AWS STS

AWS Security Token Service (STS) is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users or for users that you authenticate (federated users).

With AWS STS, you can:

• Assume IAM roles: Request temporary credentials to access AWS resources across accounts or with elevated permissions
• Verify identity: Determine the AWS account, ARN, and user ID associated with the calling credentials
• Generate session tokens: Obtain temporary credentials with optional MFA protection for enhanced security
• Audit access keys: Look up the AWS account that owns a given access key for security investigations

In Sim, the AWS STS integration allows your agents to manage temporary credentials as part of automated workflows. This is useful for cross-account access patterns, credential rotation, identity verification before sensitive operations, and security auditing. Agents can assume roles to interact with other AWS services, verify their own identity, or look up access key ownership without exposing long-lived credentials.

Usage Instructions

Integrate AWS STS into the workflow. Assume roles, get temporary credentials, verify caller identity, and look up access key information.

Tools

sts_assume_role

Assume an IAM role and receive temporary security credentials

Input

Output

sts_get_caller_identity

Get details about the IAM user or role whose credentials are used to call the API

Input

Output

sts_get_session_token

Get temporary security credentials for an IAM user, optionally with MFA

Input

Output

sts_get_access_key_info

Get the AWS account ID associated with an access key

Input

Output