Xbase++
Xbase++
AWS Security Token Service (STS) AssumeRole
See more AWS Security Token Service Examples
Returns a set of temporary security credentials that you can use to access AWS resources. These temporary credentials consist of an access key ID, a secret access key, and a security token. Typically, you use AssumeRole within your account or for cross-account access.Chilkat Xbase++ Downloads
LOCAL nSuccess
LOCAL oRest
LOCAL nBTls
LOCAL nPort
LOCAL nBAutoReconnect
LOCAL oAuthAws
LOCAL cResponseXml
LOCAL oXml
LOCAL cAssumeRoleResponse_xmlns
LOCAL cSourceIdentity
LOCAL cArn
LOCAL cAssumedRoleId
LOCAL cAccessKeyId
LOCAL cSecretAccessKey
LOCAL cSessionToken
LOCAL cExpiration
LOCAL nPackedPolicySize
LOCAL cRequestId
nSuccess := 0
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
oRest := CreateObject("Chilkat.Rest")
// Connect to the Amazon AWS REST server.
// such as https://sts.us-west-2.amazonaws.com/
nBTls := 1
nPort := 443
nBAutoReconnect := 1
nSuccess := oRest:Connect("sts.us-west-2.amazonaws.com", nPort, nBTls, nBAutoReconnect)
// Provide AWS credentials for the REST call.
oAuthAws := CreateObject("Chilkat.AuthAws")
oAuthAws:AccessKey := "AWS_ACCESS_KEY"
oAuthAws:SecretKey := "AWS_SECRET_KEY"
// the region should match our URL above..
// See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
oAuthAws:Region := "us-west-2"
oAuthAws:ServiceName := "sts"
oRest:SetAuthAws(oAuthAws)
// Sample Request
// https://sts.amazonaws.com/
// ?Version=2011-06-15
// &Action=AssumeRole
// &RoleSessionName=testAR
// &RoleArn=arn:aws:iam::123456789012:role/demo
// &PolicyArns.member.1.arn=arn:aws:iam::123456789012:policy/demopolicy1
// &PolicyArns.member.2.arn=arn:aws:iam::123456789012:policy/demopolicy2
// &Policy={"Version":"2012-10-17","Statement":[{"Sid":"Stmt1",
// "Effect":"Allow","Action":"s3:*","Resource":"*"}]}
// &DurationSeconds=3600
// &Tags.member.1.Key=Project
// &Tags.member.1.Value=Pegasus
// &Tags.member.2.Key=Team
// &Tags.member.2.Value=Engineering
// &Tags.member.3.Key=Cost-Center
// &Tags.member.3.Value=12345
// &TransitiveTagKeys.member.1=Project
// &TransitiveTagKeys.member.2=Cost-Center
// &ExternalId=123ABC
// &SourceIdentity=Alice
// &AUTHPARAMS
oRest:AddQueryParam("Version", "2011-06-15")
oRest:AddQueryParam("Action", "AssumeRole")
oRest:AddQueryParam("DurationSeconds", "3600")
oRest:AddQueryParam("RoleSessionName", "testAR")
oRest:AddQueryParam("RoleArn", "arn:aws:iam::123456789012:role/demo")
oRest:AddQueryParam("PolicyArns.member.1.arn", "arn:aws:iam::123456789012:policy/demopolicy1")
oRest:AddQueryParam("PolicyArns.member.2.arn", "arn:aws:iam::123456789012:policy/demopolicy2")
oRest:AddQueryParam("Policy", '{"Version":"2012-10-17","Statement":[{"Sid":"Stmt1","Effect":"Allow","Action":"s3:*","Resource":"*"}]}')
oRest:AddQueryParam("Tags.member.1.Key", "Project")
oRest:AddQueryParam("Tags.member.1.Value", "Pegasus")
oRest:AddQueryParam("Tags.member.2.Key", "Team")
oRest:AddQueryParam("Tags.member.2.Value", "Engineering")
oRest:AddQueryParam("Tags.member.3.Key", "Cost-Center")
oRest:AddQueryParam("Tags.member.3.Value", "12345")
oRest:AddQueryParam("TransitiveTagKeys.member.1", "Project")
oRest:AddQueryParam("TransitiveTagKeys.member.2", "Cost-Center")
oRest:AddQueryParam("ExternalId", "123ABC")
oRest:AddQueryParam("SourceIdentity", "Alice")
cResponseXml := oRest:FullRequestNoBody("GET", "/")
IF (oRest:LastMethodSuccess != 1)
? oRest:LastErrorText
oRest:destroy()
oAuthAws:destroy()
RETURN
ENDIF
// A successful response will have a status code equal to 200.
IF (oRest:ResponseStatusCode != 200)
? "response status code = " + Str(oRest:ResponseStatusCode)
? "response status text = " + oRest:ResponseStatusText
? "response header: " + oRest:ResponseHeader
? "response body: " + cResponseXml
oRest:destroy()
oAuthAws:destroy()
RETURN
ENDIF
// Examine the successful XML response (shown below)
oXml := CreateObject("Chilkat.Xml")
oXml:LoadXml(cResponseXml)
? oXml:GetXml()
// Sample response:
// <AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
// <AssumeRoleResult>
// <SourceIdentity>Alice</SourceIdentity>
// <AssumedRoleUser>
// <Arn>arn:aws:sts::123456789012:assumed-role/demo/TestAR</Arn>
// <AssumedRoleId>ARO123EXAMPLE123:TestAR</AssumedRoleId>
// </AssumedRoleUser>
// <Credentials>
// <AccessKeyId>ASIAIOSFODNN7EXAMPLE</AccessKeyId>
// <SecretAccessKey>wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY</SecretAccessKey>
// <SessionToken>
// AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
// LWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGd
// QrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU
// 9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz
// +scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA==
// </SessionToken>
// <Expiration>2019-11-09T13:34:41Z</Expiration>
// </Credentials>
// <PackedPolicySize>6</PackedPolicySize>
// </AssumeRoleResult>
// <ResponseMetadata>
// <RequestId>c6104cbe-af31-11e0-8154-cbc7ccf896c7</RequestId>
// </ResponseMetadata>
// </AssumeRoleResponse>
// Sample parse code:
cAssumeRoleResponse_xmlns := oXml:GetAttrValue("xmlns")
cSourceIdentity := oXml:GetChildContent("AssumeRoleResult|SourceIdentity")
cArn := oXml:GetChildContent("AssumeRoleResult|AssumedRoleUser|Arn")
cAssumedRoleId := oXml:GetChildContent("AssumeRoleResult|AssumedRoleUser|AssumedRoleId")
cAccessKeyId := oXml:GetChildContent("AssumeRoleResult|Credentials|AccessKeyId")
cSecretAccessKey := oXml:GetChildContent("AssumeRoleResult|Credentials|SecretAccessKey")
cSessionToken := oXml:GetChildContent("AssumeRoleResult|Credentials|SessionToken")
cExpiration := oXml:GetChildContent("AssumeRoleResult|Credentials|Expiration")
nPackedPolicySize := oXml:GetChildIntValue("AssumeRoleResult|PackedPolicySize")
cRequestId := oXml:GetChildContent("ResponseMetadata|RequestId")
// Save the session token XML to a file for use by another Chilkat example..
nSuccess := oXml:SaveXml("qa_data/tokens/aws_session_token.xml")
oRest:destroy()
oAuthAws:destroy()
oXml:destroy()