AWS Security Token Service (STS)

AWS Security Token Service (Feb 2015)

Activities

• Read sts blog: https://aws.amazon.com/blogs/security/tag/aws-sts/
• Read StackOverflow related questions: https://stackoverflow.com/questions/tagged/aws-sts?tab=Votes
• Read Managing AWS STS in an AWS Region

Errors

eksctl get cluster
Error: checking AWS STS access – cannot get role ARN for current session: operation error STS: GetCallerIdentity, failed to sign request: failed to retrieve credentials: failed to refresh cached credentials, no EC2 IMDS role found, operation error ec2imds: GetMetadata, request send failed, Get "http://169.254.169.254/latest/meta-data/iam/security-credentials/": dial tcp 169.254.169.254:80: i/o timeout

An error occurred (UnrecognizedClientException) when calling the UpdateService operation: The security token included in the request is invalid.

Related

• GetSessionToken
• Amazon Region
• sts:AssumeRoleWithSAML
• AssumeRoleWithWebIdentity
• AWS SAML

See also

• AWS STS, aws sts [ get-session-token | get-caller-identity | assume-role | assume-role-with-saml | get-access-key-info ]
• AWS Security Token Service (STS), aws sts, aws iam set-security-token-service-preferences, AWS bearer tokens
• STS, AWS STS, aws sts, Terraform AWS provider: assume_role

https://aws.amazon.com/blogs/security/aws-security-token-service-is-now-available-in-every-aws-region/

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html