统一身份认证服务 IAM-获取委托的临时访问密钥和securitytoken:请求示例

时间：2025-02-12 15:14:22

请求示例

填写"session_user"参数，即委托方对应的企业用户信息，包含委托方对应的企业用户名。

POST https://iam.myhuaweicloud.com/v3.0/OS-CREDENTIAL/securitytokens

{    "auth": {        "identity": {            "methods": [                "assume_role"            ],            "assume_role": {                "domain_name": " IAM DomainA",                "agency_name": "IAMAgency",                "duration_seconds": 3600,                "session_user": {                    "name": "SessionUserName"                }            }        }    }}

填写"policy"参数，即用户自定义策略的信息，用于限制获取到的临时访问密钥和securitytoken的权限（当前仅适用限制OBS服务的权限）。如果填写此参数，则临时访问密钥和securitytoken的权限为：委托具有的权限和policy参数限制的权限交集。

POST https://iam.myhuaweicloud.com/v3.0/OS-CREDENTIAL/securitytokens

{    "auth": {        "identity": {            "methods": [                "assume_role"            ],            "policy": {                      "Version": "1.1",       "Statement": [{ "Effect": "allow", "Action": [                         "obs:object:*"                         ], "Resource": ["obs:*:*:object:*"], "Condition": {    "StringEquals": {"obs:prefix": ["public"]}}}]             },            "assume_role": {                "domain_name": "IAMDomainA",                "agency_name": "IAMAgency",                "duration_seconds": 3600            }        }    }}

不填写"session_user"和policy参数。

POST https://iam.myhuaweicloud.com/v3.0/OS-CREDENTIAL/securitytokens

{    "auth": {        "identity": {            "methods": [                "assume_role"            ],            "assume_role": {                "domain_name": "IAMDomainA",                "agency_name": "IAMAgency",                "duration_seconds": 3600            }        }    }}

上一篇：统一身份认证服务 IAM-获取委托的临时访问密钥和securitytoken:功能介绍

下一篇：统一身份认证服务 IAM-获取委托的临时访问密钥和securitytoken:响应参数