Connect to AWS Security Token Service
Integrate AWS STS into the workflow. Assume roles, get temporary credentials, verify caller identity, and look up access key information.
Assume an IAM role and receive temporary security credentials
| Paramètre | Type | Obligatoire | Description |
|---|
region | string | Oui | AWS region (e.g., us-east-1) |
accessKeyId | string | Oui | AWS access key ID |
secretAccessKey | string | Oui | AWS secret access key |
roleArn | string | Oui | ARN of the IAM role to assume |
roleSessionName | string | Oui | Identifier for the assumed role session |
durationSeconds | number | Non | Duration of the session in seconds (900-43200, default 3600) |
policy | string | Non | JSON IAM policy to further restrict session permissions (max 2048 chars) |
externalId | string | Non | External ID for cross-account access |
serialNumber | string | Non | MFA device serial number or ARN |
tokenCode | string | Non | MFA token code (6 digits) |
| Paramètre | Type | Description |
|---|
accessKeyId | string | Temporary access key ID |
secretAccessKey | string | Temporary secret access key |
sessionToken | string | Temporary session token |
expiration | string | Credential expiration timestamp |
assumedRoleArn | string | ARN of the assumed role |
assumedRoleId | string | Assumed role ID with session name |
packedPolicySize | number | Percentage of allowed policy size used |
sourceIdentity | string | Source identity set on the role session, if any |
Get details about the IAM user or role whose credentials are used to call the API
| Paramètre | Type | Obligatoire | Description |
|---|
region | string | Oui | AWS region (e.g., us-east-1) |
accessKeyId | string | Oui | AWS access key ID |
secretAccessKey | string | Oui | AWS secret access key |
| Paramètre | Type | Description |
|---|
account | string | AWS account ID |
arn | string | ARN of the calling entity |
userId | string | Unique identifier of the calling entity |
Get temporary security credentials for an IAM user, optionally with MFA
| Paramètre | Type | Obligatoire | Description |
|---|
region | string | Oui | AWS region (e.g., us-east-1) |
accessKeyId | string | Oui | AWS access key ID |
secretAccessKey | string | Oui | AWS secret access key |
durationSeconds | number | Non | Duration of the session in seconds (900-129600, default 43200) |
serialNumber | string | Non | MFA device serial number or ARN |
tokenCode | string | Non | MFA token code (6 digits) |
| Paramètre | Type | Description |
|---|
accessKeyId | string | Temporary access key ID |
secretAccessKey | string | Temporary secret access key |
sessionToken | string | Temporary session token |
expiration | string | Credential expiration timestamp |
Get the AWS account ID associated with an access key
| Paramètre | Type | Obligatoire | Description |
|---|
region | string | Oui | AWS region (e.g., us-east-1) |
accessKeyId | string | Oui | AWS access key ID |
secretAccessKey | string | Oui | AWS secret access key |
targetAccessKeyId | string | Oui | The access key ID to look up |
| Paramètre | Type | Description |
|---|
account | string | AWS account ID that owns the access key |
