AWS Credentials

Using Tines to automate interaction with AWS services requires the use of an AWS credential. When a HTTP Request Agent with an AWS mode credential runs, Tines will authorize the request AWS using the Signature Version 4 Signing Process and include the correspoding headers in the request.

Creating an AWS credential

Enter the following information in the AWS New Credential page:

  • Credential name: Your desired AWS credential name.
  • Access key: The access key from your AWS Security Credentials.
  • Access secret: The access secret from your AWS Security Credentials.
  • AWS Region: The AWS region in which your credential will be used, e.g.: eu-west-1
  • Service name: The service name for which the credential will be used, e.g.: dynamodb and iam

Using an AWS credential with a HTTP Request Agent

To use an AWS credential with a HTTP Request agent, include the corresponding credential widget in the agent’s Authorization header.

Sample AWS HTTP Request Agents

Scan a DynamoDB Table

{
  "url": "https://dynamodb.eu-west-1.amazonaws.com",
  "method": "post",
  "content_type": "json",
  "payload": {
    "TableName": "TestTable",
    "AttributesToGet": [
      "Id"
    ]
  },
  "headers": {
    "Authorization": "{% credential Aws_DynamoDB %}",
    "X-Amz-Target": "DynamoDB_20120810.Scan"
  },
  "expected_update_period_in_days": 1
}

List Cloudtrails

{
  "url": "https://cloudtrail.us-east-1.amazonaws.com",
  "method": "get",
  "content_type": "form",
  "payload": {
    "Action": "DescribeTrails",
    "Version": "2013-11-01"
  },
  "headers": {
    "Authorization": "{% credential aws_cloudtrail %}"
  },
  "expected_update_period_in_days": 1
}

List IAM Users

{
  "url": "https://iam.amazonaws.com",
  "content_type": "form",
  "method": "get",
  "payload": {
    "Action": "ListUsers",
    "Version": "2010-05-08"
  },
  "headers": {
    "Authorization": "{% credential aws_iam %}"
  },
  "expected_update_period_in_days": "1"
}