Request a set of temporary security credentials for users who have been authenticated via a SAML authentication response.
Parameters |
Description |
const ARequest: ISTSAssumeRoleWithSAMLRequest |
An AssumeRoleWithSAML request object. |
const ARoleArn: TARN |
The Amazon Resource Name (ARN) of the role to assume. |
const APrincipalArn: TARN |
The Amazon Resource Name (ARN) of the SAML provider in IAM that describes the IdP. |
const ASAMLAssertion: string |
The Base64 encoded SAML authentication response provided by the IdP. |
Response containing AssumeRoleWithSAML results.
Exceptions |
Description |
The web identity that was passed is expired or invalid. | |
The Identity Provider (IdP) reported that the authentication failed. This may be because the claim is invalid. | |
The web identity token provided could not be validated by AWS. | |
The request was rejected because the policy document was malformed. | |
The request was rejected beacuse the total packed size of the session policies and tags combined was too large. | |
AWS STS is not activated in the region for the account being asked to generate credentials. |
Copyright © 2019-2021 Appercept Ltd. All rights reserved.
|