B4X

AWS Security Token Service (STS) AssumeRole

See more AWS Security Token Service Examples

Returns a set of temporary security credentials that you can use to access AWS resources. These temporary credentials consist of an access key ID, a secret access key, and a security token. Typically, you use AssumeRole within your account or for cross-account access. B4X

Dim success As Boolean = False

'  This example requires the Chilkat API to have been previously unlocked.
'  See Global Unlock Sample for sample code.

Dim rest As ChilkatRest
rest.Initialize("rest")

'  Connect to the Amazon AWS REST server.
'  such as https://sts.us-west-2.amazonaws.com/
Dim bTls As Boolean = True
Dim port As Int = 443
Dim bAutoReconnect As Boolean = True
success = rest.Connect("sts.us-west-2.amazonaws.com", port, bTls, bAutoReconnect)

'  Provide AWS credentials for the REST call.
Dim authAws As ChilkatAuthAws
authAws.Initialize
authAws.AccessKey = "AWS_ACCESS_KEY"
authAws.SecretKey = "AWS_SECRET_KEY"
'  the region should match our URL above..
'  See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
authAws.Region = "us-west-2"
authAws.ServiceName = "sts"

rest.SetAuthAws(authAws)

'  Sample Request
'  https://sts.amazonaws.com/
'  ?Version=2011-06-15
'  &Action=AssumeRole
'  &RoleSessionName=testAR
'  &RoleArn=arn:aws:iam::123456789012:role/demo
'  &PolicyArns.member.1.arn=arn:aws:iam::123456789012:policy/demopolicy1
'  &PolicyArns.member.2.arn=arn:aws:iam::123456789012:policy/demopolicy2
'  &Policy={"Version":"2012-10-17","Statement":[{"Sid":"Stmt1",
'  "Effect":"Allow","Action":"s3:*","Resource":"*"}]}
'  &DurationSeconds=3600
'  &Tags.member.1.Key=Project
'  &Tags.member.1.Value=Pegasus
'  &Tags.member.2.Key=Team
'  &Tags.member.2.Value=Engineering
'  &Tags.member.3.Key=Cost-Center
'  &Tags.member.3.Value=12345
'  &TransitiveTagKeys.member.1=Project
'  &TransitiveTagKeys.member.2=Cost-Center
'  &ExternalId=123ABC
'  &SourceIdentity=Alice
'  &AUTHPARAMS

rest.AddQueryParam("Version", "2011-06-15")
rest.AddQueryParam("Action", "AssumeRole")
rest.AddQueryParam("DurationSeconds", "3600")

rest.AddQueryParam("RoleSessionName", "testAR")
rest.AddQueryParam("RoleArn", "arn:aws:iam::123456789012:role/demo")
rest.AddQueryParam("PolicyArns.member.1.arn", "arn:aws:iam::123456789012:policy/demopolicy1")
rest.AddQueryParam("PolicyArns.member.2.arn", "arn:aws:iam::123456789012:policy/demopolicy2")
rest.AddQueryParam("Policy", "{" & Chr(34) & "Version" & Chr(34) & ":" & Chr(34) & "2012-10-17" & Chr(34) & "," & Chr(34) & "Statement" & Chr(34) & ":[{" & Chr(34) & "Sid" & Chr(34) & ":" & Chr(34) & "Stmt1" & Chr(34) & "," & Chr(34) & "Effect" & Chr(34) & ":" & Chr(34) & "Allow" & Chr(34) & "," & Chr(34) & "Action" & Chr(34) & ":" & Chr(34) & "s3:*" & Chr(34) & "," & Chr(34) & "Resource" & Chr(34) & ":" & Chr(34) & "*" & Chr(34) & "}]}")
rest.AddQueryParam("Tags.member.1.Key", "Project")
rest.AddQueryParam("Tags.member.1.Value", "Pegasus")
rest.AddQueryParam("Tags.member.2.Key", "Team")
rest.AddQueryParam("Tags.member.2.Value", "Engineering")
rest.AddQueryParam("Tags.member.3.Key", "Cost-Center")
rest.AddQueryParam("Tags.member.3.Value", "12345")
rest.AddQueryParam("TransitiveTagKeys.member.1", "Project")
rest.AddQueryParam("TransitiveTagKeys.member.2", "Cost-Center")
rest.AddQueryParam("ExternalId", "123ABC")
rest.AddQueryParam("SourceIdentity", "Alice")

Dim responseXml As String = rest.FullRequestNoBody("GET", "/")
If rest.LastMethodSuccess <> True Then
    Log(rest.LastErrorText)
    Return
End If


'  A successful response will have a status code equal to 200.
If rest.ResponseStatusCode <> 200 Then
    Log("response status code = " & rest.ResponseStatusCode)
    Log("response status text = " & rest.ResponseStatusText)
    Log("response header: " & rest.ResponseHeader)
    Log("response body: " & responseXml)
    Return
End If


'  Examine the successful XML response (shown below)
Dim xml As ChilkatXml
xml.Initialize
xml.LoadXml(responseXml)
Log(xml.GetXml)

'  Sample response:

'  <AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
'    <AssumeRoleResult>
'    <SourceIdentity>Alice</SourceIdentity>
'      <AssumedRoleUser>
'        <Arn>arn:aws:sts::123456789012:assumed-role/demo/TestAR</Arn>
'        <AssumedRoleId>ARO123EXAMPLE123:TestAR</AssumedRoleId>
'      </AssumedRoleUser>
'      <Credentials>
'        <AccessKeyId>ASIAIOSFODNN7EXAMPLE</AccessKeyId>
'        <SecretAccessKey>wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY</SecretAccessKey>
'        <SessionToken>
'         AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
'         LWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGd
'         QrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU
'         9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz
'         +scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA==
'        </SessionToken>
'        <Expiration>2019-11-09T13:34:41Z</Expiration>
'      </Credentials>
'      <PackedPolicySize>6</PackedPolicySize>
'    </AssumeRoleResult>
'    <ResponseMetadata>
'      <RequestId>c6104cbe-af31-11e0-8154-cbc7ccf896c7</RequestId>
'    </ResponseMetadata>
'  </AssumeRoleResponse>

'  Sample parse code:

Dim AssumeRoleResponse_xmlns As String = xml.GetAttrValue("xmlns")
Dim SourceIdentity As String = xml.GetChildContent("AssumeRoleResult|SourceIdentity")
Dim Arn As String = xml.GetChildContent("AssumeRoleResult|AssumedRoleUser|Arn")
Dim AssumedRoleId As String = xml.GetChildContent("AssumeRoleResult|AssumedRoleUser|AssumedRoleId")
Dim AccessKeyId As String = xml.GetChildContent("AssumeRoleResult|Credentials|AccessKeyId")
Dim SecretAccessKey As String = xml.GetChildContent("AssumeRoleResult|Credentials|SecretAccessKey")
Dim SessionToken As String = xml.GetChildContent("AssumeRoleResult|Credentials|SessionToken")
Dim Expiration As String = xml.GetChildContent("AssumeRoleResult|Credentials|Expiration")
Dim PackedPolicySize As Int = xml.GetChildIntValue("AssumeRoleResult|PackedPolicySize")
Dim RequestId As String = xml.GetChildContent("ResponseMetadata|RequestId")

'  Save the session token XML to a file for use by another Chilkat example..
success = xml.SaveXml("qa_data/tokens/aws_session_token.xml")