Ubuntu本地测试AWS NeptuneDB GremlinGo CRUD代码故障排查求助

我正在使用AWS NeptuneDB，希望在Ubuntu本地环境中通过GremlinGo测试基础CRUD操作。已配置密钥凭证，但编写的代码无法正常运行，无法完成调试，以下是我的代码示例：

package main

import (
    "context"
    "fmt"
    "log"

    "github.com/aws/aws-sdk-go-v2/aws"
    "github.com/aws/aws-sdk-go-v2/config"
    "github.com/aws/aws-sdk-go-v2/service/neptune"
    "github.com/aws/aws-sdk-go-v2/service/neptune/types"
    "github.com/aws/aws-sdk-go-v2/aws/credentials"
)

const (
    ACCESS_KEY = "YOUR_ACCESS_KEY"
    SECRET_KEY = "YOUR_SECRET_KEY"
)

func main() {
    cfg, err := config.LoadDefaultConfig(context.TODO(),
        config.WithRegion("us-west-2"),
        config.WithCredentialsProvider(credentials.NewStaticCredentialsProvider(ACCESS_KEY, SECRET_KEY, "")),
    )
    if err != nil {
        log.Fatal("failed to load AWS config", err)
    }

    svc := neptune.NewFromConfig(cfg)

    // Insert data
    err = insertData(svc)
    if err != nil {
        log.Fatal("failed to insert data", err)
    }
    fmt.Println("Data inserted successfully")

    // Update data
    err = updateData(svc)
    if err != nil {
        log.Fatal("failed to update data", err)
    }
    fmt.Println("Data updated successfully")

    // Delete data
    err = deleteData(svc)
    if err != nil {
        log.Fatal("failed to delete data", err)
    }
    fmt.Println("Data deleted successfully")

    // Read data
    _, err = readData(svc)
    if err != nil {
        log.Fatal("failed to read data", err)
    }
    fmt.Println("Data read successfully")
}

// Insert data
func insertData(svc *neptune.Client) error {
    query := "g.addV('Person').property('name', 'John').property('age', 30).property('em', 'eer')"
    _, err := executeGremlinQuery(svc, query)
    return err
}

// Update data
func updateData(svc *neptune.Client) error {
    query := "g.V().has('name', 'John').property('age', 31)"
    _, err := executeGremlinQuery(svc, query)
    return err
}

// Delete data
func deleteData(svc *neptune.Client) error {
    query := "g.V().has('name', 'John').drop()"
    _, err := executeGremlinQuery(svc, query)
    return err
}

// Read data
func readData(svc *neptune.Client) ([]byte, error) {
    query := "g.V().has('name', 'John')"
    result, err := executeGremlinQuery(svc, query)
    if err != nil {
        return nil, err
    }
    fmt.Println("Result:", result)
    return result, nil
}

// Execute a Gremlin query
func executeGremlinQuery(svc *neptune.Client, query string) ([]byte, error) {
    input := &types.ExecuteStatementInput{
        GremlinQueryString: &query,
    }
    output, err := svc.ExecuteStatement(context.TODO(), input)
    if err != nil {
        return nil, err
    }
    return output.Items[0].Properties["value"].Value.([]byte), nil
}

核心问题 #

你误用了AWS SDK的neptune.Client——这个客户端是用来管理Neptune集群（如创建、删除实例）的，不是用来执行Gremlin查询的。执行Gremlin查询需要使用官方Gremlin Go客户端，并针对Neptune的IAM认证需求做签名处理。

修正后的代码 #

使用gremlin-go客户端结合AWS签名V4访问Neptune：

package main

import (
    "context"
    "fmt"
    "log"
    "time"
    "strings"
    "net/http"

    "github.com/apache/tinkerpop/gremlin-go/v3/driver"
    "github.com/aws/aws-sdk-go-v2/aws"
    "github.com/aws/aws-sdk-go-v2/config"
    "github.com/aws/aws-sdk-go-v2/aws/signer/v4"
)

func main() {
    // 加载AWS配置（优先用~/.aws/credentials或环境变量，避免硬编码密钥）
    cfg, err := config.LoadDefaultConfig(context.TODO(), config.WithRegion("us-west-2"))
    if err != nil {
        log.Fatalf("加载AWS配置失败: %v", err)
    }

    // 替换为你的Neptune集群端点（格式：wss://<cluster-endpoint>:8182/gremlin）
    neptuneEndpoint := "wss://your-neptune-cluster-endpoint.us-west-2.neptune.amazonaws.com:8182/gremlin"

    // 创建带AWS签名的Gremlin客户端
    client, err := createSignedGremlinClient(cfg, neptuneEndpoint)
    if err != nil {
        log.Fatalf("创建Gremlin客户端失败: %v", err)
    }
    defer client.Close()

    // 执行CRUD操作
    if err := insertData(client); err != nil {
        log.Fatalf("插入数据失败: %v", err)
    }
    fmt.Println("数据插入成功")

    if err := updateData(client); err != nil {
        log.Fatalf("更新数据失败: %v", err)
    }
    fmt.Println("数据更新成功")

    if err := readData(client); err != nil {
        log.Fatalf("读取数据失败: %v", err)
    }
    fmt.Println("数据读取成功")

    if err := deleteData(client); err != nil {
        log.Fatalf("删除数据失败: %v", err)
    }
    fmt.Println("数据删除成功")
}

// 创建带AWS V4签名的Gremlin客户端
func createSignedGremlinClient(cfg aws.Config, endpoint string) (*driver.Client, error) {
    // 解析端点，分离主机和路径
    parts := strings.Split(strings.TrimPrefix(endpoint, "wss://"), "/")
    host := parts[0]
    path := "/" + strings.Join(parts[1:], "/")

    signer := v4.NewSigner(cfg.Credentials)

    // 自定义请求签名函数
    signFunc := func(req *http.Request) error {
        _, err := signer.SignHTTP(context.TODO(), cfg.Credentials, req, "", "neptune-db", cfg.Region, time.Now())
        return err
    }

    // 配置Gremlin客户端
    driverCfg := driver.NewRemoteConnectionConfig(endpoint)
    driverCfg.WebsocketConfig.SignRequest = signFunc

    return driver.NewClientWithConfig(driverCfg)
}

// 插入数据
func insertData(client *driver.Client) error {
    query := "g.addV('Person').property('name', 'John').property('age', 30).property('email', 'john@example.com')"
    _, err := client.Submit(context.TODO(), query)
    return err
}

// 更新数据
func updateData(client *driver.Client) error {
    query := "g.V().has('name', 'John').property('age', 31)"
    _, err := client.Submit(context.TODO(), query)
    return err
}

// 读取数据
func readData(client *driver.Client) error {
    query := "g.V().has('name', 'John').valueMap()"
    result, err := client.Submit(context.TODO(), query)
    if err != nil {
        return err
    }

    var items []map[string]interface{}
    if err := result.All(&items); err != nil {
        return err
    }

    fmt.Println("查询结果:")
    for _, item := range items {
        fmt.Printf("%+v\n", item)
    }
    return nil
}

// 删除数据
func deleteData(client *driver.Client) error {
    query := "g.V().has('name', 'John').drop()"
    _, err := client.Submit(context.TODO(), query)
    return err
}

关键注意事项 #

1. 替换端点：将代码中的your-neptune-cluster-endpoint替换为你的Neptune集群实际端点。
2. 凭证管理：不要硬编码密钥，Ubuntu环境下可通过~/.aws/credentials文件或AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY环境变量配置凭证。
3. 网络访问：确保本地环境能访问Neptune集群——私有子网需通过VPN/堡垒机/VPC端点访问；公有子网需检查安全组是否开放8182端口入站流量。
4. 依赖安装：执行以下命令安装所需依赖：

   go get github.com/apache/tinkerpop/gremlin-go/v3/driver
   go get github.com/aws/aws-sdk-go-v2/config
   go get github.com/aws/aws-sdk-go-v2/aws/signer/v4
   

内容的提问来源于stack exchange，提问作者Asaduzzaman Sohel