获取AWS IAM用户的标签详细信息

Question

Amazon标识管理iam=Amazon标识管理客户端Builder.standard（）。US_EAST_1）。

有人能告诉我怎么做吗？

我试图在下面的程序中列出一个用户的标签，但我得到了下面的错误：我们计算的请求签名与您提供的签名不匹配。检查您的AWS秘密访问密钥和签名方法。有关详细信息，请参阅维修文档。

公共类ListUserTags{

public static void main(String args[]) {
    String kSecret = "adfdskjfdjssfjdjfdsdumykeysecret3eiiid";
    String dateStamp = getConvertedDateString("yyyyMMdd", new Date());
    System.out.println("dateStamp:" + dateStamp);
    String regionName = "us-east-1";
    String serviceName = "iam";

    String xmzDate = getConvertedDateString("yyyyMMdd'T'HHmmss'Z'", new Date());;
    System.out.println("date:" + xmzDate);

    String signature = getSignatureKey(kSecret, dateStamp, regionName, serviceName); //signature


    System.out.println("signature:" + signature);


    OkHttpClient client = new OkHttpClient().clone();
    //MediaType mediaType = MediaType.parse("text/plain");

    Request request = new Request.Builder()
        .url("https://iam.amazonaws.com/?Action=ListUserTags&Version=2010-05-08&UserName=SVC_ServiceAccount04")
        .method("GET", null)
        .addHeader("host", "iam.amazonaws.com")
        .addHeader("X-Amz-Date", xmzDate)
        .addHeader("Authorization", "AWS4-HMAC-SHA256 Credential=ABC787dsfsdDummyAccessKey/" + dateStamp + "/us-east-1/iam/aws4_request, SignedHeaders=host;x-amz-date, Signature=" + signature)


    System.out.println("req:" + request.headers().toString());
    Response response = client.newCall(request).execute();

}

static byte[] HmacSHA256(String data, byte[] key) throws Exception {
    String algorithm = "HmacSHA256";
    Mac mac = Mac.getInstance(algorithm);
    mac.init(new SecretKeySpec(key, algorithm));
    return mac.doFinal(data.getBytes("UTF-8"));
}



static String getSignatureKey(String key, String dateStamp, String regionName, String serviceName) throws Exception {
    byte[] kSecret = ("AWS4" + key).getBytes("UTF-8");
    byte[] kDate = HmacSHA256(dateStamp, kSecret);
    byte[] kRegion = HmacSHA256(regionName, kDate);
    byte[] kService = HmacSHA256(serviceName, kRegion);
    byte[] kSigning = HmacSHA256("aws4_request", kService);
    return Hex.encodeHexString(kSigning);

}

public static String getConvertedDateString(String format, Date date) {

    return new SimpleDateFormat(format).format(date);

}

}

Answer 1

你试过ListUserTags了吗。似乎就是你要找的

Answer 2

获取用户的标签可以按以下方式完成：

public static void main(String[] args) {

    // Please consider using aws configure and avoid hard-coding credentials
    BasicAWSCredentials awsCredentials = new BasicAWSCredentials("access_key_id", "secret_key_id");

    AmazonIdentityManagement iam = AmazonIdentityManagementClientBuilder.standard()
            .withCredentials(new AWSStaticCredentialsProvider(awsCredentials))
            .build();

    // Create a request with the username for which we want to query the tags
    ListUserTagsRequest request = new ListUserTagsRequest().withUserName("username");

    ListUserTagsResult result;
    List<Tag> tags = new ArrayList<>();
    do {
        result = iam.listUserTags(request);
        tags.addAll(result.getTags());
        request.setMarker(result.getMarker());
    } while (result.isTruncated());

    // Do something with the tags
    System.out.println(tags);
}

我认为代码是不言自明的。关于AWS IAM Java sdk的更深入的文档可以在这里找到。