/AWS1/CL_STSASSUMEROOTRESPONSE

AssumeRootResponse

CONSTRUCTOR

IMPORTING

Optional arguments:

io_credentials TYPE REF TO /AWS1/CL_STSCREDENTIALS /AWS1/CL_STSCREDENTIALS

The temporary security credentials, which include an access key ID, a secret access key, and a security token.

The size of the security token that STS API operations return is not fixed. We strongly recommend that you make no assumptions about the maximum size.

iv_sourceidentity TYPE /AWS1/STSSOURCEIDENTITYTYPE /AWS1/STSSOURCEIDENTITYTYPE

The source identity specified by the principal that is calling the AssumeRoot operation.

You can use the aws:SourceIdentity condition key to control access based on the value of source identity. For more information about using source identity, see Monitor and control actions taken with assumed roles in the IAM User Guide.

The regex used to validate this parameter is a string of characters consisting of upper- and lower-case alphanumeric characters with no spaces. You can also include underscores or any of the following characters: =,.@-

---

Queryable Attributes

Credentials

The temporary security credentials, which include an access key ID, a secret access key, and a security token.

The size of the security token that STS API operations return is not fixed. We strongly recommend that you make no assumptions about the maximum size.

Accessible with the following methods

Method	Description
GET_CREDENTIALS()	Getter for CREDENTIALS

SourceIdentity

The source identity specified by the principal that is calling the AssumeRoot operation.

You can use the aws:SourceIdentity condition key to control access based on the value of source identity. For more information about using source identity, see Monitor and control actions taken with assumed roles in the IAM User Guide.

The regex used to validate this parameter is a string of characters consisting of upper- and lower-case alphanumeric characters with no spaces. You can also include underscores or any of the following characters: =,.@-

Accessible with the following methods

Method	Description
GET_SOURCEIDENTITY()	Getter for SOURCEIDENTITY, with configurable default
ASK_SOURCEIDENTITY()	Getter for SOURCEIDENTITY w/ exceptions if field has no valu
HAS_SOURCEIDENTITY()	Determine if SOURCEIDENTITY has a value