Providing AWS Credentials
To connect to any of the supported services with the AWS SDK for C++, you must provide
AWS credentials.
The AWS SDKs and CLIs use provider chains to look for AWS credentials in several
different places, including system/user environment variables and local AWS configuration
files.
For details, see Credentials Providers
Create an AWS account
To create an AWS account, see
How do I create and activate a new Amazon Web Services account?
Create AWS credentials and a profile
To use the SDK, you need to create an AWS Identity and Access Management (IAM) user and obtain credentials for that user. After you have those credentials, you make them available to the SDK in your development environment. Here's how.
To create and use credentials
-
Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/
. -
Choose Users, and then choose Add user.
-
Provide a user name. For this tutorial, we'll use SdkUser.
-
Under Select AWS access type, select Programmatic access, and then choose Next: Permissions.
-
Choose Attach existing policies directly.
-
In Search, enter
s3, and then select AmazonS3FullAccess. -
Choose Next: Tags, Next: Review, and Create user.
-
On the Success screen, choose
Download .csv.The downloaded file contains the Access Key ID and the Secret Access Key for this IAM user. Treat your Secret Access Key as a password; save in a trusted location and do not share it.
Note You will not have another opportunity to download or copy the Secret Access Key.
-
Save the file in the appropriate location for your operating system. See Location of Credentials Files.
The preceding procedure is the simplest of several possibilities for authentication and authorization. For other options, see below.
More information on user credentials
To explore other ways to provide credentials to SDKs, see the following:
-
To create long-term AWS credentials, see Programmatic access in the AWS General Reference.
-
To create short-term AWS credentials, see Temporary Security Credentials in the IAM User Guide.
-
To learn more about supported provider chains, see the AWS SDKs and Tools Shared Configuration and Credentials Reference Guide, specifically:
-
role_arn (corresponds to the
AWS_ROLE_ARNenvironment variable) -
web_identity_token_file (corresponds to the
AWS_WEB_IDENTITY_TOKEN_FILEenvironment variable) -
role_session_name (corresponds to the
AWS_ROLE_SESSION_NAMEenvironment variable)
-
To learn more about the
AWS_CONTAINER_CREDENTIALS_RELATIVE_URIenvironment variable, see IAM Roles for Tasks in the Amazon Elastic Container Service Developer Guide.
