AWS Security Token Service (STS)

AWS Security Token Service (at least 2013) , aws sts

News

• Feb 2015 AWS Security Token Service (STS) in every AWS Region

Activities

• Read sts blog:
  • https://aws.amazon.com/blogs/security/tag/aws-sts/
  • https://aws.amazon.com/blogs/security/category/security-identity-compliance/aws-security-token-service/
• Read StackOverflow related questions: https://stackoverflow.com/questions/tagged/aws-sts?tab=Votes
• Read Managing AWS STS in an AWS Region
• Read AWS Security Token Service endpoints and quotas

Errors

eksctl get cluster
Error: checking AWS STS access – cannot get role ARN for current session: operation error STS: GetCallerIdentity, failed to sign request: failed to retrieve credentials: failed to refresh cached credentials, no EC2 IMDS role found, operation error ec2imds: GetMetadata, request send failed, Get "http://169.254.169.254/latest/meta-data/iam/security-credentials/": dial tcp 169.254.169.254:80: i/o timeout

An error occurred (UnrecognizedClientException) when calling the UpdateService operation: The security token included in the request is invalid.

An error occurred (ExpiredTokenException) when calling the .../...

Related

• GetSessionToken
• Amazon Region
• sts:AssumeRoleWithSAML
• AssumeRoleWithWebIdentity
• AWS SAML
• AWS STS SourceIdentity
• AWS IAM
• AWS_ACCESS_KEY_ID: ASIA...

See also

• sts.amazonaws.com
• AWS STS (sts:), aws sts [ get-session-token | get-caller-identity | assume-role | assume-role-with-web-identity | assume-role-with-saml | get-access-key-info ]
• AWS Security Token Service (STS), aws sts, aws iam set-security-token-service-preferences, AWS bearer tokens, sts.amazonaws.com, AssumedRoleUser
• STS, AWS Security Token Service (STS), aws sts, Terraform AWS provider: assume_role
• Session, session_duration Session (IM), Libsodium, Oxen Network
• aws login, --profile, ~/.aws/login/, SignInLocalDevelopmentAccess

https://aws.amazon.com/about-aws/whats-new/2013/05/28/announcing-iam-web-identity-federation/

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html