aws-sts-assume-role-credentials-output

AssumeRole returns temporary AWS credentials that are immediately usable as the assumed role.

awscritical service: aws:sts emits ExposesCredential

Where it sits

locationAssumeRole.Credentials.SecretAccessKey / SessionToken
location kindoutput_value
data kindsaccess_key secret_key session_token credential
emits edgeExposesCredential
serviceSTS (aws:sts)

Collection recipe

access modecreation_response_only
operationAssumeRole
response pathCredentials.{AccessKeyId,SecretAccessKey,SessionToken}
encodingjson
params{"RoleArn": "\u003crole-arn\u003e", "RoleSessionName": "\u003csession-name\u003e"}

Required permissions

sts:AssumeRole

References

move · open · esc close