AWS Identity and Access Management
Using IAM (API Version 2010-05-08)
« PreviousNext »
View the PDF for this guide.Go to the AWS Discussion Forum for this product.Go to the Kindle Store to download this guide in Kindle format.Did this page help you?  Yes | No |  Tell us about it...

Making Query Requests

This section contains general information about using the Query API. For details about the API actions and errors for the IAM API or the AWS Security Token Service API, go to the AWS Identity and Access Management API Reference or the AWS Security Token Service API Reference.

IAM and AWS Security Token Service support Query requests for calling service actions. Query requests are simple HTTPS requests, using the GET or POST method. Query requests must contain an Action parameter to indicate the action to be performed.

The response is an XML document that conforms to a schema. The schema is included in the WSDL. The IAM WSDL is located at https://iam.amazonaws.com/doc/2010-05-08/AWSIdentityManagement.wsdl. The AWS Security Token Service WSDL is located at: https://sts.amazonaws.com/doc/2011-06-15/AWSSecurityTokenService.wsdl.

Endpoints

IAM and AWS Security Token Service each have a single global endpoint. The IAM endpoint is https://iam.amazonaws.com. The AWS Security Token Service endpoint is https://sts.amazonaws.com.

For more information about AWS product endpoints and regions go to Regions and Endpoints in the Amazon Web Services General Reference.

HTTPS Required

Because the Query API returns sensitive information such as security credentials, you must use HTTPS with all API requests.

Signing AWS API Requests

To sign your API requests, we recommend using AWS Signature Version 4. For information about using Signature Version 4, go to Signature Version 4 Signing Process in the AWS General Reference.

If you need to use Signature Version 2, information about using Signature Version 2 is also available in the AWS General Reference.