Get temporary AWS credentials
GET/api/v1/credentials
Returns temporary AWS credentials for an AWS role in the AWS_C2S cloud partition. Authenticated with a client certificate. Credentials are issued only for roles assigned to the caller's account. Requires the CAP API to be enabled.
Request
Responses
- 200
- 400
- 403
- 404
- 500
The temporary credentials.
A required parameter (agency, mission, or role) is missing or blank. Only the first missing parameter is reported, and a missing mission is reported as [account]. The duration and policy checks run first.
The AWS role exists but is not assigned to the caller's account.
No AWS role in the AWS_C2S cloud partition matches agency, mission, and role, or the CAP API is not enabled.
The credentials could not be issued. This includes a duration that is not a whole number or is outside the allowed range, a policy rejected by combine.tap.api.cap.policy.force.error, and an AWS STS failure.