AWS STS

使用说明

Integrate AWS STS into the workflow. Assume roles, get temporary credentials, verify caller identity, and look up access key information.

Assume an IAM role and receive temporary security credentials

参数	类型	必填	描述
`region`	string	是	AWS region (e.g., us-east-1)
`accessKeyId`	string	是	AWS access key ID
`secretAccessKey`	string	是	AWS secret access key
`roleArn`	string	是	ARN of the IAM role to assume
`roleSessionName`	string	是	Identifier for the assumed role session
`durationSeconds`	number	否	Duration of the session in seconds (900-43200, default 3600)
`policy`	string	否	JSON IAM policy to further restrict session permissions (max 2048 chars)
`externalId`	string	否	External ID for cross-account access
`serialNumber`	string	否	MFA device serial number or ARN
`tokenCode`	string	否	MFA token code (6 digits)

参数	类型	描述
`accessKeyId`	string	Temporary access key ID
`secretAccessKey`	string	Temporary secret access key
`sessionToken`	string	Temporary session token
`expiration`	string	Credential expiration timestamp
`assumedRoleArn`	string	ARN of the assumed role
`assumedRoleId`	string	Assumed role ID with session name
`packedPolicySize`	number	Percentage of allowed policy size used
`sourceIdentity`	string	Source identity set on the role session, if any

Get details about the IAM user or role whose credentials are used to call the API

参数	类型	描述
`account`	string	AWS account ID
`arn`	string	ARN of the calling entity
`userId`	string	Unique identifier of the calling entity

Get temporary security credentials for an IAM user, optionally with MFA

参数	类型	必填	描述
`region`	string	是	AWS region (e.g., us-east-1)
`accessKeyId`	string	是	AWS access key ID
`secretAccessKey`	string	是	AWS secret access key
`durationSeconds`	number	否	Duration of the session in seconds (900-129600, default 43200)
`serialNumber`	string	否	MFA device serial number or ARN
`tokenCode`	string	否	MFA token code (6 digits)

参数	类型	描述
`accessKeyId`	string	Temporary access key ID
`secretAccessKey`	string	Temporary secret access key
`sessionToken`	string	Temporary session token
`expiration`	string	Credential expiration timestamp

Get the AWS account ID associated with an access key

参数	类型	描述
`account`	string	AWS account ID that owns the access key