AWS Fundamentals Logo
AWS Fundamentals
sts:*

AWS AWS Security Token Service IAM Actions

16 IAM actions for sts:*

Actions

16 actions available. Filter by access level or search by name.

Filter:
ActionAccess Level
sts:AssumeRole
Permissions
sts:AssumeRoleWithSAML
Permissions
sts:AssumeRoleWithWebIdentity
Permissions
sts:AssumeRoot
Read
sts:DecodeAuthorizationMessage
Read
sts:GetAccessKeyInfo
Read
sts:GetCallerIdentity
Read
sts:GetDelegatedAccessToken
Read
sts:GetFederationToken
Read
sts:GetServiceBearerToken
Read
sts:GetSessionToken
Read
sts:GetWebIdentityToken
Read
sts:SetContext
Write
sts:SetSourceIdentity
Write
sts:TagGetWebIdentityToken
Tagging
sts:TagSession
Tagging

Resource Types

ARN patterns for resources in this service.

ResourceARN Pattern
${RelativeId}arn:aws:iam::${Account}:${RelativeId}

Condition Keys

Condition keys you can use in IAM policy conditions for this service.

accounts.google.com:audaccounts.google.com:google/organization_numberaccounts.google.com:oaudaccounts.google.com:subagent.${Domain}.buildkite.dev:build_branchagent.${Domain}.buildkite.dev:cluster_idagent.${Domain}.buildkite.dev:cluster_nameagent.${Domain}.buildkite.dev:organization_idagent.${Domain}.buildkite.dev:organization_slugagent.${Domain}.buildkite.dev:pipeline_idagent.${Domain}.buildkite.dev:pipeline_slugagent.${Domain}.buildkite.site:build_branchagent.${Domain}.buildkite.site:cluster_idagent.${Domain}.buildkite.site:cluster_nameagent.${Domain}.buildkite.site:organization_idagent.${Domain}.buildkite.site:organization_slugagent.${Domain}.buildkite.site:pipeline_idagent.${Domain}.buildkite.site:pipeline_slugagent.buildkite.com:build_branchagent.buildkite.com:cluster_idagent.buildkite.com:cluster_nameagent.buildkite.com:organization_idagent.buildkite.com:organization_slugagent.buildkite.com:pipeline_idagent.buildkite.com:pipeline_slugaws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeyscognito-identity.amazonaws.com:amrcognito-identity.amazonaws.com:audcognito-identity.amazonaws.com:subgithub.com/enterprises/${EnterpriseName}:actorgithub.com/enterprises/${EnterpriseName}:actor_idgithub.com/enterprises/${EnterpriseName}:enterprise_idgithub.com/enterprises/${EnterpriseName}:environmentgithub.com/enterprises/${EnterpriseName}:job_workflow_refgithub.com/enterprises/${EnterpriseName}:refgithub.com/enterprises/${EnterpriseName}:repositorygithub.com/enterprises/${EnterpriseName}:repository_idgithub.com/enterprises/${EnterpriseName}:repository_owner_idgithub.com/enterprises/${EnterpriseName}:workflowgitlab.com:namespace_idgitlab.com:pipeline_sourcegitlab.com:project_idgitlab.com:ref_protectedgitlab.com:runner_environmentgitlab.com:user_access_levelgitlab.com:user_emailgitlab.com:user_idgitlab.com:user_logingraph.facebook.com:app_idgraph.facebook.com:idiam:ResourceTag/${TagKey}idcs-${OciUniqueIdentifier}.identity.oraclecloud.com:rpst_idoidc.circleci.com/org/${OrgId}:oidc.circleci.com/project-idsaml:audsaml:cnsaml:commonNamesaml:docsaml:eduorghomepageurisaml:eduorgidentityauthnpolicyurisaml:eduorglegalnamesaml:eduorgsuperiorurisaml:eduorgwhitepagesurisaml:edupersonaffiliationsaml:edupersonassurancesaml:edupersonentitlementsaml:edupersonnicknamesaml:edupersonorgdnsaml:edupersonorgunitdnsaml:edupersonprimaryaffiliationsaml:edupersonprimaryorgunitdnsaml:edupersonprincipalnamesaml:edupersonscopedaffiliationsaml:edupersontargetedidsaml:givenNamesaml:isssaml:mailsaml:namesaml:namequalifiersaml:organizationStatussaml:primaryGroupSIDsaml:subsaml:sub_typesaml:surnamesaml:uidsaml:x500UniqueIdentifiersts:AWSServiceNamests:DurationSecondssts:ExternalIdsts:IdentityTokenAudiencests:RequestContext/${ContextKey}sts:RequestContextProviderssts:RoleAuthorizedByIdpsts:RoleSessionNamests:SigningAlgorithmsts:SourceIdentitysts:TaskPolicyArnsts:TransitiveTagKeystoken.actions.${Domain}.ghe.com:actortoken.actions.${Domain}.ghe.com:actor_idtoken.actions.${Domain}.ghe.com:enterprise_idtoken.actions.${Domain}.ghe.com:environmenttoken.actions.${Domain}.ghe.com:job_workflow_reftoken.actions.${Domain}.ghe.com:reftoken.actions.${Domain}.ghe.com:repositorytoken.actions.${Domain}.ghe.com:repository_idtoken.actions.${Domain}.ghe.com:repository_owner_idtoken.actions.${Domain}.ghe.com:workflowtoken.actions.githubusercontent.com/${SubPath}:actortoken.actions.githubusercontent.com/${SubPath}:actor_idtoken.actions.githubusercontent.com/${SubPath}:enterprise_idtoken.actions.githubusercontent.com/${SubPath}:environmenttoken.actions.githubusercontent.com/${SubPath}:job_workflow_reftoken.actions.githubusercontent.com/${SubPath}:reftoken.actions.githubusercontent.com/${SubPath}:repositorytoken.actions.githubusercontent.com/${SubPath}:repository_idtoken.actions.githubusercontent.com/${SubPath}:repository_owner_idtoken.actions.githubusercontent.com/${SubPath}:workflowtoken.actions.githubusercontent.com:actortoken.actions.githubusercontent.com:actor_idtoken.actions.githubusercontent.com:enterprise_idtoken.actions.githubusercontent.com:environmenttoken.actions.githubusercontent.com:job_workflow_reftoken.actions.githubusercontent.com:reftoken.actions.githubusercontent.com:repositorytoken.actions.githubusercontent.com:repository_idtoken.actions.githubusercontent.com:repository_owner_idtoken.actions.githubusercontent.com:workflowwww.amazon.com:app_idwww.amazon.com:user_id

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

Total Actions16
Prefixsts
Resource Types1
Condition Keys131

Access Level Breakdown

Read
9
Write
2
Permissions
3
Tagging
2

Explore This Service