临时密钥生成及使用指引


# -*- coding: utf-8 -*-

import os
import json
import types
from tencentcloud.common import credential
from tencentcloud.common.profile.client_profile import ClientProfile
from tencentcloud.common.profile.http_profile import HttpProfile
from tencentcloud.common.exception.tencent_cloud_sdk_exception import TencentCloudSDKException
from tencentcloud.sts.v20180813 import sts_client, models
from urllib.parse import quote

def url_encode(text):
    return quote(text)
try:
    # 实例化一个认证对象，入参需要传入腾讯云账户 SecretId 和 SecretKey，此处还需注意密钥对的保密
    # 代码泄露可能会导致 SecretId 和 SecretKey 泄露，并威胁账号下所有资源的安全性
    # 以下代码示例仅供参考，建议采用更安全的方式来使用密钥
    # 请参见：https://cloud.tencent.com/document/product/1278/85305
    # 密钥可前往官网控制台 https://console.cloud.tencent.com/cam/capi 进行获取
    cred = credential.Credential("", "")
    # 使用临时密钥示例
    # cred = credential.Credential("SecretId", "SecretKey", "Token")
    # 实例化一个http选项，可选的，没有特殊需求可以跳过
    httpProfile = HttpProfile()
    httpProfile.endpoint = "sts.tencentcloudapi.com"

    # 实例化一个client选项，可选的，没有特殊需求可以跳过
    clientProfile = ClientProfile()
    clientProfile.httpProfile = httpProfile
    # 实例化要请求产品的client对象,clientProfile是可选的

    policy = {
        "version": "2.0",
        "statement": [
            {
                "effect": "allow",
                "action": ["name/tts:*"],
                "resource": "*",
            }
        ]
    }
    policy_json = json.dumps(policy, ensure_ascii=False)

    # 对 JSON 字符串进行 URL 编码
    encoded_policy = quote(policy_json)
    client = sts_client.StsClient(cred, "ap-beijing", clientProfile)

    # 实例化一个请求对象,每个接口都会对应一个request对象
    req = models.GetFederationTokenRequest()
    params = {
        "Name": "lsdfsf",
        "Policy": encoded_policy,
        "DurationSeconds": 3600*10
    }
    req.from_json_string(json.dumps(params))

    # 返回的resp是一个GetFederationTokenResponse的实例，与请求对象对应
    resp = client.GetFederationToken(req)
    # 输出json格式的字符串回包
    print(resp.to_json_string())

except TencentCloudSDKException as err:
    print(err)