aws-rolesanywhere-session-credentials-output
Roles Anywhere CreateSession returns temporary role credentials to a certificate-authenticated caller and is not authorized by an IAM action on that caller.
Where it sits
| location | CreateSession.CredentialSet[].Credentials.SecretAccessKey / SessionToken |
| location kind | output_value |
| data kinds | access_key secret_key session_token credential |
| emits edge | ExposesCredential |
| service | IAM Roles Anywhere (aws:rolesanywhere) |
Collection recipe
| access mode | creation_response_only |
| operation | CreateSession |
| response path | CredentialSet[].Credentials.{AccessKeyId,SecretAccessKey,SessionToken} |
| encoding | json |
| params | {"ProfileArn": "\u003cprofile-arn\u003e", "RoleArn": "\u003crole-arn\u003e", "TrustAnchorArn": "\u003ctrust-anchor-arn\u003e"} |
References