How to authenticate with AWS IAM Roles Anywhere in code

0

We can't run an external binary (i.e. aws_signing_helper) from within our code, but would like to be able to use AWS IAM Roles Anywhere.

Are there any examples of code (Java and C#, preferably, and/or Python) that can be used to authenticate using the private key to assume the Role and obtain the AWS access key, secret access key, and session token?

Thanks

已提問 2 年前檢視次數 436 次
1 個回答
1
已接受的答案

Hello,

Greetings from AWS !

I understand that you want to use IAM Roles Anywhere service to get temporary IAM credentials, but it is not possible to use aws_signing_helper from your code. You want to know if there is any example code which can be used to authenticate using the private key and get access key, secret key, and session token in return. Please feel free to correct me in case I have misunderstood your concern.

The aws_signing_helper executable file is basically a way to call the CreateSession API of IAM Roles Anywhere service. The authentication sign process is explained here [1]. You can implement your own code following the process explained in this document [1] to call the CreateSession API of Roles Anywhere. Though there is no sample code from AWS side, I would like to share this third-party document [2] which contains sample code in Python making request to CreateSession API following the signing process explained in [1].

Note: AWS would not be able to vouch for the integrity of the content being provided in third-party links. Kindly ensure to implement in your test environment first and then to use in your production environment.

I believe the information is helpful to you. In case you have any further queries/concerns then please let us know. We will be more than happy to assist you further.

Wish you an AWeSome day ahead and stay safe ! 🙂

--References--

[1] https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-sign-process.html

[2] https://nerdydrunk.info/aws:roles_anywhere

AWS
支援工程師
Tarit_G
已回答 2 年前
  • That Python code is exactly what I was looking for. (and it works perfectly). Thank you!

  • That Python code is exactly what I was looking for. (and it works perfectly). Thank you!

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南