Realtime Compute for Apache Flink:Manage keys

Prerequisites

Your account has permissions of the editor role for key management. For more information about how to grant permissions to an Alibaba Cloud account or a RAM user, see Grant permissions to an account.

Limits

• You can only add and delete keys. You cannot view or change the values of keys.

• You can reference keys only in the WITH clause of the CREATE TEMPORARY TABLE statement. If you reference keys in the WITH clause of the CREATE TABLE statement, the table that you create cannot be used.

Precautions

If you delete an existing key, the SQL draft that you develop may fail to be published or you need to republish the deployment for the draft. Proceed with caution. A published draft is not affected if you delete an existing key.

Add a key

1. Log on to the Realtime Compute for Apache Flink console. On the Fully Managed Flink tab, find the workspace that you want to manage and click Console in the Actions column.

2. In the left-side navigation pane, click Security. On the Security page, click the Secret Values tab.

3. On the Secret Values tab, click Add Secret Value. In the Add Secret Value dialog box, configure the Secret Name and Secret Value parameters.

   Important

   The value of the Secret Value parameter is case-sensitive.

4. Click OK.

Reference a key

After you add a key, you can reference the key in the SQL editor of a draft.

1. In the left-side navigation pane, click SQL Editor.

2. In the Drafts pane of the SQL Editor page, double-click the desired draft. Then, write code in the SQL editor of the draft to reference the key.

   To reference a key, write code in the ${secret_values.Key name format. Sample code:

   CREATE TEMPORARY table datahub_source(
     name VARCHAR
   ) WITH (
     'connector' = 'datagen'
   );
   
   CREATE TEMPORARY table datahub_sink(
     name  VARCHAR  
   ) WITH (
     'connector'='datahub',
     'endpoint'='<yourEndpoint>',
     'project'='<yourProject>',
     'topic'='<yourTopic>',
     'accessId'='<yourAccessId>',
     'accessKey'='${secret_values.test_ak}'
   );
   
   INSERT INTO datahub_sink
   SELECT 
     LOWER(name)
   from datahub_source;