(PowerShell) AWS Security Token Service (STS) GetSessionToken

See more AWS Security Token Service Examples

Returns a set of temporary credentials for an AWS account or IAM user.

For more information, see https://docs.aws.amazon.com/STS/latest/APIReference/API_GetSessionToken.html

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$rest = New-Object Chilkat.Rest

# Connect to the Amazon AWS REST server.
# such as https://sts.us-west-2.amazonaws.com/
$bTls = $true
$port = 443
$bAutoReconnect = $true
$success = $rest.Connect("sts.us-west-2.amazonaws.com",$port,$bTls,$bAutoReconnect)

# Provide AWS credentials for the REST call.
$authAws = New-Object Chilkat.AuthAws
$authAws.AccessKey = "AWS_ACCESS_KEY"
$authAws.SecretKey = "AWS_SECRET_KEY"
# the region should match our URL above..
# See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
$authAws.Region = "us-west-2"
$authAws.ServiceName = "sts"

$rest.SetAuthAws($authAws)

$rest.AddQueryParam("Version","2011-06-15")
$rest.AddQueryParam("Action","GetSessionToken")
$rest.AddQueryParam("DurationSeconds","3600")

$responseXml = $rest.FullRequestNoBody("GET","/")
if ($rest.LastMethodSuccess -ne $true) {
    $($rest.LastErrorText)
    exit
}

# A successful response will have a status code equal to 200.
if ($rest.ResponseStatusCode -ne 200) {
    $("response status code = " + $rest.ResponseStatusCode)
    $("response status text = " + $rest.ResponseStatusText)
    $("response header: " + $rest.ResponseHeader)
    $("response body: " + $responseXml)
    exit
}

# Examine the successful XML response (shown below)
$xml = New-Object Chilkat.Xml
$xml.LoadXml($responseXml)
$($xml.GetXml())

# Sample response:

# <?xml version="1.0" encoding="utf-8"?>
# <GetSessionTokenResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
#     <GetSessionTokenResult>
#         <Credentials>
#             <AccessKeyId>AS........T4N</AccessKeyId>
#             <SecretAccessKey>05W........ARPMr</SecretAccessKey>
#             <SessionToken>IQoJb3J........llpIMI=</SessionToken>
#             <Expiration>2022-09-07T00:22:51Z</Expiration>
#         </Credentials>
#     </GetSessionTokenResult>
#     <ResponseMetadata>
#         <RequestId>8bad22cc-1c55-4265-a010-45d139359404</RequestId>
#     </ResponseMetadata>
# </GetSessionTokenResponse>

# Sample parse code:
$GetSessionTokenResponse_xmlns = $xml.GetAttrValue("xmlns")
$AccessKeyId = $xml.GetChildContent("GetSessionTokenResult|Credentials|AccessKeyId")
$SecretAccessKey = $xml.GetChildContent("GetSessionTokenResult|Credentials|SecretAccessKey")
$SessionToken = $xml.GetChildContent("GetSessionTokenResult|Credentials|SessionToken")
$Expiration = $xml.GetChildContent("GetSessionTokenResult|Credentials|Expiration")
$RequestId = $xml.GetChildContent("ResponseMetadata|RequestId")

# Save the session token XML to a file for use by another Chilkat example..
$success = $xml.SaveXml("qa_data/tokens/aws_session_token.xml")