AWS STS

Instrucciones de uso

Integrate AWS STS into the workflow. Assume roles, get temporary credentials, verify caller identity, and look up access key information.

Assume an IAM role and receive temporary security credentials

Parámetro	Tipo	Obligatorio	Descripción
`region`	string	Sí	AWS region (e.g., us-east-1)
`accessKeyId`	string	Sí	AWS access key ID
`secretAccessKey`	string	Sí	AWS secret access key
`roleArn`	string	Sí	ARN of the IAM role to assume
`roleSessionName`	string	Sí	Identifier for the assumed role session
`durationSeconds`	number	No	Duration of the session in seconds (900-43200, default 3600)
`policy`	string	No	JSON IAM policy to further restrict session permissions (max 2048 chars)
`externalId`	string	No	External ID for cross-account access
`serialNumber`	string	No	MFA device serial number or ARN
`tokenCode`	string	No	MFA token code (6 digits)

Parámetro	Tipo	Descripción
`accessKeyId`	string	Temporary access key ID
`secretAccessKey`	string	Temporary secret access key
`sessionToken`	string	Temporary session token
`expiration`	string	Credential expiration timestamp
`assumedRoleArn`	string	ARN of the assumed role
`assumedRoleId`	string	Assumed role ID with session name
`packedPolicySize`	number	Percentage of allowed policy size used
`sourceIdentity`	string	Source identity set on the role session, if any

Get details about the IAM user or role whose credentials are used to call the API

Parámetro	Tipo	Obligatorio	Descripción
`region`	string	Sí	AWS region (e.g., us-east-1)
`accessKeyId`	string	Sí	AWS access key ID
`secretAccessKey`	string	Sí	AWS secret access key

Parámetro	Tipo	Descripción
`account`	string	AWS account ID
`arn`	string	ARN of the calling entity
`userId`	string	Unique identifier of the calling entity

Get temporary security credentials for an IAM user, optionally with MFA

Parámetro	Tipo	Obligatorio	Descripción
`region`	string	Sí	AWS region (e.g., us-east-1)
`accessKeyId`	string	Sí	AWS access key ID
`secretAccessKey`	string	Sí	AWS secret access key
`durationSeconds`	number	No	Duration of the session in seconds (900-129600, default 43200)
`serialNumber`	string	No	MFA device serial number or ARN
`tokenCode`	string	No	MFA token code (6 digits)

Parámetro	Tipo	Descripción
`accessKeyId`	string	Temporary access key ID
`secretAccessKey`	string	Temporary secret access key
`sessionToken`	string	Temporary session token
`expiration`	string	Credential expiration timestamp

Get the AWS account ID associated with an access key

Parámetro	Tipo	Obligatorio	Descripción
`region`	string	Sí	AWS region (e.g., us-east-1)
`accessKeyId`	string	Sí	AWS access key ID
`secretAccessKey`	string	Sí	AWS secret access key
`targetAccessKeyId`	string	Sí	The access key ID to look up

Parámetro	Tipo	Descripción
`account`	string	AWS account ID that owns the access key