Elastic Compute Service:Buat dan gunakan instans ECS menggunakan SDK

Langkah 1: Buat VPC

VPC adalah jaringan pribadi yang terisolasi secara logis di cloud.

Panggil CreateVpc dengan parameter berikut:

Setelah memanggil CreateVpc, lakukan polling terhadap DescribeVpcs hingga status VPC berubah menjadi Available sebelum melanjutkan.

Langkah 2: Buat vSwitch

vSwitch menghubungkan instans ECS dalam VPC dan memungkinkan komunikasi antar instans tersebut.

Panggil CreateVSwitch dengan parameter berikut:

Langkah 3: Buat security group

Security group berfungsi sebagai firewall virtual yang mengontrol lalu lintas inbound dan outbound untuk instans ECS.

Panggil CreateSecurityGroup dengan:

Kemudian tambahkan aturan inbound melalui AuthorizeSecurityGroup:

Langkah 4: Buat pasangan kunci SSH

Pasangan kunci SSH memungkinkan Anda login ke instans Linux tanpa password.

Panggil CreateKeyPair dengan:

Langkah 5: Buat instans ECS

Panggil RunInstances dengan:

Setelah memanggil RunInstances, polling DescribeInstanceStatus hingga status instans menjadi Running — biasanya sekitar 10 detik.

Pastikan saldo akun Anda mencukupi sebelum membuat instans pay-as-you-go.

Kode contoh lengkap

Kode berikut membuat semua sumber daya prasyarat secara berurutan, lalu membuat instans ECS dan menunggu hingga instans tersebut menyala.

import com.aliyun.ecs20140526.models.*;
import com.aliyun.teaopenapi.models.Config;
import com.aliyun.vpc20160428.models.CreateVSwitchRequest;
import com.aliyun.vpc20160428.models.CreateVSwitchResponse;
import com.aliyun.vpc20160428.models.CreateVpcRequest;
import com.aliyun.vpc20160428.models.CreateVpcResponse;
import com.aliyun.vpc20160428.models.DescribeVpcsRequest;

import java.util.ArrayList;
import java.util.List;

public class EcsDemo {
    public static void main(String[] args) {
        String vpcId = null;
        String vSwitchId = null;
        String securityGroupId = null;
        String instanceId = null;
        com.aliyun.vpc20160428.Client vpcClient = null;
        com.aliyun.ecs20140526.Client ecsClient = null;
        try {
            vpcClient = createVpcClient();
            ecsClient = createEcsClient();
            // Buat VPC.
            vpcId = createVpc(vpcClient);
            System.out.println("VPC berhasil dibuat, vpcId :" + vpcId);
            // Tunggu hingga VPC berada dalam status Available sebelum melanjutkan.
            while (true) {
                String status = describeVpc(vpcId, vpcClient);
                if ("Available".equals(status)) {
                    break;
                }
            }
            // Buat vSwitch.
            vSwitchId = CreateVSwitch(vpcId, vpcClient);
            System.out.println("vSwitch berhasil dibuat, vSwitchId :" + vSwitchId);
            // Buat security group.
            securityGroupId = createSecurityGroup(vpcId, ecsClient);
            System.out.println("SecurityGroup berhasil dibuat, securityGroupId :" + securityGroupId);
            // Tambahkan aturan inbound ke security group.
            authorizeSecurityGroup(securityGroupId, ecsClient);
            // Buat pasangan kunci SSH. Simpan kunci privat untuk digunakan nanti saat login ke instans.
            CreateKeyPairResponse keyPair = createKeyPair(ecsClient);
            System.out.println("Pasangan kunci berhasil dibuat, keyPairName :" + keyPair.body.keyPairName);
            // Buat instans ECS.
            instanceId = createInstance(ecsClient, vSwitchId, securityGroupId);
            System.out.println("ECS berhasil dibuat, instanceId :" + instanceId);
            // Tunggu hingga instans berada dalam status Running.
            while (true) {
                List<String> instanceIds = new ArrayList<>();
                instanceIds.add(instanceId);
                DescribeInstanceStatusResponse describeInstanceStatus = describeInstanceStatus(instanceIds, ecsClient);
                List<DescribeInstanceStatusResponseBody.DescribeInstanceStatusResponseBodyInstanceStatusesInstanceStatus> instanceStatusList = describeInstanceStatus.body.instanceStatuses.instanceStatus;
                if (instanceStatusList != null && !instanceStatusList.isEmpty()) {
                    String status = instanceStatusList.get(0).status;
                    if ("Running".equals(status)) {
                        break;
                    }
                }
            }
        } catch (Exception e) {
            // Jika beberapa sumber daya telah dibuat sebelum terjadi kegagalan, tambahkan logging, rollback,
            // atau logika kompensasi untuk membersihkan status parsial.
            System.out.println(e.getMessage());
        }
    }

    public static class Constants {
        public static final String NAME = "sdk-test";
        public static final String REGION_ID = "cn-hangzhou";
        public static final String ZONE_ID = "cn-hangzhou-i";
        public static final String CIDR_BLOCK_VPC = "192.168.0.0/16";
        public static final String CIDR_BLOCK_VSWITCH = "192.168.0.0/24";
        public static final String IMAGE_ID = "aliyun_3_x64_20G_scc_alibase_20220225.vhd";
        public static final String INSTANCE_TYPE = "ecs.e-c1m2.xlarge";
        public static final String SYSTEM_DISK_CATEGORY = "cloud_essd";
        public static final String KEY_PAIR_NAME = "sdk-key-pair";

        public static final class ENDPOINT {
            public static final String VPC = "vpc.cn-hangzhou.aliyuncs.com";
            public static final String ECS = "ecs.cn-hangzhou.aliyuncs.com";
        }

        public static final class INSTANCE_CHARGE_TYPE {
            public static final String PRE_PAID = "PrePaid";   // Subscription
            public static final String POST_PAID = "PostPaid"; // Pay-as-you-go
        }
    }

    public static com.aliyun.vpc20160428.Client createVpcClient() throws Exception {
        Config config = new Config();
        config.setAccessKeyId(System.getenv("ALIBABA_CLOUD_ACCESS_KEY_ID"));
        config.setAccessKeySecret(System.getenv("ALIBABA_CLOUD_ACCESS_KEY_SECRET"));
        config.endpoint = Constants.ENDPOINT.VPC;
        return new com.aliyun.vpc20160428.Client(config);
    }

    public static com.aliyun.ecs20140526.Client createEcsClient() throws Exception {
        Config config = new Config();
        config.setAccessKeyId(System.getenv("ALIBABA_CLOUD_ACCESS_KEY_ID"));
        config.setAccessKeySecret(System.getenv("ALIBABA_CLOUD_ACCESS_KEY_SECRET"));
        config.endpoint = Constants.ENDPOINT.ECS;
        return new com.aliyun.ecs20140526.Client(config);
    }

    /**
     * Membuat VPC dan mengembalikan ID-nya.
     *
     * @param vpcClient Klien VPC.
     * @return ID VPC baru.
     */
    public static String createVpc(com.aliyun.vpc20160428.Client vpcClient) {
        try {
            CreateVpcRequest createVpcRequest = new CreateVpcRequest()
                    .setRegionId(Constants.REGION_ID)
                    .setCidrBlock(Constants.CIDR_BLOCK_VPC)
                    .setVpcName(Constants.NAME);
            CreateVpcResponse vpc = vpcClient.createVpc(createVpcRequest);
            return vpc.body.vpcId;
        } catch (Exception e) {
            throw new RuntimeException("createVpc gagal: " + e.getMessage());
        }
    }

    /**
     * Membuat vSwitch dalam VPC yang ditentukan dan mengembalikan ID-nya.
     *
     * @param vpcId     ID VPC.
     * @param vpcClient Klien VPC.
     * @return ID vSwitch baru.
     */
    public static String CreateVSwitch(String vpcId, com.aliyun.vpc20160428.Client vpcClient) {
        try {
            CreateVSwitchRequest createVSwitchRequest = new CreateVSwitchRequest()
                    .setRegionId(Constants.REGION_ID)
                    .setZoneId(Constants.ZONE_ID)
                    .setCidrBlock(Constants.CIDR_BLOCK_VSWITCH)
                    .setVpcId(vpcId)
                    .setVSwitchName(Constants.NAME);
            CreateVSwitchResponse vSwitch = vpcClient.createVSwitch(createVSwitchRequest);
            return vSwitch.body.vSwitchId;
        } catch (Exception e) {
            throw new RuntimeException("CreateVSwitch gagal: " + e.getMessage());
        }
    }

    /**
     * Membuat security group dalam VPC yang ditentukan dan mengembalikan ID-nya.
     *
     * @param vpcId     ID VPC.
     * @param ecsClient Klien ECS.
     * @return ID security group baru.
     */
    public static String createSecurityGroup(String vpcId, com.aliyun.ecs20140526.Client ecsClient) {
        try {
            CreateSecurityGroupRequest createSecurityGroupRequest = new CreateSecurityGroupRequest()
                    .setRegionId(Constants.REGION_ID)
                    .setVpcId(vpcId)
                    .setSecurityGroupName(Constants.NAME);
            CreateSecurityGroupResponse securityGroup = ecsClient.createSecurityGroup(createSecurityGroupRequest);
            return securityGroup.body.securityGroupId;
        } catch (Exception e) {
            throw new RuntimeException("createSecurityGroup gagal: " + e.getMessage());
        }
    }

    /**
     * Menambahkan aturan TCP inbound pada port 22 (SSH) dari semua sumber ke security group yang ditentukan.
     *
     * @param securityGroupId ID security group.
     * @param ecsClient       Klien ECS.
     */
    public static void authorizeSecurityGroup(String securityGroupId, com.aliyun.ecs20140526.Client ecsClient) {
        try {
            AuthorizeSecurityGroupRequest.AuthorizeSecurityGroupRequestPermissions permission =
                    new AuthorizeSecurityGroupRequest.AuthorizeSecurityGroupRequestPermissions()
                            .setIpProtocol("tcp")
                            .setPortRange("22/22")
                            .setSourceCidrIp("0.0.0.0/0");
            List<AuthorizeSecurityGroupRequest.AuthorizeSecurityGroupRequestPermissions> permissions = new ArrayList<>();
            permissions.add(permission);
            AuthorizeSecurityGroupRequest authorizeSecurityGroupRequest = new AuthorizeSecurityGroupRequest()
                    .setRegionId(Constants.REGION_ID)
                    .setSecurityGroupId(securityGroupId)
                    .setPermissions(permissions);
            ecsClient.authorizeSecurityGroup(authorizeSecurityGroupRequest);
        } catch (Exception e) {
            throw new RuntimeException("authorizeSecurityGroup gagal: " + e.getMessage());
        }
    }

    /**
     * Membuat instans ECS dan mengembalikan ID-nya.
     *
     * @param ecsClient       Klien ECS.
     * @param vSwitchId       ID vSwitch.
     * @param securityGroupId ID security group.
     * @return ID instans ECS baru.
     */
    public static String createInstance(com.aliyun.ecs20140526.Client ecsClient, String vSwitchId, String securityGroupId) {
        try {
            RunInstancesRequest.RunInstancesRequestSystemDisk systemDisk =
                    new RunInstancesRequest.RunInstancesRequestSystemDisk()
                            .setCategory(Constants.SYSTEM_DISK_CATEGORY);
            RunInstancesRequest runInstancesRequest = new RunInstancesRequest()
                    .setRegionId(Constants.REGION_ID)
                    .setImageId(Constants.IMAGE_ID)
                    .setInstanceType(Constants.INSTANCE_TYPE)
                    .setSecurityGroupId(securityGroupId)
                    .setVSwitchId(vSwitchId)
                    .setInstanceChargeType(Constants.INSTANCE_CHARGE_TYPE.POST_PAID)
                    .setInstanceName(Constants.NAME)
                    .setInternetMaxBandwidthOut(1)
                    .setSystemDisk(systemDisk)
                    .setKeyPairName(Constants.KEY_PAIR_NAME);
            RunInstancesResponse resp = ecsClient.runInstances(runInstancesRequest);
            return resp.body.getInstanceIdSets().getInstanceIdSet().get(0);
        } catch (Exception e) {
            throw new RuntimeException("createInstance gagal: " + e.getMessage());
        }
    }

    /**
     * Membuat pasangan kunci SSH dan mengembalikan respons lengkap (termasuk kunci privat).
     *
     * @param ecsClient Klien ECS.
     * @return Respons dari CreateKeyPair, berisi nama pasangan kunci dan bahan kunci privat.
     */
    public static CreateKeyPairResponse createKeyPair(com.aliyun.ecs20140526.Client ecsClient) {
        try {
            CreateKeyPairRequest createKeyPairRequest = new CreateKeyPairRequest()
                    .setRegionId(Constants.REGION_ID)
                    .setKeyPairName(Constants.KEY_PAIR_NAME);
            return ecsClient.createKeyPair(createKeyPairRequest);
        } catch (Exception e) {
            throw new RuntimeException("createKeyPair gagal: " + e.getMessage());
        }
    }

    /**
     * Mengembalikan status saat ini dari VPC yang ditentukan.
     *
     * @param vpcId     ID VPC.
     * @param vpcClient Klien VPC.
     * @return String status VPC, misalnya "Available".
     */
    public static String describeVpc(String vpcId, com.aliyun.vpc20160428.Client vpcClient) {
        try {
            DescribeVpcsRequest request = new DescribeVpcsRequest()
                    .setRegionId(Constants.REGION_ID)
                    .setVpcId(vpcId);
            return vpcClient.describeVpcs(request).body.vpcs.getVpc().get(0).status;
        } catch (Exception e) {
            throw new RuntimeException("describeVpc gagal: " + e.getMessage());
        }
    }

    /**
     * Mengembalikan status instans ECS yang ditentukan.
     *
     * @param instanceIds Daftar ID instans ECS yang akan diquery.
     * @param ecsClient   Klien ECS.
     * @return Respons DescribeInstanceStatus.
     */
    public static DescribeInstanceStatusResponse describeInstanceStatus(List<String> instanceIds, com.aliyun.ecs20140526.Client ecsClient) {
        try {
            DescribeInstanceStatusRequest request = new DescribeInstanceStatusRequest()
                    .setRegionId(Constants.REGION_ID)
                    .setInstanceId(instanceIds);
            return ecsClient.describeInstanceStatus(request);
        } catch (Exception e) {
            throw new RuntimeException("describeInstanceStatus gagal: " + e.getMessage());
        }
    }
}