AmazonSecurityTokenServiceClient.GetCallerIdentity Method (GetCallerIdentityRequest)

Returns details about the IAM user or role whose credentials are used to call the operation.

No permissions are required to perform this operation. If an administrator attaches a policy to your identity that explicitly denies access to the sts:GetCallerIdentity action, you can still perform this operation. Permissions are not required because the same information is returned when access is denied. To view an example response, see I Am Not Authorized to Perform: iam:DeleteVirtualMFADevice in the IAM User Guide.

Note:

For .NET Core this operation is only available in asynchronous form. Please refer to GetCallerIdentityAsync.

Namespace: Amazon.SecurityToken
Assembly: AWSSDK.SecurityToken.dll
Version: 3.x.y.z

Syntax

public virtual GetCallerIdentityResponse GetCallerIdentity(
         GetCallerIdentityRequest request
)

Parameters

request: Type: Amazon.SecurityToken.Model.GetCallerIdentityRequest

Container for the necessary parameters to execute the GetCallerIdentity service method.

Return Value

Type: GetCallerIdentityResponse

The response from the GetCallerIdentity service method, as returned by SecurityTokenService.

Examples

This example shows a request and response made with the credentials for a user named Alice in the AWS account 123456789012.

To get details about a calling IAM user


var client = new AmazonSecurityTokenServiceClient();
var response = client.GetCallerIdentity(new GetCallerIdentityRequest 
{
});

string account = response.Account;
string arn = response.Arn;
string userId = response.UserId;

This example shows a request and response made with temporary credentials created by AssumeRole. The name of the assumed role is my-role-name, and the RoleSessionName is set to my-role-session-name.

To get details about a calling user federated with AssumeRole


var client = new AmazonSecurityTokenServiceClient();
var response = client.GetCallerIdentity(new GetCallerIdentityRequest 
{
});

string account = response.Account;
string arn = response.Arn;
string userId = response.UserId;

This example shows a request and response made with temporary credentials created by using GetFederationToken. The Name parameter is set to my-federated-user-name.

To get details about a calling user federated with GetFederationToken


var client = new AmazonSecurityTokenServiceClient();
var response = client.GetCallerIdentity(new GetCallerIdentityRequest 
{
});

string account = response.Account;
string arn = response.Arn;
string userId = response.UserId;

Version Information

.NET Framework:
Supported in: 4.5, 4.0, 3.5

AmazonSecurityTokenServiceClient.GetCallerIdentity (GetCallerIdentityRequest)

Method