272 lines
12 KiB
JSON
272 lines
12 KiB
JSON
{
|
|
"version": "1.0",
|
|
"examples": {
|
|
"AssumeRole": [
|
|
{
|
|
"input": {
|
|
"ExternalId": "123ABC",
|
|
"Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Stmt1\",\"Effect\":\"Allow\",\"Action\":\"s3:ListAllMyBuckets\",\"Resource\":\"*\"}]}",
|
|
"RoleArn": "arn:aws:iam::123456789012:role/demo",
|
|
"RoleSessionName": "testAssumeRoleSession",
|
|
"Tags": [
|
|
{
|
|
"Key": "Project",
|
|
"Value": "Unicorn"
|
|
},
|
|
{
|
|
"Key": "Team",
|
|
"Value": "Automation"
|
|
},
|
|
{
|
|
"Key": "Cost-Center",
|
|
"Value": "12345"
|
|
}
|
|
],
|
|
"TransitiveTagKeys": [
|
|
"Project",
|
|
"Cost-Center"
|
|
]
|
|
},
|
|
"output": {
|
|
"AssumedRoleUser": {
|
|
"Arn": "arn:aws:sts::123456789012:assumed-role/demo/Bob",
|
|
"AssumedRoleId": "ARO123EXAMPLE123:Bob"
|
|
},
|
|
"Credentials": {
|
|
"AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
|
|
"Expiration": "2011-07-15T23:28:33.359Z",
|
|
"SecretAccessKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY",
|
|
"SessionToken": "AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQWLWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGdQrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz+scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA=="
|
|
},
|
|
"PackedPolicySize": 8
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "",
|
|
"id": "to-assume-a-role-1480532402212",
|
|
"title": "To assume a role"
|
|
}
|
|
],
|
|
"AssumeRoleWithSAML": [
|
|
{
|
|
"input": {
|
|
"DurationSeconds": 3600,
|
|
"PrincipalArn": "arn:aws:iam::123456789012:saml-provider/SAML-test",
|
|
"RoleArn": "arn:aws:iam::123456789012:role/TestSaml",
|
|
"SAMLAssertion": "VERYLONGENCODEDASSERTIONEXAMPLExzYW1sOkF1ZGllbmNlPmJsYW5rPC9zYW1sOkF1ZGllbmNlPjwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPjwvc2FtbDpDb25kaXRpb25zPjxzYW1sOlN1YmplY3Q+PHNhbWw6TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOm5hbWVpZC1mb3JtYXQ6dHJhbnNpZW50Ij5TYW1sRXhhbXBsZTwvc2FtbDpOYW1lSUQ+PHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPjxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAxOS0xMS0wMVQyMDoyNTowNS4xNDVaIiBSZWNpcGllbnQ9Imh0dHBzOi8vc2lnbmluLmF3cy5hbWF6b24uY29tL3NhbWwiLz48L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj48L3NhbWw6U3ViamVjdD48c2FtbDpBdXRoblN0YXRlbWVudCBBdXRoPD94bWwgdmpSZXNwb25zZT4="
|
|
},
|
|
"output": {
|
|
"AssumedRoleUser": {
|
|
"Arn": "arn:aws:sts::123456789012:assumed-role/TestSaml",
|
|
"AssumedRoleId": "ARO456EXAMPLE789:TestSaml"
|
|
},
|
|
"Audience": "https://signin.aws.amazon.com/saml",
|
|
"Credentials": {
|
|
"AccessKeyId": "ASIAV3ZUEFP6EXAMPLE",
|
|
"Expiration": "2019-11-01T20:26:47Z",
|
|
"SecretAccessKey": "8P+SQvWIuLnKhh8d++jpw0nNmQRBZvNEXAMPLEKEY",
|
|
"SessionToken": "IQoJb3JpZ2luX2VjEOz////////////////////wEXAMPLEtMSJHMEUCIDoKK3JH9uGQE1z0sINr5M4jk+Na8KHDcCYRVjJCZEvOAiEA3OvJGtw1EcViOleS2vhs8VdCKFJQWPQrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz+scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA=="
|
|
},
|
|
"Issuer": "https://integ.example.com/idp/shibboleth",
|
|
"NameQualifier": "SbdGOnUkh1i4+EXAMPLExL/jEvs=",
|
|
"PackedPolicySize": 6,
|
|
"Subject": "SamlExample",
|
|
"SubjectType": "transient"
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "",
|
|
"id": "to-assume-role-with-saml-14882749597814",
|
|
"title": "To assume a role using a SAML assertion"
|
|
}
|
|
],
|
|
"AssumeRoleWithWebIdentity": [
|
|
{
|
|
"input": {
|
|
"DurationSeconds": 3600,
|
|
"Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Stmt1\",\"Effect\":\"Allow\",\"Action\":\"s3:ListAllMyBuckets\",\"Resource\":\"*\"}]}",
|
|
"ProviderId": "www.amazon.com",
|
|
"RoleArn": "arn:aws:iam::123456789012:role/FederatedWebIdentityRole",
|
|
"RoleSessionName": "app1",
|
|
"WebIdentityToken": "Atza%7CIQEBLjAsAhRFiXuWpUXuRvQ9PZL3GMFcYevydwIUFAHZwXZXXXXXXXXJnrulxKDHwy87oGKPznh0D6bEQZTSCzyoCtL_8S07pLpr0zMbn6w1lfVZKNTBdDansFBmtGnIsIapjI6xKR02Yc_2bQ8LZbUXSGm6Ry6_BG7PrtLZtj_dfCTj92xNGed-CrKqjG7nPBjNIL016GGvuS5gSvPRUxWES3VYfm1wl7WTI7jn-Pcb6M-buCgHhFOzTQxod27L9CqnOLio7N3gZAGpsp6n1-AJBOCJckcyXe2c6uD0srOJeZlKUm2eTDVMf8IehDVI0r1QOnTV6KzzAI3OY87Vd_cVMQ"
|
|
},
|
|
"output": {
|
|
"AssumedRoleUser": {
|
|
"Arn": "arn:aws:sts::123456789012:assumed-role/FederatedWebIdentityRole/app1",
|
|
"AssumedRoleId": "AROACLKWSDQRAOEXAMPLE:app1"
|
|
},
|
|
"Audience": "client.5498841531868486423.1548@apps.example.com",
|
|
"Credentials": {
|
|
"AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
|
|
"Expiration": "2014-10-24T23:00:23Z",
|
|
"SecretAccessKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY",
|
|
"SessionToken": "AQoDYXdzEE0a8ANXXXXXXXXNO1ewxE5TijQyp+IEXAMPLE"
|
|
},
|
|
"PackedPolicySize": 123,
|
|
"Provider": "www.amazon.com",
|
|
"SubjectFromWebIdentityToken": "amzn1.account.AF6RHO7KZU5XRVQJGXK6HEXAMPLE"
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "",
|
|
"id": "to-assume-a-role-as-an-openid-connect-federated-user-1480533445696",
|
|
"title": "To assume a role as an OpenID Connect-federated user"
|
|
}
|
|
],
|
|
"DecodeAuthorizationMessage": [
|
|
{
|
|
"input": {
|
|
"EncodedMessage": "<encoded-message>"
|
|
},
|
|
"output": {
|
|
"DecodedMessage": "{\"allowed\": \"false\",\"explicitDeny\": \"false\",\"matchedStatements\": \"\",\"failures\": \"\",\"context\": {\"principal\": {\"id\": \"AIDACKCEVSQ6C2EXAMPLE\",\"name\": \"Bob\",\"arn\": \"arn:aws:iam::123456789012:user/Bob\"},\"action\": \"ec2:StopInstances\",\"resource\": \"arn:aws:ec2:us-east-1:123456789012:instance/i-dd01c9bd\",\"conditions\": [{\"item\": {\"key\": \"ec2:Tenancy\",\"values\": [\"default\"]},{\"item\": {\"key\": \"ec2:ResourceTag/elasticbeanstalk:environment-name\",\"values\": [\"Default-Environment\"]}},(Additional items ...)]}}"
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "",
|
|
"id": "to-decode-information-about-an-authorization-status-of-a-request-1480533854499",
|
|
"title": "To decode information about an authorization status of a request"
|
|
}
|
|
],
|
|
"GetCallerIdentity": [
|
|
{
|
|
"input": {
|
|
},
|
|
"output": {
|
|
"Account": "123456789012",
|
|
"Arn": "arn:aws:iam::123456789012:user/Alice",
|
|
"UserId": "AKIAI44QH8DHBEXAMPLE"
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "This example shows a request and response made with the credentials for a user named Alice in the AWS account 123456789012.",
|
|
"id": "to-get-details-about-a-calling-iam-user-1480540050376",
|
|
"title": "To get details about a calling IAM user"
|
|
},
|
|
{
|
|
"input": {
|
|
},
|
|
"output": {
|
|
"Account": "123456789012",
|
|
"Arn": "arn:aws:sts::123456789012:assumed-role/my-role-name/my-role-session-name",
|
|
"UserId": "AKIAI44QH8DHBEXAMPLE:my-role-session-name"
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "This example shows a request and response made with temporary credentials created by AssumeRole. The name of the assumed role is my-role-name, and the RoleSessionName is set to my-role-session-name.",
|
|
"id": "to-get-details-about-a-calling-user-federated-with-assumerole-1480540158545",
|
|
"title": "To get details about a calling user federated with AssumeRole"
|
|
},
|
|
{
|
|
"input": {
|
|
},
|
|
"output": {
|
|
"Account": "123456789012",
|
|
"Arn": "arn:aws:sts::123456789012:federated-user/my-federated-user-name",
|
|
"UserId": "123456789012:my-federated-user-name"
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "This example shows a request and response made with temporary credentials created by using GetFederationToken. The Name parameter is set to my-federated-user-name.",
|
|
"id": "to-get-details-about-a-calling-user-federated-with-getfederationtoken-1480540231316",
|
|
"title": "To get details about a calling user federated with GetFederationToken"
|
|
}
|
|
],
|
|
"GetFederationToken": [
|
|
{
|
|
"input": {
|
|
"DurationSeconds": 3600,
|
|
"Name": "testFedUserSession",
|
|
"Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Stmt1\",\"Effect\":\"Allow\",\"Action\":\"s3:ListAllMyBuckets\",\"Resource\":\"*\"}]}",
|
|
"Tags": [
|
|
{
|
|
"Key": "Project",
|
|
"Value": "Pegasus"
|
|
},
|
|
{
|
|
"Key": "Cost-Center",
|
|
"Value": "98765"
|
|
}
|
|
]
|
|
},
|
|
"output": {
|
|
"Credentials": {
|
|
"AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
|
|
"Expiration": "2011-07-15T23:28:33.359Z",
|
|
"SecretAccessKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY",
|
|
"SessionToken": "AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQWLWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGdQrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz+scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA=="
|
|
},
|
|
"FederatedUser": {
|
|
"Arn": "arn:aws:sts::123456789012:federated-user/Bob",
|
|
"FederatedUserId": "123456789012:Bob"
|
|
},
|
|
"PackedPolicySize": 8
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "",
|
|
"id": "to-get-temporary-credentials-for-a-role-by-using-getfederationtoken-1480540749900",
|
|
"title": "To get temporary credentials for a role by using GetFederationToken"
|
|
}
|
|
],
|
|
"GetSessionToken": [
|
|
{
|
|
"input": {
|
|
"DurationSeconds": 3600,
|
|
"SerialNumber": "YourMFASerialNumber",
|
|
"TokenCode": "123456"
|
|
},
|
|
"output": {
|
|
"Credentials": {
|
|
"AccessKeyId": "AKIAIOSFODNN7EXAMPLE",
|
|
"Expiration": "2011-07-11T19:55:29.611Z",
|
|
"SecretAccessKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY",
|
|
"SessionToken": "AQoEXAMPLEH4aoAH0gNCAPyJxz4BlCFFxWNE1OPTgk5TthT+FvwqnKwRcOIfrRh3c/LTo6UDdyJwOOvEVPvLXCrrrUtdnniCEXAMPLE/IvU1dYUg2RVAJBanLiHb4IgRmpRV3zrkuWJOgQs8IZZaIv2BXIa2R4OlgkBN9bkUDNCJiBeb/AXlzBBko7b15fjrBs2+cTQtpZ3CYWFXG8C5zqx37wnOE49mRl/+OtkIKGO7fAE"
|
|
}
|
|
},
|
|
"comments": {
|
|
"input": {
|
|
},
|
|
"output": {
|
|
}
|
|
},
|
|
"description": "",
|
|
"id": "to-get-temporary-credentials-for-an-iam-user-or-an-aws-account-1480540814038",
|
|
"title": "To get temporary credentials for an IAM user or an AWS account"
|
|
}
|
|
]
|
|
}
|
|
}
|