Aws sts assume-role

• https://awscli.amazonaws.com/v2/documentation/api/latest/reference/sts/assume-role.html
• https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html

aws sts assume-role --role-arn your_role

aws sts assume-role --role-arn your_role --role-session-name XXXX

aws sts assume-role --role-arn your_role --role-session-name XXXX --serial-number yyyyy --token-code your-token

aws sts get-session-token --profile

--role-arn <value>
--role-session-name <value>
--duration-seconds <value> The maximum session duration setting can have a value from 1 hour to 12 hours
--source-identity

Related

• AWS IAM role
• aws iam enable-mfa-device
• aws sts assume-role-with-saml
• sts:AssumeRole
• Maximum session duration
• assumed-role/

Activities

• Enhance programmatic access for IAM users using a YubiKey for multi-factor authentication

See also

• aws sts assume-role, assumed-role/, arn:aws:sts
• AWS STS (sts:), aws sts [ get-session-token | get-caller-identity | assume-role | assume-role-with-web-identity | assume-role-with-saml | get-access-key-info ]