org.finra.herd.dao.impl

Class StsDaoImpl

java.lang.Object

org.finra.herd.dao.impl.StsDaoImpl

All Implemented Interfaces:

StsDao

@Repository
public class StsDaoImpl
extends Object
implements StsDao

The STS DAO implementation.

Constructor Summary

Constructors

Constructor and Description
StsDaoImpl()

Method Summary

Modifier and Type	Method and Description
com.amazonaws.services.securitytoken.model.Credentials	getTemporarySecurityCredentials(AwsParamsDto awsParamsDto, String sessionName, String awsRoleArn, int awsRoleDurationSeconds, com.amazonaws.auth.policy.Policy policy) Returns a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) that can be used to access the specified AWS resource.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

StsDaoImpl

public StsDaoImpl()

Method Detail

getTemporarySecurityCredentials

public com.amazonaws.services.securitytoken.model.Credentials getTemporarySecurityCredentials(AwsParamsDto awsParamsDto,
                                                                                              String sessionName,
                                                                                              String awsRoleArn,
                                                                                              int awsRoleDurationSeconds,
                                                                                              com.amazonaws.auth.policy.Policy policy)

Returns a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) that can be used to access the specified AWS resource.

Specified by:

getTemporarySecurityCredentials in interface StsDao

Parameters:

sessionName - the session name that will be associated with the temporary credentials. The session name must be the same for an initial set of credentials and an extended set of credentials if credentials are to be refreshed. The session name also is used to identify the user in AWS logs so it should be something unique and useful to identify the caller/use.

awsRoleArn - the AWS ARN for the role required to provide access to the specified AWS resource

awsRoleDurationSeconds - the duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour).

policy - the temporary policy to apply to this request

Returns:

the assumed session credentials