Before you create a sink connector in ApsaraMQ for Kafka, complete the following preparations.
Activate dependent services
Activate the following services before you create a sink connector:
| Service | Activation guide | Notes |
|---|---|---|
| EventBridge | Activate EventBridge and grant permissions to a RAM user | Grant the required Resource Access Management (RAM) permissions during activation |
| Function Compute | Activate Function Compute | Not required for Simple Log Service sink connectors |
| Destination service | Activate separately | For example, activate Tablestore if you plan to create a Tablestore sink connector |
Grant permissions
Alibaba Cloud account
Follow the on-screen instructions in the ApsaraMQ for Kafka console to grant the required permissions.
RAM user
Attach the following policies to the RAM user:
| Policy | Purpose |
|---|---|
AliyunRAMFullAccess | Manage cloud service licenses |
AliyunKafkaFullAccess | Manage ApsaraMQ for Kafka resources |
AliyunFCFullAccess | Manage Function Compute resources |
AliyunEventBridgeFullAccess | Manage EventBridge resources |
| Policy for the destination service | Manage destination service resources (for example, Tablestore) |
If you use extended features, attach additional policies:
| Feature | Required policy | Purpose |
|---|---|---|
| Access the destination service through a Virtual Private Cloud (VPC) | AliyunVPCFullAccess | Manage VPC resources |
| View Function Compute execution logs | AliyunLogFullAccess | Manage Simple Log Service resources |
Prepare ApsaraMQ for Kafka resources
Make sure the following resources are ready:
(Optional) A group on the instance. You can create a group before or during sink connector creation.