Elastic Compute Service:Instance RAM roles

Python

1. Install the Credentials tool.

   Note

   If you obtain temporary access credentials in security hardening mode, the version of the alibabacloud_credentials package must be 0.3.6 or later.

   pip install alibabacloud_credentials

2. Configure the ECS instance to use the instance RAM role to obtain temporary access credentials.

   from alibabacloud_credentials.client import Client as CredClient
   from alibabacloud_credentials.models import Config as CredConfig
   
   credentialsConfig = CredConfig(
   	type='ecs_ram_role',
   	# Optional. Specify the name of the instance RAM role. If you do not specify this parameter, the system automatically obtains the name of the instance RAM role. To reduce the number of requests, we recommend that you specify this parameter. You can configure the name of the instance RAM role in the ALIBABA_CLOUD_ECS_METADATA environment variable and reference the environment variable.
   	role_name='<role_name>',
   	# Optional. Default value: False. True: forcefully obtains data in security hardening mode. False: attempts to obtain data in security hardening mode and then in normal mode (IMDSv1) if data obtaining fails in security hardening mode.
   	enable_imds_v1=True,
   )
   credentialsClient = CredClient(credentialsConfig)
   

   For more information and examples, see Method 5: Use the RAM role of an ECS instance.

Java

1. Add the dependencies of credentials.

   Note

   If you obtain temporary access credentials in security hardening mode, the version of the credentials-java package must be 0.3.10 or later.

   <!-- https://mvnrepository.com/artifact/com.aliyun/credentials-java -->
   <dependency>
       <groupId>com.aliyun</groupId>
       <artifactId>credentials-java</artifactId>
       <version>0.3.10</version>
   </dependency>

2. Configure the ECS instance to use the instance RAM role to obtain temporary access credentials.

   import com.aliyun.credentials.Client;
   import com.aliyun.credentials.models.Config;
   
   public class DemoTest {
       public static void main(String[] args) throws Exception {
           Config credentialConfig = new Config();
           credentialConfig.setType("ecs_ram_role");
           # Optional. Specify the name of the instance RAM role. If you do not specify this parameter, the system automatically obtains the name of the instance RAM role. To reduce the number of requests, we recommend that you specify this parameter. You can configure the name of the instance RAM role in the ALIBABA_CLOUD_ECS_METADATA environment variable and reference the environment variable.
           credentialConfig.setRoleName("<RoleName>");
           # Optional. Default value: false. true: forcefully obtains data in security hardening mode. false: attempts to obtain data in security hardening mode and then in normal mode (IMDSv1) if data obtaining fails in security hardening mode.
           credentialConfig.setDisableIMDSv1(true);
           Client credentialClient = new Client(credentialConfig);
       }
   }

   For more information and examples, see Method 5: Use the RAM role of an ECS instance.

Go

1. Install the Credentials tool.

   Note

   If you obtain temporary access credentials in security hardening mode, the version of the credentials-go package must be 1.3.10 or later.

   • Run the go get command to download and install the Credentials tool.

     go get -u github.com/aliyun/credentials-go

   • If you use the dep utility to manage dependencies, run the following command:

     dep ensure -add github.com/aliyun/credentials-go

2. Configure the ECS instance to use the instance RAM role to obtain temporary access credentials.

   package main
   
   import (
   	"fmt"
   	"github.com/aliyun/credentials-go/credentials"
   )
   
   func _main(args []*string) {
   	credentialsConfig := new(credentials.Config).
   		SetType("ecs_ram_role").
   		// Optional. Specify the name of the instance RAM role. If you do not specify this parameter, the system automatically obtains the name of the instance RAM role. To reduce the number of requests, we recommend that you specify this parameter. You can configure the name of the instance RAM role in the ALIBABA_CLOUD_ECS_METADATA environment variable and reference the environment variable.
   		SetRoleName("<RoleName>").
   		// Optional. Default value: false. true: forcefully obtains data in security hardening mode. false: attempts to obtain data in security hardening mode and then in normal mode (IMDSv1) if data obtaining fails in security hardening mode.
   		SetDisableIMDSv1(true)
   	credentialClient, err := credentials.NewCredential(credentialsConfig)
   	if err != nil {
   		panic(err)
   	}
   }

   For more information and examples, see Method 5: Use the RAM role of an ECS instance.

Node.js

1. Install the Credentials tool.

   Note

   If you obtain temporary access credentials in security hardening mode, the version of the credentials package must be 2.3.1 or later.

   npm install @alicloud/credentials

2. Configure the ECS instance to use the instance RAM role to obtain temporary access credentials.

   const Credential = require('@alicloud/credentials');
   
   const credentialsConfig = new Credential.Config({
     type: 'ecs_ram_role',
     // Optional. Specify the name of the instance RAM role. If you do not specify this parameter, the system automatically obtains the name of the instance RAM role. To reduce the number of requests, we recommend that you specify this parameter. You can configure the name of the instance RAM role in the ALIBABA_CLOUD_ECS_METADATA environment variable and reference the environment variable.
     roleName: '<RoleName>',
     // Optional. Default value: false. true: forcefully obtains data in security hardening mode. false: attempts to obtain data in security hardening mode and then in normal mode (IMDSv1) if data obtaining fails in security hardening mode.
     disableIMDSv1: true,
   });
   const cred = new Credential.default(credentialsConfig);
   

   For more information and examples, see Method 5: Use the RAM role of an ECS instance.

.NET

1. Install the Credentials tool.

   Note

   If you obtain temporary access credentials in security hardening mode, the version of the credentials package must be 1.4.2 or later.

   dotnet add package Aliyun.Credentials

2. Configure the ECS instance to use the instance RAM role to obtain temporary access credentials.

   using Aliyun.Credentials.Models;
   
   namespace credentials_demo
   {
       class Program
       {
           static void Main(string[] args)
           {
               var config = new Config()
               {
                   Type = "ecs_ram_role",
                 	// Optional. Specify the name of the instance RAM role. If you do not specify this parameter, the system automatically obtains the name of the instance RAM role. To reduce the number of requests, we recommend that you specify this parameter. You can configure the name of the instance RAM role in the ALIBABA_CLOUD_ECS_METADATA environment variable and reference the environment variable.
                   RoleName = "<RoleName>", 
                   // Optional. Default value: false. true: forcefully obtains data in security hardening mode. false: attempts to obtain data in security hardening mode and then in normal mode (IMDSv1) if data obtaining fails in security hardening mode.
                   DisableIMDSv1 = true
               }
           }
       }
   }

   For more information and examples, see Method 5: Use the RAM role of an ECS instance.

PHP

1. Install the Credentials tool.

   Note

   If you obtain temporary access credentials in security hardening mode, the version of the credentials package must be 1.2.0 or later.

   composer require alibabacloud/credentials

2. Configure the ECS instance to use the instance RAM role to obtain temporary access credentials.

   <?php
   
   use AlibabaCloud\Credentials\Credential;
   use AlibabaCloud\Credentials\Credential\Config;
   
   $credConfig = new Config([
       'type' => 'ecs_ram_role',
       // Optional. Specify the name of the instance RAM role. If you do not specify this parameter, the system automatically obtains the name of the instance RAM role. To reduce the number of requests, we recommend that you specify this parameter. You can configure the name of the instance RAM role in the ALIBABA_CLOUD_ECS_METADATA environment variable and reference the environment variable.
       'roleName' => '<RoleName>',
       // Optional. Default value: false. true: forcefully obtains data in security hardening mode. false: attempts to obtain data in security hardening mode and then in normal mode (IMDSv1) if data obtaining fails in security hardening mode.
       'disableIMDSv1' => true,
   ]);

   For more information and examples, see Method 5: Use the RAM role of an ECS instance.