All Products
Search
Document Center

ApsaraMQ for Kafka:Prerequisites for sink connectors

Last Updated:Mar 11, 2026

Before you create a sink connector in ApsaraMQ for Kafka, complete the following preparations.

Activate dependent services

Activate the following services before you create a sink connector:

ServiceActivation guideNotes
EventBridgeActivate EventBridge and grant permissions to a RAM userGrant the required Resource Access Management (RAM) permissions during activation
Function ComputeActivate Function ComputeNot required for Simple Log Service sink connectors
Destination serviceActivate separatelyFor example, activate Tablestore if you plan to create a Tablestore sink connector

Grant permissions

Alibaba Cloud account

Follow the on-screen instructions in the ApsaraMQ for Kafka console to grant the required permissions.

RAM user

Attach the following policies to the RAM user:

PolicyPurpose
AliyunRAMFullAccessManage cloud service licenses
AliyunKafkaFullAccessManage ApsaraMQ for Kafka resources
AliyunFCFullAccessManage Function Compute resources
AliyunEventBridgeFullAccessManage EventBridge resources
Policy for the destination serviceManage destination service resources (for example, Tablestore)

If you use extended features, attach additional policies:

FeatureRequired policyPurpose
Access the destination service through a Virtual Private Cloud (VPC)AliyunVPCFullAccessManage VPC resources
View Function Compute execution logsAliyunLogFullAccessManage Simple Log Service resources

Prepare ApsaraMQ for Kafka resources

Make sure the following resources are ready: