POST
/
api
/
v1
/
auth
/
aws-auth
/
login
cURL
curl --request POST \
  --url https://us.infisical.com/api/v1/auth/aws-auth/login \
  --header 'Content-Type: application/json' \
  --data '{
  "identityId": "<string>",
  "iamHttpRequestMethod": "POST",
  "iamRequestBody": "<string>",
  "iamRequestHeaders": "<string>"
}'
{
  "accessToken": "<string>",
  "expiresIn": 123,
  "accessTokenMaxTTL": 123,
  "tokenType": "Bearer"
}

Body

application/json
​
identityId
string
required

The ID of the identity to login.

​
iamRequestBody
string
required

The base64-encoded body of the signed request. Most likely, the base64-encoding of Action=GetCallerIdentity&Version=2011-06-15.

​
iamRequestHeaders
string
required

The base64-encoded headers of the sts:GetCallerIdentity signed request.

​
iamHttpRequestMethod
string
default:POST

The HTTP request method used in the signed request.

Response

Default Response

​
accessToken
string
required
​
expiresIn
number
required
​
accessTokenMaxTTL
number
required
​
tokenType
enum<string>
required
Available options:
Bearer