Get temporary AWS credentials
GET/cap/gxCAP/getTemporaryCredentials
Returns temporary AWS credentials for an AWS role in the AWS_SC2S cloud partition. Authenticated with a client certificate. Credentials are issued only for roles assigned to the caller's account. Requires the SCAP API to be enabled.
Request
Responses
- 200
- 400
- 403
- 404
- 500
The temporary credentials.
A required parameter (agency, accountName, or roleName) is missing or blank. The duration and policy checks run first.
The AWS role exists but is not assigned to the caller's account.
No AWS role in the AWS_SC2S cloud partition matches agency, accountName, and roleName, or the SCAP API is not enabled.
The credentials could not be issued. This includes a duration that is not a whole number or is outside the allowed range, a policy rejected by combine.tap.api.scap.policy.force.error, and an AWS STS failure.