StsAssumeRoleCredentialsProvider
A CredentialsProvider that uses another provider to assume a role from the AWS Security Token Service (STS).
When asked to provide credentials, this provider will first invoke the inner credentials provider to get AWS credentials for STS. Then, it will call STS to get assumed credentials for the desired role.
Parameters
The underlying provider to use for source credentials
The ARN of the target role to assume, e.g. arn:aws:iam:123456789:role/example
The AWS region to assume the role in. If not set then the global STS endpoint will be used.
The name to associate with the session. Use the role session name to uniquely identify a session when the same role is assumed by different principals or for different reasons. In cross-account scenarios, the role session name is visible to, and can be logged by the account that owns the role. The role session name is also in the ARN of the assumed role principal.
A unique identifier that might be required when you assume a role in another account. If the administrator of the account to which the role belongs provided you with an external ID, then provide that value in this parameter.
The expiry duration of the STS credentials. Defaults to 15 minutes if not set.
the HttpClientEngine instance to use to make requests. NOTE: This engine's resources and lifetime are NOT managed by the provider. Caller is responsible for closing.
Parameters
The underlying provider to use for source credentials
The parameters to pass to the AssumeRole call
The AWS region to assume the role in. If not set then the global STS endpoint will be used.
the HttpClientEngine instance to use to make requests. NOTE: This engine's resources and lifetime are NOT managed by the provider. Caller is responsible for closing.