(Objective-C) AWS Security Token Service (STS) GetSessionToken

See more AWS Security Token Service Examples

Returns a set of temporary credentials for an AWS account or IAM user.

For more information, see https://docs.aws.amazon.com/STS/latest/APIReference/API_GetSessionToken.html

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoRest.h>
#import <CkoAuthAws.h>
#import <NSString.h>
#import <CkoXml.h>

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoRest *rest = [[CkoRest alloc] init];

// Connect to the Amazon AWS REST server.
// such as https://sts.us-west-2.amazonaws.com/
BOOL bTls = YES;
int port = 443;
BOOL bAutoReconnect = YES;
BOOL success = [rest Connect: @"sts.us-west-2.amazonaws.com" port: [NSNumber numberWithInt: port] tls: bTls autoReconnect: bAutoReconnect];

// Provide AWS credentials for the REST call.
CkoAuthAws *authAws = [[CkoAuthAws alloc] init];
authAws.AccessKey = @"AWS_ACCESS_KEY";
authAws.SecretKey = @"AWS_SECRET_KEY";
// the region should match our URL above..
// See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
authAws.Region = @"us-west-2";
authAws.ServiceName = @"sts";

[rest SetAuthAws: authAws];

[rest AddQueryParam: @"Version" value: @"2011-06-15"];
[rest AddQueryParam: @"Action" value: @"GetSessionToken"];
[rest AddQueryParam: @"DurationSeconds" value: @"3600"];

NSString *responseXml = [rest FullRequestNoBody: @"GET" uriPath: @"/"];
if (rest.LastMethodSuccess != YES) {
    NSLog(@"%@",rest.LastErrorText);
    return;
}

// A successful response will have a status code equal to 200.
if ([rest.ResponseStatusCode intValue] != 200) {
    NSLog(@"%@%d",@"response status code = ",[rest.ResponseStatusCode intValue]);
    NSLog(@"%@%@",@"response status text = ",rest.ResponseStatusText);
    NSLog(@"%@%@",@"response header: ",rest.ResponseHeader);
    NSLog(@"%@%@",@"response body: ",responseXml);
    return;
}

// Examine the successful XML response (shown below)
CkoXml *xml = [[CkoXml alloc] init];
[xml LoadXml: responseXml];
NSLog(@"%@",[xml GetXml]);

// Sample response:

// <?xml version="1.0" encoding="utf-8"?>
// <GetSessionTokenResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
//     <GetSessionTokenResult>
//         <Credentials>
//             <AccessKeyId>AS........T4N</AccessKeyId>
//             <SecretAccessKey>05W........ARPMr</SecretAccessKey>
//             <SessionToken>IQoJb3J........llpIMI=</SessionToken>
//             <Expiration>2022-09-07T00:22:51Z</Expiration>
//         </Credentials>
//     </GetSessionTokenResult>
//     <ResponseMetadata>
//         <RequestId>8bad22cc-1c55-4265-a010-45d139359404</RequestId>
//     </ResponseMetadata>
// </GetSessionTokenResponse>

// Sample parse code:
NSString *GetSessionTokenResponse_xmlns = [xml GetAttrValue: @"xmlns"];
NSString *AccessKeyId = [xml GetChildContent: @"GetSessionTokenResult|Credentials|AccessKeyId"];
NSString *SecretAccessKey = [xml GetChildContent: @"GetSessionTokenResult|Credentials|SecretAccessKey"];
NSString *SessionToken = [xml GetChildContent: @"GetSessionTokenResult|Credentials|SessionToken"];
NSString *Expiration = [xml GetChildContent: @"GetSessionTokenResult|Credentials|Expiration"];
NSString *RequestId = [xml GetChildContent: @"ResponseMetadata|RequestId"];

// Save the session token XML to a file for use by another Chilkat example..
success = [xml SaveXml: @"qa_data/tokens/aws_session_token.xml"];