Key Management Service:Plug-in de segredo RAM

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-tea-openapi-sdk-managed-credentials-provider</artifactId>
    <version>[1.3.5,]</version>
</dependency>

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>ecs20140526</artifactId>
    <version>7.1.0</version>
</dependency>

import com.aliyun.ecs20140526.Client;
import com.aliyun.ecs20140526.models.DescribeInstancesResponse;
import com.aliyun.kms.secretsmanager.plugin.tea.openapi.ProxyClientCreator;
import com.google.gson.Gson;

public class AliyunTeaOpenApiProviderSample {

    public static void main(String[] args) throws Exception {
        // The name of the RAM secret you created in KMS.
        String secretName = "your-secret-name";

        /*
          If the application cannot read the default configuration file
          (managed_credentials_providers.properties) from the classpath or the
          executable JAR file, or if you need a custom file name, uncomment the
          following line. The file is resolved in this order:
          1. If "your-config-name" is an absolute path, that file is read.
          2. If "your-config-name" is a filename only, the classpath is checked
             first, then the executable JAR file.
        */
        //ConfigLoader.setConfigName("your-config-name");

        // Configure the OpenAPI client endpoint.
        com.aliyun.teaopenapi.models.Config config = new com.aliyun.teaopenapi.models.Config();
        config.endpoint = "your-product-endpoint"; // Replace with the actual service endpoint.

        // Create a proxy client backed by the RAM secret plug-in.
        Client client = ProxyClientCreator.createClient(config, Client.class, secretName);

        // Call the cloud service API.
        com.aliyun.ecs20140526.models.DescribeInstancesRequest request =
            new com.aliyun.ecs20140526.models.DescribeInstancesRequest();
        request.setRegionId("cn-hangzhou");
        DescribeInstancesResponse response = client.describeInstances(request);

        System.out.println(new Gson().toJson(response.getBody()));
    }
}

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-sdk-core</artifactId>
    <version>[4.3.2,5.0.0]</version>
</dependency>
<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-sdk-core-managed-credentials-provider</artifactId>
    <version>[1.3.1,]</version>
</dependency>

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-sdk-ecs</artifactId>
    <version>5.11.20</version>
</dependency>

import com.aliyuncs.IAcsClient;
import com.aliyuncs.ecs.model.v20140526.DescribeInstanceStatusRequest;
import com.aliyuncs.ecs.model.v20140526.DescribeInstanceStatusResponse;
import com.aliyun.kms.secretsmanager.plugin.sdkcore.ProxyAcsClient;
import com.aliyuncs.exceptions.ClientException;
import com.aliyuncs.exceptions.ServerException;

public class AliyunSdkProviderSample {
    public static void main(String[] args) {
        String secretName = "******";

        /*
          To use a custom configuration file name, uncomment the following line.
          File resolution order:
          1. Absolute path — read that file directly.
          2. Filename only — check the classpath, then the executable JAR file.
        */
        //ConfigLoader.setConfigName("your-config-name");

        // Create a proxy ACS client backed by the RAM secret plug-in.
        IAcsClient client = null;
        try {
            client = new ProxyAcsClient("<the regionId of ECS>", secretName);
        } catch (ClientException e) {
            e.printStackTrace();
        }

        // Call the ECS API.
        DescribeInstanceStatusRequest request = new DescribeInstanceStatusRequest();
        try {
            DescribeInstanceStatusResponse response = client.getAcsResponse(request);
        } catch (ServerException e) {
            e.printStackTrace();
        } catch (ClientException e) {
            e.printStackTrace();
        }

        // Release plug-in resources.
        client.shutdown();
    }
}

<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-java-sdk-core</artifactId>
    <version>4.5.17</version>
</dependency>
<dependency>
    <groupId>com.aliyun.oss</groupId>
    <artifactId>aliyun-sdk-oss</artifactId>
    <version>[2.1.0,3.10.2]</version>
    <exclusions>
        <exclusion>
            <groupId>com.aliyun</groupId>
            <artifactId>aliyun-java-sdk-kms</artifactId>
        </exclusion>
    </exclusions>
</dependency>
<dependency>
    <groupId>com.aliyun</groupId>
    <artifactId>aliyun-sdk-oss-managed-credentials-provider</artifactId>
    <version>[1.3.1,]</version>
</dependency>

import com.aliyun.kms.secretsmanager.plugin.oss.ProxyOSSClientBuilder;
import com.aliyun.oss.OSS;
import com.aliyun.oss.model.Bucket;

import java.util.List;

public class OssProviderSample {

    public static void main(String[] args) throws Exception {
        String secretName = "******";
        String endpoint = "https://oss-cn-hangzhou.aliyuncs.com";

        /*
          To use a custom configuration file name, uncomment the following line.
          File resolution order:
          1. Absolute path — read that file directly.
          2. Filename only — check the classpath, then the executable JAR file.
        */
        //ConfigLoader.setConfigName("your-config-name");

        // Create a proxy OSS client backed by the RAM secret plug-in.
        OSS ossClient = new ProxyOSSClientBuilder().build(endpoint, secretName);

        // Call the OSS API.
        List<Bucket> buckets = ossClient.listBuckets();
        for (Bucket bucket : buckets) {
            if (bucket != null) {
                // Your business logic goes here.
            }
        }

        // Release plug-in resources.
        ossClient.shutdown();
    }
}

pip install aliyun-openapi-python-sdk-managed-credentials-provider

from aliyun_sdk_secretsmanager_sdk_core_plugin.proxy_acs_client import ProxyAcsClient

region = "cn-hangzhou"
secretName = "******"

# Create a proxy ACS client backed by the RAM secret plug-in.
client = ProxyAcsClient(region_id=region, secret_name=secretName)

# Call Alibaba Cloud services using the client — no other code changes required.
...

# Release plug-in resources.
client.shutdown()

pip install aliyun-oss-python-sdk-managed-credentials-provider

from aliyun_sdk_secretsmanager_oss_plugin.proxy_bucket import ProxyBucket
from itertools import islice

endpoint = "******"
secret_name = "******"
bucket_name = "******"

bucket = ProxyBucket(secret_name=secret_name, endpoint=endpoint, bucket_name=bucket_name)
objects = bucket.list_objects()
for b in islice(objects.object_list, 10):
    print(b.key)
bucket.shutdown()

require (
    github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/alibaba-cloud-sdk-go-managed-credentials-provider vX.X.X
)

go get -u github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/alibaba-cloud-sdk-go-managed-credentials-provider

package sample

import (
    "fmt"
    "github.com/aliyun/alibaba-cloud-sdk-go/services/ecs"
    sdkcoreprovider "github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/alibaba-cloud-sdk-go-managed-credentials-provider/sdk"
)

func main() {
    secretName := "********"
    regionId := "cn-hangzhou"

    // Create a proxy client backed by the RAM secret plug-in.
    client, err := sdkcoreprovider.GetClient(&ecs.Client{}, regionId, secretName)
    if err != nil {
        fmt.Println(err)
        return
    }
    ecsClient := client.(*ecs.Client)

    request := ecs.CreateDescribeInstancesRequest()
    instancesResponse, err := ecsClient.DescribeInstances(request)
    if err != nil {
        fmt.Println(err)
        return
    }

    for _, instance := range instancesResponse.Instances.Instance {
        // Your business logic goes here.
    }
}

require (
    github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/aliyun-oss-go-sdk-managed-credentials-provider vX.X.X
)

go get -u github.com/aliyun/aliyun-sdk-managed-credentials-providers-go/aliyun-sdk-managed-credentials-providers/aliyun-oss-go-sdk-managed-credentials-provider

package sample

import (
    "fmt"
    ossprovider "aliyun-oss-go-sdk-managed-credentials-provider/sdk"
)

func main() {
    secretName := "********"
    endpoint := "https://oss-cn-hangzhou.aliyuncs.com"

    // Create a proxy OSS client backed by the RAM secret plug-in.
    client, err := ossprovider.New(endpoint, secretName)
    if err != nil {
        fmt.Println(err)
        return
    }

    result, err := client.ListBuckets()
    if err != nil {
        fmt.Println(err)
        return
    }
    for _, bucket := range result.Buckets {
        // Your business logic goes here.
    }

    // Release plug-in resources.
    client.Shutdown()
}