为保证您能正常使用数据地图的元数据采集和类目管理功能,您需要提前配置好白名单,将使用的DataWorks所在地域的IP网段添加至目标项目或数据库中,并为所使用的账号配置类目管理权限。本文为您介绍如何配置白名单及类目管理权限。

背景信息

  • 数据地图是在元数据基础上提供的企业数据资产管理模块,涵盖全局数据检索、元数据详情查看、数据预览、数据血缘和数据类目管理等功能,帮助您更好地查找、理解和使用数据。当使用数据地图查看MaxCompute表数据时,如果MaxCompute项目空间开启了白名单访问控制,则您可能无法访问该项目空间的相关内容。为保证DataWorks能顺利访问MaxCompute的项目空间,则需要提前配置好MaxCompute的白名单权限。
    说明 目前仅MaxCompute产品涉及配置数据地图白名单功能。
  • 元数据采集功能方便您将不同系统中的元数据进行统一汇总管理。采集完成后,您可以在数据地图查看各数据源的元数据信息。当您需要采集已开启白名单访问控制的元数据时,则需要提前配置好数据库的白名单权限。
  • 类目管理功能方便您通过类别有效地组织和管理表,详情请参见配置类目导航和MaxCompute表管理。您需要添加相应权限才能使用该功能,如下所示:
    • 如果您使用主账号来管理类目,则默认具有该功能的所有操作权限。
    • 如果您使用子账号来管理类目,则需要为子账号添加AliyunDataWorksFullAccess权限。详情请参见为RAM账号授权

配置数据地图白名单

  1. 查看目标MaxCompute项目空间是否开启了白名单访问控制,详情请参见查看白名单访问控制
    如果MaxCompute项目空间未开启白名单访问控制,则DataWorks可以正常使用数据地图访问MaxCompute的数据表;如果项目空间开启了白名单访问控制,则需要进行下一步的添加白名单操作。
  2. MaxCompute添加白名单。
    如果您的MaxCompute项目空间开启了白名单访问控制,请在MaxCompute的白名单列表中,添加需要使用的DataWorks所在地域的IP网段。DataWorks的地域与白名单IP网段对应关系如下表所示。MaxCompute添加白名单的详细操作请参见设置IP白名单
    地域 白名单
    华东1(杭州) 100.64.0.0/10,11.193.102.0/24,11.193.215.0/24,11.194.110.0/24,11.194.73.0/24,118.31.157.0/24,47.97.53.0/24,11.196.23.0/24,47.99.12.0/24,47.99.13.0/24,114.55.197.0/24,11.197.246.0/24,11.197.247.0/24
    华东2(上海) 11.193.109.0/24,11.193.252.0/24,47.101.107.0/24,47.100.129.0/24,106.15.14.0/24,10.117.28.203,10.143.32.0/24,10.152.69.0/24,10.153.136.0/24,10.27.63.15,10.27.63.38,10.27.63.41,10.27.63.60,10.46.64.81,10.46.67.156,11.192.97.0/24,11.192.98.0/24,11.193.102.0/24,11.218.89.0/24,11.218.96.0/24,11.219.217.0/24,11.219.218.0/24,11.219.219.0/24,11.219.233.0/24,11.219.234.0/24,118.178.142.154,118.178.56.228,118.178.59.233,118.178.84.74,120.27.160.26,120.27.160.81,121.43.110.160,121.43.112.137,100.64.0.0/10,10.117.39.238
    华南1(深圳) 100.106.46.0/24,100.106.49.0/24,10.152.27.0/24,10.152.28.0/24,11.192.91.0/24,11.192.96.0/24,11.193.103.0/24,100.64.0.0/10,120.76.104.0/24,120.76.91.0/24,120.78.45.0/24,47.106.63.0/26,47.106.63.128/26,47.106.63.192/26,47.106.63.64/26
    西南1(成都) 11.195.52.0/24,11.195.55.0/24,47.108.22.0/24,100.64.0.0/10
    华北3(张家口) 11.193.235.0/24,47.92.22.0/24,100.64.0.0/10
    中国(香港) 10.152.162.0/24,11.192.196.0/24,11.193.11.0/24,100.64.0.0/10,47.89.61.0/24,47.91.171.0/24,11.193.118.0/24,47.75.228.0/24,47.56.45.0/25,47.244.92.128/25,47.101.109.0/24
    亚太东南1(新加坡) 100.106.10.0/24,100.106.35.0/24,10.151.234.0/24,10.151.238.0/24,10.152.248.0/24,11.192.153.0/24,11.192.40.0/24,11.193.8.0/24,100.64.0.0/10,47.88.147.0/24,47.88.235.0/24,11.193.162.0/24,11.193.163.0/24,11.193.220.0/24,11.193.158.0/24,47.74.162.0/24,47.74.203.0/24,47.74.161.0/24,11.197.188.0/24
    亚太东南2(悉尼) 11.192.100.0/24,11.192.134.0/24,11.192.135.0/24,11.192.184.0/24,11.192.99.0/24,100.64.0.0/10,47.91.49.0/24,47.91.50.0/24,11.193.165.0/24,47.91.60.0/24
    华北2(北京) 100.106.48.0/24,10.152.167.0/24,10.152.168.0/24,11.193.50.0/24,11.193.75.0/24,11.193.82.0/24,11.193.99.0/24,100.64.0.0/10,47.93.110.0/24,47.94.185.0/24,47.95.63.0/24,11.197.231.0/24,11.195.172.0/24,47.94.49.0/24,182.92.144.0/24,39.99.77.0/26,39.99.77.64/26,39.99.77.128/26,39.104.220.192/26,39.107.7.0/26,39.107.7.64/26,182.92.32.128/26,182.92.32.192/26
    美国西部1(硅谷) 10.152.160.0/24,100.64.0.0/10,47.89.224.0/24,11.193.216.0/24,47.88.108.0/24
    美国东部1(弗吉尼亚) 47.88.98.0/26,47.88.98.64/26,47.88.98.128/26,47.88.98.192/26,47.252.91.0/26,47.252.91.64/26,47.252.91.128/26,47.252.91.192/26,10.128.134.0/24,11.193.203.0/24,11.194.68.0/24,11.194.69.0/24,100.64.0.0/10
    亚太东南3(吉隆坡) 11.193.188.0/24,11.221.205.0/24,11.221.206.0/24,11.221.207.0/24,100.64.0.0/10,11.214.81.0/24,47.254.212.0/24,11.193.189.0/24
    欧洲中部1(法兰克福) 11.192.116.0/24,11.192.168.0/24,11.192.169.0/24,11.192.170.0/24,11.193.106.0/24,100.64.0.0/10,11.192.116.14,11.192.116.142,11.192.116.160,11.192.116.75,11.192.170.27,47.91.82.22,47.91.83.74,47.91.83.93,47.91.84.11,47.91.84.110,47.91.84.82,11.193.167.0/24,47.254.138.0/24
    亚太东北1(日本) 100.105.55.0/24,11.192.147.0/24,11.192.148.0/24,11.192.149.0/24,100.64.0.0/10,47.91.12.0/24,47.91.13.0/24,47.91.9.0/24,11.199.250.0/24,47.91.27.0/24,11.59.59.0/24,47.245.51.128/26,47.245.51.192/26,47.91.0.128/26,47.91.0.192/26
    中东东部1(迪拜) 11.192.107.0/24,11.192.127.0/24,11.192.88.0/24,11.193.246.0/24,47.91.116.0/24,100.64.0.0/10
    亚太南部1(孟买) 11.194.10.0/24,11.246.70.0/24,11.246.71.0/24,11.246.73.0/24,11.246.74.0/24,100.64.0.0/10,149.129.164.0/24,11.194.11.0/24,11.59.62.0/24,147.139.23.0/26,147.139.23.128/26,147.139.23.64/26,149.129.165.192/26
    英国(伦敦) 11.199.93.0/24,100.64.0.0/10
    亚太东南5(雅加达) 11.194.49.0/24,11.200.93.0/24,11.200.95.0/24,11.200.97.0/24,100.64.0.0/10,149.129.228.0/24,10.143.32.0/24,11.194.50.0/24,11.59.135.0/24,147.139.156.0/26,147.139.156.128/26,147.139.156.64/26,149.129.230.192/26
    华北2(政务云) 11.194.116.0/24,100.64.0.0/10,39.107.188.202如果IP地址段添加不成功,请添加下述IP地址:11.194.116.160,11.194.116.161,11.194.116.162,11.194.116.163,11.194.116.164,11.194.116.165,11.194.116.167,11.194.116.169,11.194.116.170,11.194.116.171,11.194.116.172,11.194.116.173,11.194.116.174,11.194.116.175,39.107.188.0/24
    华东2(上海)金融云 140.205.46.128/25,140.205.48.0/25,140.205.48.128/25,140.205.49.0/25,140.205.49.128/25,11.192.156.0/25,11.192.157.0/25,11.192.164.0/25,11.192.165.0/25,11.192.166.0/25,11.192.167.0/25,106.11.245.0/26,106.11.245.128/26,106.11.245.192/26,106.11.245.64/26,140.205.39.0/24,106.11.225.0/24,106.11.226.0/24,106.11.227.0/24,106.11.242.0/24,100.104.8.0/24

配置元数据采集白名单

  1. 查看目标元数据是否开启白名单访问控制。
    不同元数据查看白名单访问控制的方式不同,您可以提交工单咨询技术支持同学。
    如果目标数据库未开启白名单访问控制,则DataWorks可以正常使用数据地图采集数据库的元数据;如果数据库开启了白名单访问控制,则需要进行下一步的添加白名单操作。
  2. 数据库添加白名单。
    如果您需要进行元数据采集的数据库已开启白名单访问控制,请在数据库白名单列表中,添加需要使用的DataWorks所在地域的IP网段。DataWorks的地域与白名单IP网段对应关系如下表所示。不同数据库的添加位置可能不同,您可以提交工单咨询技术支持同学。
    地域 白名单
    华东2(上海) 100.104.189.64/26,11.115.110.10/24,11.115.109.9/24,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,100.104.38.192/26
    华东1(杭州) 100.104.135.128/26,11.193.215.233/24,11.194.73.32/24,118.31.243.0/26,118.31.243.64/26,118.31.243.128/26,118.31.243.192/26,100.104.242.0/26
    华南1(深圳) 100.104.46.128/26,11.192.91.119/24,120.77.195.128/26,120.77.195.192/26,120.77.195.64/26,47.112.86.0/26,100.104.138.128/26
    华北2(北京) 100.104.37.128/26,11.193.82.20/24,11.197.254.171/24,39.107.223.0/26,39.107.223.64/26,39.107.223.128/26,39.107.223.192/26,100.104.152.128/26
    西南1(成都) 100.104.88.64/26,11.195.57.28/24,47.108.46.0/26,47.108.46.64/26,47.108.46.128/26,47.108.46.192/26,100.104.248.128/26
    华北3(张家口) 100.104.197.0/26,11.193.236.121/24,47.92.185.0/26,47.92.185.64/26,47.92.185.128/26,47.92.185.192/26,100.104.75.64/26
    英国(伦敦) 8.208.84.22, 100.104.161.0/26

配置RAM账号的类目管理权限

如果您使用子账号来管理类目,则需要为子账号添加AliyunDataWorksFullAccess权限。详情请参见为RAM账号授权

后续步骤

配置完成白名单及类目管理权限后,您可以进行元数据采集或类目管理。详情请参见采集元数据配置管理类目