Key Management Service:Plug-in de secret RAM

credentials_type=ecs_ram_role
## The name of the ECS RAM role.
credentials_role_name=#credentials_role_name#
## The region of the associated KMS service.
cache_client_region_id=[{"regionId":"#regionId#"}]

## The type of the access credential.
credentials_type=client_key

## The password for reading the ClientKey: supports reading from an environment variable or a file.
## The credential password: the credential password (ClientKeyPassword) saved when creating the Client Key in the AAP.
client_key_password_from_env_variable=#your client key private key password environment variable name#
client_key_password_from_file_path=#your client key private key password file path#

# The path to the Client Key file.
# The Client Key file: the application identity credential content (ClientKeyContent) downloaded when creating the Client Key in the AAP.
# The default filename after download is ClientKey_******.json.
client_key_private_key_path=#your client key private key file path#

## The region of the associated KMS service.
cache_client_region_id=[{"regionId":"#regionId#"}]

Alibaba Cloud SDK for Java (V2.0)

--add-opens java.base/java.lang=ALL-UNNAMED

java --add-opens java.base/java.lang=ALL-UNNAMED -jar your-application.jar

1. Ajoutez le plug-in de secrets RAM à votre projet via Maven.

   <dependency>
       <groupId>com.aliyun</groupId>
       <artifactId>aliyun-java-tea-openapi-sdk-managed-credentials-provider</artifactId>
       <version>[1.3.5,]</version>
   </dependency>

   Remarque

   Nous vous recommandons d'installer la dernière version du plug-in. Pour plus d'informations, consultez le code source.

2. Obtenez le client Alibaba Cloud SDK for Java et appelez les services cloud. L'exemple suivant utilise l'API DescribeInstances d'ECS.

   1. Ajoutez la dépendance ecs20140526 pour le serveur cloud ECS.

      <dependency>
          <groupId>com.aliyun</groupId>
          <artifactId>ecs20140526</artifactId>
          <version>7.1.0</version>
      </dependency>

   2. Appelez l'opération d'API DescribeInstances.

      import com.aliyun.ecs20140526.Client;
      import com.aliyun.ecs20140526.models.DescribeInstancesResponse;
      import com.aliyun.kms.secretsmanager.plugin.tea.openapi.ProxyClientCreator;
      import com.google.gson.Gson;
      
      public class AliyunTeaOpenApiProviderSample {
      
          public static void main(String[] args) throws Exception {
              // Step 1: Specify the name of the hosted secret (the secret name created in KMS).
              String secretName = "your-secret-name";
      
              /*
                If the application cannot read the default configuration file (managed_credentials_providers.properties)
                from the classpath and executable JAR file,
                or if you need to customize the configuration file name, you can call the following code to set a custom configuration file
                and read it in the following order:
                1. "your-config-name" absolute path + filename, which reads the file under the absolute path.
                2. "your-config-name" filename only, which first reads the configuration file under the classpath, then the configuration file in the executable JAR file.
              */
              //ConfigLoader.setConfigName("your-config-name");
      
              // Step 2: Configure the OpenAPI client.
              com.aliyun.teaopenapi.models.Config config = new com.aliyun.teaopenapi.models.Config();
              config.endpoint = "your-product-endpoint"; // Replace with the actual cloud service endpoint.
      
              // Step 3: Create a client instance.
              Client client = ProxyClientCreator.createClient(config, Client.class, secretName);
      
              // Step 4: Call the cloud service API.
              com.aliyun.ecs20140526.models.DescribeInstancesRequest request = new com.aliyun.ecs20140526.models.DescribeInstancesRequest();
              request.setRegionId("cn-hangzhou"); // Set the region ID.
              DescribeInstancesResponse response = client.describeInstances(request);
      
              // Step 5: Print the result.
              System.out.println(new Gson().toJson(response.getBody()));
          }
      }

Alibaba Cloud SDK for Java (V1.0)

1. Ajoutez le plug-in de secrets RAM à votre projet via Maven.

   <dependency>
      <groupId>com.aliyun</groupId>
      <artifactId>aliyun-java-sdk-core</artifactId>
      <version>[4.3.2,5.0.0]</version>
   </dependency>
   <dependency>
     <groupId>com.aliyun</groupId>
     <artifactId>aliyun-java-sdk-core-managed-credentials-provider</artifactId>
     <version>[1.3.1,]</version>
   </dependency>

   Remarque

   Nous vous recommandons d'installer la dernière version du plug-in. Pour plus d'informations, consultez le code source.

2. Obtenez le client Alibaba Cloud SDK for Java et appelez les services cloud.

   L'exemple suivant utilise l'API DescribeInstanceStatus d'ECS.

   1. Ajoutez la dépendance aliyun-java-sdk-ecs pour le serveur cloud ECS.

      <dependency>
        <groupId>com.aliyun</groupId>
        <artifactId>aliyun-java-sdk-ecs</artifactId>
        <version>5.11.20</version>
      </dependency>

   2. Appelez l'opération d'API DescribeInstanceStatus.

      import com.aliyuncs.IAcsClient;
      import com.aliyuncs.ecs.model.v20140526.DescribeInstanceStatusRequest;
      import com.aliyuncs.ecs.model.v20140526.DescribeInstanceStatusResponse;
      import com.aliyun.kms.secretsmanager.plugin.sdkcore.ProxyAcsClient;
      import com.aliyuncs.exceptions.ClientException;
      import com.aliyuncs.exceptions.ServerException;
      
      public class AliyunSdkProviderSample {
          public static void main(String[]args) {
              String secretName="******";
              /*
                If the application cannot read the default configuration file (managed_credentials_providers.properties)
                from the classpath and executable JAR file,
                or if you need to customize the configuration file name, you can call the following code to set a custom configuration file
                and read it in the following order:
                1. "your-config-name" absolute path + filename, which reads the file under the absolute path.
                2. "your-config-name" filename only, which first reads the configuration file under the classpath, then the configuration file in the executable JAR file.
              */
              //ConfigLoader.setConfigName("your-config-name");
              
              // 1. Obtain the ACSClient by using aliyun-java-sdk-managed-credentials-provider.
              IAcsClient client = null;
              try {
                  client = new ProxyAcsClient("<the regionId of ECS>", secretName);
              } catch (ClientException e) {
                   e.printStackTrace();
               }
              // 2. Call the ECS OpenAPI to implement business functions.
              DescribeInstanceStatusRequest request = new DescribeInstanceStatusRequest();
              DescribeInstanceStatusResponse response;
              try {
                   response = client.getAcsResponse(request);
              } catch (ServerException e) {
                   e.printStackTrace();
               } catch (ClientException e) {
                   e.printStackTrace();
               }
              // 3. Release the plug-in resources by closing the client.
              client.shutdown();
          }
      }

Utilisation dans le SDK OSS

1. Ajoutez le plug-in de secrets RAM à votre projet via Maven.

   <dependency>
       <groupId>com.aliyun</groupId>
       <artifactId>aliyun-java-sdk-core</artifactId>
       <version>4.5.17</version>
   </dependency>
   <dependency>
   <groupId>com.aliyun.oss</groupId>
   <artifactId>aliyun-sdk-oss</artifactId>
   <version>[2.1.0,3.10.2]</version>
   <exclusions>
       <exclusion>
           <groupId>com.aliyun</groupId>
           <artifactId>aliyun-java-sdk-kms</artifactId>
       </exclusion>
   </exclusions>
   </dependency>
   <dependency>
   <groupId>com.aliyun</groupId>
   <artifactId>aliyun-sdk-oss-managed-credentials-provider</artifactId>
   <version>[1.3.1,]</version>
   </dependency>

   Remarque

   Nous vous recommandons d'installer la dernière version du plug-in. Pour plus d'informations, consultez le code source.

2. Obtenez le client OSS Java SDK et appelez les services cloud. L'exemple suivant utilise la méthode listBuckets d'OSS.

   import com.aliyun.kms.secretsmanager.plugin.oss.ProxyOSSClientBuilder;
   import com.aliyun.oss.OSS;
   import com.aliyun.oss.model.Bucket;
   
   import java.util.List;
   
   public class OssProviderSample {
   
       public static void main(String[] args) throws Exception {
           String secretName = "******";
           String endpoint = "https://oss-cn-hangzhou.aliyuncs.com";
   
           /*
             If the application cannot read the default configuration file (managed_credentials_providers.properties)
             from the classpath and executable JAR file,
             or if you need to customize the configuration file name, you can call the following code to set a custom configuration file
             and read it in the following order:
             1. "your-config-name" absolute path + filename, which reads the file under the absolute path.
             2. "your-config-name" filename only, which first reads the configuration file under the classpath, then the configuration file in the executable JAR file.
           */
           //ConfigLoader.setConfigName("your-config-name");
   
           // Obtain the OSS client.
           OSS ossClient = new ProxyOSSClientBuilder().build(endpoint, secretName);
   
           // The following is the business code: call Alibaba Cloud OSS services to implement business functions.
           List<Bucket> buckets = ossClient.listBuckets();
           for (Bucket bucket : buckets) {
               if (bucket != null) {
                   // ...
               }
           }
   
           // Release the plug-in resources by closing the client.
           ossClient.shutdown();
       }
   
   }

Alibaba Cloud SDK for Python (V1.0)

1. Exécutez la commande pip pour ajouter le plug-in de secrets RAM à votre projet.

   pip install aliyun-openapi-python-sdk-managed-credentials-provider

   Remarque

   Assurez-vous que la version du plug-in est 0.1.0 ou ultérieure. Pour plus d'informations, consultez le code source.

2. Obtenez le client Alibaba Cloud SDK for Python et appelez les services cloud.

   from aliyun_sdk_secretsmanager_sdk_core_plugin.proxy_acs_client import ProxyAcsClient
   
      region="cn-hangzhou"
      secretName="******"
   
      # 1. Obtain the ACSClient.
      client = ProxyAcsClient(region_id=region, secret_name=secretName )
   
      # 2. Business code: use the client to call Alibaba Cloud services without code changes.
      ...
   
      # 3. Release the plug-in resources by closing the client.
      client.shutdown()

OSS Python SDK

1. Exécutez la commande pip pour ajouter le plug-in de secrets RAM à votre projet.

   pip install aliyun-oss-python-sdk-managed-credentials-provider

   Remarque

   Assurez-vous que la version du plug-in est 0.1.0 ou ultérieure. Pour plus d'informations, consultez le code source.

2. Obtenez le client Alibaba Cloud OSS Python SDK et appelez les services cloud.

   from aliyun_sdk_secretsmanager_oss_plugin.proxy_bucket import ProxyBucket
   from itertools import islice
   
   endpoint = "******"
   secret_name ="******"
   bucket_name = "******"
   bucket = ProxyBucket(secret_name=secret_name, endpoint=endpoint, bucket_name=bucket_name)
   objects = bucket.list_objects()
   for b in islice(objects.object_list, 10):
       print(b.key)
   bucket.shutdown()

Alibaba Cloud SDK for Go (V1.0)

1. Installez le plug-in de secrets RAM pour Alibaba Cloud SDK for Go.

   Important

   • Nous vous recommandons d'installer la dernière version du plug-in. Pour plus d'informations, consultez le code source.

   • Pour Go, la version de alibaba-cloud-sdk-go dont dépend le plug-in de secrets RAM doit être antérieure à v1.63.0. Vérifiez et confirmez la version dans le fichier go.mod du plug-in afin d'éviter d'éventuels problèmes de compatibilité.

   • Méthode 1 : Utilisez go.mod pour gérer vos dépendances.

     Ajoutez le contenu suivant au fichier go.mod pour installer la dépendance.

     require (
         github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/alibaba-cloud-sdk-go-managed-credentials-provider vX.X.X
     )

   • Méthode 2 : Utilisez la commande go get pour obtenir le package de code distant.

     go get -u github.com/aliyun/aliyun-sdk-mxanaged-credentials-providers-go/aliyun-sdk-managed-credentials-providers/alibaba-cloud-sdk-go-managed-credentials-provider

2. Obtenez le client Alibaba Cloud SDK for Go et appelez les services cloud.

   L'exemple suivant utilise l'API DescribeInstances d'ECS.

   package sample
   
   import (
       "fmt"
       "github.com/aliyun/alibaba-cloud-sdk-go/services/ecs"
       sdkcoreprovider "github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/alibaba-cloud-sdk-go-managed-credentials-provider/sdk"
   )
   
   func main() {
       secretName := "********"
       regionId := "cn-hangzhou"
   
       client, err := sdkcoreprovider.GetClient(&ecs.Client{}, regionId, secretName)
       if err != nil {
           fmt.Println(err)
           return
       }
       ecsClient := client.(*ecs.Client)
   
       request := ecs.CreateDescribeInstancesRequest()
       instancesResponse, err := ecsClient.DescribeInstances(request)
       if err != nil {
           fmt.Println(err)
           return
       }
   
       for _, instance := range instancesResponse.Instances.Instance {
           // do something with instance
       }
   }

OSS Go SDK

1. Installez le plug-in de secrets RAM pour OSS Go SDK.

   Important

   • Nous vous recommandons d'installer la dernière version du plug-in. Pour plus d'informations, consultez le code source.

   • Pour Go, la version de alibaba-cloud-sdk-go dont dépend le plug-in de secrets RAM doit être antérieure à v1.63.0. Vérifiez et confirmez la version dans le fichier go.mod du plug-in afin d'éviter d'éventuels problèmes de compatibilité.

   • Méthode 1 : Utilisez go.mod pour gérer vos dépendances.

     Ajoutez le contenu suivant au fichier go.mod pour installer la dépendance.

     require (
         github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/aliyun-oss-go-sdk-managed-credentials-provider vX.X.X
     )

   • Méthode 2 : Utilisez la commande go get pour obtenir le package de code distant.

     go get -u github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/aliyun-oss-go-sdk-managed-credentials-provider

2. Obtenez le client Alibaba Cloud OSS Go SDK et appelez les services cloud.

   package sample
   
   import (
       "fmt"
       ossprovider "aliyun-oss-go-sdk-managed-credentials-provider/sdk"
   )
   
   func main() {
       secretName := "********"
       endpoint := "https://oss-cn-hangzhou.aliyuncs.com"
   
       // Obtain the proxy OSS client.
       client, err := ossprovider.New(endpoint, secretName)
       if err != nil {
           fmt.Println(err)
           return
       }
   
       result, err := client.ListBuckets()
       if err != nil {
           fmt.Println(err)
           return
       }
       for _, bucket := range result.Buckets {
           // Business code.
       }
   
       // Release the plug-in resources by closing the client.
       client.Shutdown()
   }