AWS STS

使用方法

Integrate AWS STS into the workflow. Assume roles, get temporary credentials, verify caller identity, and look up access key information.

Assume an IAM role and receive temporary security credentials

パラメータ	型	必須	説明
`region`	string	はい	AWS region (e.g., us-east-1)
`accessKeyId`	string	はい	AWS access key ID
`secretAccessKey`	string	はい	AWS secret access key
`roleArn`	string	はい	ARN of the IAM role to assume
`roleSessionName`	string	はい	Identifier for the assumed role session
`durationSeconds`	number	いいえ	Duration of the session in seconds (900-43200, default 3600)
`policy`	string	いいえ	JSON IAM policy to further restrict session permissions (max 2048 chars)
`externalId`	string	いいえ	External ID for cross-account access
`serialNumber`	string	いいえ	MFA device serial number or ARN
`tokenCode`	string	いいえ	MFA token code (6 digits)

パラメータ	型	説明
`accessKeyId`	string	Temporary access key ID
`secretAccessKey`	string	Temporary secret access key
`sessionToken`	string	Temporary session token
`expiration`	string	Credential expiration timestamp
`assumedRoleArn`	string	ARN of the assumed role
`assumedRoleId`	string	Assumed role ID with session name
`packedPolicySize`	number	Percentage of allowed policy size used
`sourceIdentity`	string	Source identity set on the role session, if any

Get details about the IAM user or role whose credentials are used to call the API

パラメータ	型	必須	説明
`region`	string	はい	AWS region (e.g., us-east-1)
`accessKeyId`	string	はい	AWS access key ID
`secretAccessKey`	string	はい	AWS secret access key

パラメータ	型	説明
`account`	string	AWS account ID
`arn`	string	ARN of the calling entity
`userId`	string	Unique identifier of the calling entity

Get temporary security credentials for an IAM user, optionally with MFA

パラメータ	型	必須	説明
`region`	string	はい	AWS region (e.g., us-east-1)
`accessKeyId`	string	はい	AWS access key ID
`secretAccessKey`	string	はい	AWS secret access key
`durationSeconds`	number	いいえ	Duration of the session in seconds (900-129600, default 43200)
`serialNumber`	string	いいえ	MFA device serial number or ARN
`tokenCode`	string	いいえ	MFA token code (6 digits)

パラメータ	型	説明
`accessKeyId`	string	Temporary access key ID
`secretAccessKey`	string	Temporary secret access key
`sessionToken`	string	Temporary session token
`expiration`	string	Credential expiration timestamp

Get the AWS account ID associated with an access key

パラメータ	型	必須	説明
`region`	string	はい	AWS region (e.g., us-east-1)
`accessKeyId`	string	はい	AWS access key ID
`secretAccessKey`	string	はい	AWS secret access key
`targetAccessKeyId`	string	はい	The access key ID to look up

パラメータ	型	説明
`account`	string	AWS account ID that owns the access key