(Delphi DLL) AWS Security Token Service (STS) GetSessionToken

See more AWS Security Token Service Examples

Returns a set of temporary credentials for an AWS account or IAM user.

For more information, see https://docs.aws.amazon.com/STS/latest/APIReference/API_GetSessionToken.html

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, AuthAws, Rest, Xml;

...

procedure TForm1.Button1Click(Sender: TObject);
var
rest: HCkRest;
bTls: Boolean;
port: Integer;
bAutoReconnect: Boolean;
success: Boolean;
authAws: HCkAuthAws;
responseXml: PWideChar;
xml: HCkXml;
GetSessionTokenResponse_xmlns: PWideChar;
AccessKeyId: PWideChar;
SecretAccessKey: PWideChar;
SessionToken: PWideChar;
Expiration: PWideChar;
RequestId: PWideChar;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

rest := CkRest_Create();

// Connect to the Amazon AWS REST server.
// such as https://sts.us-west-2.amazonaws.com/
bTls := True;
port := 443;
bAutoReconnect := True;
success := CkRest_Connect(rest,'sts.us-west-2.amazonaws.com',port,bTls,bAutoReconnect);

// Provide AWS credentials for the REST call.
authAws := CkAuthAws_Create();
CkAuthAws_putAccessKey(authAws,'AWS_ACCESS_KEY');
CkAuthAws_putSecretKey(authAws,'AWS_SECRET_KEY');
// the region should match our URL above..
// See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
CkAuthAws_putRegion(authAws,'us-west-2');
CkAuthAws_putServiceName(authAws,'sts');

CkRest_SetAuthAws(rest,authAws);

CkRest_AddQueryParam(rest,'Version','2011-06-15');
CkRest_AddQueryParam(rest,'Action','GetSessionToken');
CkRest_AddQueryParam(rest,'DurationSeconds','3600');

responseXml := CkRest__fullRequestNoBody(rest,'GET','/');
if (CkRest_getLastMethodSuccess(rest) <> True) then
  begin
    Memo1.Lines.Add(CkRest__lastErrorText(rest));
    Exit;
  end;

// A successful response will have a status code equal to 200.
if (CkRest_getResponseStatusCode(rest) <> 200) then
  begin
    Memo1.Lines.Add('response status code = ' + IntToStr(CkRest_getResponseStatusCode(rest)));
    Memo1.Lines.Add('response status text = ' + CkRest__responseStatusText(rest));
    Memo1.Lines.Add('response header: ' + CkRest__responseHeader(rest));
    Memo1.Lines.Add('response body: ' + responseXml);
    Exit;
  end;

// Examine the successful XML response (shown below)
xml := CkXml_Create();
CkXml_LoadXml(xml,responseXml);
Memo1.Lines.Add(CkXml__getXml(xml));

// Sample response:

// <?xml version="1.0" encoding="utf-8"?>
// <GetSessionTokenResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
//     <GetSessionTokenResult>
//         <Credentials>
//             <AccessKeyId>AS........T4N</AccessKeyId>
//             <SecretAccessKey>05W........ARPMr</SecretAccessKey>
//             <SessionToken>IQoJb3J........llpIMI=</SessionToken>
//             <Expiration>2022-09-07T00:22:51Z</Expiration>
//         </Credentials>
//     </GetSessionTokenResult>
//     <ResponseMetadata>
//         <RequestId>8bad22cc-1c55-4265-a010-45d139359404</RequestId>
//     </ResponseMetadata>
// </GetSessionTokenResponse>

// Sample parse code:
GetSessionTokenResponse_xmlns := CkXml__getAttrValue(xml,'xmlns');
AccessKeyId := CkXml__getChildContent(xml,'GetSessionTokenResult|Credentials|AccessKeyId');
SecretAccessKey := CkXml__getChildContent(xml,'GetSessionTokenResult|Credentials|SecretAccessKey');
SessionToken := CkXml__getChildContent(xml,'GetSessionTokenResult|Credentials|SessionToken');
Expiration := CkXml__getChildContent(xml,'GetSessionTokenResult|Credentials|Expiration');
RequestId := CkXml__getChildContent(xml,'ResponseMetadata|RequestId');

// Save the session token XML to a file for use by another Chilkat example..
success := CkXml_SaveXml(xml,'qa_data/tokens/aws_session_token.xml');

CkRest_Dispose(rest);
CkAuthAws_Dispose(authAws);
CkXml_Dispose(xml);

end;