Learn about Delegating Access Without Sharing Secrets in this comprehensive Cloud Computing tutorial. The mechanics of temporary security credentials.
UNLOCK NODES BY LEARNING NEW TAGS.
IAM User Access Keys are permanent until manually deleted or rotated. This makes them a prime target for attackers. Leaked keys are the number one cause of cloud data breaches and unauthorized cryptomining.
IAM Roles rely on the AWS Security Token Service (STS). When an entity assumes a role, STS dynamically generates temporary security credentials (an Access Key, Secret Key, and a Session Token) that automatically expire.
Pascual Vila
Frontend Instructor // Code Syllabus
Security Token Service; the AWS service that issues temporary credentials.
// STS contextThe API call made toSTS to obtain temporary credentials for a role.
// AssumeRole contextA resource-based policy attached to a role that defines which principals can assume the role.
// Trust Policy context