You can access Alibaba Cloud services such as Object Storage Service (OSS), Data Lake Formation (DLF), Tablestore, and Hologres from MaxCompute. Access is supported through MaxCompute SQL, user-defined functions (UDFs), Spark, MapReduce (MR), PyODPS/Mars, external tables, and data lakehouse architectures. Connections are established using the internal network endpoints provided for these Alibaba Cloud services.
Usage notes
Supported top-level domain names: aliyun.com, amap.com, dingtalk.com, alicloudapi.com, cainiao.com, alicdn.com, taobao.com, alibaba.com, alipaydev.com, and alibabadns.com.
IPv6 addresses cannot be configured. The number of public IP addresses is not limited.
If an external network address fails automatic verification, delete the address and resubmit it. If the address is still required, you can submit a request form to configure the external network address. For more information, see Network activation process.
Access OSS and Tablestore using external tables
When you create an external table for OSS or Tablestore, you can access the service through its internal network endpoint.
For OSS, find the internal endpoint for your region in the Internal Endpoint column of the Regions and endpoints document.
For Tablestore, find the internal endpoint for your region by checking the Classic Network address in Service endpoints. The endpoints for a Tablestore instance include four network types:
Classic Network format:
https://<instance-name>.ap-<region>.ots-internal.aliyuncs.comPublic Network format:
https://<instance-name>.ap-<region>.ots.aliyuncs.comVPC format:
https://<instance-name>.ap-<region>.vpc.tablestore.aliyuncs.com
You can find the endpoint for your network type in the Instance Endpoint section on the instance product page.
For another example of using external tables, see Hologres external tables.
Access OSS and Tablestore using UDFs
UDFs can only access OSS or Tablestore through public endpoints. Before you can use a public endpoint, you must add it to the MaxCompute whitelist.
MaxCompute prohibits SQL UDFs from directly accessing OSS over the internal network. If you require this access, see Changes to internal network access to OSS from MaxCompute SQL UDF, Spark, and MaxFrame jobs.
To add an endpoint to the whitelist, follow these steps:
Add the public endpoints of OSS and Tablestore to the MaxCompute whitelist.
Submit a ticket to add the public endpoint of the target OSS or Tablestore service to the MaxCompute whitelist.
Find the public endpoint for your service and region:
For OSS, see the Public Endpoint column in Regions and endpoints.
For Tablestore, see the Public network address in Service endpoints.
Classic Network format:
https://<instance-name>.ap-<region>.ots-internal.aliyuncs.comPublic Network format:
https://<instance-name>.ap-<region>.ots.aliyuncs.comVPC format:
https://<instance-name>.ap-<region>.vpc.tablestore.aliyuncs.com
Use the public endpoint to access OSS or Tablestore.
For a Spark on MaxCompute example, see Configure a network whitelist.