StsRoleConfiguration
Name | Type | Required | Description |
---|---|---|---|
roleArn | str | Yes | The Amazon Resource Name (ARN) of the role to assume. For more information, see the official AWS documentation. |
roleSessionName | str | Yes | An identifier for the assumed role session. The value can be any string that you assume will be unique within the AWS account. For more information, see the official AWS documentation. |
roleSessionDuration | NotRequired[DurationDict] | No | The duration of the role session. The value specified can range from 900 seconds (15 minutes) up to the maximum session duration set for the role. The maximum session duration setting can have a value from 1 hour to 12 hours. For more details see the official AWS documentation. |
externalId | NotRequired[str] | No | A unique identifier that is used by third parties when assuming roles in their customers' accounts. For more information, see the official AWS documentation. |
stsEndpoint | NotRequired[str] | No | By default, the AWS Security Token Service (AWS STS) is available as a global service, and all AWS STS requests go to a single endpoint at https://sts.amazonaws.com. AWS recommends using Regional AWS STS endpoints instead of the global endpoint to reduce latency, build in redundancy, and increase session token validity. |