Elastic Compute Service:Instance RAM roles

package main

import (
	"fmt"
	"github.com/aliyun/credentials-go/credentials"
)

func _main(args []*string) {
	credentialsConfig := new(credentials.Config).
		SetType("ecs_ram_role").
		// Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
		SetRoleName("<RoleName>").
		// Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in normal mode (IMDSv1).
		SetDisableIMDSv1(true)
	credentialClient, err := credentials.NewCredential(credentialsConfig)
	if err != nil {
		panic(err)
	}
}

Node.js

1. Instale a ferramenta Credentials.

   O modo de reforço de segurança requer credentials 2.3.1 ou posterior.

   npm install @alicloud/credentials

2. Configure a função de RAM da instância ECS como credencial de acesso.

   const Credential = require('@alicloud/credentials');
   
   const credentialsConfig = new Credential.Config({
     type: 'ecs_ram_role',
     // Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
     roleName: '<RoleName>',
     // Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in normal mode (IMDSv1).
     disableIMDSv1: true,
   });
   const cred = new Credential.default(credentialsConfig);
   

   Consulte Método 5: Uso de uma função de RAM da instância ECS.

.NET

1. Instale a ferramenta Credentials.

   O modo de reforço de segurança requer credentials 1.4.2 ou posterior.

   dotnet add package Aliyun.Credentials

2. Configure a função de RAM da instância ECS como credencial de acesso.

   using Aliyun.Credentials.Models;
   
   namespace credentials_demo
   {
       class Program
       {
           static void Main(string[] args)
           {
               var config = new Config()
               {
                   Type = "ecs_ram_role",
                 	// Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
                   RoleName = "<RoleName>",
                   // Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in normal mode (IMDSv1).
                   DisableIMDSv1 = true
               }
           }
       }
   }

   Consulte Método 5: Uso de uma função de RAM da instância ECS.

PHP

1. Instale a ferramenta Credentials.

   O modo de reforço de segurança requer credentials 1.2.0 ou posterior.

   composer require alibabacloud/credentials

2. Configure a função de RAM da instância ECS como credencial de acesso.

   <?php
   
   use AlibabaCloud\Credentials\Credential;
   use AlibabaCloud\Credentials\Credential\Config;
   
   $credConfig = new Config([
       'type' => 'ecs_ram_role',
       // Optional. The name of the instance RAM role. If you do not specify this parameter, the name is automatically retrieved. We recommend that you specify this parameter to reduce requests. You can also set the role name using the ALIBABA_CLOUD_ECS_METADATA environment variable.
       'roleName' => '<RoleName>',
       // Optional. The default value is false. If you set this to true, security hardening mode is enforced. If you set this to false, the system first tries to retrieve credentials in security hardening mode. If the attempt fails, the system tries again in normal mode (IMDSv1).
       'disableIMDSv1' => true,
   ]);

   Consulte Método 5: Uso de uma função de RAM da instância ECS.

Usar comandos shell

Usar a CLI

A CLI encapsula o IMDS do ECS para obter e atualizar automaticamente os tokens STS.

O modo de reforço de segurança requer a CLI 3.0.248 ou posterior.

1. Instale a CLI.

   • Instalar a CLI no Linux

   • Instalar a CLI no Windows

   • Instalar a CLI no macOS

2. Configure as credenciais de identidade.

   Configure as informações da credencial. Substitua <ProfileName> pelo nome da sua configuração.

   aliyun configure --profile <ProfileName> --mode EcsRamRole

   Siga as instruções para inserir as informações necessárias. Consulte Configurar credenciais.

3. Chame uma operação de API.

   Por exemplo, consulte a lista de instâncias ECS:

    aliyun ecs DescribeInstances

   Consulte Estrutura de comandos.

pip install oss2  
pip install alibabacloud_credentials

import oss2
from alibabacloud_credentials.client import Client
from alibabacloud_credentials.models import Config
from oss2 import CredentialsProvider
from oss2.credentials import Credentials

class CredentialProviderWarpper(CredentialsProvider):
    def __init__(self, client):
        self.client = client

    def get_credentials(self):
        access_key_id = self.client.get_access_key_id()
        access_key_secret = self.client.get_access_key_secret()
        security_token = self.client.get_security_token()
        return Credentials(access_key_id, access_key_secret, security_token)

def download_image_using_instance_role(bucket_name, endpoint, object_key, local_file, role_name):
    config = Config(
        type='ecs_ram_role',      # The type of access credential. This value is fixed as ecs_ram_role.
        role_name=role_name
    )
    cred = Client(config)
    credentials_provider = CredentialProviderWarpper(cred)
    auth = oss2.ProviderAuth(credentials_provider)

    # Initialize the OSS Bucket object.
    bucket = oss2.Bucket(auth, endpoint, bucket_name)
    # Download the image to the local instance.
    bucket.get_object_to_file(object_key, local_file)
    print("Image downloaded successfully")

if __name__ == "__main__":
    # Define global variables.
    role_name = 'role_name'  # Replace with the name of your instance RAM role.
    bucket_name = 'bucket_name'  # Replace with your bucket name.
    endpoint = 'oss-cn-beijing.aliyuncs.com'  # Replace with the public endpoint of your OSS bucket.
    object_key = 'testfolder/example.png'  # Replace with the full path of the image that you want to download from OSS. Do not include the bucket name.
    local_file = '/localpath/to/image.png'  # Replace with the root path on the ECS instance where you want to store the image, and define the image name.
    download_image_using_instance_role(bucket_name, endpoint, object_key, local_file, role_name)