aws-sts-saml-credentials-output
SAML role assumption returns temporary AWS credentials to the caller.
Where it sits
| location | AssumeRoleWithSAML.Credentials.SecretAccessKey / SessionToken |
|---|
| location kind | output_value |
|---|
| data kinds | access_key secret_key session_token credential |
|---|
| emits edge | ExposesCredential |
|---|
| service | STS (aws:sts) |
|---|
Collection recipe
| access mode | creation_response_only |
|---|
| operation | AssumeRoleWithSAML |
|---|
| response path | Credentials.{AccessKeyId,SecretAccessKey,SessionToken} |
|---|
| encoding | json |
|---|
| params | {"PrincipalArn": "\u003cprovider-arn\u003e", "RoleArn": "\u003crole-arn\u003e", "SAMLAssertion": "\u003cassertion\u003e"} |
|---|
Required permissions
sts:AssumeRoleWithSAML
References