(Visual FoxPro) AWS Security Token Service (STS) AssumeRole

See more AWS Security Token Service Examples

Returns a set of temporary security credentials that you can use to access AWS resources. These temporary credentials consist of an access key ID, a secret access key, and a security token. Typically, you use AssumeRole within your account or for cross-account access.

For more information, see https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL loRest
LOCAL lnBTls
LOCAL lnPort
LOCAL lnBAutoReconnect
LOCAL lnSuccess
LOCAL loAuthAws
LOCAL lcResponseXml
LOCAL loXml
LOCAL lcAssumeRoleResponse_xmlns
LOCAL lcSourceIdentity
LOCAL lcArn
LOCAL lcAssumedRoleId
LOCAL lcAccessKeyId
LOCAL lcSecretAccessKey
LOCAL lcSessionToken
LOCAL lcExpiration
LOCAL lnPackedPolicySize
LOCAL lcRequestId

* This example requires the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Rest')
loRest = CreateObject('Chilkat.Rest')

* Connect to the Amazon AWS REST server.
* such as https://sts.us-west-2.amazonaws.com/
lnBTls = 1
lnPort = 443
lnBAutoReconnect = 1
lnSuccess = loRest.Connect("sts.us-west-2.amazonaws.com",lnPort,lnBTls,lnBAutoReconnect)

* Provide AWS credentials for the REST call.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.AuthAws')
loAuthAws = CreateObject('Chilkat.AuthAws')
loAuthAws.AccessKey = "AWS_ACCESS_KEY"
loAuthAws.SecretKey = "AWS_SECRET_KEY"
* the region should match our URL above..
* See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
loAuthAws.Region = "us-west-2"
loAuthAws.ServiceName = "sts"

loRest.SetAuthAws(loAuthAws)

* Sample Request
* https://sts.amazonaws.com/
* ?Version=2011-06-15
* &Action=AssumeRole
* &RoleSessionName=testAR
* &RoleArn=arn:aws:iam::123456789012:role/demo
* &PolicyArns.member.1.arn=arn:aws:iam::123456789012:policy/demopolicy1
* &PolicyArns.member.2.arn=arn:aws:iam::123456789012:policy/demopolicy2
* &Policy={"Version":"2012-10-17","Statement":[{"Sid":"Stmt1",
* "Effect":"Allow","Action":"s3:*","Resource":"*"}]}
* &DurationSeconds=3600
* &Tags.member.1.Key=Project
* &Tags.member.1.Value=Pegasus
* &Tags.member.2.Key=Team
* &Tags.member.2.Value=Engineering
* &Tags.member.3.Key=Cost-Center
* &Tags.member.3.Value=12345
* &TransitiveTagKeys.member.1=Project
* &TransitiveTagKeys.member.2=Cost-Center
* &ExternalId=123ABC
* &SourceIdentity=Alice
* &AUTHPARAMS

loRest.AddQueryParam("Version","2011-06-15")
loRest.AddQueryParam("Action","AssumeRole")
loRest.AddQueryParam("DurationSeconds","3600")

loRest.AddQueryParam("RoleSessionName","testAR")
loRest.AddQueryParam("RoleArn","arn:aws:iam::123456789012:role/demo")
loRest.AddQueryParam("PolicyArns.member.1.arn","arn:aws:iam::123456789012:policy/demopolicy1")
loRest.AddQueryParam("PolicyArns.member.2.arn","arn:aws:iam::123456789012:policy/demopolicy2")
loRest.AddQueryParam("Policy",'{"Version":"2012-10-17","Statement":[{"Sid":"Stmt1","Effect":"Allow","Action":"s3:*","Resource":"*"}]}')
loRest.AddQueryParam("Tags.member.1.Key","Project")
loRest.AddQueryParam("Tags.member.1.Value","Pegasus")
loRest.AddQueryParam("Tags.member.2.Key","Team")
loRest.AddQueryParam("Tags.member.2.Value","Engineering")
loRest.AddQueryParam("Tags.member.3.Key","Cost-Center")
loRest.AddQueryParam("Tags.member.3.Value","12345")
loRest.AddQueryParam("TransitiveTagKeys.member.1","Project")
loRest.AddQueryParam("TransitiveTagKeys.member.2","Cost-Center")
loRest.AddQueryParam("ExternalId","123ABC")
loRest.AddQueryParam("SourceIdentity","Alice")

lcResponseXml = loRest.FullRequestNoBody("GET","/")
IF (loRest.LastMethodSuccess <> 1) THEN
    ? loRest.LastErrorText
    RELEASE loRest
    RELEASE loAuthAws
    CANCEL
ENDIF

* A successful response will have a status code equal to 200.
IF (loRest.ResponseStatusCode <> 200) THEN
    ? "response status code = " + STR(loRest.ResponseStatusCode)
    ? "response status text = " + loRest.ResponseStatusText
    ? "response header: " + loRest.ResponseHeader
    ? "response body: " + lcResponseXml
    RELEASE loRest
    RELEASE loAuthAws
    CANCEL
ENDIF

* Examine the successful XML response (shown below)
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Xml')
loXml = CreateObject('Chilkat.Xml')
loXml.LoadXml(lcResponseXml)
? loXml.GetXml()

* Sample response:

* <AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
*   <AssumeRoleResult>
*   <SourceIdentity>Alice</SourceIdentity>
*     <AssumedRoleUser>
*       <Arn>arn:aws:sts::123456789012:assumed-role/demo/TestAR</Arn>
*       <AssumedRoleId>ARO123EXAMPLE123:TestAR</AssumedRoleId>
*     </AssumedRoleUser>
*     <Credentials>
*       <AccessKeyId>ASIAIOSFODNN7EXAMPLE</AccessKeyId>
*       <SecretAccessKey>wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY</SecretAccessKey>
*       <SessionToken>
*        AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
*        LWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGd
*        QrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU
*        9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz
*        +scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA==
*       </SessionToken>
*       <Expiration>2019-11-09T13:34:41Z</Expiration>
*     </Credentials>
*     <PackedPolicySize>6</PackedPolicySize>
*   </AssumeRoleResult>
*   <ResponseMetadata>
*     <RequestId>c6104cbe-af31-11e0-8154-cbc7ccf896c7</RequestId>
*   </ResponseMetadata>
* </AssumeRoleResponse>

* Sample parse code:

lcAssumeRoleResponse_xmlns = loXml.GetAttrValue("xmlns")
lcSourceIdentity = loXml.GetChildContent("AssumeRoleResult|SourceIdentity")
lcArn = loXml.GetChildContent("AssumeRoleResult|AssumedRoleUser|Arn")
lcAssumedRoleId = loXml.GetChildContent("AssumeRoleResult|AssumedRoleUser|AssumedRoleId")
lcAccessKeyId = loXml.GetChildContent("AssumeRoleResult|Credentials|AccessKeyId")
lcSecretAccessKey = loXml.GetChildContent("AssumeRoleResult|Credentials|SecretAccessKey")
lcSessionToken = loXml.GetChildContent("AssumeRoleResult|Credentials|SessionToken")
lcExpiration = loXml.GetChildContent("AssumeRoleResult|Credentials|Expiration")
lnPackedPolicySize = loXml.GetChildIntValue("AssumeRoleResult|PackedPolicySize")
lcRequestId = loXml.GetChildContent("ResponseMetadata|RequestId")

* Save the session token XML to a file for use by another Chilkat example..
lnSuccess = loXml.SaveXml("qa_data/tokens/aws_session_token.xml")

RELEASE loRest
RELEASE loAuthAws
RELEASE loXml