SQL Server

AWS Security Token Service (STS) GetSessionToken

See more AWS Security Token Service Examples

Returns a set of temporary credentials for an AWS account or IAM user. SQL Server

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @success int
    SELECT @success = 0

    --  This example requires the Chilkat API to have been previously unlocked.
    --  See Global Unlock Sample for sample code.

    DECLARE @rest int
    EXEC @hr = sp_OACreate 'Chilkat.Rest', @rest OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    --  Connect to the Amazon AWS REST server.
    --  such as https://sts.us-west-2.amazonaws.com/
    DECLARE @bTls int
    SELECT @bTls = 1
    DECLARE @port int
    SELECT @port = 443
    DECLARE @bAutoReconnect int
    SELECT @bAutoReconnect = 1
    EXEC sp_OAMethod @rest, 'Connect', @success OUT, 'sts.us-west-2.amazonaws.com', @port, @bTls, @bAutoReconnect

    --  Provide AWS credentials for the REST call.
    DECLARE @authAws int
    EXEC @hr = sp_OACreate 'Chilkat.AuthAws', @authAws OUT

    EXEC sp_OASetProperty @authAws, 'AccessKey', 'AWS_ACCESS_KEY'
    EXEC sp_OASetProperty @authAws, 'SecretKey', 'AWS_SECRET_KEY'
    --  the region should match our URL above..
    --  See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
    EXEC sp_OASetProperty @authAws, 'Region', 'us-west-2'
    EXEC sp_OASetProperty @authAws, 'ServiceName', 'sts'

    EXEC sp_OAMethod @rest, 'SetAuthAws', @success OUT, @authAws

    EXEC sp_OAMethod @rest, 'AddQueryParam', @success OUT, 'Version', '2011-06-15'
    EXEC sp_OAMethod @rest, 'AddQueryParam', @success OUT, 'Action', 'GetSessionToken'
    EXEC sp_OAMethod @rest, 'AddQueryParam', @success OUT, 'DurationSeconds', '3600'

    DECLARE @responseXml nvarchar(4000)
    EXEC sp_OAMethod @rest, 'FullRequestNoBody', @responseXml OUT, 'GET', '/'
    EXEC sp_OAGetProperty @rest, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 <> 1
      BEGIN
        EXEC sp_OAGetProperty @rest, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @rest
        EXEC @hr = sp_OADestroy @authAws
        RETURN
      END

    --  A successful response will have a status code equal to 200.
    EXEC sp_OAGetProperty @rest, 'ResponseStatusCode', @iTmp0 OUT
    IF @iTmp0 <> 200
      BEGIN

        EXEC sp_OAGetProperty @rest, 'ResponseStatusCode', @iTmp0 OUT
        PRINT 'response status code = ' + @iTmp0

        EXEC sp_OAGetProperty @rest, 'ResponseStatusText', @sTmp0 OUT
        PRINT 'response status text = ' + @sTmp0

        EXEC sp_OAGetProperty @rest, 'ResponseHeader', @sTmp0 OUT
        PRINT 'response header: ' + @sTmp0

        PRINT 'response body: ' + @responseXml
        EXEC @hr = sp_OADestroy @rest
        EXEC @hr = sp_OADestroy @authAws
        RETURN
      END

    --  Examine the successful XML response (shown below)
    DECLARE @xml int
    EXEC @hr = sp_OACreate 'Chilkat.Xml', @xml OUT

    EXEC sp_OAMethod @xml, 'LoadXml', @success OUT, @responseXml
    EXEC sp_OAMethod @xml, 'GetXml', @sTmp0 OUT
    PRINT @sTmp0

    --  Sample response:

    --  <?xml version="1.0" encoding="utf-8"?>
    --  <GetSessionTokenResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
    --      <GetSessionTokenResult>
    --          <Credentials>
    --              <AccessKeyId>AS........T4N</AccessKeyId>
    --              <SecretAccessKey>05W........ARPMr</SecretAccessKey>
    --              <SessionToken>IQoJb3J........llpIMI=</SessionToken>
    --              <Expiration>2022-09-07T00:22:51Z</Expiration>
    --          </Credentials>
    --      </GetSessionTokenResult>
    --      <ResponseMetadata>
    --          <RequestId>8bad22cc-1c55-4265-a010-45d139359404</RequestId>
    --      </ResponseMetadata>
    --  </GetSessionTokenResponse>

    --  Sample parse code:
    DECLARE @GetSessionTokenResponse_xmlns nvarchar(4000)
    EXEC sp_OAMethod @xml, 'GetAttrValue', @GetSessionTokenResponse_xmlns OUT, 'xmlns'
    DECLARE @AccessKeyId nvarchar(4000)
    EXEC sp_OAMethod @xml, 'GetChildContent', @AccessKeyId OUT, 'GetSessionTokenResult|Credentials|AccessKeyId'
    DECLARE @SecretAccessKey nvarchar(4000)
    EXEC sp_OAMethod @xml, 'GetChildContent', @SecretAccessKey OUT, 'GetSessionTokenResult|Credentials|SecretAccessKey'
    DECLARE @SessionToken nvarchar(4000)
    EXEC sp_OAMethod @xml, 'GetChildContent', @SessionToken OUT, 'GetSessionTokenResult|Credentials|SessionToken'
    DECLARE @Expiration nvarchar(4000)
    EXEC sp_OAMethod @xml, 'GetChildContent', @Expiration OUT, 'GetSessionTokenResult|Credentials|Expiration'
    DECLARE @RequestId nvarchar(4000)
    EXEC sp_OAMethod @xml, 'GetChildContent', @RequestId OUT, 'ResponseMetadata|RequestId'

    --  Save the session token XML to a file for use by another Chilkat example..
    EXEC sp_OAMethod @xml, 'SaveXml', @success OUT, 'qa_data/tokens/aws_session_token.xml'

    EXEC @hr = sp_OADestroy @rest
    EXEC @hr = sp_OADestroy @authAws
    EXEC @hr = sp_OADestroy @xml


END
GO