103 lines
3.7 KiB
PHP
103 lines
3.7 KiB
PHP
<?php
|
|
/**
|
|
* Copyright 2010-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License").
|
|
* You may not use this file except in compliance with the License.
|
|
* A copy of the License is located at
|
|
*
|
|
* http://aws.amazon.com/apache2.0
|
|
*
|
|
* or in the "license" file accompanying this file. This file is distributed
|
|
* on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
|
|
* express or implied. See the License for the specific language governing
|
|
* permissions and limitations under the License.
|
|
*/
|
|
|
|
namespace Aws\Common\InstanceMetadata;
|
|
|
|
use Aws\Common\Enum\ClientOptions as Options;
|
|
use Aws\Common\Exception\InstanceProfileCredentialsException;
|
|
use Aws\Common\Credentials\Credentials;
|
|
use Aws\Common\Client\AbstractClient;
|
|
use Guzzle\Common\Collection;
|
|
use Guzzle\Http\Message\RequestFactory;
|
|
|
|
/**
|
|
* Client used for interacting with the Amazon EC2 instance metadata server
|
|
*/
|
|
class InstanceMetadataClient extends AbstractClient
|
|
{
|
|
/**
|
|
* Factory method to create a new InstanceMetadataClient using an array
|
|
* of configuration options.
|
|
*
|
|
* The configuration options accepts the following array keys and values:
|
|
* - base_url: Override the base URL of the instance metadata server
|
|
* - version: Version of the metadata server to interact with
|
|
*
|
|
* @param array|Collection $config Configuration options
|
|
*
|
|
* @return InstanceMetadataClient
|
|
*/
|
|
public static function factory($config = array())
|
|
{
|
|
$config = Collection::fromConfig($config, array(
|
|
Options::BASE_URL => 'http://169.254.169.254/{version}/',
|
|
'version' => 'latest',
|
|
'request.options' => array(
|
|
'connect_timeout' => 5,
|
|
'timeout' => 10
|
|
)
|
|
), array('base_url', 'version'));
|
|
|
|
return new self($config);
|
|
}
|
|
|
|
/**
|
|
* Constructor override
|
|
*/
|
|
public function __construct(Collection $config)
|
|
{
|
|
$this->setConfig($config);
|
|
$this->setBaseUrl($config->get(Options::BASE_URL));
|
|
$this->defaultHeaders = new Collection();
|
|
$this->setRequestFactory(RequestFactory::getInstance());
|
|
}
|
|
|
|
/**
|
|
* Get instance profile credentials
|
|
*
|
|
* @return Credentials
|
|
* @throws InstanceProfileCredentialsException
|
|
*/
|
|
public function getInstanceProfileCredentials()
|
|
{
|
|
try {
|
|
$request = $this->get('meta-data/iam/security-credentials/');
|
|
$credentials = trim($request->send()->getBody(true));
|
|
$result = $this->get("meta-data/iam/security-credentials/{$credentials}")->send()->json();
|
|
} catch (\Exception $e) {
|
|
$message = sprintf('Error retrieving credentials from the instance profile metadata server. When you are'
|
|
. ' not running inside of Amazon EC2, you must provide your AWS access key ID and secret access key in'
|
|
. ' the "key" and "secret" options when creating a client or provide an instantiated'
|
|
. ' Aws\\Common\\Credentials\\CredentialsInterface object. (%s)', $e->getMessage());
|
|
throw new InstanceProfileCredentialsException($message, $e->getCode());
|
|
}
|
|
|
|
// Ensure that the status code was successful
|
|
if ($result['Code'] !== 'Success') {
|
|
$e = new InstanceProfileCredentialsException('Unexpected response code: ' . $result['Code']);
|
|
$e->setStatusCode($result['Code']);
|
|
throw $e;
|
|
}
|
|
|
|
return new Credentials(
|
|
$result['AccessKeyId'],
|
|
$result['SecretAccessKey'],
|
|
$result['Token'],
|
|
strtotime($result['Expiration'])
|
|
);
|
|
}
|
|
}
|