AWS Documentation » AWS Identity and Access Management » User Guide » Identities (Users, Groups, and Roles) » Temporary Security Credentials » Sample Applications That Use Temporary Credentials

Sample Applications That Use Temporary Credentials

You can use AWS Security Token Service (AWS STS) to create and provide trusted users with temporary security credentials that can control access to your AWS resources. For more information about AWS STS, see Temporary Security Credentials. To see how you can use AWS STS to manage temporary security credentials, you can download the following sample applications that implement complete example scenarios:

• Identity Federation Sample Application for an Active Directory Use Case. Demonstrates how to use permissions that are tied to a user defined in Active Directory (.NET/C#) to issue temporary security credentials for accessing Amazon S3 files and buckets.

• AWS Management Console Federation Proxy Sample Use Case. Demonstrates how to create a custom federation proxy that enables single sign-on (SSO) so that existing Active Directory users can sign into the AWS Management Console (.NET/C#).

• Integrate Shibboleth with AWS Identity and Access Management. Shows how to use Shibboleth and SAML to provide users with single sign-on (SSO) access to the AWS Management Console.

Samples for Web Identity Federation

The following sample applications illustrate how to use web identity federation with providers like Login with Amazon, Amazon Cognito, Facebook, or Google. You can trade authentication from these providers for temporary AWS security credentials to access AWS services.

Note

As an alternative, we recommend that you use Amazon Cognito with the AWS SDKs for mobile development. Amazon Cognito is the simplest way to manage identity for mobile apps, and it provides additional features like synchronization and cross-device identity. For more information about Amazon Cognito, see Amazon Cognito Identity in the AWS Mobile SDK for Android Developer Guide and Authenticate Users with Amazon Cognito Identity in the AWS Mobile SDK for iOS Developer Guide.

• Web Identity Federation Playground. This website provides an interactive demonstration of web identity federation and the AssumeRoleWithWebIdentity API.

• Build and Deploy a Federated Web Identity Application with AWS Elastic Beanstalk and Login with Amazon. This blog post describes how to use AssumeRoleWithWebIdentity to obtain temporary security credentials through web identity federation and Login with Amazon. It also explains how to use those credentials in a Python web application that runs on Elastic Beanstalk to make calls to AWS.

• Authenticating Users of AWS Mobile Applications with a Token Vending Machine at AWS Articles & Tutorials. This sample demonstrates a server-based proxy application that serves temporary credentials to remote clients (such as mobile apps) so that the clients can sign web requests to AWS. This sample can be used with the sample client that is part of the AWS Mobile SDK for Android and the AWS Mobile SDK for iOS. For more information, see Credential Management for Mobile Applications, which provides details on how to secure AWS resources when you use the token vending machine (TVM) with mobile applications.