get-roles-for-web-identity

Description

GetRolesForWebIdentity is a Scality API that can be used to query the list of assumable roles, as a Web Identity. This API does not require any Access Key.

As it is not a standard API, it is only usable with direct http access or using vaultclient.

Request Parameters

Name	Description	Type	Default	Value
WebIdentityToken	OIDC token returned by the ARTESCA Identity Provider	string	null
Marker	Parameter used to paginate the results	string	0
MaxItems	Parameter used to paginate the results	number	100	Maximum 1000 (included)

Example

To get roles for a web identity

[artesca-os@bootstrap ~]$

curl --data-binary "Action=GetRolesForWebIdentity&WebIdentityToken=<TOKEN_FROM_IDENTITY_PROVIDER>&Marker=<MARKER>&MaxItems=<MAX_ITEMS>" https://ui.zenko.workloadplane.scality.local/iam -k

Output

{
"IsTruncated": false,
"Accounts": [
    {
        "Name": "account-1",
        "CreationDate": "2022-03-31T14:16:58Z",
        "Roles": [
            {
                "Name": "storage-manager-role",
                "Arn": "arn:aws:iam::904321757948:role/scality-internal/storage-manager-role"
            }
        ]
    }
]
}