Example usage for com.amazonaws.services.identitymanagement.model CreateAccessKeyResult getAccessKey

Introduction

In this page you can find the example usage for com.amazonaws.services.identitymanagement.model CreateAccessKeyResult getAccessKey.

Prototype

public AccessKey getAccessKey() 

Source Link

Document

A structure with details about the access key.

Usage

From source file:aws.example.iam.CreateAccessKey.java

License:Open Source License

public static void main(String[] args) {

    final String USAGE = "To run this example, supply an IAM user\n" + "Ex: CreateAccessKey <user>\n";

    if (args.length != 1) {
        System.out.println(USAGE);
        System.exit(1);//from   w ww  . j  a v  a2s. com
    }

    String user = args[0];

    final AmazonIdentityManagement iam = AmazonIdentityManagementClientBuilder.defaultClient();

    CreateAccessKeyRequest request = new CreateAccessKeyRequest().withUserName(user);

    CreateAccessKeyResult response = iam.createAccessKey(request);

    System.out.println("Created access key: " + response.getAccessKey());
}

---

From source file:ch.cyberduck.core.iam.AmazonIdentityConfiguration.java

License:Open Source License

@Override
public void create(final String username, final String policy, final LoginCallback prompt)
        throws BackgroundException {
    if (log.isInfoEnabled()) {
        log.info(String.format("Create user %s with policy %s", username, policy));
    }/*from  ww w  . j a v a 2 s.co  m*/
    this.authenticated(new Authenticated<Void>() {
        @Override
        public Void call() throws BackgroundException {
            // Create new IAM credentials
            final AmazonIdentityManagementClient client = new AmazonIdentityManagementClient(
                    new com.amazonaws.auth.AWSCredentials() {
                        @Override
                        public String getAWSAccessKeyId() {
                            return host.getCredentials().getUsername();
                        }

                        @Override
                        public String getAWSSecretKey() {
                            return host.getCredentials().getPassword();
                        }
                    }, configuration);
            try {
                // Create new IAM credentials
                User user;
                try {
                    user = client.createUser(new CreateUserRequest().withUserName(username)).getUser();
                } catch (EntityAlreadyExistsException e) {
                    user = client.getUser(new GetUserRequest().withUserName(username)).getUser();
                }
                final CreateAccessKeyResult key = client
                        .createAccessKey(new CreateAccessKeyRequest().withUserName(user.getUserName()));
                if (log.isDebugEnabled()) {
                    log.debug(String.format("Created access key %s for user %s", key, username));
                }
                // Write policy document to get read access
                client.putUserPolicy(new PutUserPolicyRequest(user.getUserName(), "Policy", policy));
                // Map virtual user name to IAM access key
                final String id = key.getAccessKey().getAccessKeyId();
                if (log.isInfoEnabled()) {
                    log.info(String.format("Map user %s to access key %s",
                            String.format("%s%s", prefix, username), id));
                }
                PreferencesFactory.get().setProperty(String.format("%s%s", prefix, username), id);
                // Save secret
                PasswordStoreFactory.get().addPassword(host.getProtocol().getScheme(), host.getPort(),
                        host.getHostname(), id, key.getAccessKey().getSecretAccessKey());
            } catch (AmazonClientException e) {
                throw new AmazonServiceExceptionMappingService().map("Cannot write user configuration", e);
            } finally {
                client.shutdown();
            }
            return null;
        }
    }, prompt);
}

---

From source file:com.github.trask.sandbox.ec2.Ec2Service.java

License:Apache License

public AccessKey createAccessKey(final String username) {
    CreateAccessKeyRequest request = new CreateAccessKeyRequest();
    request.setUserName(username);//from  w  ww.j  a va2 s.  co  m
    CreateAccessKeyResult result = iam.createAccessKey(request);
    return result.getAccessKey();
}

---

From source file:fr.xebia.demo.amazon.aws.AmazonAwsIamAccountCreator.java

License:Apache License

/**
 * Create an Amazon IAM account with a password, a secret key and member of
 * "Admins". The password, access key and secret key are sent by email.
 * /*from  w w  w .ja v a 2  s  .  c om*/
 * @param userName
 *            valid email used as userName of the created account.
 */
public void createUsers(String userName) {

    CreateUserRequest createUserRequest = new CreateUserRequest(userName);
    CreateUserResult createUserResult = iam.createUser(createUserRequest);
    User user = createUserResult.getUser();

    String password = RandomStringUtils.randomAlphanumeric(8);

    iam.createLoginProfile(new CreateLoginProfileRequest(user.getUserName(), password));
    iam.addUserToGroup(new AddUserToGroupRequest("Admins", user.getUserName()));
    CreateAccessKeyResult createAccessKeyResult = iam
            .createAccessKey(new CreateAccessKeyRequest().withUserName(user.getUserName()));
    AccessKey accessKey = createAccessKeyResult.getAccessKey();

    System.out.println("CREATED userName=" + user.getUserName() + "\tpassword=" + password + "\taccessKeyId="
            + accessKey.getAccessKeyId() + "\tsecretAccessKey=" + accessKey.getSecretAccessKey());

    String subject = "Xebia France Amazon EC2 Credentials";

    String body = "Hello,\n";
    body += "\n";
    body += "Here are the credentials to connect to Xebia Amazon AWS/EC2 training infrastructure:\n";
    body += "\n";
    body += "User Name: " + user.getUserName() + "\n";
    body += "Password: " + password + "\n";
    body += "Access Key Id: " + accessKey.getAccessKeyId() + "\n";
    body += "Secret Access Key: " + accessKey.getSecretAccessKey() + "\n";
    body += "\n";
    body += "The authentication page is https://xebia-france.signin.aws.amazon.com/console";
    body += "\n";
    body += "Don't hesitate to connect to Amazon AWS, to play with it but please DO NOT FORGET TO STOP INSTANCES OR IF POSSIBLE TERMINATE THEM AFTER USING THEM.\n";
    body += "Letting instances started would cost unnecessary money to Xebia.\n";
    body += "\n";
    body += "\n";
    body += "Thanks,\n";
    body += "\n";
    body += "Cyrille";
    try {
        sendEmail(subject, body, "cyrille@cyrilleleclerc.com", user.getUserName());
    } catch (Exception e) {
        e.printStackTrace();
    }
}

---

From source file:fr.xebia.demo.amazon.aws.AmazonAwsIamAccountCreatorV2.java

License:Apache License

/**
 * Create an Amazon IAM account with a password, a secret key and member of
 * "Admins". The password, access key and secret key are sent by email.
 * /*from   www  .  j  a va 2s .c o  m*/
 * @param userName
 *            valid email used as userName of the created account.
 */
public void createUsers(String userName) {

    CreateUserRequest createUserRequest = new CreateUserRequest(userName);
    CreateUserResult createUserResult = iam.createUser(createUserRequest);
    User user = createUserResult.getUser();

    String password = RandomStringUtils.randomAlphanumeric(8);

    iam.createLoginProfile(new CreateLoginProfileRequest(user.getUserName(), password));
    iam.addUserToGroup(new AddUserToGroupRequest("Admins", user.getUserName()));
    CreateAccessKeyResult createAccessKeyResult = iam
            .createAccessKey(new CreateAccessKeyRequest().withUserName(user.getUserName()));
    AccessKey accessKey = createAccessKeyResult.getAccessKey();

    // SSH
    KeyPair sshKeyPair = createOrOverWriteSshKeyPair(userName);

    // X509
    java.security.KeyPair x509KeyPair = createRsaKeyPair();
    X509Certificate x509Certificate = createX509Certificate(userName, x509KeyPair);

    SigningCertificate signingCertificate;
    try {
        UploadSigningCertificateResult uploadSigningCertificateResult = iam
                .uploadSigningCertificate(new UploadSigningCertificateRequest(Pems.pem(x509Certificate))
                        .withUserName(user.getUserName()));
        signingCertificate = uploadSigningCertificateResult.getCertificate();
    } catch (CertificateEncodingException e) {
        throw Throwables.propagate(e);
    }

    System.out.println("CREATED userName=" + user.getUserName() + "\tpassword=" + password + "\taccessKeyId="
            + accessKey.getAccessKeyId() + "\tsecretAccessKey=" + accessKey.getSecretAccessKey()
            + "\tsshKeyPair=" + sshKeyPair.getKeyName() + "\tx509Certificate="
            + signingCertificate.getCertificateId());

    String subject = "Xebia France Amazon EC2 Credentials";

    String body = "Hello,\n";
    body += "\n";
    body += "Here are the credentials to connect to Xebia Amazon AWS/EC2 training infrastructure:\n";
    body += "\n";
    body += "User Name: " + user.getUserName() + "\n";
    body += "Password: " + password + "\n";
    body += "\n";
    body += "Access Key Id: " + accessKey.getAccessKeyId() + "\n";
    body += "Secret Access Key: " + accessKey.getSecretAccessKey() + "\n";
    body += "\n";
    body += "SSH private key pair '" + sshKeyPair.getKeyName() + "' attached, rename it as '"
            + sshKeyPair.getKeyName() + ".pem" + "'n";
    body += "\n";
    body += "The authentication page is https://xebia-france.signin.aws.amazon.com/console";
    body += "\n";
    body += "Don't hesitate to connect to Amazon AWS, to play with it but please DO NOT FORGET TO STOP INSTANCES OR IF POSSIBLE TERMINATE THEM AFTER USING THEM.\n";
    body += "Letting instances started would cost unnecessary money to Xebia.\n";
    body += "\n";
    body += "\n";
    body += "Thanks,\n";
    body += "\n";
    body += "Cyrille";
    try {
        sendEmail(subject, body, accessKey, sshKeyPair, x509KeyPair, x509Certificate, signingCertificate,
                "cyrille@cyrilleleclerc.com", user.getUserName());
    } catch (Exception e) {
        e.printStackTrace();
    }
}

---

From source file:org.akvo.flow.InstanceConfigurator.java

License:Open Source License

public static void main(String[] args) throws Exception {

    Options opts = getOptions();/* w  ww .  j a  v a 2 s  . c  o  m*/
    CommandLineParser parser = new BasicParser();
    CommandLine cli = null;

    try {
        cli = parser.parse(opts, args);
    } catch (Exception e) {
        System.err.println(e.getMessage());
        HelpFormatter formatter = new HelpFormatter();
        formatter.printHelp(InstanceConfigurator.class.getName(), opts);
        System.exit(1);
    }

    String awsAccessKey = cli.getOptionValue("ak");
    String awsSecret = cli.getOptionValue("as");
    String bucketName = cli.getOptionValue("bn");
    String gaeId = cli.getOptionValue("gae");
    String outFolder = cli.getOptionValue("o");
    String flowServices = cli.getOptionValue("fs");
    String alias = cli.getOptionValue("a");
    String emailFrom = cli.getOptionValue("ef");
    String emailTo = cli.getOptionValue("et");
    String orgName = cli.getOptionValue("on");
    String signingKey = cli.getOptionValue("sk");

    File out = new File(outFolder);

    if (!out.exists()) {
        out.mkdirs();
    }

    Map<String, AccessKey> accessKeys = new HashMap<String, AccessKey>();
    String apiKey = UUID.randomUUID().toString().replaceAll("-", "");

    AWSCredentials creds = new BasicAWSCredentials(awsAccessKey, awsSecret);
    AmazonIdentityManagementClient iamClient = new AmazonIdentityManagementClient(creds);
    AmazonS3Client s3Client = new AmazonS3Client(creds);

    // Creating bucket

    System.out.println("Creating bucket: " + bucketName);

    try {
        if (s3Client.doesBucketExist(bucketName)) {
            System.out.println(bucketName + " already exists, skipping creation");
        } else {
            s3Client.createBucket(bucketName, Region.EU_Ireland);
        }
    } catch (Exception e) {
        System.err.println("Error trying to create bucket " + bucketName + " : " + e.getMessage());
        System.exit(1);
    }

    // Creating users and groups

    String gaeUser = bucketName + GAE_SUFFIX;
    String apkUser = bucketName + APK_SUFFIX;

    // GAE

    System.out.println("Creating user: " + gaeUser);

    GetUserRequest gaeUserRequest = new GetUserRequest();
    gaeUserRequest.setUserName(gaeUser);

    try {
        iamClient.getUser(gaeUserRequest);
        System.out.println("User already exists, skipping creation");
    } catch (NoSuchEntityException e) {
        iamClient.createUser(new CreateUserRequest(gaeUser));
    }

    System.out.println("Requesting security credentials for " + gaeUser);

    CreateAccessKeyRequest gaeAccessRequest = new CreateAccessKeyRequest();
    gaeAccessRequest.setUserName(gaeUser);

    CreateAccessKeyResult gaeAccessResult = iamClient.createAccessKey(gaeAccessRequest);
    accessKeys.put(gaeUser, gaeAccessResult.getAccessKey());

    // APK

    System.out.println("Creating user: " + apkUser);

    GetUserRequest apkUserRequest = new GetUserRequest();
    apkUserRequest.setUserName(apkUser);

    try {
        iamClient.getUser(apkUserRequest);
        System.out.println("User already exists, skipping creation");
    } catch (NoSuchEntityException e) {
        iamClient.createUser(new CreateUserRequest(apkUser));
    }

    System.out.println("Requesting security credentials for " + apkUser);

    CreateAccessKeyRequest apkAccessRequest = new CreateAccessKeyRequest();
    apkAccessRequest.setUserName(apkUser);

    CreateAccessKeyResult apkAccessResult = iamClient.createAccessKey(apkAccessRequest);
    accessKeys.put(apkUser, apkAccessResult.getAccessKey());

    System.out.println("Configuring security policies...");

    Configuration cfg = new Configuration();
    cfg.setClassForTemplateLoading(InstanceConfigurator.class, "/org/akvo/flow/templates");
    cfg.setObjectWrapper(new DefaultObjectWrapper());
    cfg.setDefaultEncoding("UTF-8");

    Map<String, Object> data = new HashMap<String, Object>();
    data.put("bucketName", bucketName);
    data.put("version", new SimpleDateFormat("yyyy-MM-dd").format(new Date()));
    data.put("accessKey", accessKeys);

    Template t1 = cfg.getTemplate("apk-s3-policy.ftl");
    StringWriter apkPolicy = new StringWriter();
    t1.process(data, apkPolicy);

    Template t2 = cfg.getTemplate("gae-s3-policy.ftl");
    StringWriter gaePolicy = new StringWriter();
    t2.process(data, gaePolicy);

    iamClient.putUserPolicy(
            new PutUserPolicyRequest(apkUser, apkUser, Policy.fromJson(apkPolicy.toString()).toJson()));

    iamClient.putUserPolicy(
            new PutUserPolicyRequest(gaeUser, gaeUser, Policy.fromJson(gaePolicy.toString()).toJson()));

    System.out.println("Creating configuration files...");

    // survey.properties
    Map<String, Object> apkData = new HashMap<String, Object>();
    apkData.put("awsBucket", bucketName);
    apkData.put("awsAccessKeyId", accessKeys.get(apkUser).getAccessKeyId());
    apkData.put("awsSecretKey", accessKeys.get(apkUser).getSecretAccessKey());
    apkData.put("serverBase", "https://" + gaeId + ".appspot.com");
    apkData.put("restApiKey", apiKey);

    Template t3 = cfg.getTemplate("survey.properties.ftl");
    FileWriter fw = new FileWriter(new File(out, "/survey.properties"));
    t3.process(apkData, fw);

    // appengine-web.xml
    Map<String, Object> webData = new HashMap<String, Object>();
    webData.put("awsBucket", bucketName);
    webData.put("awsAccessKeyId", accessKeys.get(gaeUser).getAccessKeyId());
    webData.put("awsSecretAccessKey", accessKeys.get(gaeUser).getSecretAccessKey());
    webData.put("s3url", "https://" + bucketName + ".s3.amazonaws.com");
    webData.put("instanceId", gaeId);
    webData.put("alias", alias);
    webData.put("flowServices", flowServices);
    webData.put("apiKey", apiKey);
    webData.put("emailFrom", emailFrom);
    webData.put("emailTo", emailTo);
    webData.put("organization", orgName);
    webData.put("signingKey", signingKey);

    Template t5 = cfg.getTemplate("appengine-web.xml.ftl");
    FileWriter fw3 = new FileWriter(new File(out, "/appengine-web.xml"));
    t5.process(webData, fw3);

    System.out.println("Done");
}

---

From source file:org.apache.usergrid.apm.service.ApplicationServiceImpl.java

License:Apache License

public AccessKey createAuthorizedAppPrinciple(Long applicationId, String orgAppName) {
    CreateUserRequest createUserRequest = new CreateUserRequest();

    createUserRequest.setUserName(APP_PRINCIPLE_USER_PREFIX + "_" + orgAppName);

    createUserRequest.setRequestCredentials(awsCredentials);

    try {/*from   w ww.j  av  a 2  s  .co  m*/
        CreateUserResult createUserResult = identityManagementClient.createUser(createUserRequest);
        log.info("cloud user id for app with " + orgAppName + " created with "
                + createUserResult.getUser().getUserName());
        CreateAccessKeyRequest accessKeyRequest = new CreateAccessKeyRequest();

        accessKeyRequest.setUserName(createUserResult.getUser().getUserName());

        CreateAccessKeyResult accessKeyResult = identityManagementClient.createAccessKey(accessKeyRequest);

        //Create policy of queue

        GetQueueAttributesRequest attributesRequest = new GetQueueAttributesRequest();

        log.info("Going to secure sqs queue : " + AWSUtil.formFullQueueUrl(orgAppName));

        attributesRequest.setQueueUrl(AWSUtil.formFullQueueUrl(orgAppName));

        List<String> attributeNames = new ArrayList<String>();
        attributeNames.add("QueueArn");
        attributesRequest.setAttributeNames(attributeNames);

        GetQueueAttributesResult attributesResult = sqsClient.getQueueAttributes(attributesRequest);

        String queueArn = attributesResult.getAttributes().get("QueueArn");

        String policy = POLICY_DOCUMENT_TEMPLATE.replace("QUEUE_ARN", queueArn);

        String formattedPolicy = String.format(POLICY_DOCUMENT_TEMPLATE, queueArn);
        log.info("Applying authorization for following AWS resources" + formattedPolicy);

        PutUserPolicyRequest policyRequest = new PutUserPolicyRequest();

        policyRequest.setPolicyName(POLICY_NAME);

        policyRequest.setPolicyDocument(formattedPolicy);

        policyRequest.setUserName(createUserResult.getUser().getUserName());

        identityManagementClient.putUserPolicy(policyRequest);
        log.info("User policy for queue " + queueArn + " was set");

        return accessKeyResult.getAccessKey();
    } catch (EntityAlreadyExistsException e) {

        log.error("This should not happen in production. Swallowing the error fow now " + e.getMessage());
        log.error(e);
        return null;
    }
}

---

From source file:org.applicationMigrator.userManagement.UserManagementWorker.java

License:Apache License

private void createUser(String ANDROID_ID) throws FileNotFoundException, IllegalArgumentException, IOException {
    Random randomizer = new Random(System.currentTimeMillis());
    String userName = "User" + randomizer.nextDouble();
    CreateUserRequest user = new CreateUserRequest();
    user.setUserName(userName);//from w w  w . j ava2  s .  c  o  m
    AWSCredentials credentials = new PropertiesCredentials(
            new File("C:\\AndroidMigration\\Credentials\\AwsCredentials.properties"));
    AmazonIdentityManagementClient client = new AmazonIdentityManagementClient(credentials);
    CreateUserResult result = null;
    AccessKey accessKey = null;
    try {

        boolean userCreatedSuccessfully = false;
        while (!userCreatedSuccessfully) {
            try {
                result = client.createUser(user);
                userCreatedSuccessfully = true;
            } catch (EntityAlreadyExistsException exception) {
                user.setUserName(userName + randomizer.nextDouble());
                userCreatedSuccessfully = false;
            }
        }

        CreateAccessKeyRequest accessKeyRequest = new CreateAccessKeyRequest();
        accessKeyRequest.setUserName(result.getUser().getUserName());
        CreateAccessKeyResult accessKeyResult = client.createAccessKey(accessKeyRequest);
        accessKey = accessKeyResult.getAccessKey();

        grantPermissions(user, client);

        File userList = new File(USER_LIST_FILEPATH);
        BufferedWriter userListFileWriter = new BufferedWriter(new FileWriter(userList));

        // Concurrency ?
        userListFileWriter.write(ANDROID_ID + " ");
        userListFileWriter.write(accessKey.getAccessKeyId() + " ");
        userListFileWriter.write(accessKey.getSecretAccessKey() + " ");
        userListFileWriter.write(user.getUserName() + " ");
        userListFileWriter.close();
    } catch (Exception e) {
        if (accessKey != null) {
            DeleteAccessKeyRequest deleteAccessKeyRequest = new DeleteAccessKeyRequest(
                    accessKey.getAccessKeyId());
            deleteAccessKeyRequest.setUserName(user.getUserName());
            client.deleteAccessKey(deleteAccessKeyRequest);
            DeleteUserRequest deleteUserRequest = new DeleteUserRequest(user.getUserName());

            client.deleteUser(deleteUserRequest);
        }
        throw e;
    }
}

---

From source file:org.cloudfoundry.community.servicebroker.s3.service.Iam.java

License:Apache License

public AccessKey createAccessKey(User user) {
    CreateAccessKeyRequest request = new CreateAccessKeyRequest().withUserName(user.getUserName());
    CreateAccessKeyResult result = iam.createAccessKey(request);
    return result.getAccessKey();
}

---