- unmigrated-wiki-markup
Documentation for Identity Federation for AWS 2.0 – other releases are available in the Identity Federation for AWS Documentation Directory.
View
or visit the current documentation home.
_APIReferenceV1
REST API v1 resources (Identity Federation)
This is the reference of all resources relevant to this add-ons actual functionality as a token vendor for Identity Federation - please see the REST API resources (complete reference) if you intent to include this add-on into administrative automation scenarios (e.g. for scripting).
Resource | URI template | methods | description | permissions | comments |
---|---|---|---|---|---|
Connectors | This is the main resource to interact with currently in order to retrieve temporary AWS security credentials. | ||||
GET | Get all AWS connectors. | Configurable | |||
/connectors/{id} | GET | Get an AWS connector identified by its id. | Configurable | . | |
/connectors/{id}/credentials | GET | Get the temporary AWS security credentials via a AWS connector identified by its id. | Configurable | This is the main resource to use for calling AWS services in turn. |
/rest/identity-federation-for-aws/1.0/connectors
Methods
GET
GET http://host:port/context/rest/identity-federation-for-aws/1.0/connectors (200)
{ "values": [ { "id": 1, "id2": "1f2d5aee-839e-49ae-8a5b-e9ae27a2f2d8", "name": "Development Team A", "type": "FEDERATION_TOKEN" }, { "id": 2, "id2": "1521fbf0-fa97-4c4a-9877-9f0c5e9982d3", "name": "Development Team B", "type": "SESSION_TOKEN" }, { "id": 3, "id2": "bddc8430-cea7-4e09-98f6-354edcb841c4", "name": "Operations Team", "type": "FEDERATION_TOKEN" } ], "size": 3 }
/rest/identity-federation-for-aws/1.0/connectors/{id}
Methods
GET
GET http://host:port/context/rest/identity-federation-for-aws/1.0/connectors/1 (200)
{ "id": 1, "id2": "1f2d5aee-839e-49ae-8a5b-e9ae27a2f2d8", "name": "Development Team A", "type": "FEDERATION_TOKEN" }
/rest/identity-federation-for-aws/1.0/connectors/{id}/credentials
Methods
GET
GET http://host:port/context/rest/identity-federation-for-aws/1.0/connectors/1/credentials (200)
{ "expiration": 1370423461000, "sessionToken": "AQoDYXdzEN7//////////wEa8AEmChyr2gLDNxQATlASOWNkI0ORBVCkbPuMdTPQxpQR7NrqxjBo+O13lg2KjKdsxoXfR3fzCG/L0g9k2YQOMWVZjQLkd6cS4F3NL3qa/dtheXaYmcCeUXwJoznMWsXvGV3OQyizKD7hHcQbrYDzJWr1hcoksx03NazuG1xx6uWn8uwcktsyMCwATlasC8tqw6ffozllgQr2eZK1lBPyXWQy7Jwx3EyXLP/rulAhEBE9mrAUzp0xq0Yiekc7I06dSAQT7fBsuHzWoNQ0O8zmX4S35AL+pP+kBzAJZ75qvviNZYmoqXCBcSEOmWLFnyAuCSUg5a+5jQU=", "accessKeyId": "ASIJATLAS2XBO2MQ77VQ", "secretAccessKey": "FeJioaEdLa0RJsVCSBYAtLaskADEzkq1VFriuJla" }
REST API v1 resources (complete reference)
This is the complete reference of all resources available. You usually won't interact with most of these outside of administrative automation scenarios (e.g. for scripting) - please see the REST API resources (Identity Federation) for this add-ons actual functionality first.
Resource | URI template | methods | description | permissions | comments |
---|---|---|---|---|---|
Accounts | You usually won't interact with accounts via the API currently, please see the Connectors resource instead! | ||||
/accounts | GET|POST | Get all accounts (IAM users). | Administrator | ||
/accounts/{id} | GET|DELETE|PUT | Get an account (IAM user) identified by its id. | Administrator | ||
Connectors | This is the main resource to interact with currently in order to retrieve temporary AWS security credentials. | ||||
/connectors | GET | Get all AWS connectors. | Configurable | You only need GET for the intended usage as a token vendor, but POST will be added in a subsequent release regardless. | |
/connectors/{id} | GET | Get an AWS connector identified by its id. | Configurable | You only need GET for the intended usage as a token vendor, but DELETE|PUT will be added in a subsequent release regardless. | |
/connectors/{id}/credentials | GET | Get the temporary AWS security credentials via an AWS connector identified by its id. | Configurable | This is the main resource to use for calling AWS services in turn. |