Assume a Vultr IAM role using the AWS STS-compatible endpoint. Use existing AWS tooling and SDKs to obtain temporary credentials for Vultr cloud resources.
Vultr provides an AWS STS-compatible endpoint that allows you to assume a role using the same request format as AWS Security Token Service. This is useful for integrating with tools and SDKs built for AWS STS, enabling a seamless migration path from AWS to Vultr.
The endpoint supports two actions:
This endpoint uses application/x-www-form-urlencoded content type and returns an XML response, matching the AWS STS API format. The RoleArn parameter follows the AWS ARN format: arn:aws:iam::ORGANIZATION-ID:role/ROLE-ID.
This guide explains how to assume a role using the AWS STS compatibility endpoint via the Vultr API.
Send a GET request to the List Roles endpoint to retrieve all roles in your organization.
Note the id of the assumable role you want to assume.
Send a POST request to the Assume Role AWS STS endpoint to assume the role.
To assume a role with a Vultr API key, use the AssumeRole action. Replace ORGANIZATION-ID with your organization id, ROLE-ID with the assumable role id, and SESSION-NAME with a descriptive name for the session.
To assume a role using a JWT token from an external OIDC issuer, use the AssumeRoleWithWebIdentity action. Replace OIDC-JWT with the JWT token issued by the trusted OIDC provider.
A successful response returns an XML body in the AWS STS format containing the session credentials.
0 Comments
Be the first to comment and share your perspective with the community.