AWS STS

Nutzungsanweisungen

Integrate AWS STS into the workflow. Assume roles, get temporary credentials, verify caller identity, and look up access key information.

Assume an IAM role and receive temporary security credentials

Parameter	Typ	Erforderlich	Beschreibung
`region`	string	Ja	AWS region (e.g., us-east-1)
`accessKeyId`	string	Ja	AWS access key ID
`secretAccessKey`	string	Ja	AWS secret access key
`roleArn`	string	Ja	ARN of the IAM role to assume
`roleSessionName`	string	Ja	Identifier for the assumed role session
`durationSeconds`	number	Nein	Duration of the session in seconds (900-43200, default 3600)
`policy`	string	Nein	JSON IAM policy to further restrict session permissions (max 2048 chars)
`externalId`	string	Nein	External ID for cross-account access
`serialNumber`	string	Nein	MFA device serial number or ARN
`tokenCode`	string	Nein	MFA token code (6 digits)

Parameter	Typ	Beschreibung
`accessKeyId`	string	Temporary access key ID
`secretAccessKey`	string	Temporary secret access key
`sessionToken`	string	Temporary session token
`expiration`	string	Credential expiration timestamp
`assumedRoleArn`	string	ARN of the assumed role
`assumedRoleId`	string	Assumed role ID with session name
`packedPolicySize`	number	Percentage of allowed policy size used
`sourceIdentity`	string	Source identity set on the role session, if any

Get details about the IAM user or role whose credentials are used to call the API

Parameter	Typ	Erforderlich	Beschreibung
`region`	string	Ja	AWS region (e.g., us-east-1)
`accessKeyId`	string	Ja	AWS access key ID
`secretAccessKey`	string	Ja	AWS secret access key

Parameter	Typ	Beschreibung
`account`	string	AWS account ID
`arn`	string	ARN of the calling entity
`userId`	string	Unique identifier of the calling entity

Get temporary security credentials for an IAM user, optionally with MFA

Parameter	Typ	Erforderlich	Beschreibung
`region`	string	Ja	AWS region (e.g., us-east-1)
`accessKeyId`	string	Ja	AWS access key ID
`secretAccessKey`	string	Ja	AWS secret access key
`durationSeconds`	number	Nein	Duration of the session in seconds (900-129600, default 43200)
`serialNumber`	string	Nein	MFA device serial number or ARN
`tokenCode`	string	Nein	MFA token code (6 digits)

Parameter	Typ	Beschreibung
`accessKeyId`	string	Temporary access key ID
`secretAccessKey`	string	Temporary secret access key
`sessionToken`	string	Temporary session token
`expiration`	string	Credential expiration timestamp

Get the AWS account ID associated with an access key

Parameter	Typ	Erforderlich	Beschreibung
`region`	string	Ja	AWS region (e.g., us-east-1)
`accessKeyId`	string	Ja	AWS access key ID
`secretAccessKey`	string	Ja	AWS secret access key
`targetAccessKeyId`	string	Ja	The access key ID to look up

Parameter	Typ	Beschreibung
`account`	string	AWS account ID that owns the access key