PHP Extension

AWS Security Token Service (STS) GetSessionToken

See more AWS Security Token Service Examples

Returns a set of temporary credentials for an AWS account or IAM user. PHP Extension

<?php

include("chilkat.php");

$success = false;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$rest = new CkRest();

// Connect to the Amazon AWS REST server.
// such as https://sts.us-west-2.amazonaws.com/
$bTls = true;
$port = 443;
$bAutoReconnect = true;
$success = $rest->Connect('sts.us-west-2.amazonaws.com',$port,$bTls,$bAutoReconnect);

// Provide AWS credentials for the REST call.
$authAws = new CkAuthAws();
$authAws->put_AccessKey('AWS_ACCESS_KEY');
$authAws->put_SecretKey('AWS_SECRET_KEY');
// the region should match our URL above..
// See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
$authAws->put_Region('us-west-2');
$authAws->put_ServiceName('sts');

$rest->SetAuthAws($authAws);

$rest->AddQueryParam('Version','2011-06-15');
$rest->AddQueryParam('Action','GetSessionToken');
$rest->AddQueryParam('DurationSeconds','3600');

$responseXml = $rest->fullRequestNoBody('GET','/');
if ($rest->get_LastMethodSuccess() != true) {
    print $rest->lastErrorText() . "\n";
    exit;
}

// A successful response will have a status code equal to 200.
if ($rest->get_ResponseStatusCode() != 200) {
    print 'response status code = ' . $rest->get_ResponseStatusCode() . "\n";
    print 'response status text = ' . $rest->responseStatusText() . "\n";
    print 'response header: ' . $rest->responseHeader() . "\n";
    print 'response body: ' . $responseXml . "\n";
    exit;
}

// Examine the successful XML response (shown below)
$xml = new CkXml();
$xml->LoadXml($responseXml);
print $xml->getXml() . "\n";

// Sample response:

// <?xml version="1.0" encoding="utf-8"?>
// <GetSessionTokenResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
//     <GetSessionTokenResult>
//         <Credentials>
//             <AccessKeyId>AS........T4N</AccessKeyId>
//             <SecretAccessKey>05W........ARPMr</SecretAccessKey>
//             <SessionToken>IQoJb3J........llpIMI=</SessionToken>
//             <Expiration>2022-09-07T00:22:51Z</Expiration>
//         </Credentials>
//     </GetSessionTokenResult>
//     <ResponseMetadata>
//         <RequestId>8bad22cc-1c55-4265-a010-45d139359404</RequestId>
//     </ResponseMetadata>
// </GetSessionTokenResponse>

// Sample parse code:
$GetSessionTokenResponse_xmlns = $xml->getAttrValue('xmlns');
$AccessKeyId = $xml->getChildContent('GetSessionTokenResult|Credentials|AccessKeyId');
$SecretAccessKey = $xml->getChildContent('GetSessionTokenResult|Credentials|SecretAccessKey');
$SessionToken = $xml->getChildContent('GetSessionTokenResult|Credentials|SessionToken');
$Expiration = $xml->getChildContent('GetSessionTokenResult|Credentials|Expiration');
$RequestId = $xml->getChildContent('ResponseMetadata|RequestId');

// Save the session token XML to a file for use by another Chilkat example..
$success = $xml->SaveXml('qa_data/tokens/aws_session_token.xml');

?>