequently Asked Questions **Q: Should I use the API or the console?** A: Use the **console** for one-off tasks, visual workflows, or initial setup. Use the **API** for automation, integration into CI/CD, or managing large volumes of certificates. **Q: How do I get started with private CA?** A: Begin with the **"Manage private CA and private certificates"** intent skill. You’ll need to purchase a Private CA instance first via the console or API. **Q: Why is my certificate not trusted in browsers?** A: This is typically a chain or deployment issue. Check the **troubleshooting** skill for "certificate not trusted" or "incomplete chain" scenarios. **Q: Can I automate certificate renewal?** A: Yes—use the **API** to monitor expiration and trigger renewal, or enable auto-renewal in the **console** for eligible certificates. **Q: Where do I find my certificate after issuance?** A: In the **console**, go to Certificates > SSL Certificates. Via **API**, use `DescribeCertificates` or `QueryCertificate`. ### eb # EventBridge Skill ## I want to... (Common User Intents) - **Create and manage event buses** — Set up custom event buses via API or console → `skills/eb/intent/eb-create-bus/SKILL.md` (2 alternative paths) - **Route events to target services** — Send events to Function Compute, HTTP endpoints, etc. → `skills/eb/intent/eb-route-targets/SKILL.md` (2 alternative paths) - **Deliver events to external destinations (API/OSS/MQTT)** — Push events to external systems securely → `skills/eb/intent/eb-deliver-destinations/SKILL.md` (2 alternative paths) - **Manage event sources and targets** — Add, list, and configure permissions for sources/targets → `skills/eb/intent/eb-manage-targets/SKILL.md` (2 alternative paths) - **Configure real-time event streaming** — Build data pipelines from Kafka, RabbitMQ, etc. → `skills/eb/intent/eb-configure-streaming/SKILL.md` (2 alternative paths) - **Integrate external services via events (e.g., DingTalk, Lark)** — Trigger actions in SaaS apps → `skills/eb/intent/eb-integrate-events/SKILL.md` (2 alternative paths) - **Monitor event streams and set up alerts** — Receive cloud service alerts and visualize metrics → `skills/eb/intent/eb-monitor-alerts/SKILL.md` (2 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |----------|------|----------|------| | Event Bus Management | api/guide | eb-event-bus | Manage event buses including creation, deletion, listing, and updating configurations. | | Event Routing | api/guide | eb-event-routing | Configure rules and targets to route events from sources to destinations. | | Event Delivery | api/guide | eb-event-delivery | Configure and manage delivery of events to external destinations like APIs, MQTT, and OSS. | | Event Management | api/guide/troubleshooting | eb-event-management | Manage event sources, targets, and perform event queries and tracing. | | Event Streaming | api/guide | eb-event-streaming | Manage real-time event streaming configurations and operations. | | Event Processing | guide | eb-catalog | Managing data catalog for metadata organization. | | Event Tracing | api/guide | eb-event-tracing / eb-schema | Trace and monitor event flows; manage event schemas. | | Event Integration | api/guide | eb-event-integration | Integrate with external data sources like MySQL and PostgreSQL for change data capture. | | Monitoring and Alerting | api/guide | eb-monitoring | Handle events from monitoring services and route alerts through EventBridge. | | Security | api/guide | eb-security | Manage authentication, authorization, and security configurations for EventBridge. | | Event Sources | api | eb-event-source-management | Test and validate event source configurations. | | Developer Tools | guide | eb-sdk | Install and use EventBridge SDKs in various programming languages. | ## Intent Routing Guide - **Event Bus Management** - *api*: API, SDK, code, programming, CreateEventBus, DeleteEventBus, ListEventBuses, event bus, bus management, endpoint, REST - *guide*: console, UI, dashboard, create bus, delete bus, manage bus, event bus configuration, web interface, wizard - **Event Routing** - *api*: API, SDK, CreateRule, CreateTargets, event rule, event target, routing, filter, pattern, endpoint, REST - *guide*: console, UI, create rule, delete rule, route event, destination, Function Compute, HTTP endpoint, DingTalk, Lark, WeCom - **Event Delivery** - *api*: API, SDK, API destination, HTTP method, MQTT, OSS, publish event, event payload, authentication, SSL - *guide*: console, UI, API destination, webhook, publish event, quick start, delivery settings - **Event Management** - *api*: API, SDK, event source, event target, query event, trace event, list sources, manage rule - *guide*: console, UI, manage events, query events, edit connector, grant access, event filtering - *troubleshooting*: error, troubleshoot, event delivery failure, rule not matching, permission denied, API error - **Event Streaming** - *api*: API, SDK, event streaming, stream, create stream, RabbitMQ, OSS, pipeline, real-time - *guide*: console, UI, create stream, pause stream, Kafka, RabbitMQ, OSS sink, data flow, wizard - **Event Processing** - *guide*: console, UI, catalog, metadata, data organization, discovery - **Event Tracing** - *api*: API, SDK, event tracing, schema discovery, distributed tracing, event ID, correlation - *guide*: console, UI, schema, register schema, validate structure, version - **Event Integration** - *api*: API, SDK, MySQL, PostgreSQL, CDC, binlog, database integration, SQL - *guide*: console, UI, DingTalk, Lark, GitHub, Jenkins, Shopify, HTTP source, partner integration - **Monitoring and Alerting** - *api*: API, SDK, alert, monitoring, ECS, RDS, Anti-DDoS, ActionTrail, metric - *guide*: console, UI, alert rules, monitoring dashboard, real-time export, thresholds - **Security** - *api*: API, SDK, RAM, authentication, authorization, HMAC, signature, policy, STS - *guide*: console, UI, RAM, grant permission, cross-account, identity management, service linked role - **Event Sources** - *api*: API, SDK, test configuration, validation, connectivity test, diagnostic - **Developer Tools** - *guide*: console, UI, SDK, install, Go, Java, Python, JavaScript, TypeScript, setup **Routing by type**: - "API/SDK/code/programming" → **api** skills - "console/UI/dashboard/page/wizard" → **guide** skills - "error/troubleshoot/FAQ/diagnose/fix" → **troubleshooting** skills (only available for Event Management) - High-level user goals (e.g., "How to deliver events to OSS?") → **intent skills** (recommended starting point) ## General Information ### API Access - **Base URL**: Use the standard Alibaba Cloud API endpoint for your region (e.g., `eventbridge..aliyuncs.com`) - **Authentication**: Requests must be signed using AccessKey ID and Secret (HMAC-SHA1). Temporary credentials via STS are supported. - **SDK Installation**: Available for Java, Python, Go, PHP, .NET, and TypeScript. Install via language-specific package managers (e.g., `pip install alibabacloud_eventbridge` for Python). ### Console Access - **Console URL**: https://eventbridge.console.aliyun.com/ - **Login**: Requires an Alibaba Cloud account with appropriate RAM permissions. - **Navigation**: Use the left-side menu to access Event Buses, Rules, Event Streams, Connectors, Monitoring, and Settings. ## Frequently Asked Questions **Q1: When should I use the API vs. the console?** Use the **API/SDK** for automation, CI/CD integration, or programmatic management. Use the **console** for initial setup, exploration, visualization, and one-off operations. **Q2: How do I get started with custom event buses?** Begin with the intent skill “Create and manage event buses” (`eb-create-bus`). You can create buses via API (`CreateEventBus`) or through the console under **Event Buses > Custom Event Bus**. **Q3: Why is my event rule not matching events?** Check the event pattern syntax and ensure the event structure matches. Use the **Test Event Pattern Match** API or console testing tools. Refer to the **troubleshooting** section in `eb-event-management` for common issues. **Q4: How do I grant permissions for cross-account event routing?** Configure a resource-based policy on the event bus allowing the target account’s principal. Detailed steps are in the **Security** guide skill (`eb-security`) under “Cross-account Authorization”. **Q5: Can I deliver events to my own HTTP endpoint securely?** Yes. Use **API Destinations** with HTTPS, authentication (OAuth, API key, or basic auth), and optional SSL certificate validation. Setup is available in both API (`CreateApiDestination`) and console (`Event Delivery > API Destinations`). ### ecs # ECS Skill ## I want to... (Common User Intents) - **Configure networking for ECS instances** — Attach ENIs, configure security groups, assign IPs → `skills/ecs/intent/ecs-configure-instance/SKILL.md` (3 alternative paths) - **Manage data protection and recovery for ECS** — Set up auto-snapshots, restore from snapshots → `skills/ecs/intent/ecs-manage-recovery/SKILL.md` (3 alternative paths) - **Troubleshoot system-level issues on ECS instances** — Fix GNOME panel, sysctl errors, kernel issues → `skills/ecs/intent/ecs-troubleshoot-issues/SKILL.md` (2 alternative paths) - **Manage custom images for ECS instances** — Create from instance, import from OSS, share images → `skills/ecs/intent/ecs-manage-images/SKILL.md` (3 alternative paths) - **Execute remote commands on ECS instances** — Run batch commands, install Cloud Assistant → `skills/ecs/intent/ecs-execute-instances/SKILL.md` (2 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |----------|------|----------|------| | Billing | troubleshooting | ecs-billing | Handle billing, financial management, and cost-related issues for ECS resources. | | Monitoring | guide | ecs-monitoring | Monitor ECS instance performance metrics and configure alert thresholds via console. | | Monitoring | api | ecs-monitoring-api | Programmatically query disk, EIP, and instance monitoring data. | | Monitoring | troubleshooting | ecs-monitoring-troubleshooting | Diagnose and resolve performance monitoring issues. | | Network | guide | ecs-network | Manage ENIs, security groups, IPv6, and VPC settings via UI. | | Network | api | ecs-network-api | Automate VPC, ENI, EIP, NAT gateway, and security group operations via API. | | Network | troubleshooting | ecs-network-troubleshooting | Resolve connectivity, IP, firewall, and packet loss issues. | | System Management | guide | ecs-system | Configure system settings like privacy prompts and account policies via console. | | System Management | troubleshooting | ecs-system_management | Fix IPv6, GNOME, and OS-specific configuration errors. | | Cloud Assistant | guide | ecs-cloud-assistant | Use Cloud Assistant for remote command execution, disk management, and instance operations via UI. | | Cloud Assistant | api | ecs-instance | Programmatically manage instances, disks, launch templates, and Cloud Assistant via API. | | Cloud Assistant | troubleshooting | ecs-cloud_assistant | Resolve SSH/RDP/VNC connectivity, disk, billing, and OS issues. | | Storage | guide | ecs-snapshot | Manage snapshots, auto-policies, and consistent groups via console. | | Storage | api | ecs-storage | Automate disk, snapshot, SCU, and disaster recovery operations via API. | | Storage | troubleshooting | ecs-storage-troubleshooting | Troubleshoot disk capacity, snapshot, and backup issues. | | Image Management | guide | ecs-image | Create, share, import, and export custom images via UI; configure FTP. | | Image Management | api | ecs-image-api | Programmatically manage image pipelines, sharing, and import/export. | | Image Management | troubleshooting | ecs-image-troubleshooting | Resolve image creation, visibility, and compatibility problems. | | Security | guide | ecs-security | Assign and manage RAM roles for secure service access via console. | | AI Applications | guide | ecs-text | Build text generation applications using prompt engineering techniques. | | Database | troubleshooting | ecs-database | Fix MySQL deployment, permission, and configuration issues. | ## Intent Routing Guide Route user queries based on both domain and interaction type: - **High-level user intents (e.g., "how to deploy", "configure networking")** → intent skills (recommended starting point) - **API/SDK/code/programming/endpoint/REST** → api skills - **Console/UI/dashboard/page/wizard/click** → guide skills - **Error/troubleshoot/FAQ/fix/diagnose/debug** → troubleshooting skills Domain-specific trigger keywords: - **Billing**: billing, invoice, refund, renewal, account balance, cost - **Monitoring**: CPU usage, memory usage, CloudMonitor, alert thresholds, metrics, dashboard - **Network**: ENI, security group, VPC, IPv6, firewall, connectivity, bandwidth - **System Management**: privacy setup, account lockout, kernel parameters, sysctl - **Cloud Assistant**: remote command, batch execution, Cloud Assistant client, automation - **Storage**: snapshot, disk, backup, SCU, encryption, capacity - **Image Management**: custom image, import image, share image, vsftpd, AMI - **Security**: RAM role, temporary credentials, STS token, permissions policy - **AI Applications**: prompt engineering, text generation, LLM application - **Database**: MySQL, root password, data directory, permission denied ## General Information ### API & SDK Access - **Base URL**: `https://ecs.aliyuncs.com` - **Authentication**: Use AccessKey ID and Secret with request signing (v3 signature). - **SDK Installation**: Install official SDKs via package managers (e.g., `pip install aliyun-python-sdk-ecs`). - **Internal Endpoint**: For calls from within Alibaba Cloud, use internal endpoints for lower latency and no public bandwidth charges. ### Console Access - **Console URL**: https://ecs.console.aliyun.com - **Login**: Use your Alibaba Cloud account or RAM user credentials. - **Navigation**: Use the left-side menu to access Instances, Disks, Images, Snapshots, Networks, etc. - **Permissions**: Ensure your RAM user has appropriate policies attached (e.g., `AliyunECSFullAccess` for full control). ## Common Questions **Q: When should I use the API vs. the console?** A: Use the console for one-off tasks, exploration, or when you prefer GUIs. Use the API/SDK for automation, integration into scripts/apps, or managing large numbers of resources. **Q: How do I get started with Cloud Assistant?** A: First install the Cloud Assistant client on your instance (Linux/Windows), then use the console or API to create and run commands remotely. **Q: Why can’t I ping my ECS instance’s public IP?** A: Check security group rules (must allow ICMP), instance firewall settings, and whether the instance is running. See Network > troubleshooting for detailed diagnostics. **Q: How do I reset a forgotten instance password?** A: Stop the instance, then use the console (Instances > More > Reset Password) or API (`ModifyInstanceAttribute`) to set a new password. **Q: What’s the difference between a system disk and data disk?** A: The system disk contains the OS and is required. Data disks are optional, used for application data, and can be detached independently. Both support snapshots and encryption. ### es # Elasticsearch Skill ## I Want To (Common User Intents) - **Optimize search result relevance (Optimize search result relevance)** — Improve ranking quality using rerankers, intervention dictionaries, or fine-sort expressions → `skills/es/intent/es-optimize-results/SKILL.md` (3 alternative paths) - **Run A/B tests for search algorithms (Run A/B tests for search algorithms)** — Evaluate different ranking strategies through controlled experiments → `skills/es/intent/es-run-search/SKILL.md` (2 alternative paths) - **Manage access control and security settings (Manage access control and security settings)** — Secure your instance with API keys, RAM policies, or STS tokens → `skills/es/intent/es-manage-access/SKILL.md` (3 alternative paths) - **Ingest and manage document data in Elasticsearch (Ingest and manage document data in Elasticsearch)** — Upload, batch-push, or stage documents into indices → `skills/es/intent/es-ingest-documents/SKILL.md` (3 alternative paths) - **Deploy a Retrieval-Augmented Generation (RAG) AI application (Deploy a Retrieval-Augmented Generation (RAG) AI application)** — Build knowledge-base Q&A systems or enterprise chatbots → `skills/es/intent/es-deploy-application/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Memory Management | api | es-memory | Store, retrieve, and manage persistent memory for agentic applications. | | Memory Management | guide | es-memory | Configure agentic memory settings in the console for persistent context. | | Vector Search | guide | es-vector-search | Execute vector-based similarity searches and manage vector data through the OpenSearch console. | | Vector Search | api | es-vector | Perform vector search queries via REST API or SDK. | | Security | api | es-security | Implement secure authentication (API keys, STS, OAuth) for API calls. | | Security | guide | es-security | Generate and manage API credentials through the console. | | Model Deployment | guide | es-model-deployment | Publish custom models as API endpoints through the console. | | A/B Testing | api | es-ab-test | Create and manage A/B test experiments, groups, and scenes programmatically. | | Index Management | api | es-index | List, create, delete, modify, and control Elasticsearch index tables and versions. | | Index Management | guide | es-index | Perform range queries and manage indexes via the console interface. | | Data Query | api | es-data-query | Retrieve information about merged tables from data sources. | | Search | api | es-search | Execute and configure complex search queries with filters, sorts, aggregations, and result handling. | | Search | guide | es-search | Implement search features, integrate SDKs, and manage clusters via UI guides. | | Text Processing | api | es-text | Create custom analyzers, manage dictionaries, and parse documents programmatically. | | Text Processing | guide | es-text_analysis | Configure analyzers and intervention dictionaries (NER, synonyms, etc.) in the console. | | Embedding | api | es-text-embedding | Generate dense or sparse vector embeddings from text using supported models. | | Embedding | guide | es-model-customization | Fine-tune or adapt embedding models for domain-specific needs via the console. | | Relevance Optimization | api | es-search-relevance | Rerank results, manage query processors, and configure fine-sort parameters via API. | | Relevance Optimization | guide | es-search-relevance | Set up reranking, NL2SQL, and tailored retrieval models in the console. | | Instance and Resource Management | api | es-instance | Create, update, delete, and manage Elasticsearch instances, clusters, quotas, and resources. | | Instance and Resource Management | guide | es-instance | Launch instances, manage RAM users, adjust billing, and view specs via the console. | | Data Ingestion and Management | api | es-document | Push, stage, commit, and manage documents in Elasticsearch indices. | | Data Ingestion and Management | guide | es-document | Guide for batch document pushes and SDK integrations via UI examples. | | AI and RAG | api | es-text-generation | Generate text using LLMs, with or without live/web-augmented search. | | AI and RAG | guide | es-text-generation | Build RAG Q&A systems, knowledge bases, and enterprise chatbots via the console. | | Multimodal Processing | api | es-image | Extract text (OCR), detect objects, transcribe audio/video, and analyze visual content. | | Monitoring and Troubleshooting | troubleshooting | es-troubleshooting | Diagnose and resolve common errors, timeouts, authentication failures, and API issues. | | Monitoring and Troubleshooting | api | es-analytics | Retrieve log statistics, manage slow query analysis, and monitor performance via API. | ## Intent Routing Guide Use the following guidelines to route user queries to the appropriate skill type: - **High-level user goals (e.g., “How do I deploy a RAG app?” or “Optimize search relevance”)** → **Intent skills** (recommended starting point; see "I Want To" section above). - **API/SDK/code/programming/endpoint/REST/request** → **api** skills - **Console/dashboard/UI/page/wizard/form/click/control panel/management console/web interface** → **guide** skills - **Error/troubleshoot/FAQ/diagnose/fix/problem/debug/exception/status code** → **troubleshooting** skills Domain-specific trigger keywords: - **Memory Management**: memory storage, agentic memory, persistent memory, recall memory, memory API - **Vector Search**: vector search, embedding, similarity search, dense vector, sparse vector - **Security**: API key, AccessKey, STS, RAM policy, authentication, authorization, secure access - **Model Deployment**: deploy model, model service, custom model, inference endpoint - **A/B Testing**: A/B test, experiment, group, scene, testing strategy - **Index Management**: index, table, partition, version, rebuild, online strategy - **Data Query**: merged table, data source, query metadata - **Search**: search query, filter, sort, paginate, scroll, aggregate, highlight, suggest - **Text Processing**: custom analyzer, dictionary, NER, stop words, synonyms, term weight, text analysis - **Embedding**: text embedding, vectorize, sentence embedding, encode text, embedding service - **Relevance Optimization**: rerank, fine sort, second rank, intervention dictionary, query processor - **Instance and Resource Management**: instance, cluster, quota, RAM user, billing, tag, public URL - **Data Ingestion and Management**: push documents, bulk upload, stage data, commit, data collection - **AI and RAG**: RAG, LLM, text generation, knowledge base, chatbot, prompt, streaming response - **Multimodal Processing**: OCR, object detection, video transcription, image analysis, ASR, VLM - **Monitoring and Troubleshooting**: slow query, timeout, connection pool, error code, debug logs ## General Information ### API & SDK Basics - **Base URL**: Service endpoints are instance-specific. Retrieve your endpoint from the console under *Instance Details*. - **Authentication**: Most APIs require signed requests using AccessKey/SecretKey or STS tokens. Use official SDKs for automatic signature handling. - **SDK Installation**: Available for Python, Java, TypeScript, PHP, C#, and more. Install via package managers (e.g., `pip install opensearch-py`). - **Environment Setup**: Configure `ACCESS_KEY_ID`, `ACCESS_KEY_SECRET`, and `ENDPOINT` as environment variables or in client initialization. ### Console Access - **Console URL**: Log in to the Elasticsearch/OpenSearch management console via your cloud provider’s portal. - **Navigation**: Use the left-side menu to access *Instances*, *Applications*, *Security*, *Search*, *Models*, and *Monitoring*. - **Permissions**: Ensure your RAM user has appropriate policies (e.g., `AliyunOpenSearchFullAccess`) to perform operations. ## Frequently Asked Questions **Q: Should I use the API or the console for managing my Elasticsearch instance?** A: Use the **console** for initial setup, visual configuration, and one-off tasks. Use the **API/SDK** for automation, integration into applications, or bulk operations. **Q: How do I get started with secure API access?** A: First, create an AccessKey in the console (`es-security` guide). Then initialize your SDK client with the key and secret. For enhanced security, use STS temporary tokens (`es-security` API). **Q: My search results aren’t relevant—where should I start?** A: Begin with the intent skill **“Optimize search result relevance”**, which routes you to relevance tuning via reranking, intervention dictionaries, or fine-sort expressions. **Q: I’m getting a 403 error when calling the API—what’s wrong?** A: This usually indicates missing or incorrect permissions. Check your RAM user policies and ensure your AccessKey has the required actions. See `es-troubleshooting` for detailed error diagnostics. **Q: Can I deploy a RAG chatbot without writing code?** A: Yes—the **AI and RAG guide** (`es-text-generation`) includes step-by-step instructions to build knowledge-base Q&A systems and deploy chatbots in DingTalk/Lark via the console. ### ess # Auto Scaling Skill ## I Want To (Common User Intents) - **Create an Auto Scaling group (Create an Auto Scaling group)** — Set up a new scaling group via console or API → `skills/ess/intent/ess-create-group/SKILL.md` (2 alternative paths) - **Configure scaling triggers (scheduled or event-based) (Configure scaling triggers (scheduled or event-based))** — Define when and how scaling occurs based on time or metrics → `skills/ess/intent/ess-configure-triggers/SKILL.md` (3 alternative paths) - **Manage instances within a scaling group (Manage instances within a scaling group)** — Control instance states like standby, protection, or manual attachment → `skills/ess/intent/ess-manage-instances/SKILL.md` (3 alternative paths) - **Integrate Auto Scaling with external services (SLB, RDS, etc.) (Integrate Auto Scaling with external services (SLB, RDS, etc.))** — Connect scaling groups to load balancers, databases, and other services → `skills/ess/intent/ess-integrate-services/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Instance Management | api | ess-instance | Programmatic management of scaling groups, instances, rules, configurations, lifecycle hooks, and more via APIs/SDKs | | Instance Management | guide | ess-instance | Console-based creation, modification, and monitoring of scaling resources through step-by-step workflows | | Instance Management | troubleshooting | ess-instance | Diagnose and resolve errors related to scaling activities, API failures, billing, permissions, and integrations | | Network Security | guide | ess-network | Configure firewall rules for Windows instances in scaling groups via the console | | Container Service | guide | ess-container | Deploy and manage containerized applications using Auto Scaling with Apsara DevOps | | User Management | troubleshooting | ess-user | Troubleshoot login and authentication issues for Auto Scaling users | | Event Notification | guide | ess-notification | Modify event notification settings for scaling activities in the console | | Monitoring | guide | ess-monitoring | Report and use custom metrics to drive event-triggered scaling actions | ## Intent Routing Guide Route user queries based on both **domain** and **skill type**: - **API/SDK/code/programming/endpoint/REST/script** → **api** skills (e.g., `ess-instance` api) - **Console/UI/dashboard/page/wizard/click/settings/how to/step by step** → **guide** skills (e.g., `ess-instance`, `ess-network`, etc.) - **Error/troubleshoot/FAQ/fix/diagnose/failed/issue/why not working** → **troubleshooting** skills (e.g., `ess-instance`, `ess-user`) - **High-level user intents (e.g., "how to deploy", "create scaling group")** → **intent skills** (recommended starting point) Domain-specific routing keywords: - **Instance Management**: scaling group, ECS instance, scaling rule, lifecycle hook, scheduled task, event-triggered task, instance refresh, attach load balancer, query activity - **Network Security**: firewall, Windows instance, security rule - **Container Service**: container, DevOps, Apsara DevOps, deployment pipeline - **User Management**: login, password, authentication, account access - **Event Notification**: notification, alert, message, event type, CloudMonitor alert - **Monitoring**: custom metric, application metric, CloudMonitor, scaling trigger metric ## General Information ### API Access (for api skills) - **Base URL**: `https://ess.aliyuncs.com` - **Authentication**: Use AccessKey ID and AccessKey Secret with Signature Version 1.0 (HMAC-SHA1) - **SDK Installation**: Available for Python, Java, Go, Node.js, .NET, and PHP via official Alibaba Cloud SDK repositories - **Environment Variables**: Set `ALIBABA_CLOUD_ACCESS_KEY_ID` and `ALIBABA_CLOUD_ACCESS_KEY_SECRET` ### Console Access (for guide skills) - **Console URL**: [Auto Scaling Console](https://ess.console.aliyun.com/) - **Login**: Use your Alibaba Cloud account or RAM user credentials - **Navigation**: Access scaling groups under **Elastic Compute Service > Auto Scaling**, then use left-side menus for instances, rules, configurations, etc. ## Frequently Asked Questions **Q: Should I use the API or the console for Auto Scaling?** A: Use the **console** for initial setup, visual monitoring, and one-off operations. Use the **API/SDK** for automation, CI/CD integration, or managing multiple environments programmatically. **Q: How do I authenticate API calls?** A: Provide your AccessKey pair and sign requests using the standard Alibaba Cloud signature method. Never hardcode keys—use environment variables or secure credential managers. **Q: Why can’t I see my scaling group in the console?** A: Verify you’re in the correct region, have sufficient RAM permissions (e.g., `ess:DescribeScalingGroups`), and that the group wasn’t deleted. Check the **Resource Group** filter if enabled. **Q: What causes “Insufficient Data” in alarm-triggered scaling?** A: This typically means CloudMonitor hasn’t collected enough metric data yet. Ensure the metric exists, has recent values, and the alarm rule uses a valid comparison operator. **Q: Can I use Auto Scaling with both ECS and ECI?** A: Yes—scaling configurations support either ECS instances (with launch templates) or ECI containers. Choose during scaling group creation; mixing types in one group is not supported. ### idaas # IDaaS Skill ## I want to... (Common User Intents) - **Configure user authentication methods** — Set up login methods like SMS, 2FA, or social login → `skills/idaas/intent/idaas-configure-authentication/SKILL.md` (2 alternative paths) - **Manage application access permissions** — Grant or revoke app access for users/groups, assign roles → `skills/idaas/intent/idaas-manage-access/SKILL.md` (2 alternative paths) - **Integrate SSO for an application** — Configure SAML, OIDC, or custom SSO for your app → `skills/idaas/intent/idaas-integrate-application/SKILL.md` (2 alternative paths) - **Provision users from external identity provider** — Sync users from AD, Okta, or other IdPs via SCIM or event callbacks → `skills/idaas/intent/idaas-provision-idp/SKILL.md` (3 alternative paths) - **Set up secure machine-to-machine (M2M) access** — Enable AK-free access to cloud resources or AI models using M2M tokens → `skills/idaas/intent/idaas-secure-access/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Organization Management | guide | idaas-org | Manage organizational structures, create organizations, and associate accounts. | | Identity Management | api | idaas-identity | Manage users, groups, cloud accounts, applications, brands, custom fields, and more via API. | | Identity Management | guide | idaas-identity | Perform identity operations in the console: user onboarding, app setup, branding, etc. | | Identity Management | troubleshooting | idaas-identity | Resolve issues like sync failures, login errors, and account deletion problems. | | Authentication | api | idaas-auth | Authenticate users, acquire tokens, register WebAuthn devices, and handle 2FA via API. | | Authentication | guide | idaas-auth | Configure authentication policies, MFA, social login, risk control, and IP rules in UI. | | Access Control | api | idaas-access | Manage authorization rules, resource servers, OAuth tokens, JWT, and M2M access via API. | | Access Control | guide | idaas-access | Set up RBAC/ABAC, M2M apps, OIDC providers, and SSO integrations in console. | | Access Control | troubleshooting | idaas-access | Diagnose access denied errors, SSO failures, token exchange issues, and role mapping problems. | | Federation and Single Sign-On | guide | idaas-federation | Configure trust with external IdPs (ADFS, Google Workspace, Entra ID), SAML/OIDC, and SLO. | | Instance and Network Management | api | idaas-instance | Create, delete, and configure IDaaS instances, licenses, regions, and network endpoints. | | Instance and Network Management | guide | idaas-instance | Manage custom domains, legacy migrations, and cloud integrations (ECS, ACK, Bastionhost). | | Notifications | guide | idaas-email | Configure SMTP, SMS gateways, email templates, and delivery settings. | | User Lifecycle and Synchronization | api | idaas-appdev | Develop integrations using SCIM, event callbacks, and provisioning APIs. | | User Lifecycle and Synchronization | troubleshooting | idaas-sync | Troubleshoot sync delays, status mismatches, and SCIM errors from AD/Okta. | | Reporting | guide | idaas-reports | View user activity, audit logs, and system metrics in the dashboard. | | Quotas and Limits | api | idaas-service | Retrieve service-level quotas, usage limits, and capacity information. | | Compliance | guide | idaas-privacy | Manage privacy clauses and ensure GDPR/data protection compliance. | | Data Import | guide | idaas-file | Bulk import user or configuration data via CSV/Excel in the console. | | Secure AI Access | guide | idaas-model | Enable keyless, token-based access to Model Studio and AI inference endpoints. | | Gateway Integration | guide | idaas-gateway | Secure MSE cloud-native gateways with OIDC, JWT validation, and zero-trust auth. | ## Intent Routing Guide Use the following guidelines to route user queries to the correct skill type: - **High-level user goals** (e.g., "How do I set up SSO?" or "How to sync AD users?") → **Intent skills** (recommended starting point). - **API/SDK/code/programming/endpoint/REST** → **api** skills. - **Console/dashboard/UI/page/settings/wizard/click/form** → **guide** skills. - **Error/troubleshoot/FAQ/fix/diagnose/failure/issue** → **troubleshooting** skills. Domain-specific routing keywords: - **Organization Management**: organization, OU, hierarchy, structure, account association - **Identity Management**: user, group, application, brand, cloud account, profile, custom field, client secret, token, role, provisioning, SSO, SCIM - **Authentication**: login, password, 2FA, TOTP, WebAuthn, social login, recovery, authenticate, MFA, risk control, IP whitelist - **Access Control**: authorization, policy, RBAC, ABAC, scope, resource server, M2M, OIDC provider, permission, grant, STS token - **Federation and SSO**: SAML, OIDC, IdP, ADFS, Entra ID, Google Workspace, trust, federation metadata, SLO, attribute mapping - **Instance and Network Management**: instance, region, license, trial, network zone, endpoint, custom domain, upgrade, migration - **Notifications**: email, SMS, SMTP, template, gateway, delivery, bounce, sender - **User Lifecycle and Synchronization**: sync, SCIM, provisioning, AD, Okta, Entra ID, event callback, user status - **Reporting**: reports, analytics, logs, audit, metrics, user activity - **Quotas and Limits**: quota, limit, capacity, usage, billing, resource limit - **Compliance**: privacy, GDPR, clause, consent, data protection, policy - **Data Import**: import, upload, CSV, Excel, bulk, file, template - **Secure AI Access**: Model Studio, AI Gateway, keyless, M2M authentication, token-based access - **Gateway Integration**: MSE gateway, cloud-native gateway, OIDC authentication, JWT validation, API security ## General Information ### API Access (for api skills) - **Base URL**: `https://idaas..aliyuncs.com` - **Authentication**: Use OAuth 2.0 client credentials flow or M2M tokens. Obtain `client_id` and `client_secret` from the application settings in the console. - **Environment Variables**: Set `IDAAS_REGION`, `CLIENT_ID`, and `CLIENT_SECRET` for SDK usage. - **SDK Installation**: Available via official Alibaba Cloud SDKs (Python, Java, Go, etc.). Install using package managers (e.g., `pip install alibabacloud_idaas-doraemon20210526`). ### Console Access (for guide skills) - **Console URL**: https://idaas.console.aliyun.com - **Login**: Use your Alibaba Cloud account or federated identity (if SSO is configured). - **Navigation**: Main sections include **Users**, **Applications**, **Authentication**, **Access Control**, **Federation**, **Settings**, and **Reports**. - **Permissions**: Ensure your RAM user has appropriate IDaaS permissions (e.g., `IdaasDoraemon:*`). ## Frequently Asked Questions **Q1: When should I use the API vs. the console?** A: Use the **console** for one-off administrative tasks, initial setup, or visual workflows. Use the **API** for automation, integration into CI/CD pipelines, or managing large-scale operations programmatically. **Q2: How do I get started with IDaaS APIs?** A: First, create an application in the console to obtain `client_id` and `client_secret`. Then, use these credentials to request an access token via the OAuth 2.0 token endpoint. Refer to the `idaas-identity` or `idaas-auth` API skills for specific endpoints. **Q3: Why can’t I see certain features in the console?** A: Feature visibility depends on your IDaaS instance type (CIAM vs. EIAM), license tier, and RAM permissions. Contact support if you believe a feature should be available. **Q4: My SSO integration isn’t working—where do I start troubleshooting?** A: Check the **troubleshooting** skill for your domain (e.g., `idaas-federation` or `idaas-access`). Common issues include misconfigured redirect URIs, certificate mismatches, or incorrect attribute mappings. **Q5: Can I automate user provisioning from my HR system?** A: Yes. Use SCIM (via `idaas-appdev` API) or event-based callbacks (`idaas-sync`) to synchronize users. Pre-built connectors exist for AD, Okta, and DingTalk. ### oceanbase # OceanBase Skill ## I Want To (Common User Intents) - **Optimize a slow-running SQL query (Optimize a slow-running SQL query)** — Improve query performance and reduce execution time → `skills/oceanbase/intent/oceanbase-optimize-query/SKILL.md` (4 alternative paths) - **Import or export data to/from OceanBase (Import or export data to/from OceanBase)** — Move data between OceanBase and external systems → `skills/oceanbase/intent/oceanbase-import-data/SKILL.md` (3 alternative paths) - **Manage distributed database transactions (Manage distributed database transactions)** — Use XA protocols for ACID-compliant distributed transactions → `skills/oceanbase/intent/oceanbase-manage-transactions/SKILL.md` (3 alternative paths) - **Secure database access and protect data (Secure database access and protect data)** — Configure access control, encryption, and compliance settings → `skills/oceanbase/intent/oceanbase-secure-access/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Data Loading | api | oceanbase-data | Load data into OceanBase Database from external files. | | Transaction Management | api | oceanbase-transaction | Manage distributed transactions using XA protocols. | | Database Access | api | oceanbase-access | Connect to OceanBase Database using drivers (JDBC/ODBC). | | Database Error Handling | guide | oceanbase-errorhandling | Understand and handle database exception types via console. | | Database Configuration | guide | oceanbase-config | View and manage NLS and system configuration parameters. | | Database Management | guide | oceanbase-cluster | Manage cluster operations including failover scenarios. | | Database Management | api | oceanbase-database_management | Access cluster event history and topology via APIs. | | Data Management | api | oceanbase-data_management | Manage data types, conversions, and LOB operations. | | SQL Execution and Querying | api | oceanbase-sql | Execute dynamic SQL and perform advanced querying programmatically. | | SQL Optimization and Performance | api | oceanbase-sql_optimization | Optimize SQL using outlines, hints, and execution plan analysis. | | SQL Optimization and Performance | guide | oceanbase-query | Analyze and visualize query plans through the console. | | SQL Optimization and Performance | troubleshooting | oceanbase-sqlperf | Diagnose and resolve slow queries and performance issues. | | Monitoring and Auditing | api | oceanbase-monitoring | Monitor session/system statistics, QPS, and SQL audit data. | | PL/SQL Development and Debugging | api | oceanbase-plsql | Display output and debug PL/SQL programs using DBMS_* packages. | | Security and Data Protection | api | oceanbase-security | Manage privileges, encryption (TDE), and password policies. | | Backup, Recovery, and Migration | guide | oceanbase-backup | Perform backup, restore, and migration tasks via console (NFS, OMS, DataX). | | Backup, Recovery, and Migration | api | oceanbase-recovery | Use flashback queries and DataX plugins for programmatic data movement. | | Database Utility Operations | api | oceanbase-operations | Perform datetime formatting, random generation, and utility functions. | | Database Utility Operations | troubleshooting | oceanbase-database | Handle general database exceptions and errors. | ## Intent Routing Guide Route user queries based on both **domain** and **interaction type**: - **API/SDK/code/programming/endpoint/REST/request** → use **api** sub-skills - **Console/UI/dashboard/page/click/form/wizard** → use **guide** sub-skills - **Error/troubleshoot/FAQ/diagnose/fix/issue/failure** → use **troubleshooting** sub-skills - **High-level user goals (e.g., “How to optimize slow SQL?”)** → start with **intent skills** (recommended) Domain-specific routing keywords: - **Data Loading**: load, import, bulk insert, ETL, data ingestion, file upload, migration, dataset, batch, streaming - **Transaction Management**: XA, distributed transaction, commit, rollback, prepare, in-doubt, two-phase commit, ACID, global transaction - **Database Access**: connect, connection, driver, JDBC, ODBC, client, session, SSL, authentication, pool, timeout - **Database Error Handling**: exception, error types, handle errors (console context) - **Database Configuration**: NLS, parameters, locale, language, date format, charset, collation, settings, preferences - **Database Management**: cluster, failover, primary, node, server, replica, switchover, high availability - **Data Management**: LOB, BLOB, CLOB, data type, conversion, timestamp, timezone, raw, hex, encode, decode, FLOAT - **SQL Execution and Querying**: dynamic SQL, DBMS_SQL, SELECT, GROUP BY, EXISTS, IN, DISTINCT, cursor, bind variable, parallel query - **SQL Optimization and Performance**: EXPLAIN, execution plan, outline, hint, SQL tuning, slow query, plan cache, v$sql_plan, TOP N - **Monitoring and Auditing**: gv$session_wait, gv$sql_audit, QPS, CPU, I/O, wait events, metrics, system statistics, SQL monitor - **PL/SQL Development and Debugging**: DBMS_OUTPUT, DBMS_DEBUG, breakpoint, step into, variable inspection, debug session - **Security and Data Protection**: GRANT, privileges, TDE, encryption, DBMS_CRYPTO, password policy, GDPR, HIPAA, PCI DSS - **Backup, Recovery, and Migration**: backup, restore, recovery point, NFS, OMS, DataX, incremental, full backup, retention, CDC - **Database Utility Operations**: DBMS_RANDOM, DBMS_LOB, datetime arithmetic, CURRENT_DATE, VSIZE, WM_CONCAT, window functions ## General Information ### API Access (for api skills) - **Authentication**: Use standard database credentials (username/password) with supported drivers. - **Drivers**: JDBC and ODBC drivers are available for programmatic access. - **Endpoints**: Direct database connections; no HTTP REST gateway is used—interact via SQL or PL/SQL APIs. - **Environment**: Ensure network connectivity to OceanBase cluster nodes; configure SSL if required. ### Console Access (for guide skills) - **Console URL**: Access via the OceanBase Cloud Platform or on-premises management console. - **Login**: Use your tenant account credentials; ensure appropriate role-based permissions. - **Navigation**: Use left-side menus to access clusters, databases, SQL diagnostics, backup jobs, and configuration panels. ## Frequently Asked Questions **Q: Should I use the API or the console for a task?** A: Use the **console** for one-off operations, visual diagnostics, or guided workflows (e.g., backup setup). Use the **API** for automation, integration into applications, or programmatic control (e.g., loading data from code). **Q: How do I connect to OceanBase programmatically?** A: Use JDBC or ODBC drivers with standard connection strings. Refer to the *Database Access* API skill for details on drivers and connection parameters. **Q: Where can I diagnose a slow SQL query?** A: Start with the **intent skill** “Optimize a slow-running SQL query.” For programmatic analysis, use the *SQL Optimization* API skill; for visual exploration, use the *SQL Optimization* guide skill in the console. **Q: How do I handle an “in-doubt” transaction?** A: Use the *Transaction Management* API skill to recover or synchronize in-doubt XA transactions via DBMS_XA or DIST_TXN_SYNC. **Q: Can I encrypt sensitive data in OceanBase?** A: Yes—use TDE (Transparent Data Encryption) for tables/tablespaces or DBMS_CRYPTO for application-level encryption. See the *Security* API skill for implementation. ### opensearch # OpenSearch Skill ## I want to... (Common User Intents) - **Build a Retrieval-Augmented Generation (RAG) solution** — Implement RAG systems using OpenSearch vector and AI capabilities → `skills/opensearch/intent/opensearch-build-solution/SKILL.md` (3 alternative paths) - **Deploy embedding model for inference** — Host and serve custom or built-in embedding models → `skills/opensearch/intent/opensearch-deploy-model/SKILL.md` (2 alternative paths) - **Manage data sources for ingestion** — Connect external data sources like OSS or MaxCompute → `skills/opensearch/intent/opensearch-manage-sources/SKILL.md` (2 alternative paths) - **Configure security and access control** — Set up API keys, RAM users, and VPC access → `skills/opensearch/intent/opensearch-configure-access/SKILL.md` (2 alternative paths) - **Optimize search relevance and ranking** — Improve result quality with custom ranking, reranking, and query analysis → `skills/opensearch/intent/opensearch-optimize-relevance/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |----------|------|----------|------| | Memory Management | api | opensearch-memory | Store, retrieve, and manage memory data for agentic applications. | | Memory Management | guide | opensearch-memory | Configure long-term memory for intelligent agents via console. | | Vector Search | api | opensearch-vector | Perform vector similarity searches and manage embeddings programmatically. | | Vector Search | guide | opensearch-vector | Create and configure vector indexes and image search engines via UI. | | Query Execution | api | opensearch-search | Interpret and execute search query results in various formats (JSON, ProtoBuf, etc.). | | Knowledge Base Management | guide | opensearch-knowledge | Create and manage knowledge bases for Q&A systems through the console. | | Multimodal Search | api | opensearch-multimodal | Score relevance between multimodal queries and documents. | | Data Query | api | opensearch-data | Query merged tables, child tables, and key-value data using SQL-like syntax. | | Search Service | api | opensearch-search_service | Retrieve domain and service information for OpenSearch instances. | | Algorithm Management | api | opensearch-algorithm | List and manage deployed algorithm and machine learning resources. | | Model Management | api | opensearch-model | Get details and reports on deployed ML models. | | Model Management | troubleshooting | opensearch-model | Diagnose and resolve model deployment and inference errors. | | Data Aggregation | api | opensearch-aggregation | Perform statistical aggregations and group analytics on search data. | | Custom Sorting Model Configuration | guide | opensearch-custom-sort | Configure feature attributes for custom sorting models in the console. | | Code Execution | guide | opensearch-code | Implement conditional logic in Cava scripts via the management interface. | | SQL Development | guide | opensearch-sql | Create SQL instances and run queries through the console. | | Document Retrieval | api | opensearch-document | Fetch documents by primary key and retrieve summaries. | | Scripting Extension | guide | opensearch-scripting | Upload and manage Cava scripts to extend functionality. | | Text Relevance Ranking | guide | opensearch-ranking | Configure pack indexes with text fields and relevance scoring. | | Script Management | api | opensearch-script | Manage custom sort scripts and script files programmatically. | | Search Algorithm | guide | opensearch-algorithm | Customize core search algorithms including tailored retrieval and NER. | | Search | api | opensearch-search-api | Execute search queries, configure parameters, and handle results via API. | | Search | guide | opensearch-search | Implement search features, configure clients, and test queries in the console. | | Search | troubleshooting | opensearch-search | Diagnose and fix common API and connection errors. | | Embedding | api | opensearch-text | Generate dense and sparse vector embeddings from text and multimodal inputs. | | Data Ingestion and Processing | api | opensearch-data_ingestion_and_processing | Parse and split documents into chunks for processing and vectorization. | | Data Ingestion and Processing | guide | opensearch-document | Configure data pipelines and ingestion from OSS, MaxCompute, or APIs. | | Model and AI Services | api | opensearch-model_and_ai_services | Generate text using LLMs with or without web-augmented context. | | Model and AI Services | guide | opensearch-text | Activate and configure AI search services, deploy models, and build chatbots. | | Index and Data Management | api | opensearch-index | Create, modify, and manage indexes, versions, and document data. | | Index and Data Management | guide | opensearch-index | Configure index schemas, subdocuments, and bulk upload via UI. | | Instance and Resource Management | api | opensearch-instance | Create, configure, and manage OpenSearch instances and clusters. | | Instance and Resource Management | guide | opensearch-instance | Scale, monitor, and manage instances through the console. | | Instance and Resource Management | troubleshooting | opensearch-monitoring | Resolve monitoring access and permission issues. | | Text and Query Analysis | api | opensearch-text_and_query_analysis | Create and manage custom analyzers, dictionaries, and query processors. | | Text and Query Analysis | guide | opensearch-text_and_query_analysis | Configure stop words, synonyms, NER, and fuzzy analysis in the console. | | Text and Query Analysis | troubleshooting | opensearch-error | Diagnose API errors and Cava runtime exceptions. | | Multimodal Content Processing | api | opensearch-image | Extract text from images, detect objects, and process video/audio content. | | Security and Access Control | api | opensearch-security | Authenticate API requests using access keys or STS tokens. | | Security and Access Control | guide | opensearch-security | Manage API keys, RAM users, and VPC/CEN network access. | | A/B Testing and Evaluation | api | opensearch-abtest | Create and manage A/B test experiments, groups, and scenes. | ## Intent Routing Guide - **High-level user intents (e.g., "how to deploy a model", "build RAG")** → intent skills (recommended starting point) - **API/SDK/code/programming/endpoint/REST/client/request** → api skills - **Console/dashboard/UI/page/wizard/form/click/settings** → guide skills - **Error/troubleshoot/FAQ/fix/diagnose/exception/failure** → troubleshooting skills Domain-specific routing keywords: - **Memory Management**: memory, agentic_memory, recall, forget, store_memory, delete_memory - **Vector Search**: vector, embedding, ANN, semantic search, RAG, similarity, dense vector, sparse vector - **Query Execution**: query_execution, interpret results, JSON, ProtoBuf, kvpair, SQL execution - **Knowledge Base Management**: knowledge_base, Q&A system, create_knowledge_base - **Multimodal Search**: multimodal_search, relevance_scoring, image+text - **Data Query**: merged table, Pkey-Skey, child table, SELECT, WHERE, UNION - **Search Service**: domain, service info, OpenSearch instance metadata - **Algorithm Management**: algorithm, ML, AI, function resource, model deployment - **Model Management**: model, inference, prediction, accuracy, timeout, validation - **Data Aggregation**: GROUP BY, aggregate, statistics, metrics, analytics - **Custom Sorting**: custom sort, feature configuration, ranking model - **Code Execution**: Cava, conditional logic, branch, if-else - **SQL Development**: SQL instance, query development, execute SQL - **Document Retrieval**: fetch document, primary key, summary, document content - **Scripting Extension**: Cava script, upload script, extension - **Text Relevance Ranking**: pack index, text fields, relevance scoring, ranking - **Script Management**: sort script, custom script, upload/delete/list scripts - **Search Algorithm**: tailored retrieval, NER, spelling correction, category prediction - **Search**: search query, filter, sort, paginate, rerank, BM25, dropdown suggestions - **Embedding**: text_embedding, sparse_vector, multimodal embedding, dimensionality reduction - **Data Ingestion and Processing**: document parsing, PDF, OCR, chunking, TVF, MaxCompute, OSS - **Model and AI Services**: generate_text, LLM, chat, web search, OpenAI-compatible, NL2SQL - **Index and Data Management**: index, schema, push documents, bulk update, version, inverted index - **Instance and Resource Management**: instance, cluster, app group, quota, RAM, billing, VPC - **Text and Query Analysis**: analyzer, tokenizer, stop words, synonyms, NER, query understanding - **Multimodal Content Processing**: OCR, image analysis, object detection, video segmentation, ASR - **Security and Access Control**: API_key, access_key, RAM, STS token, VPC, authentication - **A/B Testing and Evaluation**: A/B test, experiment, variant, scene, group, metrics ## General Information ### API / SDK Setup - **Base URL**: Constructed per instance; typically `https://{instance-id}.{region}.opensearch.aliyuncs.com` - **Authentication**: Use AccessKey ID and Secret, or temporary STS tokens for secure API calls. - **SDK Installation**: Available for Java, Python, Go, PHP, and Node.js. Install via package managers (e.g., `pip install opensearch-py`, `npm install @opensearch-project/opensearch`). - **Client Initialization**: Requires endpoint, credentials, and region. Refer to language-specific SDK guides. ### Console Access - **Console URL**: https://opensearch.console.aliyun.com/ - **Login**: Use your Alibaba Cloud account or RAM user with appropriate permissions. - **Navigation**: Access domains via left-side menu: Instances, Applications, Data Sources, Models, etc. - **Common Patterns**: Most operations follow a wizard or form-based flow (e.g., Create Instance → Configure → Deploy). ## Frequently Asked Questions **Q: When should I use the API vs. the console?** A: Use the **console** for initial setup, testing, and one-off tasks. Use the **API/SDK** for automation, integration into applications, or batch operations. **Q: How do I get started with vector search?** A: Start with the **Vector Search** guide to create an index via console, then use the **vector API** to insert and query embeddings. For RAG, see the "Build RAG solution" intent skill. **Q: Where do I find my API credentials?** A: Create and manage **AccessKeys** in the Alibaba Cloud console under Identity Management > Users. Assign OpenSearch permissions via RAM policies. **Q: My search results aren’t relevant—how do I improve them?** A: Use the **Text and Query Analysis** and **Search Algorithm** guide skills to configure analyzers, synonyms, and reranking. Also explore the "Optimize search relevance" intent. **Q: How do I troubleshoot a 403 or connection timeout error?** A: Check **Security and Access Control** settings (IP allowlist, VPC, credentials). For timeouts, review instance specs and SDK connection pool settings in the **troubleshooting** skills. ### oss # Object Storage Service Skill ## I Want To (Common User Intents) - **Manage storage objects (upload, download, copy, etc.)** — Perform basic and advanced object operations across API, CLI, or console → `skills/oss/intent/oss-manage-objects/SKILL.md` (3 alternative paths) - **Configure bucket-level security policies** — Set up access controls, block public access, configure CORS, and manage policies → `skills/oss/intent/oss-configure-security/SKILL.md` (4 alternative paths) - **Manage vector data and indexes** — Store, index, and query vector embeddings for AI applications → `skills/oss/intent/oss-manage-data/SKILL.md` (2 alternative paths) - **Process media files (e.g., HLS streaming)** — Build live or on-demand video streaming solutions using OSS → `skills/oss/intent/oss-process-files/SKILL.md` (2 alternative paths) - **Configure storage access logging and monitoring** — Enable, customize, and analyze access logs for auditing and observability → `skills/oss/intent/oss-configure-monitoring/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Storage | api | oss-storage | Core bucket/object operations, lifecycle, encryption, replication, metadata, and more via API/SDK | | Storage | guide | oss-storage-guide | Console-based management of buckets, objects, permissions, and configurations | | Storage | cli | oss-storage-cli | Full object/bucket management using ossutil CLI commands | | Storage | troubleshooting | oss-storage-troubleshooting | Resolve common errors in CLI, API, and console usage | | Access Control | api | oss-access-control | Manage access points and their policies programmatically | | Access Control | cli | oss-access | Configure access points, CNAMEs, and public access blocks via CLI | | Network Security | api | oss-network-security | Configure Anti-DDoS, CORS, HTTPS, and requester QoS via API | | Network Security | guide | oss-network_security | Set up hotlink protection, CORS, and security rules in console | | Network Security | cli | oss-network | Test connectivity, manage Anti-DDoS, and configure TLS via CLI | | Image Processing | api | oss-image-processing | Define and apply image transformation styles via API | | Image Processing | cli | oss-image | Create and manage image styles using ossutil | | Streaming | api | oss-live | Manage live channels, RTMP ingest, and VOD playlists via API | | Streaming | guide | oss-video | Build HLS streams through the console interface | | Streaming | troubleshooting | oss-streaming | Diagnose and fix stream ingestion, latency, and auth issues | | Logging | cli | oss-logging | Configure bucket access logging and custom log fields via CLI | | Logging | guide | oss-logging-guide | View and analyze access logs in the console | | Vector Storage | api | oss-vector | Manage vector buckets, indexes, and perform similarity search via API | | Vector Storage | cli | oss-vector_storage | Operate vector storage using CLI commands | | Structured Storage | api | oss-table | Manage table buckets, namespaces, and tables via API | | Structured Storage | cli | oss-structured_storage | Create and configure table storage using ossutil | | Data Protection | api | oss-instance | Configure resource pool QoS and instance-level settings via API | | Data Protection | cli | oss-protection | Enforce WORM retention policies and manage compliance via CLI | ## Intent Routing Guide Route user queries based on both **domain** and **interaction type**: - **High-level user intents (e.g., "How do I upload files?" or "How to secure my bucket?")** → Start with intent skills (recommended entry point) - **API/SDK/code/programming/endpoint/REST/request** → Route to **api** sub-skills - **Console/dashboard/UI/page/wizard/click/settings** → Route to **guide** sub-skills - **CLI/command/terminal/flag/option/ossutil/shell** → Route to **cli** sub-skills - **Error/troubleshoot/FAQ/fix/diagnose/failure/debug** → Route to **troubleshooting** sub-skills Domain-specific keyword guidance: - **Storage**: bucket, object, upload, download, copy, delete, list, lifecycle, versioning, encryption, replication, tagging, metadata, ACL - **Access Control**: access point, policy, VPC, private endpoint, IAM, permission, role, ARN, security - **Network Security**: Anti-DDoS, DDoS, CORS, hotlink, referer, HTTPS, TLS, SSL, protection, origin, preflight - **Image Processing**: image, style, transformation, resize, crop, rotate, watermark, format, quality, thumbnail, filter - **Streaming**: HLS, RTMP, live channel, ingest, stream, playlist, VOD, playback, encoder, latency - **Logging**: log, logging, access log, audit, custom field, track, monitor, record - **Vector Storage**: vector, embedding, similarity search, ANN, k-NN, FAISS, HNSW, semantic search, retrieval - **Structured Storage**: table, namespace, Iceberg, schema, partition, metadata, NoSQL, DDL, DML - **Data Protection**: WORM, retention policy, legal hold, immutable, compliance, governance, bucket lock ## General Information ### API & SDK Basics - **Base URL**: `https://..aliyuncs.com` (path-style also supported) - **Authentication**: Signature-based (AccessKey ID/Secret) or STS tokens for temporary credentials - **SDKs**: Available for Python, Java, Go, Node.js, .NET, PHP, and more - **Environment Variables**: `OSS_ACCESS_KEY_ID`, `OSS_ACCESS_KEY_SECRET`, `OSS_ENDPOINT` - **Installation**: Use package managers (e.g., `pip install oss2` for Python) ### Console Access - **Console URL**: https://oss.console.aliyun.com - **Login**: Requires Alibaba Cloud account with appropriate RAM permissions - **Navigation**: Select region → choose bucket → use left-side menu for features (Objects, Permissions, Data Management, etc.) - **Common Patterns**: Most operations follow "Bucket → Feature → Configure/Apply" flow ## Common Questions **Q: Should I use the API or the console for managing buckets?** A: Use the **console** for one-off setup, exploration, or visual workflows. Use the **API/CLI** for automation, scripting, or integration into applications. **Q: How do I authenticate API requests?** A: Provide your AccessKey ID and Secret via SDK configuration, environment variables, or request signing. For enhanced security, use RAM roles or STS tokens. **Q: Where can I find CLI (ossutil) documentation?** A: All CLI operations are covered in **cli**-type sub-skills. Install ossutil from the official repository and configure it using `ossutil config`. **Q: My API call returns "AccessDenied"—what should I check?** A: Verify your AccessKey permissions, bucket policy, RAM user policies, and whether the resource (bucket/object) exists. Also confirm correct region and endpoint usage. **Q: Can I combine API and console usage?** A: Yes—changes made via API are reflected in the console and vice versa. However, avoid concurrent modifications to the same resource to prevent conflicts. ### pai # Platform for AI (PAI) Skill ## I want to... (Common User Intents) - **Deploy a model for online inference** — Deploy trained models as scalable APIs or real-time services → `skills/pai/intent/pai-deploy-inference/SKILL.md` (3 alternative paths) - **Train a machine learning model** — Train models for vision, language, GANs, pose estimation, etc. → `skills/pai/intent/pai-train-model/SKILL.md` (4 alternative paths) - **Manage and process training datasets** — Create, version, preprocess, and analyze datasets → `skills/pai/intent/pai-manage-data/SKILL.md` (2 alternative paths) - **Monitor and debug AI jobs** — Access logs, metrics, and error diagnostics for running/failing jobs → `skills/pai/intent/pai-monitor-jobs/SKILL.md` (2 alternative paths) - **Manage platform access and permissions** — Configure workspace roles, RAM policies, and resource access controls → `skills/pai/intent/pai-manage-permissions/SKILL.md` (2 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |----------|------|----------|------| | Algorithm Management | api | pai-algorithm | Manage algorithms and their versions used in PAI training and inference workflows. | | Workload Management | api | pai-workload | Manage and retrieve information about workloads running in PAI. | | Dataset Acceleration | api | pai-dataset | Manage dataset acceleration endpoints, slots, and their lifecycle and status. | | Snapshot Management | api | pai-snapshot | Create, manage, and restore snapshots of AI resources. | | Image Management | api | pai-image | Manage custom and base images used for PAI instances and jobs. | | Event Integration | api | pai-event | Handle integration events from external systems like DataWorks. | | Code Management | api | pai-code | Manage code sources and their publication lifecycle. | | Storage | api | pai-storage | Manage dynamic storage mounting and file operations in PAI instances. | | Benchmarking | api | pai-benchmark | Run and analyze benchmark tasks for AI models and services in PAI. | | Campaign Management | api | pai-campaign | Create, manage, and track marketing or user engagement campaigns. | | Audience Management | api | pai-audience | Define and manage audience groups for targeted campaigns. | | User Engagement | api | pai-engagement | Schedule and manage user engagement activities. | | Schedule Management | api | pai-schedule | Manage delivery and execution schedules for various platform operations. | | Instance Management | api | pai-instance | Manage compute instances, resource groups, quotas, nodes, and related infrastructure resources in PAI. | | Instance Management | guide | pai-instance_management | Perform instance setup, configuration, and management via console UI. | | Experiment Management | api | pai-experiment | Create, manage, and analyze machine learning experiments and experiment plans in PAI. | | Experiment Management | guide | pai-feature | Use visual tools for feature engineering, correlation, and transformation. | | Training Job Management | api | pai-training-job | Monitor, debug, and manage the lifecycle of training jobs including logs, metrics, and events. | | Training Job Management | guide | pai-training | Configure and run model training workflows through the console. | | Model Management | api | pai-model | Create, manage, and deploy machine learning models and their versions. | | Model Management | guide | pai-model_management | Deploy, evaluate, export, and govern models using UI workflows. | | Dataset Management | api | pai-dataset_management | Create, manage, and process datasets and their versions, files, and associated jobs. | | Dataset Management | guide | pai-processing | Perform data cleaning, transformation, visualization, and statistical analysis via UI. | | Network Management | api | pai-network | Configure network settings and VPC forwarding for secure PAI resource access. | | Monitoring & Observability | api | pai-monitor | Access user and system metrics for monitoring PAI resource usage and performance. | | Monitoring & Observability | guide | pai-notification | Configure event notifications and alerting rules in the console. | | Workspace & Identity Management | api | pai-workspace | Manage workspace specifications and identifiers for organizing PAI projects. | | Workspace & Identity Management | guide | pai-workspace_management | Create workspaces and configure role-based access via UI. | | Pipeline & Workflow Management | api | pai-pipeline | Create, manage, and monitor ML pipelines and their execution runs. | | Pipeline & Workflow Management | guide | pai-pipeline_management | Design, schedule, and run ML workflows using ML Designer. | | Pipeline & Workflow Management | troubleshooting | pai-designer | Troubleshoot common issues in the Machine Learning Designer interface. | | Feature Store | api | pai-feature_store | Manage feature store entities including datasources, feature views, and label tables. | | Knowledge Management | api | pai-knowledge | Create, manage, and retrieve knowledge bases and their associated jobs and chunks. | | API & Service Management | api | pai-api-catalog | Browse and access the catalog of available AI service endpoints in PAI. | | AI Workloads | api | pai-text | Generate text using PAI's text generation APIs and access service endpoints. | | AI Workloads | guide | pai-ai_workloads | Train and deploy vision, recommendation, graph, and generative models via UI. | | Image Label Management | api | pai-image_label_management | Manage labels associated with images for organization and discovery. | ## Intent Routing Guide - **High-level user intents (e.g., "How do I deploy a model?" or "Train an image classifier")** → intent skills (recommended starting point) - **API/SDK/code/programming/endpoint/REST/request** → api skills - **Console/dashboard/UI/page/wizard/click/form** → guide skills - **Error/troubleshoot/FAQ/fix/diagnose/failure/debug** → troubleshooting skills (currently only for ML Designer) Domain-specific routing keywords: - **Algorithm Management**: algorithm, algorithm version, hyperparameter, recipe, framework - **Workload Management**: workload, workload info, job status - **Dataset Acceleration**: dataset acceleration, slot, endpoint, lifecycle, metrics - **Snapshot Management**: snapshot, backup, restore, create snapshot - **Image Management**: image, container, Docker, base image, custom image, AMI - **Event Integration**: event, webhook, DataWorks, integration, callback - **Code Management**: code source, Git, repository, publish code - **Storage**: storage, mount, volume, file transfer, bucket, object - **Benchmarking**: benchmark, performance test, latency, throughput, report - **Campaign/Audience/Engagement/Schedule**: campaign, audience, user engagement, schedule, cron, delivery - **Instance Management**: instance, node, cluster, quota, resource group, ECS, RAM, VSC, tensorboard, terminal - **Experiment Management**: experiment, HPO, AutoFE, trial, run, metric logging - **Training Job Management**: training job, logs, metrics, error info, TensorBoard, job template - **Model Management**: model, version, deploy, EAS, registry, evaluation, fairness - **Dataset Management**: dataset, version, file, ETL, DataJuicer, lineage, statistics - **Network Management**: VPC, ENI, subnet, gateway, peering, ACL, CIDR, forwarding - **Monitoring & Observability**: metrics, logs, diagnostic, XTrace, alert, event log - **Workspace & Identity**: workspace, role, RBAC, RAM policy, member, permission - **Pipeline & Workflow**: pipeline, workflow, ML Designer, run, node, manifest - **Feature Store**: feature view, feature entity, label table, datasource - **Knowledge Management**: knowledge base, chunk, retrieval, upload file - **API & Service Management**: API catalog, service endpoint, DNS, custom domain - **AI Workloads**: text generation, video generation, recommendation, time series, LLM, embedding - **Image Label Management**: image label, tag, metadata, categorize ## General Information ### API Access (for api skills) - **Base URL**: All PAI APIs are accessed via regional endpoints (e.g., `pai-eas.${region}.aliyuncs.com`). The exact endpoint depends on the service and region. - **Authentication**: Use Alibaba Cloud AccessKey ID and Secret with standard Signature Version 4 signing. - **SDK Installation**: Install the official Alibaba Cloud SDK for your language (Python, Java, Go, etc.) from [Alibaba Cloud SDK](https://www.alibabacloud.com/help/en/sdk). - **Environment Variables**: Set `ALIBABA_CLOUD_ACCESS_KEY_ID` and `ALIBABA_CLOUD_ACCESS_KEY_SECRET` for local development. ### Console Access (for guide skills) - **Console URL**: https://pai.console.aliyun.com/ - **Login**: Use your Alibaba Cloud account credentials. - **Navigation**: After login, select your region and workspace. Key sections include Experiments, Models, Datasets, Jobs, Instances, and Pipelines. - **Permissions**: Ensure your RAM user has appropriate permissions (e.g., `AliyunPAIFullAccess` or custom policies) to perform actions. ## Frequently Asked Questions **Q1: Should I use the API or the console for my task?** A: Use the **console (guide skills)** for one-off tasks, exploration, or visual workflows (e.g., building a pipeline in ML Designer). Use the **API (api skills)** for automation, integration into CI/CD, or programmatic control at scale. **Q2: How do I authenticate API calls to PAI?** A: Use your Alibaba Cloud AccessKey pair. Sign requests using Signature Version 4. For enhanced security, use RAM roles or temporary tokens when running inside Alibaba Cloud environments (e.g., ECS). **Q3: I can’t see my resources in the console—what’s wrong?** A: Verify: (1) you’re in the correct region, (2) your workspace is selected, and (3) your RAM user has permissions to view the resource type (e.g., `pai:DescribeModels`). **Q4: My training job failed—how do I debug it?** A: First, check the **training job logs and error info** via the API (`GetTrainingJobErrorInfo`, `GetTrainingJobLogs`) or in the console under the job’s “Logs” tab. Common causes include insufficient quota, invalid image, or code errors. **Q5: How do I grant team members access to my PAI workspace?** A: In the **Workspace & Identity Management** section (console), add members and assign roles (e.g., Admin, Developer, Viewer). For fine-grained control, attach custom RAM policies to their accounts. ### rds # ApsaraDB RDS Skill ## I want to (Common User Intents) - **Manage database instance lifecycle and configuration (管理数据库实例)** — Create, modify, and manage RDS instances → `skills/rds/intent/rds-manage-instance/SKILL.md` (2 alternative paths) - **Backup and restore database data (备份与恢复数据库)** — Perform backup operations and restore from backups → `skills/rds/intent/rds-backup-database/SKILL.md` (2 alternative paths) - **Manage database accounts and permissions (管理数据库账号与权限)** — Create accounts and assign permissions → `skills/rds/intent/rds-manage-accounts/SKILL.md` (2 alternative paths) - **Migrate database data to or between RDS instances (迁移数据库数据)** — Transfer data from self-managed or between RDS instances → `skills/rds/intent/rds-migrate-data/SKILL.md` (3 alternative paths) - **Monitor and analyze database performance metrics (监控数据库性能)** — Track metrics and analyze performance data → `skills/rds/intent/rds-monitor-performance/SKILL.md` (3 alternative paths) - **Optimize database performance using diagnostic tools (优化数据库性能)** — Identify and fix performance bottlenecks → `skills/rds/intent/rds-optimize-performance/SKILL.md` (3 alternative paths) - **Configure database security settings and access control (配置数据库安全)** — Set up security configurations and access controls → `skills/rds/intent/rds-configure-security/SKILL.md` (2 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |----------|------|----------|------| | Instance Management | api/guide/troubleshooting | rds-instance | Manage RDS instances including creation, configuration, lifecycle operations, and general instance-level settings. | | Backup and Restore | api/guide/troubleshooting | rds-backup | Manage backup configurations, create and query backup files, and restore data from backups including cross-region scenarios. | | Account Management | api/guide | rds-account | Manage database accounts, permissions, passwords, and access control for RDS instances. | | Data Migration | api/guide/troubleshooting | rds-migration | Migrate data between instances, perform cloud migration assessments, and switch workloads during migration processes. | | Security | api/guide/troubleshooting | rds-security-general | Manage access permissions and security configurations for RDS instances. | | Monitoring and Alerts | api/guide/troubleshooting | rds-monitoring | Monitor and configure enhanced monitoring metrics and performance data for RDS instances. | | Performance Optimization | guide/troubleshooting | rds-performance | Analyze and optimize database performance through SQL statement management. | | Database Proxy | api/troubleshooting | rds-proxy | Configure and manage database proxy endpoints, SSL encryption, and proxy settings for RDS instances. | | Read/Write Splitting | api | rds-rwsplit | Configure and manage read/write splitting endpoints, read weights, and latency thresholds. | | Storage Management | api/guide | rds-storage | Manage storage resources including disks, file systems, and storage analysis for RDS instances. | | Event Management | api/guide | rds-events | Enable, disable, and query historical events for RDS instances. | | Disaster Recovery | api/guide | rds-dr | Manage disaster recovery instances including switching between primary and disaster recovery roles. | | Database Connectivity | troubleshooting | rds-connectivity | Resolve connectivity issues related to IP whitelisting and network configuration. | | Log Management | api/guide | rds-logs | Manage and query various types of logs including SQL audit logs, error logs, and slow query logs. | | Data Restoration | guide | rds-restoration | Restore data from RDS to self-managed PostgreSQL instances using various file formats. | | Data Synchronization and Integration | api/guide/troubleshooting | rds-sync | Configure and manage real-time data synchronization between databases and other services. | | Spatial Data Processing | api/guide | rds-spatial | Convert, transform, and process spatial grid and geometry data using specialized functions. | | AI Assistant and Conversational AI | api/guide | rds-ai | Manage AI assistant configurations, model operators, and related orders. | | Text and Vector Search | api/guide/troubleshooting | rds-text | Enable advanced text search capabilities including fuzzy matching and RUM indexing. | | Advanced Database Features | api/guide | rds-ml | Integrate machine learning capabilities with RDS using SQLFlow and XGBoost. | | Billing and Cost Management | api/guide | rds-billing | Manage RDS billing, savings plans, and view cost details. | | Data Export and Import | guide | rds-export | Export data from RDS instances to various formats including SQL, CSV, and Excel. | | Troubleshooting | troubleshooting | rds-troubleshoot | Diagnose and resolve API errors and client-side issues. | ## Intent Routing Guide - **High-level user intents (e.g., how to deploy, manage database instance)** → intent skills (recommended starting point) - **API/SDK/code/programming/endpoint/REST/request** → api skills - **Console/dashboard/UI/page/settings/click/wizard/form** → guide skills - **Troubleshoot/error/FAQ/diagnose/failure/issue/fix/debug/resolve** → troubleshooting skills Specific domain routing: - **Instance Management**: instance, create instance, modify instance, restart instance, delete instance, instance lifecycle - **Backup and Restore**: backup, restore, PITR, snapshot, cross-region backup, backup policy - **Account Management**: account, create account, grant permission, reset password, lock account - **Data Migration**: migrate, cloud migration, DTS, data transfer, import, export - **Security**: IP whitelist, SSL, TDE, security group, encryption, access control - **Monitoring and Alerts**: monitor, alert, metrics, CPU usage, memory usage, disk usage, logs - **Performance Optimization**: slow query, SQL optimization, index optimization, performance tuning - **Database Proxy**: database proxy, proxy endpoint, SSL encryption, read/write splitting, connection pool - **Read/Write Splitting**: read/write splitting, read weights, latency threshold, splitting endpoint - **Storage Management**: storage, disk, file system, CPFS, HDFS, MinIO, NAS, NFS, OSS - **Event Management**: event history, historical events, instance events, audit trail - **Disaster Recovery**: disaster recovery, DR instance, failover, primary instance, switchover - **Database Connectivity**: IP not in whitelist, ECS connection, internal network, connectivity issue - **Log Management**: SQL audit, error logs, slow query logs, log retention, log download - **Data Restoration**: restore to self-managed, CSV restore, SQL restore, data transfer - **Data Synchronization**: sync, data synchronization, CDC, real-time sync, foreign table, FDW - **Spatial Data Processing**: spatial, GIS, GPS, trajectory, raster, geometry, PostGIS, Ganos - **AI Assistant**: AI assistant, Copilot, chat, conversation, model operator, long-term memory - **Text and Vector Search**: full-text search, fuzzy match, RUM, pgvector, embedding, similarity - **Advanced Database Features**: ML, SQLFlow, XGBoost, MADlib, TimescaleDB, RDKit, RAG - **Billing and Cost Management**: billing, cost, savings plan, subscription, pay-as-you-go, invoice - **Data Export and Import**: export data, import data, CSV, SQL, Excel, DMS ## General Information ### API Information - **Base URL**: API endpoints follow the standard Alibaba Cloud API format: `https://rds.aliyuncs.com/` - **Authentication**: APIs use AccessKey ID and AccessKey Secret for authentication. These credentials can be obtained from the Alibaba Cloud Console under your account security settings. - **SDK Installation**: Official SDKs are available for multiple languages including Python, Java, Go, Node.js, and .NET. Install via standard package managers (pip, Maven, go get, npm, etc.) using the Alibaba Cloud SDK packages. ### Console Information - **Console URL**: https://rdsnext.console.aliyun.com/ - **Login Instructions**: Access requires an Alibaba Cloud account. Navigate to the RDS section from the main console dashboard. - **Common Navigation Patterns**: - Instance list view shows all RDS instances with status indicators - Click on any instance name to access its detailed management page - Left navigation panel provides access to all management categories (Basic Information, Accounts, Databases, Backup, Monitoring, etc.) - Action buttons at the top right of instance pages provide common operations (Restart, Delete, Modify Configuration, etc.) ## Common Questions **Q: How do I choose between API and console for my task?** A: Use the console for one-time setup, visual monitoring, and interactive operations. Use APIs/SDKs for automation, integration with applications, and repetitive tasks that need programmatic control. **Q: What should I do if I encounter API authentication errors?** A: Verify your AccessKey ID and Secret are correct and have appropriate RAM permissions for RDS operations. Ensure your system clock is synchronized as API requests include timestamps that expire quickly. **Q: How can I access the RDS console if I don't see my instances?** A: Check that you're in the correct region (instances are region-specific) and that your account has the necessary permissions. If you recently created instances, refresh the page as there might be a brief delay in display. **Q: When should I use Database Proxy versus direct instance connections?** A: Use Database Proxy for production workloads requiring high availability, read/write splitting, connection pooling, or SSL termination. Direct connections are suitable for development, testing, or simple applications without these requirements. **Q: What's the difference between troubleshooting guides and regular documentation?** A: Troubleshooting guides specifically address error conditions, failure scenarios, and diagnostic procedures. Regular documentation covers standard operational procedures and feature configurations under normal conditions. ### rocketmq # RocketMQ Skill ## I Want To Do (Common User Intents) - **Send messages with delivery guarantees (ordered, transactional, etc.)** — Send messages that require strict ordering, transactional consistency, or delayed delivery → `skills/rocketmq/intent/rocketmq-send-guarantees/SKILL.md` (4 alternative paths) - **Consume and process incoming messages** — Receive messages from topics and handle success, failure, or retry logic → `skills/rocketmq/intent/rocketmq-consume-logic/SKILL.md` (3 alternative paths) - **Configure message metadata and custom attributes** — Set tags, keys, timestamps, or user-defined properties on messages → `skills/rocketmq/intent/rocketmq-configure-attributes/SKILL.md` (3 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------------|------|-------------------------|-----------------------------------------------------------------------------| | Message Delivery | api | rocketmq-message | Sending and managing messages through RocketMQ, including transactional, ordered, and delayed message delivery. | | Message Queue Management| api | rocketmq-queue | Managing producers, consumers, and message processing lifecycle in RocketMQ. | | Message Consumption | api | rocketmq-consumption | Handling and processing consumed messages, including result actions and consumption logic. | ## Intent Routing Guide All skills are of type **api**, so route based on functional domain using these keywords: - **Message Delivery** — Keywords: `send`, `message`, `delivery`, `publish`, `topic`, `tag`, `key`, `transaction`, `ordered`, `delayed`, `async`, `oneway`, `producer` - **Message Queue Management** — Keywords: `producer`, `consumer`, `start`, `shutdown`, `subscribe`, `unsubscribe`, `client`, `instance`, `listener`, `batch`, `configure`, `metadata`, `exception`, `enum` - **Message Consumption** — Keywords: `consume`, `processing`, `action`, `result`, `acknowledge`, `retry`, `reject`, `callback` Also recognize high-level user intents (e.g., "How to send ordered messages?") and route to intent skills first—they provide goal-oriented entry points. ## General Information ### API Base URL and Authentication RocketMQ clients connect directly to broker endpoints; there is no central REST API gateway. Connection details (namesrvAddr) are configured via client settings. ### SDK Installation Use the official Apache RocketMQ client SDKs: - **Java**: Available via Maven Central (`org.apache.rocketmq:rocketmq-client`) - **Other languages**: Refer to [Apache RocketMQ official site](https://rocketmq.apache.org/) for supported clients (Go, Python, C++, etc.) Authentication and authorization (ACL) are configured at the broker level and enforced via access keys passed during client initialization. ## Frequently Asked Questions **Q: How do I choose between Message Delivery and Message Queue Management?** A: Use *Message Delivery* when sending messages. Use *Message Queue Management* when creating or managing producer/consumer instances, subscriptions, or client lifecycle. **Q: Where should I start if I want to consume messages?** A: Begin with the intent skill “Consume and process incoming messages” or the *Message Queue Management* domain to set up a consumer, then use *Message Consumption* to define processing logic. **Q: Do I need separate credentials for API access?** A: Yes—when ACL is enabled on the broker, you must provide an access key and secret during client configuration. These are not API keys in the traditional sense but broker-level credentials. **Q: Can I send delayed messages?** A: Yes—use the *Message Delivery* domain and set delay time via message properties (supported in specific delay levels, e.g., 1s to 2h). **Q: Is there a console or UI for RocketMQ?** A: Apache RocketMQ itself does not include a built-in web console. Some cloud-managed versions (e.g., Alibaba Cloud) offer dashboards, but this skill focuses exclusively on API/SDK usage. ### terraform # Terraform Skill ## 我想做什么 (Common User Intents) - **Deploy cloud infrastructure (compute, network, storage) (Provision cloud infrastructure (compute, network, storage))** — End-to-end deployment of VPCs, ECS instances, and networking → `skills/terraform/intent/terraform-provision-infrastructure/SKILL.md` (3 alternative paths) - **Configure Terraform authentication with cloud provider (Configure Terraform authentication with cloud provider)** — Set up secure AccessKey, RAM roles, or OIDC for API access → `skills/terraform/intent/terraform-manage-authentication/SKILL.md` (3 alternative paths) - **Bring existing cloud resources under Terraform management (Bring existing cloud resources under Terraform management)** — Import manually created resources like ECS or OSS into Terraform state → `skills/terraform/intent/terraform-import-resources/SKILL.md` (2 alternative paths) - **Automate Terraform execution via CI/CD pipelines (Automate Terraform execution via CI/CD pipelines)** — Integrate Terraform with GitLab CI/CD or CMP for automated provisioning → `skills/terraform/intent/terraform-automate-cd/SKILL.md` (2 alternative paths) ## Platform Overview | Capability Domain | Type | Sub Skill | Description | |-------------------|------|-----------|-------------| | Instance Management | guide | terraform-instance | Manage compute instances, clusters, applications (ECS, OpenShift, Flask), and import existing resources via console/UI workflows. | | Instance Management | cli | terraform-instance | Use Terraform CLI commands (`init`, `apply`, `import`, etc.) to manage infrastructure from terminal. | | Network Security | guide | terraform-network | Configure VPCs, load balancers (SLB), Express Connect, CEN, IPsec-VPN, and hybrid cloud networks through UI. | | Infrastructure as Code | guide | terraform-iac | Core Terraform concepts: project setup, state management, modules, variables, CI/CD, and best practices via console. | | Infrastructure as Code | api | terraform-iac | Use Terraform providers and HCL to programmatically manage cloud resources via API/SDK patterns. | | Infrastructure as Code | cli | terraform-iac | Install Terraform locally and use CLI for development, plugin management, and execution. | | Infrastructure as Code | troubleshooting | terraform-iac | Diagnose and resolve common issues: state conflicts, auth failures, syntax errors, drift, and dependency cycles. | | Identity Authentication | api | terraform-auth | Configure secure authentication (AccessKey, RAM roles, STS, OIDC) for Terraform providers via code. | | Identity Management | guide | terraform-identity | Manage AccessKeys, credentials, and least-privilege policies across multi-account environments in console. | | Code Generation | troubleshooting | terraform-codegen | Troubleshoot AI-generated Terraform code from tools like Terraform RDS Copilot (syntax, hallucination, accuracy). | | Security Monitoring | guide | terraform-security | View security posture, compliance reports, vulnerabilities, and remediation recommendations in dashboard. | ## Intent Routing Guide Route user queries based on **intent type** and **keywords**: - **High-level user goals (e.g., "How do I deploy a VPC and ECS?", "Import existing bucket")** → **Intent skills** (recommended starting point) - **API/SDK/code/programming/HCL/REST/provider/resource/data source** → **api** skills - **Console/dashboard/UI/page/wizard/click/settings** → **guide** skills - **Command/CLI/terminal/flag/option/shell/terraform init/apply/plan** → **cli** skills - **Error/troubleshoot/FAQ/diagnose/failure/fix/problem/debug/log** → **troubleshooting** skills Domain-specific routing keywords: - **Instance Management**: deploy, create, manage, configure, setup, initialize, provision, automate, cluster, application, web, ECS, OpenShift, Flask, distributed, account, baseline, import, existing, resources - **Network Security**: VPC, load balancer, SLB, Express Connect, CEN, IPsec, VPN, SD-WAN, hybrid, multicloud, cross-region, branch, connectivity, network, security, architecture, topology, gateway, route, subnet, ACL, firewall - **Infrastructure as Code**: Terraform, IaC, infrastructure, code, best practices, automation, project, initialize, setup, configuration, state, module, variable, output, dependency, lifecycle, versioning, collaboration, CI/CD, pipeline, workflow, debug, Explorer - **Identity Authentication**: authentication, identity, credential, AccessKey, SecretKey, RAM, STS, role, assume role, OIDC, token, signature, security, permission, policy, authorization, provider config, profile, environment variable, credential file, chain, fallback, multi-account, federation - **Identity Management**: AccessKey, credential, rotation, management, multi-account, automation, security, least privilege, RAM, user, group, policy, role, STS, temporary token, secret, vault, key management, audit, compliance, governance, centralized, delegation - **Code Generation**: Copilot, AI, generation, code suggestion, prompt, LLM, RDS, database, template, syntax error, invalid resource, unsupported attribute, model limitation, output format, debug generation, retry, context window, accuracy, hallucination - **Security Monitoring**: security, monitoring, status, compliance, vulnerability, risk, assessment, scan, report, alert, incident, threat, posture, configuration, hardening, benchmark, CIS, audit, log, SIEM, SOC, remediation, recommendation ## General Information ### API / SDK Information - **Authentication**: Use AccessKey pairs, RAM roles, STS tokens, or OIDC federation. Credentials can be provided via environment variables (`ALICLOUD_ACCESS_KEY`, `ALICLOUD_SECRET_KEY`), shared credential files, or provider blocks in HCL. - **Providers**: Terraform interacts with cloud services via official or community providers (e.g., `alicloud` provider for Alibaba Cloud). - **State Backend**: Remote state can be stored in Alibaba Cloud OSS with locking via Table Store (OTS). - **HCL Syntax**: Infrastructure is defined in HashiCorp Configuration Language (HCL) using `resource`, `data`, `variable`, and `output` blocks. ### Console / UI Information - **Access**: Log in to the cloud console to navigate Terraform-related services (e.g., Resource Orchestration Service, Security Center, VPC console). - **Workflows**: Use wizards, forms, and dashboards to deploy templates, view security status, manage identities, or monitor infrastructure. - **Terraform Explorer**: A built-in tool for debugging and validating configurations directly in the console. ## Frequently Asked Questions **Q1: When should I use the API/cli vs. the console (guide)?** Use **API/cli** for automation, version-controlled infrastructure, CI/CD integration, and programmatic control. Use the **console/guide** for initial exploration, one-off tasks, visual debugging (Terraform Explorer), or managing security/compliance dashboards. **Q2: How do I authenticate Terraform with Alibaba Cloud?** You can use AccessKey pairs (for development), RAM roles (for ECS instances), or OIDC (for CI/CD). Store credentials securely—avoid hardcoding. See `skills/terraform/api/terraform-auth/SKILL.md` for details. **Q3: What if I get a “state lock” or “drift detected” error?** These are common state issues. Use `terraform refresh` to reconcile drift, and ensure only one process modifies state at a time. For persistent locks, check backend (OSS+OTS) configuration. See troubleshooting skill for resolution steps. **Q4: Can I import resources I created manually into Terraform?** Yes. Use `terraform import` (CLI) or the “Import Existing Resources” guide in the console. Supported for most resource types (ECS, OSS, VPC, etc.). **Q5: Why is my AI-generated Terraform code not working?** AI tools like Copilot may produce syntactically valid but logically incorrect HCL. Validate against provider documentation, check attribute names, and test in non-production environments. See `skills/terraform/troubleshooting/terraform-codegen/SKILL.md`.