C++

AWS Security Token Service (STS) GetSessionToken

See more AWS Security Token Service Examples

Returns a set of temporary credentials for an AWS account or IAM user. C++

#include <CkRest.h>
#include <CkAuthAws.h>
#include <CkXml.h>

void ChilkatSample(void)
    {
    bool success = false;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkRest rest;

    // Connect to the Amazon AWS REST server.
    // such as https://sts.us-west-2.amazonaws.com/
    bool bTls = true;
    int port = 443;
    bool bAutoReconnect = true;
    success = rest.Connect("sts.us-west-2.amazonaws.com",port,bTls,bAutoReconnect);

    // Provide AWS credentials for the REST call.
    CkAuthAws authAws;
    authAws.put_AccessKey("AWS_ACCESS_KEY");
    authAws.put_SecretKey("AWS_SECRET_KEY");
    // the region should match our URL above..
    // See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
    authAws.put_Region("us-west-2");
    authAws.put_ServiceName("sts");

    rest.SetAuthAws(authAws);

    rest.AddQueryParam("Version","2011-06-15");
    rest.AddQueryParam("Action","GetSessionToken");
    rest.AddQueryParam("DurationSeconds","3600");

    const char *responseXml = rest.fullRequestNoBody("GET","/");
    if (rest.get_LastMethodSuccess() != true) {
        std::cout << rest.lastErrorText() << "\r\n";
        return;
    }

    // A successful response will have a status code equal to 200.
    if (rest.get_ResponseStatusCode() != 200) {
        std::cout << "response status code = " << rest.get_ResponseStatusCode() << "\r\n";
        std::cout << "response status text = " << rest.responseStatusText() << "\r\n";
        std::cout << "response header: " << rest.responseHeader() << "\r\n";
        std::cout << "response body: " << responseXml << "\r\n";
        return;
    }

    // Examine the successful XML response (shown below)
    CkXml xml;
    xml.LoadXml(responseXml);
    std::cout << xml.getXml() << "\r\n";

    // Sample response:

    // <?xml version="1.0" encoding="utf-8"?>
    // <GetSessionTokenResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
    //     <GetSessionTokenResult>
    //         <Credentials>
    //             <AccessKeyId>AS........T4N</AccessKeyId>
    //             <SecretAccessKey>05W........ARPMr</SecretAccessKey>
    //             <SessionToken>IQoJb3J........llpIMI=</SessionToken>
    //             <Expiration>2022-09-07T00:22:51Z</Expiration>
    //         </Credentials>
    //     </GetSessionTokenResult>
    //     <ResponseMetadata>
    //         <RequestId>8bad22cc-1c55-4265-a010-45d139359404</RequestId>
    //     </ResponseMetadata>
    // </GetSessionTokenResponse>

    // Sample parse code:
    const char *GetSessionTokenResponse_xmlns = xml.getAttrValue("xmlns");
    const char *AccessKeyId = xml.getChildContent("GetSessionTokenResult|Credentials|AccessKeyId");
    const char *SecretAccessKey = xml.getChildContent("GetSessionTokenResult|Credentials|SecretAccessKey");
    const char *SessionToken = xml.getChildContent("GetSessionTokenResult|Credentials|SessionToken");
    const char *Expiration = xml.getChildContent("GetSessionTokenResult|Credentials|Expiration");
    const char *RequestId = xml.getChildContent("ResponseMetadata|RequestId");

    // Save the session token XML to a file for use by another Chilkat example..
    success = xml.SaveXml("qa_data/tokens/aws_session_token.xml");
    }