import ceph quincy 17.2.4

[ceph.git] / ceph / doc / radosgw / STS.rst

diff --git a/ceph/doc/radosgw/STS.rst b/ceph/doc/radosgw/STS.rst
index b4cd67148b582fab6daf8f3a0ba1b2ce2015d408..f0729680b7d56af4459075ed6cf7d57e16810765 100644 (file)
--- a/ceph/doc/radosgw/STS.rst
+++ b/ceph/doc/radosgw/STS.rst
@@ -107,6 +107,15 @@ Examples
 those credentials. In this example, TESTER1 assumes a role created by TESTER, to access S3 resources owned by TESTER,
 according to the permission policy attached to the role.
 
+.. code-block:: console
+
+   radosgw-admin caps add --uid="TESTER" --caps="roles=*"
+
+2. The following is an example of the AssumeRole API call, which shows steps to create a role, assign a policy to it
+   (that allows access to S3 resources), assuming a role to get temporary credentials and accessing S3 resources using
+   those credentials. In this example, TESTER1 assumes a role created by TESTER, to access S3 resources owned by TESTER,
+   according to the permission policy attached to the role.
+
 .. code-block:: python
 
     import boto3
@@ -286,4 +295,4 @@ Steps for integrating Radosgw with Keycloak can be found here
 STSLite
 =======
 STSLite has been built on STS, and documentation for the same can be found here
-:doc:`STSLite`.
\ No newline at end of file
+:doc:`STSLite`.