AWS.STS.TSTSClient.AssumeRoleWithWebIdentity

Request a set of temporary security credentials for users who have been authenticated in a mobile or web application with a web identity provider.

Delphi

function AssumeRoleWithWebIdentity(const ARequest: ISTSAssumeRoleWithWebIdentityRequest): ISTSAssumeRoleWithWebIdentityResponse; overload; function AssumeRoleWithWebIdentity(const ARoleArn: TARN; const ARoleSessionName: string; const AWebIdentityToken: string): ISTSAssumeRoleWithWebIdentityResponse; overload;

C++

__fastcall ISTSAssumeRoleWithWebIdentityResponse AssumeRoleWithWebIdentity(const ISTSAssumeRoleWithWebIdentityRequest ARequest); __fastcall ISTSAssumeRoleWithWebIdentityResponse AssumeRoleWithWebIdentity(const TARN ARoleArn, const AnsiString ARoleSessionName, const AnsiString AWebIdentityToken);

Properties

File: AWS.STS.pas

Namespace: AWS.STS

Module: Appercept AWS SDK for Delphi

Parameters

Parameters	Description
const ARequest: ISTSAssumeRoleWithWebIdentityRequest	An AssumeRoleWithWebIdentity request object.
const ARoleArn: TARN	An Amazon Resource Name (ARN) for an IAM role to assume.
const ARoleSessionName: string	An identifier for the assumed role session.
const AWebIdentityToken: string	The OAuth 2.0 access token or OpenID Connect ID token that is provided by the identity provider.

Returns

Response containing AssumeRoleWithWebIdentity results.

Exceptions

Exceptions	Description
ESTSExpiredToken	The web identity that was passed is expired or invalid.
ESTSIDPCommunicationError	The request could not be filfilled because the identity provider (IdP) that was asked to verify the identity token could not be reached.
ESTSIDPRejectedClaim	The Identity Provider (IdP) reported that the authentication failed. This may be because the claim is invalid.
ESTSInvalidIdentityToken	The web identity token provided could not be validated by AWS.
ESTSMalformedPolicyDocument	The request was rejected because the policy document was malformed.
ESTSPackedPolicyTooLarge	The request was rejected beacuse the total packed size of the session policies and tags combined was too large.
ESTSRegionDisabled	AWS STS is not activated in the region for the account being asked to generate credentials.