Elastic Compute Service:Instance RAM roles

Python

1. Install the Credentials tool.

   To retrieve temporary identity credentials in security hardening mode, the version of alibabacloud_credentials must be 0.3.6 or later.

   pip install alibabacloud_credentials

2. Configure the RAM role of the ECS instance as the access credential.

   from alibabacloud_credentials.client import Client as CredClient
   from alibabacloud_credentials.models import Config as CredConfig
   
   credentialsConfig = CredConfig(
   	type='ecs_ram_role',
   	# Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
   	role_name='<role_name>',
   	# Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in NAT mode (IMDSv1).
   	disable_imds_v1=False,
   )
   credentialsClient = CredClient(credentialsConfig)
   

   For more information and invocation examples, see Method 5: ECS instance RAM role.

Java

1. Add the credentials dependency.

   To retrieve temporary identity credentials in security hardening mode, the version of credentials-java must be 0.3.10 or later.

   <!-- https://mvnrepository.com/artifact/com.aliyun/credentials-java -->
   <dependency>
      <groupId>com.aliyun</groupId>
      <artifactId>credentials-java</artifactId>
      <version>0.3.10</version>
   </dependency>

2. You can configure the ECS instance to use its instance RAM role as the access credential.

   import com.aliyun.credentials.Client;
   import com.aliyun.credentials.models.Config;
   
   public class DemoTest {
       public static void main(String[] args) throws Exception {
           Config credentialConfig = new Config();
           credentialConfig.setType("ecs_ram_role");
           // Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
           credentialConfig.setRoleName("<RoleName>");
           // Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in NAT mode (IMDSv1).
           credentialConfig.setDisableIMDSv1(true);
           Client credentialClient = new Client(credentialConfig);
       }
   }

   For more information and invocation examples, see Method 5: ECS instance RAM role.

Go

1. Install the Credentials tool.

   To retrieve temporary identity credentials in security hardening mode, the version of credentials-go must be 1.3.10 or later.

   • Use go get to download and install the tool.

     go get -u github.com/aliyun/credentials-go

   • If you use dep to manage dependencies, run the following command.

     dep ensure -add github.com/aliyun/credentials-go

2. Configure the instance RAM role of the ECS instance as the access credential.

   package main
   
   import (
   	"fmt"
   	"github.com/aliyun/credentials-go/credentials"
   )
   
   func _main(args []*string) {
   	credentialsConfig := new(credentials.Config).
   		SetType("ecs_ram_role").
   		// Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
   		SetRoleName("<RoleName>").
   		// Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in NAT mode (IMDSv1).
   		SetDisableIMDSv1(true)
   	credentialClient, err := credentials.NewCredential(credentialsConfig)
   	if err != nil {
   		panic(err)
   	}
   }

   For more information and invocation examples, see Method 5: Use an ECS instance RAM role.

Node.js

1. Install the Credentials tool.

   To retrieve temporary identity credentials in security hardening mode, the version of credentials must be 2.3.1 or later.

   npm install @alicloud/credentials

2. Configure the instance RAM role of the ECS instance as the access credential.

   const Credential = require('@alicloud/credentials');
   
   const credentialsConfig = new Credential.Config({
     type: 'ecs_ram_role',
     // Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
     roleName: '<RoleName>',
     // Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in NAT mode (IMDSv1).
     disableIMDSv1: true,
   });
   const cred = new Credential.default(credentialsConfig);
   

   For more information and invocation examples, see Method 5: Use an ECS instance RAM role.

.NET

1. Install the Credentials tool.

   To retrieve temporary identity credentials in security hardening mode, the version of credentials must be 1.4.2 or later.

   dotnet add package Aliyun.Credentials

2. Configure the instance RAM role of the ECS instance as the access credential.

   using Aliyun.Credentials.Models;
   
   namespace credentials_demo
   {
       class Program
       {
           static void Main(string[] args)
           {
               var config = new Config()
               {
                   Type = "ecs_ram_role",
                 	// Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
                   RoleName = "<RoleName>",
                   // Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in NAT mode (IMDSv1).
                   DisableIMDSv1 = true
               }
           }
       }
   }

   For more information and invocation examples, see Method 5: Use an ECS instance RAM role.

PHP

1. Install the Credentials tool.

   To retrieve temporary identity credentials in security hardening mode, the version of credentials must be 1.2.0 or later.

   composer require alibabacloud/credentials

2. Configure the ECS instance to use its instance RAM role as the access credential.

   <?php
   
   use AlibabaCloud\Credentials\Credential;
   use AlibabaCloud\Credentials\Credential\Config;
   
   $credConfig = new Config([
       'type' => 'ecs_ram_role',
       // Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
       'roleName' => '<RoleName>',
       // Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in NAT mode (IMDSv1).
       'disableIMDSv1' => true,
   ]);

   For more information, see Method 5: Use an ECS instance RAM role.