Unicode C++

AWS Security Token Service (STS) AssumeRole

See more AWS Security Token Service Examples

Returns a set of temporary security credentials that you can use to access AWS resources. These temporary credentials consist of an access key ID, a secret access key, and a security token. Typically, you use AssumeRole within your account or for cross-account access. Unicode C++

#include <CkRestW.h>
#include <CkAuthAwsW.h>
#include <CkXmlW.h>

void ChilkatSample(void)
    {
    bool success = false;

    //  This example requires the Chilkat API to have been previously unlocked.
    //  See Global Unlock Sample for sample code.

    CkRestW rest;

    //  Connect to the Amazon AWS REST server.
    //  such as https://sts.us-west-2.amazonaws.com/
    bool bTls = true;
    int port = 443;
    bool bAutoReconnect = true;
    success = rest.Connect(L"sts.us-west-2.amazonaws.com",port,bTls,bAutoReconnect);

    //  Provide AWS credentials for the REST call.
    CkAuthAwsW authAws;
    authAws.put_AccessKey(L"AWS_ACCESS_KEY");
    authAws.put_SecretKey(L"AWS_SECRET_KEY");
    //  the region should match our URL above..
    //  See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html
    authAws.put_Region(L"us-west-2");
    authAws.put_ServiceName(L"sts");

    rest.SetAuthAws(authAws);

    //  Sample Request
    //  https://sts.amazonaws.com/
    //  ?Version=2011-06-15
    //  &Action=AssumeRole
    //  &RoleSessionName=testAR
    //  &RoleArn=arn:aws:iam::123456789012:role/demo
    //  &PolicyArns.member.1.arn=arn:aws:iam::123456789012:policy/demopolicy1
    //  &PolicyArns.member.2.arn=arn:aws:iam::123456789012:policy/demopolicy2
    //  &Policy={"Version":"2012-10-17","Statement":[{"Sid":"Stmt1",
    //  "Effect":"Allow","Action":"s3:*","Resource":"*"}]}
    //  &DurationSeconds=3600
    //  &Tags.member.1.Key=Project
    //  &Tags.member.1.Value=Pegasus
    //  &Tags.member.2.Key=Team
    //  &Tags.member.2.Value=Engineering
    //  &Tags.member.3.Key=Cost-Center
    //  &Tags.member.3.Value=12345
    //  &TransitiveTagKeys.member.1=Project
    //  &TransitiveTagKeys.member.2=Cost-Center
    //  &ExternalId=123ABC
    //  &SourceIdentity=Alice
    //  &AUTHPARAMS

    rest.AddQueryParam(L"Version",L"2011-06-15");
    rest.AddQueryParam(L"Action",L"AssumeRole");
    rest.AddQueryParam(L"DurationSeconds",L"3600");

    rest.AddQueryParam(L"RoleSessionName",L"testAR");
    rest.AddQueryParam(L"RoleArn",L"arn:aws:iam::123456789012:role/demo");
    rest.AddQueryParam(L"PolicyArns.member.1.arn",L"arn:aws:iam::123456789012:policy/demopolicy1");
    rest.AddQueryParam(L"PolicyArns.member.2.arn",L"arn:aws:iam::123456789012:policy/demopolicy2");
    rest.AddQueryParam(L"Policy",L"{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Stmt1\",\"Effect\":\"Allow\",\"Action\":\"s3:*\",\"Resource\":\"*\"}]}");
    rest.AddQueryParam(L"Tags.member.1.Key",L"Project");
    rest.AddQueryParam(L"Tags.member.1.Value",L"Pegasus");
    rest.AddQueryParam(L"Tags.member.2.Key",L"Team");
    rest.AddQueryParam(L"Tags.member.2.Value",L"Engineering");
    rest.AddQueryParam(L"Tags.member.3.Key",L"Cost-Center");
    rest.AddQueryParam(L"Tags.member.3.Value",L"12345");
    rest.AddQueryParam(L"TransitiveTagKeys.member.1",L"Project");
    rest.AddQueryParam(L"TransitiveTagKeys.member.2",L"Cost-Center");
    rest.AddQueryParam(L"ExternalId",L"123ABC");
    rest.AddQueryParam(L"SourceIdentity",L"Alice");

    const wchar_t *responseXml = rest.fullRequestNoBody(L"GET",L"/");
    if (rest.get_LastMethodSuccess() != true) {
        wprintf(L"%s\n",rest.lastErrorText());
        return;
    }

    //  A successful response will have a status code equal to 200.
    if (rest.get_ResponseStatusCode() != 200) {
        wprintf(L"response status code = %d\n",rest.get_ResponseStatusCode());
        wprintf(L"response status text = %s\n",rest.responseStatusText());
        wprintf(L"response header: %s\n",rest.responseHeader());
        wprintf(L"response body: %s\n",responseXml);
        return;
    }

    //  Examine the successful XML response (shown below)
    CkXmlW xml;
    xml.LoadXml(responseXml);
    wprintf(L"%s\n",xml.getXml());

    //  Sample response:

    //  <AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
    //    <AssumeRoleResult>
    //    <SourceIdentity>Alice</SourceIdentity>
    //      <AssumedRoleUser>
    //        <Arn>arn:aws:sts::123456789012:assumed-role/demo/TestAR</Arn>
    //        <AssumedRoleId>ARO123EXAMPLE123:TestAR</AssumedRoleId>
    //      </AssumedRoleUser>
    //      <Credentials>
    //        <AccessKeyId>ASIAIOSFODNN7EXAMPLE</AccessKeyId>
    //        <SecretAccessKey>wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY</SecretAccessKey>
    //        <SessionToken>
    //         AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
    //         LWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGd
    //         QrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU
    //         9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz
    //         +scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA==
    //        </SessionToken>
    //        <Expiration>2019-11-09T13:34:41Z</Expiration>
    //      </Credentials>
    //      <PackedPolicySize>6</PackedPolicySize>
    //    </AssumeRoleResult>
    //    <ResponseMetadata>
    //      <RequestId>c6104cbe-af31-11e0-8154-cbc7ccf896c7</RequestId>
    //    </ResponseMetadata>
    //  </AssumeRoleResponse>

    //  Sample parse code:

    const wchar_t *AssumeRoleResponse_xmlns = xml.getAttrValue(L"xmlns");
    const wchar_t *SourceIdentity = xml.getChildContent(L"AssumeRoleResult|SourceIdentity");
    const wchar_t *Arn = xml.getChildContent(L"AssumeRoleResult|AssumedRoleUser|Arn");
    const wchar_t *AssumedRoleId = xml.getChildContent(L"AssumeRoleResult|AssumedRoleUser|AssumedRoleId");
    const wchar_t *AccessKeyId = xml.getChildContent(L"AssumeRoleResult|Credentials|AccessKeyId");
    const wchar_t *SecretAccessKey = xml.getChildContent(L"AssumeRoleResult|Credentials|SecretAccessKey");
    const wchar_t *SessionToken = xml.getChildContent(L"AssumeRoleResult|Credentials|SessionToken");
    const wchar_t *Expiration = xml.getChildContent(L"AssumeRoleResult|Credentials|Expiration");
    int PackedPolicySize = xml.GetChildIntValue(L"AssumeRoleResult|PackedPolicySize");
    const wchar_t *RequestId = xml.getChildContent(L"ResponseMetadata|RequestId");

    //  Save the session token XML to a file for use by another Chilkat example..
    success = xml.SaveXml(L"qa_data/tokens/aws_session_token.xml");
    }