Returns a set of temporary security credentials for a federated user. The GetFederationToken operation must be called using the long-term security credentials of an IAM user.
StsDurationSeconds | The temporary credentials are valid for the specified duration, from 900 seconds (15 minutes) up to a maximum of 129,600 seconds (36 hours). The default session duration is 43,200 seconds (12 hours). |
StsInlineSessionPolicy | An IAM policy in JSON format that you want to use as an inline session policy. |
StsPolicyArns | The ARNs of the IAM managed policies that you want to use as managed session policies. The policies must exist in the same account as an Iam user. |
UserName | The name of the federated user. The name is used as an identifier for the temporary security credentials. |
Tags | A list of session tags. Each session tag consists of a key name and an associated value. |
This call has no restrictions.
No Request Payload
Field | Description | Type | Notes |
GetFederationTokenResponse | |||
Result | |||
FederatedUser | |||
Arn | The ARN that specifies the federated user that is associated with the credentials | String | |
FederatedUserId | The string that identifies the federated user associated with the credentials, similar to the unique ID of an IAM user. | String | |
Credentials | |||
AccessKeyId | The access key ID that identifies the temporary security credentials. | String | |
Expiration | The date on which the current credentials expire. | String | |
SecretAccessKey | The secret access key that can be used to sign requests. | String | |
SessionToken | The token that users must pass to the service API to use the temporary credentials. | String | |
PackedPolicySize | A percentage value that indicates the packed size of the session policies and session tags combined passed in the request. | Integer | |
ResponseMetadata | |||
RequestId | String |