Creating STS
- Print
- PDF
Creating STS
- Print
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
Create Secure Token Service for a sub account.
API
POST /credentials
Content-Type: application/json; charset=utf-8
x-ncp-apigw-timestamp: {Timestamp}
x-ncp-iam-access-key: {Sub Account Access Key or STS Access Key}`
x-ncp-apigw-signature-v2: {API Gateway Signature}
API Header
| Item | Description |
|---|---|
| Content-Type | Specifies the request body content type as application/json (POST) |
| x-ncp-apigw-timestamp | Displays the elapsed time in milliseconds since 00:00:00 January 1, 1970 Coordinated Universal Time (UTC) If the time differs from that of the API Gateway server by 5 minutes or more, then the request is considered invalid x-ncp-apigw-timestamp:{Timestamp} |
| x-ncp-iam-access-key | SubAccount Access Key issued in or STS accessKey created in the IAM consolex-ncp-iam-access-key:{Sub Account Access Key or STS Access Key} |
| x-ncp-apigw-signature-v2 | Signature encrypted with access key ID value and secret keyx-ncp-apigw-signature-v2:{API Gateway Signature} |
Note
For how to create an authentication key or signature for NAVER Cloud Platform, see Ncloud API.
Requests
{
"durationSec": "integer",
"serialNumber": "string",
"tokenCode": "integer"
}
| Parameter | Required | Type | Restrictions | Description |
|---|---|---|---|---|
| durationSec | N | integer | - accessKey duration (sec) default: 3600 min: 600 max: 43200 | |
| serialNumber | N | string | OTP device's NRN or serial number | |
| tokenCode | N | integer | OTP verification code |
Note
You can view MFA serialNumber in My Page > Manage account > Manage secondary authentication on the portal.
Responses
- Responses
{
"accessKey": "string",
"keySecret": "string",
"createTime": "string",
"expireTime": "string",
"useMfa": "boolean"
}
| Item | Type | Description | Note |
|---|---|---|---|
| accessKey | string | accessKey | |
| keySecret | string | secretKey | |
| createTime | string | Creation date | |
| expireTime | string | Expiration date | |
| useMfa | boolean | MFA authentication status |
Errors
Errors that may occur while using this action are listed below.
For more information about common errors, see NAVER Cloud Platform API.
| HTTP status code | Error code | Error message |
|---|---|---|
| 400 | 400 | durationSec can be used only in the following scope valid range: 600 - 43200 : [durationSec] |
| 401 | 401 | MultiFactorAuthentication failed with invalid MFA one time pass code |
Was this article helpful?