React Native

AWS Security Token Service (STS) AssumeRole

See more AWS Security Token Service Examples

Returns a set of temporary security credentials that you can use to access AWS resources. These temporary credentials consist of an access key ID, a secret access key, and a security token. Typically, you use AssumeRole within your account or for cross-account access. React Native

import { AuthAws, Rest, Xml } from '@chilkat/react-native'

async function chilkatExample() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  const rest = new Rest();

  // Connect to the Amazon AWS REST server.
  // such as https://sts.us-west-2.amazonaws.com/
  const bTls = true;
  const port = 443;
  const bAutoReconnect = true;
  await rest.connectAsync('sts.us-west-2.amazonaws.com', port, bTls, bAutoReconnect);

  // Provide AWS credentials for the REST call.
  const authAws = new AuthAws();
  authAws.accessKey = 'AWS_ACCESS_KEY';
  authAws.secretKey = 'AWS_SECRET_KEY';
  // the region should match our URL above..
  // See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
  authAws.region = 'us-west-2';
  authAws.serviceName = 'sts';

  rest.setAuthAws(authAws);

  // Sample Request
  // https://sts.amazonaws.com/
  // ?Version=2011-06-15
  // &Action=AssumeRole
  // &RoleSessionName=testAR
  // &RoleArn=arn:aws:iam::123456789012:role/demo
  // &PolicyArns.member.1.arn=arn:aws:iam::123456789012:policy/demopolicy1
  // &PolicyArns.member.2.arn=arn:aws:iam::123456789012:policy/demopolicy2
  // &Policy={"Version":"2012-10-17","Statement":[{"Sid":"Stmt1",
  // "Effect":"Allow","Action":"s3:*","Resource":"*"}]}
  // &DurationSeconds=3600
  // &Tags.member.1.Key=Project
  // &Tags.member.1.Value=Pegasus
  // &Tags.member.2.Key=Team
  // &Tags.member.2.Value=Engineering
  // &Tags.member.3.Key=Cost-Center
  // &Tags.member.3.Value=12345
  // &TransitiveTagKeys.member.1=Project
  // &TransitiveTagKeys.member.2=Cost-Center
  // &ExternalId=123ABC
  // &SourceIdentity=Alice
  // &AUTHPARAMS

  rest.addQueryParam('Version', '2011-06-15');
  rest.addQueryParam('Action', 'AssumeRole');
  rest.addQueryParam('DurationSeconds', '3600');

  rest.addQueryParam('RoleSessionName', 'testAR');
  rest.addQueryParam('RoleArn', 'arn:aws:iam::123456789012:role/demo');
  rest.addQueryParam('PolicyArns.member.1.arn', 'arn:aws:iam::123456789012:policy/demopolicy1');
  rest.addQueryParam('PolicyArns.member.2.arn', 'arn:aws:iam::123456789012:policy/demopolicy2');
  rest.addQueryParam('Policy', '{"Version":"2012-10-17","Statement":[{"Sid":"Stmt1","Effect":"Allow","Action":"s3:*","Resource":"*"}]}');
  rest.addQueryParam('Tags.member.1.Key', 'Project');
  rest.addQueryParam('Tags.member.1.Value', 'Pegasus');
  rest.addQueryParam('Tags.member.2.Key', 'Team');
  rest.addQueryParam('Tags.member.2.Value', 'Engineering');
  rest.addQueryParam('Tags.member.3.Key', 'Cost-Center');
  rest.addQueryParam('Tags.member.3.Value', '12345');
  rest.addQueryParam('TransitiveTagKeys.member.1', 'Project');
  rest.addQueryParam('TransitiveTagKeys.member.2', 'Cost-Center');
  rest.addQueryParam('ExternalId', '123ABC');
  rest.addQueryParam('SourceIdentity', 'Alice');

  let responseXml: string;
  try {
    responseXml = await rest.fullRequestNoBodyAsync('GET', '/');
  } catch {
    console.log(rest.lastErrorText);
    return;
  }

  // A successful response will have a status code equal to 200.
  if (rest.responseStatusCode !== 200) {
    console.log(`response status code = ${rest.responseStatusCode}`);
    console.log(`response status text = ${rest.responseStatusText}`);
    console.log(`response header: ${rest.responseHeader}`);
    console.log(`response body: ${responseXml}`);
    return;
  }

  // Examine the successful XML response (shown below)
  const xml = new Xml();
  xml.loadXml(responseXml);
  console.log(xml.getXml());

  // Sample response:

  // <AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
  //   <AssumeRoleResult>
  //   <SourceIdentity>Alice</SourceIdentity>
  //     <AssumedRoleUser>
  //       <Arn>arn:aws:sts::123456789012:assumed-role/demo/TestAR</Arn>
  //       <AssumedRoleId>ARO123EXAMPLE123:TestAR</AssumedRoleId>
  //     </AssumedRoleUser>
  //     <Credentials>
  //       <AccessKeyId>ASIAIOSFODNN7EXAMPLE</AccessKeyId>
  //       <SecretAccessKey>wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY</SecretAccessKey>
  //       <SessionToken>
  //        AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
  //        LWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGd
  //        QrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU
  //        9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz
  //        +scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA==
  //       </SessionToken>
  //       <Expiration>2019-11-09T13:34:41Z</Expiration>
  //     </Credentials>
  //     <PackedPolicySize>6</PackedPolicySize>
  //   </AssumeRoleResult>
  //   <ResponseMetadata>
  //     <RequestId>c6104cbe-af31-11e0-8154-cbc7ccf896c7</RequestId>
  //   </ResponseMetadata>
  // </AssumeRoleResponse>

  // Sample parse code:

  const assumeRoleResponseXmlns = xml.getAttrValue('xmlns');
  const sourceIdentity = xml.getChildContent('AssumeRoleResult|SourceIdentity');
  const arn = xml.getChildContent('AssumeRoleResult|AssumedRoleUser|Arn');
  const assumedRoleId = xml.getChildContent('AssumeRoleResult|AssumedRoleUser|AssumedRoleId');
  const accessKeyId = xml.getChildContent('AssumeRoleResult|Credentials|AccessKeyId');
  const secretAccessKey = xml.getChildContent('AssumeRoleResult|Credentials|SecretAccessKey');
  const sessionToken = xml.getChildContent('AssumeRoleResult|Credentials|SessionToken');
  const expiration = xml.getChildContent('AssumeRoleResult|Credentials|Expiration');
  const packedPolicySize = xml.getChildIntValue('AssumeRoleResult|PackedPolicySize');
  const requestId = xml.getChildContent('ResponseMetadata|RequestId');

  // Save the session token XML to a file for use by another Chilkat example..
  xml.saveXml('qa_data/tokens/aws_session_token.xml');
}