Key Management Service:RAM secret plug-in

Alibaba Cloud SDK for Java (V2.0)

--add-opens java.base/java.lang=ALL-UNNAMED

java --add-opens java.base/java.lang=ALL-UNNAMED -jar your-application.jar

Installation

Add the plug-in to your pom.xml. Install the latest version — see the source repository for the current release.

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-tea-openapi-sdk-managed-credentials-provider</artifactId>
    <version>[1.3.5,]</version>
</dependency>

Usage example: call ECS DescribeInstances

Add the ECS SDK dependency:

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>ecs20140526</artifactId>
    <version>7.1.0</version>
</dependency>

Then create a proxy client and call the API:

import com.aliyun.ecs20140526.Client;
import com.aliyun.ecs20140526.models.DescribeInstancesResponse;
import com.aliyun.kms.secretsmanager.plugin.tea.openapi.ProxyClientCreator;
import com.google.gson.Gson;

public class AliyunTeaOpenApiProviderSample {

    public static void main(String[] args) throws Exception {
        // The name of the RAM secret you created in KMS.
        String secretName = "your-secret-name";

        /*
          If the application cannot read the default configuration file
          (managed_credentials_providers.properties) from the classpath or the
          executable JAR file, or if you need a custom file name, uncomment the
          following line. The file is resolved in this order:
          1. If "your-config-name" is an absolute path, that file is read.
          2. If "your-config-name" is a filename only, the classpath is checked
             first, then the executable JAR file.
        */
        //ConfigLoader.setConfigName("your-config-name");

        // Configure the OpenAPI client endpoint.
        com.aliyun.teaopenapi.models.Config config = new com.aliyun.teaopenapi.models.Config();
        config.endpoint = "your-product-endpoint"; // Replace with the actual service endpoint.

        // Create a proxy client backed by the RAM secret plug-in.
        Client client = ProxyClientCreator.createClient(config, Client.class, secretName);

        // Call the cloud service API.
        com.aliyun.ecs20140526.models.DescribeInstancesRequest request =
            new com.aliyun.ecs20140526.models.DescribeInstancesRequest();
        request.setRegionId("cn-hangzhou");
        DescribeInstancesResponse response = client.describeInstances(request);

        System.out.println(new Gson().toJson(response.getBody()));
    }
}

Alibaba Cloud SDK for Java (V1.0)

Installation

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-sdk-core</artifactId>
    <version>[4.3.2,5.0.0]</version>
</dependency>
<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-sdk-core-managed-credentials-provider</artifactId>
    <version>[1.3.1,]</version>
</dependency>

Install the latest version. See the source repository for the current release.

Usage example: call ECS DescribeInstanceStatus

Add the ECS SDK dependency:

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-sdk-ecs</artifactId>
    <version>5.11.20</version>
</dependency>

Then create a proxy client and call the API:

import com.aliyuncs.IAcsClient;
import com.aliyuncs.ecs.model.v20140526.DescribeInstanceStatusRequest;
import com.aliyuncs.ecs.model.v20140526.DescribeInstanceStatusResponse;
import com.aliyun.kms.secretsmanager.plugin.sdkcore.ProxyAcsClient;
import com.aliyuncs.exceptions.ClientException;
import com.aliyuncs.exceptions.ServerException;

public class AliyunSdkProviderSample {
    public static void main(String[] args) {
        String secretName = "******";

        /*
          To use a custom configuration file name, uncomment the following line.
          File resolution order:
          1. Absolute path — read that file directly.
          2. Filename only — check the classpath, then the executable JAR file.
        */
        //ConfigLoader.setConfigName("your-config-name");

        // Create a proxy ACS client backed by the RAM secret plug-in.
        IAcsClient client = null;
        try {
            client = new ProxyAcsClient("<the regionId of ECS>", secretName);
        } catch (ClientException e) {
            e.printStackTrace();
        }

        // Call the ECS API.
        DescribeInstanceStatusRequest request = new DescribeInstanceStatusRequest();
        try {
            DescribeInstanceStatusResponse response = client.getAcsResponse(request);
        } catch (ServerException e) {
            e.printStackTrace();
        } catch (ClientException e) {
            e.printStackTrace();
        }

        // Release plug-in resources.
        client.shutdown();
    }
}

OSS SDK for Java

Installation

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-sdk-core</artifactId>
    <version>4.5.17</version>
</dependency>
<dependency>
    <groupId>com.aliyun.oss</groupId>
    <artifactId>aliyun-sdk-oss</artifactId>
    <version>[2.1.0,3.10.2]</version>
    <exclusions>
        <exclusion>
            <groupId>com.aliyun</groupId>
            <artifactId>aliyun-java-sdk-kms</artifactId>
        </exclusion>
    </exclusions>
</dependency>
<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-sdk-oss-managed-credentials-provider</artifactId>
    <version>[1.3.1,]</version>
</dependency>

Install the latest version. See the source repository for the current release.

Usage example: call OSS listBuckets

import com.aliyun.kms.secretsmanager.plugin.oss.ProxyOSSClientBuilder;
import com.aliyun.oss.OSS;
import com.aliyun.oss.model.Bucket;

import java.util.List;

public class OssProviderSample {

    public static void main(String[] args) throws Exception {
        String secretName = "******";
        String endpoint = "https://oss-cn-hangzhou.aliyuncs.com";

        /*
          To use a custom configuration file name, uncomment the following line.
          File resolution order:
          1. Absolute path — read that file directly.
          2. Filename only — check the classpath, then the executable JAR file.
        */
        //ConfigLoader.setConfigName("your-config-name");

        // Create a proxy OSS client backed by the RAM secret plug-in.
        OSS ossClient = new ProxyOSSClientBuilder().build(endpoint, secretName);

        // Call the OSS API.
        List<Bucket> buckets = ossClient.listBuckets();
        for (Bucket bucket : buckets) {
            if (bucket != null) {
                // Your business logic goes here.
            }
        }

        // Release plug-in resources.
        ossClient.shutdown();
    }
}