Rust

AWS Security Token Service (STS) AssumeRole

See more AWS Security Token Service Examples

Returns a set of temporary security credentials that you can use to access AWS resources. These temporary credentials consist of an access key ID, a secret access key, and a security token. Typically, you use AssumeRole within your account or for cross-account access. Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

let rest = chilkat::Rest::new();

// Connect to the Amazon AWS REST server.
// such as https://sts.us-west-2.amazonaws.com/
let b_tls = true;
let port = 443;
let b_auto_reconnect = true;
let _ = rest.connect("sts.us-west-2.amazonaws.com", port, b_tls, b_auto_reconnect).is_ok();

// Provide AWS credentials for the REST call.
let auth_aws = chilkat::AuthAws::new();
auth_aws.set_access_key("AWS_ACCESS_KEY");
auth_aws.set_secret_key("AWS_SECRET_KEY");
// the region should match our URL above..
// See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
auth_aws.set_region("us-west-2");
auth_aws.set_service_name("sts");

let _ = rest.set_auth_aws(&auth_aws);

// Sample Request
// https://sts.amazonaws.com/
// ?Version=2011-06-15
// &Action=AssumeRole
// &RoleSessionName=testAR
// &RoleArn=arn:aws:iam::123456789012:role/demo
// &PolicyArns.member.1.arn=arn:aws:iam::123456789012:policy/demopolicy1
// &PolicyArns.member.2.arn=arn:aws:iam::123456789012:policy/demopolicy2
// &Policy={"Version":"2012-10-17","Statement":[{"Sid":"Stmt1",
// "Effect":"Allow","Action":"s3:*","Resource":"*"}]}
// &DurationSeconds=3600
// &Tags.member.1.Key=Project
// &Tags.member.1.Value=Pegasus
// &Tags.member.2.Key=Team
// &Tags.member.2.Value=Engineering
// &Tags.member.3.Key=Cost-Center
// &Tags.member.3.Value=12345
// &TransitiveTagKeys.member.1=Project
// &TransitiveTagKeys.member.2=Cost-Center
// &ExternalId=123ABC
// &SourceIdentity=Alice
// &AUTHPARAMS

let _ = rest.add_query_param("Version", "2011-06-15");
let _ = rest.add_query_param("Action", "AssumeRole");
let _ = rest.add_query_param("DurationSeconds", "3600");

let _ = rest.add_query_param("RoleSessionName", "testAR");
let _ = rest.add_query_param("RoleArn", "arn:aws:iam::123456789012:role/demo");
let _ = rest.add_query_param("PolicyArns.member.1.arn", "arn:aws:iam::123456789012:policy/demopolicy1");
let _ = rest.add_query_param("PolicyArns.member.2.arn", "arn:aws:iam::123456789012:policy/demopolicy2");
let _ = rest.add_query_param("Policy", "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Stmt1\",\"Effect\":\"Allow\",\"Action\":\"s3:*\",\"Resource\":\"*\"}]}");
let _ = rest.add_query_param("Tags.member.1.Key", "Project");
let _ = rest.add_query_param("Tags.member.1.Value", "Pegasus");
let _ = rest.add_query_param("Tags.member.2.Key", "Team");
let _ = rest.add_query_param("Tags.member.2.Value", "Engineering");
let _ = rest.add_query_param("Tags.member.3.Key", "Cost-Center");
let _ = rest.add_query_param("Tags.member.3.Value", "12345");
let _ = rest.add_query_param("TransitiveTagKeys.member.1", "Project");
let _ = rest.add_query_param("TransitiveTagKeys.member.2", "Cost-Center");
let _ = rest.add_query_param("ExternalId", "123ABC");
let _ = rest.add_query_param("SourceIdentity", "Alice");

let Ok(response_xml) = rest.full_request_no_body("GET", "/") else {
    println!("{}", rest.last_error_text());
    return;
};

// A successful response will have a status code equal to 200.
if rest.response_status_code() != 200 {
    println!("response status code = {}", rest.response_status_code());
    println!("response status text = {}", rest.response_status_text());
    println!("response header: {}", rest.response_header());
    println!("response body: {}", response_xml);
    return;
}

// Examine the successful XML response (shown below)
let xml = chilkat::Xml::new();
let _ = xml.load_xml(&response_xml);
println!("{}", xml.get_xml().unwrap_or_default());

// Sample response:

// <AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
//   <AssumeRoleResult>
//   <SourceIdentity>Alice</SourceIdentity>
//     <AssumedRoleUser>
//       <Arn>arn:aws:sts::123456789012:assumed-role/demo/TestAR</Arn>
//       <AssumedRoleId>ARO123EXAMPLE123:TestAR</AssumedRoleId>
//     </AssumedRoleUser>
//     <Credentials>
//       <AccessKeyId>ASIAIOSFODNN7EXAMPLE</AccessKeyId>
//       <SecretAccessKey>wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY</SecretAccessKey>
//       <SessionToken>
//        AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
//        LWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGd
//        QrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU
//        9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz
//        +scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA==
//       </SessionToken>
//       <Expiration>2019-11-09T13:34:41Z</Expiration>
//     </Credentials>
//     <PackedPolicySize>6</PackedPolicySize>
//   </AssumeRoleResult>
//   <ResponseMetadata>
//     <RequestId>c6104cbe-af31-11e0-8154-cbc7ccf896c7</RequestId>
//   </ResponseMetadata>
// </AssumeRoleResponse>

// Sample parse code:

let assume_role_response_xmlns = xml.get_attr_value("xmlns").unwrap_or_default();
let source_identity = xml.get_child_content("AssumeRoleResult|SourceIdentity").unwrap_or_default();
let arn = xml.get_child_content("AssumeRoleResult|AssumedRoleUser|Arn").unwrap_or_default();
let assumed_role_id = xml.get_child_content("AssumeRoleResult|AssumedRoleUser|AssumedRoleId").unwrap_or_default();
let access_key_id = xml.get_child_content("AssumeRoleResult|Credentials|AccessKeyId").unwrap_or_default();
let secret_access_key = xml.get_child_content("AssumeRoleResult|Credentials|SecretAccessKey").unwrap_or_default();
let session_token = xml.get_child_content("AssumeRoleResult|Credentials|SessionToken").unwrap_or_default();
let expiration = xml.get_child_content("AssumeRoleResult|Credentials|Expiration").unwrap_or_default();
let packed_policy_size = xml.get_child_int_value("AssumeRoleResult|PackedPolicySize");
let request_id = xml.get_child_content("ResponseMetadata|RequestId").unwrap_or_default();

// Save the session token XML to a file for use by another Chilkat example..
let _ = xml.save_xml("qa_data/tokens/aws_session_token.xml").is_ok();