Generating Temporary Access Keys for CML API Endpoints

Question

Hello Cloudera Community,I'm working on a project where I need to provide users with temporary access to call specific Cloudera AI API endpoints, particularly for interacting with deployed models.My goal is to avoid granting users long-lived API V2 keys and instead generate short-lived, scoped access credentials that expire after a set time (e.g., 2 hours).After exploring the CML API v2 and the cmlapi library, I'm finding it challenging to identify a direct method for generating these temporary, scoped access keys.My questions are:Is there a supported mechanism within the CML API v2 or cmlapi to generate temporary access keys with a specified expiration time?If not, are there recommended alternative approaches for providing users with limited, time-bound access to CML API endpoints?Are there plans to introduce temporary access key generation functionality in future CML releases?Is there a best practice to follow for this kind of implementation?I'm aiming for a solution that prioritizes security and minimizes the risk of exposing long-term credentials.Any guidance or insights from the community would be greatly appreciated.Thank you.

Gopinath · Accepted Answer

Is there a supported mechanism within the CML API v2 or cmlapi to generate temporary access keys with a specified expiration time?Yes. You may consider using cmlv2 api createV2Key [1]. I am able to get a apikey created for myself with ttl as 5 days ie 30 Mar 2025. api request:curl -X POST "https://trimmed.cloudera.site/api/v2/users/ngopinath/v2_keys" -H "accept: application/json" -H "Authorization: Bearer trimmed.trimmed" -H "Content-Type: application/json" -d "{ \"comments\": \"test\", \"expiry_date\": \"2025-03-30\", \"username\": \"ngopinath\"}"api response:{  "api_key": "trimmed.trimmed",  "key_id": "trimmed",  "created_at": "2025-03-25",  "expiry_date": "2025-03-30",  "comments": "test",  "audiences": [    "API"  ]}Since we have solution for Q#1, I presume following queries are invalidated. Let me know if you are able to proceed with api createV2Key.[1] https://docs.cloudera.com/machine-learning/cloud/rest-api-reference-ai-workbench/index.html#api-CMLService-createV2Key

DianaTorres · Answer

@waelfatah Welcome to the Cloudera Community!

To help you get the best possible solution, I have tagged our CML experts @smdas @Mike @Gopinath who may be able to assist you further.

Please keep us updated on your post, and we hope you find a satisfactory solution to your query.

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.