<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" style="--slider-value: 16; scroll-padding-top: 98px;"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Request temporary security credentials - AWS Identity and Access Management</title><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="assets_root" content="/assets"><meta name="target_state" content="id_credentials_temp_request"><meta name="default_state" content="id_credentials_temp_request"><link rel="icon" type="image/ico" href="/assets/images/favicon.ico"><link rel="shortcut icon" type="image/ico" href="/assets/images/favicon.ico"><link rel="canonical" href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html"><meta name="description" content="Learn how to request temporary security credentials from AWS Security Token Service."><meta name="deployment_region" content="IAD"><meta name="product" content="AWS Identity and Access Management"><meta name="guide" content="User Guide"><meta name="abstract" content="Control access to your AWS resources with user identity (authentication) and with policies that define specific permissions (authorization)."><meta name="guide-locale" content="en_us"><meta name="tocs" content="toc-contents.json"><link rel="canonical" href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html"><link rel="alternate" href="https://docs.aws.amazon.com/id_id/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="id-id"><link rel="alternate" href="https://docs.aws.amazon.com/id_id/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="id"><link rel="alternate" href="https://docs.aws.amazon.com/de_de/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="de-de"><link rel="alternate" href="https://docs.aws.amazon.com/de_de/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="de"><link rel="alternate" href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="en-us"><link rel="alternate" href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="en"><link rel="alternate" href="https://docs.aws.amazon.com/es_es/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="es-es"><link rel="alternate" href="https://docs.aws.amazon.com/es_es/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="es"><link rel="alternate" href="https://docs.aws.amazon.com/fr_fr/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="fr-fr"><link rel="alternate" href="https://docs.aws.amazon.com/fr_fr/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="fr"><link rel="alternate" href="https://docs.aws.amazon.com/it_it/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="it-it"><link rel="alternate" href="https://docs.aws.amazon.com/it_it/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="it"><link rel="alternate" href="https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="ja-jp"><link rel="alternate" href="https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="ja"><link rel="alternate" href="https://docs.aws.amazon.com/ko_kr/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="ko-kr"><link rel="alternate" href="https://docs.aws.amazon.com/ko_kr/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="ko"><link rel="alternate" href="https://docs.aws.amazon.com/pt_br/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="pt-br"><link rel="alternate" href="https://docs.aws.amazon.com/pt_br/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="pt"><link rel="alternate" href="https://docs.aws.amazon.com/zh_cn/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="zh-cn"><link rel="alternate" href="https://docs.aws.amazon.com/zh_tw/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="zh-tw"><link rel="alternate" href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html" hreflang="x-default"><meta name="feedback-item" content="IAM"><meta name="this_doc_product" content="AWS Identity and Access Management"><meta name="this_doc_guide" content="User Guide"> <script defer="" src="/assets/r/awsdocs-doc-page.2.0.0.js"></script><link href="/assets/r/awsdocs-doc-page.2.0.0.css" rel="stylesheet"><script defer="" id="awsc-panorama-bundle" type="text/javascript" src="https://prod.pa.cdn.uis.awsstatic.com/panorama-nav-init.js" data-config="{'appEntity':'aws-documentation','region':'us-east-1','service':'iam'}"></script><meta id="panorama-serviceSubSection" value="User Guide"><meta id="panorama-serviceConsolePage" value="Request temporary security credentials"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/9436.80242c6b78ffcd66f0e0.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/5393.f6d3da218f3c004eda1c.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/9181.d1165b10619351f4782d.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/5720.64aebf60b561d3124e63.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/5112.0080d42b0dd1f58b216c.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/5955.4f073d3bea65c0f971ed.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/5601.555e45574bdf2c2b326b.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/3486.a53c37b623013ebdef11.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/8763.e53c9a153e331f50be87.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/6208.da74153073836e32f9ac.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/5999.422bee42a3bea0e09add.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/8903.6a8fb9db87ab5fa336da.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/3708.1abf383dfb7f28a7a55e.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/1622.8ec9b5e47054f595a76e.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/5257.70aca8a45556d6cefdf4.css"><link rel="stylesheet" type="text/css" href="https://docs.aws.amazon.com/assets/r/5521.42b1fb4009ddb2afc2db.css"><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-i-open-c{display:inline-block;vertical-align:middle;line-height:1em;padding-left:.3em}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-i-open-c svg{stroke-width:2px;pointer-events:none;fill:none;padding-bottom:1px;height:10px;width:10px}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-i-open-c svg .awsccc-stroke-linecap-square{stroke-linecap:square}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-i-open-c svg .awsccc-stroke-linejoin-round{stroke-linejoin:round}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-i-open-c svg path{stroke:currentColor}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-link{color:#0073bb}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-link span{color:#0073bb}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-link svg{height:16px;width:16px}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-link{color:#44b9d6}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-link span{color:#44b9d6}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn{flex:0 1 100%;padding:4px 20px;box-sizing:border-box;border:0;background-color:#fff;border:1px solid #545b64;color:#545b64;font-weight:700;border-radius:2px;cursor:pointer;user-select:none;display:inline-block;text-align:center;font-size:14px;position:relative}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn:hover{background-color:#fafafa}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn:focus{outline:none;text-decoration:none}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn:focus::before{content:" ";display:block;position:absolute;left:-2px;top:-2px;width:calc(100% + 4px);height:calc(100% + 4px);border-radius:2px;box-shadow:0 0 0 2px #00a1c9}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn span{line-height:22px}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn.awsccc-u-btn-primary{background-color:#f90;border-color:#f90}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn.awsccc-u-btn-primary span{color:#0f141a}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn.awsccc-u-btn-primary:hover{background-color:#ec7211;border-color:#ec7211}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn.awsccc-u-btn-link{background-color:rgba(0,0,0,0);border-color:rgba(0,0,0,0);color:#545b64}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-btn.awsccc-u-btn-link:hover{color:#000;background-color:#fafafa}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-btn-primary{background-color:#f90;border-color:#f90}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-btn-primary span{color:#16191f}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-btn-primary:hover{background-color:#ec7211;border-color:#ec7211}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-btn-secondary{color:#d5dbdb;background-color:#2a2e30;border-color:#879596}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-btn-secondary:hover{background-color:#21252c}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-btn-link{color:#eaeded}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-btn-link:hover{color:#eaeded;background-color:#21252c}</style><style>#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c{position:fixed;bottom:0;left:0;width:100%;z-index:10000}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-content{position:relative;background:linear-gradient(180deg, rgba(21, 28, 39, 0.98) 0%, rgba(38, 51, 77, 0.98) 100%);box-shadow:0px -2px 5px 0px rgba(0,0,0,.5);padding:30px 30px 15px;border-top:solid 1px #306da3;display:flex;flex-direction:column}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-text-section{display:flex;flex-direction:column;flex-shrink:1;padding:0px}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-title{font-weight:700;padding:0 0 5px;margin:0;color:#fff}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-buttons{display:flex;justify-content:center;flex-wrap:wrap}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-buttons .awsccc-u-btn{margin-bottom:15px;padding-left:20px;padding-right:20px}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-text{flex:1 1 100%;margin:0 0 15px;color:#eaeded}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-text span{color:#eaeded}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c.awsc-bot-above-f-imp{z-index:1005}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c.dark-mode-enabled #awsccc-cb-content{background:none;background-color:#2a2e33}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c.dark-mode-enabled .awsccc-u-btn-secondary{background-color:#2a2e33}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c.dark-mode-enabled .awsccc-u-btn-secondary span{color:#d5dbdb}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c.dark-mode-enabled .awsccc-u-btn-secondary:hover{background-color:#21252c}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c.dark-mode-enabled .awsccc-u-btn-primary span{color:#16191f}@media screen and (min-width: 810px){#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-content{padding-bottom:30px;padding-left:20px;padding-right:20px;display:flex;justify-content:space-between}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-buttons .awsccc-u-btn{flex:1 0 25%;margin:10px 5px 0;min-width:240px}}@media screen and (min-width: 1020px){#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-content{flex-direction:row;padding-left:40px;padding-right:40px}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-actions{display:flex;justify-content:center;align-items:center}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-text{flex:1;padding-right:40px}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-buttons .awsccc-u-btn{flex:0 1 auto;margin:10px 5px 0}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-buttons{flex-wrap:nowrap;display:flex;flex-direction:column;gap:10px;width:max-content}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cb-c #awsccc-cb-buttons .awsccc-u-btn{margin-top:0}}@media screen and (min-width: 1020px){#awsccc-sb-ux-c #awsccc-sb-a.awsccc-Rtl #awsccc-cb-text{padding-left:40px;padding-right:0}}div[data-id=awsccc-cb]{display:none}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cl{display:flex;flex-direction:column}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cl-c{padding:10px;border-block-end:1px solid #eaeded}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cl-c:first-of-type{padding-top:0}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cl-c:last-of-type{padding-bottom:0;border-block-end:none}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-cl-c{border-color:#414750}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-container{display:flex;align-items:center;justify-content:center;bottom:0;left:0;right:0;top:0;position:fixed;outline:0;overflow:hidden;z-index:10002}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-backdrop{background-color:rgba(242,243,243,.9019607843);position:fixed;z-index:10001;right:0;top:0;bottom:0;left:0}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal{box-sizing:border-box;outline:none;margin:10px;background-color:#fff;border-radius:0;box-sizing:border-box;z-index:10002;position:relative;box-shadow:0 1px 1px 0 rgba(0,28,36,.3),1px 1px 1px 0 rgba(0,28,36,.15),-1px 1px 1px 0 rgba(0,28,36,.15)}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal[dir=rtl] *{direction:rtl;text-align:right}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal.awsccc-u-modal-large{max-width:820px;width:calc(100vw - 20px)}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-header{background-color:#fafafa;border-bottom:1px solid #eaeded;color:#16191f;padding:19px 20px;word-break:break-word;flex:auto}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-header h2{font-size:18px;font-weight:700;margin:0}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-content{overflow-y:auto;max-height:calc(100vh - 200px);padding:19px 20px}@media screen and (max-width: 480px){#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-content{max-height:calc(100vh - 275px)}}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-footer{border-top:1px solid #eaeded;text-decoration:none;padding:10px 20px;text-align:right;display:flex;justify-content:flex-end;flex-wrap:wrap}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-footer button{white-space:nowrap}@media screen and (max-width: 699px){#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-footer button{white-space:initial}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-footer>div{width:100%}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-modal-footer .awsccc-u-sb{display:flex;flex-direction:column}}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-modal-backdrop{background-color:rgba(22,25,31,.8)}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-modal{background-color:#2a2e33}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-modal-header{background-color:#21252c;border-bottom-color:#414750;color:#eaeded}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-modal-content{color:#eaeded}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-modal-footer{border-top-color:#414750}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-sb{display:flex;flex-direction:row}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-sb.awsccc-u-sb-v{flex-direction:column}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-sb.awsccc-u-sb-xxs{gap:4px}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-sb.awsccc-u-sb-xs{gap:8px}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-sb.awsccc-u-sb-s{gap:12px}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-sb.awsccc-u-sb-m{gap:16px}</style><style>#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cs-info-container span,#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cs-info-container a{font-size:15px}</style><style>#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cs-l-container span,#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cs-l-container a{font-size:12px;line-height:15px}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cs-l-container span:focus,#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cs-l-container a:focus{outline-style:solid;outline-color:#00a1c9;outline-width:2px}#awsccc-sb-ux-c #awsccc-sb-a #awsccc-cs-l-container p>span{color:#687078}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled #awsccc-cs-l-container span{color:#eaeded}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled #awsccc-cs-l-container span a{display:inline-block}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled #awsccc-cs-l-container span a span{color:#44b9d6}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled #awsccc-cs-l-container path{color:#44b9d6}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-s-cb-hidden{text-indent:-9999px;position:absolute}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cb-label{position:relative;display:inline-block;line-height:0}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cb-text{line-height:16px;vertical-align:top;overflow-wrap:break-word}#awsccc-sb-ux-c #awsccc-sb-a .awscc-u-cb-checkbox,#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cb-input{height:14px;width:14px;z-index:1;pointer-events:none;fill:none}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-s-cb-outer{margin-right:8px;height:14px;width:14px;display:inline-block}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cb-input{padding:0;margin:0;position:absolute;z-index:0;opacity:0}#awsccc-sb-ux-c #awsccc-sb-a .awscc-u-cb-checkbox-rect{background-color:#fff;fill:#fff;stroke:#687078;stroke-width:1}#awsccc-sb-ux-c #awsccc-sb-a .awscc-u-cb-checkbox-poly-line{opacity:1;stroke:#fff;stroke-width:2;fill:none}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cb-checkbox-active .awscc-u-cb-checkbox-rect{fill:#0073bb;stroke:#0073bb}#awsccc-sb-ux-c #awsccc-sb-a .awscc-u-cb-checkbox-container{position:relative;line-height:0}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cb-focused:before{content:" ";display:block;position:absolute;left:-2px;top:-2px;width:calc(100% + 4px);height:calc(100% + 4px);border-radius:2px;box-shadow:0 0 0 2px #00a1c9}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cb-gpc-disabled .awscc-u-cb-checkbox{opacity:.5}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-cb-gpc-disabled .awscc-u-cb-checkbox .awscc-u-cb-checkbox-rect{fill:#f2f3f3;stroke:#d5dbdb}#awsccc-sb-ux-c #awsccc-sb-a.awsccc-Rtl .awsccc-cs-s-cb-outer{margin-left:8px;margin-right:0}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container{position:relative;overflow-wrap:break-word;word-wrap:break-word}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container .awsccc-cs-s-title{font-size:18px;line-height:20px;flex:0 0 100%;margin:0 0 5px;z-index:10;display:inline-block;line-height:normal;font-weight:400}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container .awsccc-cs-s-text{flex:0 0 80%;padding-top:5px}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container .awsccc-cs-s-action{display:flex;justify-content:flex-end;flex:1;position:relative;margin-top:8px;margin-bottom:8px}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container .awsccc-cs-s-paragraph{margin-top:0;font-size:14px;line-height:20px;padding:0;margin-bottom:15px}@media screen and (min-width: 700px){#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container{display:flex;flex-wrap:wrap}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container .awsccc-cs-s-title{padding-bottom:0}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container .awsccc-cs-s-text{border-top:0}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cs-sec-container .awsccc-cs-s-action{justify-content:center;position:relative;top:auto;right:auto;padding-top:20px}}</style><style>#awsccc-sb-ux-c #awsccc-sb-a{font-family:"Amazon Ember","HelveticaNeue","Helvetica Neue","Amazon Ember",Roboto,"Roboto-Regular","Amazon Ember",Helvetica,Arial,sans-serif;font-size:14px;line-height:21px;color:#16191f;text-align:left}#awsccc-sb-ux-c #awsccc-sb-a *{background:none;border:0}#awsccc-sb-ux-c #awsccc-sb-a.awsccc-Rtl *{direction:rtl;text-align:right}@media screen and (min-width: 1020px){#awsccc-sb-ux-c #awsccc-sb-a.awsccc-Rtl #awsccc-cb-c #awsccc-cb-title{padding-right:40px}}#awsccc-sb-ux-c #awsccc-sb-a a,#awsccc-sb-ux-c #awsccc-sb-a a>span,#awsccc-sb-ux-c #awsccc-sb-a a svg path{color:#0073bb;text-decoration:underline;font-weight:700}#awsccc-sb-ux-c #awsccc-sb-a a:hover,#awsccc-sb-ux-c #awsccc-sb-a a>span:hover,#awsccc-sb-ux-c #awsccc-sb-a a svg path:hover{color:#0073bb;text-decoration:underline}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled{color-scheme:dark}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled a,#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled a>span,#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled a svg path{color:#44b9d6;text-decoration:underline;font-weight:700}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled a:hover,#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled a>span:hover,#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled a svg path:hover{color:#44b9d6}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-tab-helper{outline:0;text-decoration:none}body.awsccc-modal-open{overflow:hidden;-webkit-box-sizing:border-box;box-sizing:border-box}.awsccc-gpc-warning{background-color:#fef7e6;border:1px solid #f0c744;border-radius:4px;padding:12px 16px;margin:8px 0}.awsccc-gpc-warning strong{display:block;margin-bottom:4px;color:#8d6605}.awsccc-gpc-warning p{margin:0;color:#5f4204;font-size:14px;line-height:1.5}.dark-mode-enabled .awsccc-gpc-warning{background-color:#3d2f00;border-color:#7d6200}.dark-mode-enabled .awsccc-gpc-warning strong{color:#f9dc5c}.dark-mode-enabled .awsccc-gpc-warning p{color:#e8d08a}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-field{display:flex;flex-direction:column;gap:4px}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-rg>label{position:relative}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-rg input[type=radio]{opacity:0;user-select:none;cursor:default;position:absolute}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-rg .awsccc-u-rg-radio{display:inline-block;box-sizing:content-box;position:relative;vertical-align:middle;height:14px;width:14px;border-radius:50%;background-color:#fff;border:2px solid #7d8998;transition:background-color ease .15s,border-color ease .15s}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-rg .awsccc-u-rg-radio::before{position:absolute;content:"";height:6px;width:6px;border-radius:50%;top:4px;left:4px;transition:background-color ease .15s}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-rg .awsccc-u-rg-radio+span{padding-inline-start:8px;vertical-align:middle}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-rg input:checked+.awsccc-u-rg-radio{background-color:#0073bb;border-color:#0073bb}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-rg input:checked+.awsccc-u-rg-radio::before{background-color:#fff}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-u-rg input:focus-visible+.awsccc-u-rg-radio{outline:2px solid #00a1c9;outline-offset:2px}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled .awsccc-u-rg-radio{background-color:#1a2029;border-color:#879596}#awsccc-sb-ux-c #awsccc-sb-a .dark-mode-enabled input:checked+.awsccc-u-rg-radio{background-color:#00a1c9;border-color:#00a1c9}</style><style>#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cbbas-c{overflow-wrap:break-word;word-wrap:break-word}#awsccc-sb-ux-c #awsccc-sb-a .awsccc-cbbas-c p{margin:0;overflow-wrap:break-word}.awsccc-gpc-warning{background-color:#fef7e6;border-left:4px solid #f89406;padding:12px;margin-bottom:16px}.awsccc-gpc-warning strong{display:block;margin-bottom:8px;color:#333}.awsccc-gpc-warning p{margin:0;color:#666;font-size:14px;line-height:1.5}.dark-mode-enabled .awsccc-gpc-warning{background-color:#3d2f00;border-color:#7d6200}.dark-mode-enabled .awsccc-gpc-warning strong{color:#f9dc5c}.dark-mode-enabled .awsccc-gpc-warning p{color:#e8d08a}</style></head>
<body class="awsdocs awsui awsui-visual-refresh awsui-polaris-light-mode" style="display: block;"><div id="awsccc-sb-ux-c"><div id="awsccc-sb-a" class=""><div data-id="awsccc-cb" style="display: block;"><div id="awsccc-cb-c" data-id="awsccc-cb-tabstart" class="awsccc-tab-helper" tabindex="0" role="dialog" aria-labelledby="awsccc-cb-title"><div id="awsccc-cb-content"><div id="awsccc-cb-text-section"><h2 id="awsccc-cb-title">Select your cookie preferences</h2><p id="awsccc-cb-text"><span>We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies. <br><br> If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”</span></p></div><div id="awsccc-cb-actions"><div id="awsccc-cb-buttons"><button tabindex="0" type="submit" data-id="awsccc-cb-btn-accept" aria-label="Accept all cookies" class="awsccc-u-btn awsccc-u-btn-primary"><span>Accept</span></button><button tabindex="0" type="submit" data-id="awsccc-cb-btn-decline" class="awsccc-u-btn awsccc-u-btn-secondary"><span>Decline</span></button><button tabindex="0" type="submit" data-id="awsccc-cb-btn-customize" aria-label="Customize cookie preferences" class="awsccc-u-btn awsccc-u-btn-secondary"><span>Customize</span></button></div></div></div></div></div><div id="awsccc-cs" data-id="awsccc-cs" tabindex="0" class="" style="display: none;"><div class="awsccc-u-modal-container "><div class="awsccc-u-modal awsccc-u-modal-large" role="dialog" aria-modal="true" aria-labelledby="awsccc-u-modal-header-awsccc-cs" dir="ltr" data-awsccc-modal-toggle="true" data-id="awsccc-cs-tabtrap" tabindex="-1"><div class="awsccc-u-modal-header"><h2 id="awsccc-u-modal-header-awsccc-cs"><span id="awsccc-cs-title">Customize cookie preferences</span></h2></div><div class="awsccc-u-modal-content"><div class="awsccc-u-cl "><div class="awsccc-u-cl-c"><div id="awsccc-cs-info-container"><span>We use cookies and similar tools (collectively, "cookies") for the following purposes.</span></div></div><div class="awsccc-u-cl-c"><div data-category="essential" class="awsccc-cs-sec-container"><h3 class="awsccc-cs-s-title">Essential</h3><div class="awsccc-cs-s-text"><p class="awsccc-cs-s-paragraph">Essential cookies are necessary to provide our site and services and cannot be deactivated. They are usually set in response to your actions on the site, such as setting your privacy preferences, signing in, or filling in forms. </p></div><div class="awsccc-cs-s-action"><div><div class="awsccc-cs-s-cb-outer"><div class="awscc-u-cb-checkbox-container" data-id="awsccc-u-cb-essential-container"><label data-id="awsccc-u-cb-essential-label" class="awsccc-u-cb-label awsccc-u-cb-checkbox-active"><input id="awsccc-u-cb-essential" class="awsccc-u-cb-input" type="checkbox" aria-label="Allow essential category Allowed" checked="true" disabled="true" aria-description="Allow essential category"><svg viewBox="0 0 14 14" aria-hidden="true" focusable="false" class="awscc-u-cb-checkbox"><rect class="awscc-u-cb-checkbox-rect" x="0.5" y="0.5" rx="1.5" ry="1.5" width="13" height="13"></rect><polyline class="awscc-u-cb-checkbox-poly-line " points="2.5,7 6,10 11,3"></polyline></svg></label></div></div><span class="awsccc-u-cb-text">Allowed</span></div></div></div></div><div class="awsccc-u-cl-c"><div data-category="performance" class="awsccc-cs-sec-container"><h3 class="awsccc-cs-s-title">Performance</h3><div class="awsccc-cs-s-text"><p class="awsccc-cs-s-paragraph">Performance cookies provide anonymous statistics about how customers navigate our site so we can improve site experience and performance. Approved third parties may perform analytics on our behalf, but they cannot use the data for their own purposes.</p></div><div class="awsccc-cs-s-action"><div><div class="awsccc-cs-s-cb-outer"><div class="awscc-u-cb-checkbox-container" data-id="awsccc-u-cb-performance-container"><label data-id="awsccc-u-cb-performance-label" class="awsccc-u-cb-label"><input id="awsccc-u-cb-performance" class="awsccc-u-cb-input" type="checkbox" aria-label="Allow performance category Allowed" aria-description="Allow performance category"><svg viewBox="0 0 14 14" aria-hidden="true" focusable="false" class="awscc-u-cb-checkbox"><rect class="awscc-u-cb-checkbox-rect" x="0.5" y="0.5" rx="1.5" ry="1.5" width="13" height="13"></rect><polyline class="awscc-u-cb-checkbox-poly-line " points="2.5,7 6,10 11,3"></polyline></svg></label></div></div><span class="awsccc-u-cb-text">Allowed</span></div></div></div></div><div class="awsccc-u-cl-c"><div data-category="functional" class="awsccc-cs-sec-container"><h3 class="awsccc-cs-s-title">Functional</h3><div class="awsccc-cs-s-text"><p class="awsccc-cs-s-paragraph">Functional cookies help us provide useful site features, remember your preferences, and display relevant content. Approved third parties may set these cookies to provide certain site features. If you do not allow these cookies, then some or all of these services may not function properly.</p></div><div class="awsccc-cs-s-action"><div><div class="awsccc-cs-s-cb-outer"><div class="awscc-u-cb-checkbox-container" data-id="awsccc-u-cb-functional-container"><label data-id="awsccc-u-cb-functional-label" class="awsccc-u-cb-label"><input id="awsccc-u-cb-functional" class="awsccc-u-cb-input" type="checkbox" aria-label="Allow functional category Allowed" aria-description="Allow functional category"><svg viewBox="0 0 14 14" aria-hidden="true" focusable="false" class="awscc-u-cb-checkbox"><rect class="awscc-u-cb-checkbox-rect" x="0.5" y="0.5" rx="1.5" ry="1.5" width="13" height="13"></rect><polyline class="awscc-u-cb-checkbox-poly-line " points="2.5,7 6,10 11,3"></polyline></svg></label></div></div><span class="awsccc-u-cb-text">Allowed</span></div></div></div></div><div class="awsccc-u-cl-c"><div data-category="advertising" class="awsccc-cs-sec-container"><h3 class="awsccc-cs-s-title">Advertising</h3><div class="awsccc-cs-s-text"><p class="awsccc-cs-s-paragraph">Advertising cookies may be set through our site by us or our advertising partners and help us deliver relevant marketing content. If you do not allow these cookies, you will experience less relevant advertising.</p></div><div class="awsccc-cs-s-action"><div><div class="awsccc-cs-s-cb-outer"><div class="awscc-u-cb-checkbox-container" data-id="awsccc-u-cb-advertising-container"><label data-id="awsccc-u-cb-advertising-label" class="awsccc-u-cb-label"><input id="awsccc-u-cb-advertising" class="awsccc-u-cb-input" type="checkbox" aria-label="Allow advertising category Allowed" aria-description="Allow advertising category"><svg viewBox="0 0 14 14" aria-hidden="true" focusable="false" class="awscc-u-cb-checkbox"><rect class="awscc-u-cb-checkbox-rect" x="0.5" y="0.5" rx="1.5" ry="1.5" width="13" height="13"></rect><polyline class="awscc-u-cb-checkbox-poly-line " points="2.5,7 6,10 11,3"></polyline></svg></label></div></div><span class="awsccc-u-cb-text">Allowed</span></div></div></div></div><div class="awsccc-u-cl-c"><div id="awsccc-cs-l-container"><p><span>Blocking some types of cookies may impact your experience of our sites. You may review and change your choices at any time by selecting Cookie preferences in the footer of this site. We and selected third-parties use cookies or similar technologies as specified in the&nbsp;<a data-id="awsccc-cs-f-notice" href="https://aws.amazon.com/legal/cookies/" target="_blank" rel="noopener noreferrer"><span>AWS Cookie Notice<span aria-label="Opens in a new tab" role="img" class="awsccc-u-i-open-c"><svg class="awsccc-u-i-open" viewBox="0 0 16 16" focusable="false" aria-hidden="true"><path class="awsccc-stroke-linecap-square" d="M10 2h4v4"></path><path d="M6 10l8-8"></path><path class="awsccc-stroke-linejoin-round" d="M14 9.048V14H2V2h5"></path></svg></span></span></a>.</span></p></div></div></div></div><div class="awsccc-u-modal-footer"><div class="awsccc-u-sb awsccc-u-sb-xs awsccc-u-sb-h "><button tabindex="0" type="submit" data-id="awsccc-cs-btn-cancel" aria-label="Cancel customizing cookie preferences" class="awsccc-u-btn awsccc-u-btn-secondary"><span>Cancel</span></button><button tabindex="0" type="submit" data-id="awsccc-cs-btn-save" class="awsccc-u-btn awsccc-u-btn-primary"><span>Save preferences</span></button></div></div></div><div class="awsccc-u-modal-backdrop"></div></div></div><div id="awsccc-ccba-modal" data-id="awsccc-ccba-modal" tabindex="0" class="" style="display: none;"><div class="awsccc-u-modal-container "><div class="awsccc-u-modal awsccc-u-modal-large" role="dialog" aria-modal="true" aria-labelledby="awsccc-u-modal-header-awsccc-ccba-modal" dir="ltr" data-awsccc-modal-toggle="true" data-id="awsccc-cs-tabtrap" tabindex="-1"><div class="awsccc-u-modal-header"><h2 id="awsccc-u-modal-header-awsccc-ccba-modal"><span id="ccba-header">Your privacy choices</span></h2></div><div class="awsccc-u-modal-content"><div data-testid="ccba-content" class="awsccc-u-cl awsccc-cbbas-c"><div class="awsccc-u-cl-c"><div class="awsccc-u-sb awsccc-u-sb-m awsccc-u-sb-v "><p>We and our advertising partners (“we”) may use information we collect from or about you to show you ads on other websites and online services. Under certain laws, this activity is referred to as “cross-context behavioral advertising” or “targeted advertising.”</p><p><span>To opt out of our use of cookies or similar technologies to engage in these activities, select “Opt out of cross-context behavioral ads” and “Save preferences” below. If you clear your browser cookies or visit this site from a different device or browser, you will need to make your selection again. For more information about cookies and how we use them, read our&nbsp;<a class="awsccc-u-link" href="https://aws.amazon.com/legal/cookies/" target="_blank" rel="noopener noreferrer" data-id="awsccc-ccba-c-notice"><span>Cookie Notice</span><span aria-label="Opens in a new tab" role="img" class="awsccc-u-i-open-c"><svg class="awsccc-u-i-open" viewBox="0 0 16 16" focusable="false" aria-hidden="true"><path class="awsccc-stroke-linecap-square" d="M10 2h4v4"></path><path d="M6 10l8-8"></path><path class="awsccc-stroke-linejoin-round" d="M14 9.048V14H2V2h5"></path></svg></span></a>.</span></p></div></div><div class="awsccc-u-cl-c"><div class="awsccc-u-field" role="group" aria-labelledby="awsccc-field-label-0"><span id="awsccc-field-label-0" class="awsccc-u-field-label"></span><div class="awsccc-u-field-input"><div class="awsccc-u-rg" role="radiogroup" aria-label="Cross-context behavioral ads"><div class="awsccc-u-sb awsccc-u-sb-xxs awsccc-u-sb-v "><label><input type="radio" name="awsccc-u-rg-ccba-allowed" value="allowed" checked="true"><span class="awsccc-u-rg-radio"></span><span>Allow cross-context behavioral ads</span></label><label><input type="radio" name="awsccc-u-rg-ccba-allowed" value="not allowed"><span class="awsccc-u-rg-radio"></span><span>Opt out of cross-context behavioral ads</span></label></div></div></div></div></div><div class="awsccc-u-cl-c"><div class="awsccc-u-sb awsccc-u-sb-s awsccc-u-sb-v "><p><span>To opt out of the use of other identifiers, such as contact information, for these activities, fill out the form&nbsp;<a class="awsccc-u-link" href="https://pulse.aws/application/ZRPLWLL6?p=0" target="_blank" rel="noopener noreferrer" data-id="awsccc-ccba-e-form"><span>here</span><span aria-label="Opens in a new tab" role="img" class="awsccc-u-i-open-c"><svg class="awsccc-u-i-open" viewBox="0 0 16 16" focusable="false" aria-hidden="true"><path class="awsccc-stroke-linecap-square" d="M10 2h4v4"></path><path d="M6 10l8-8"></path><path class="awsccc-stroke-linejoin-round" d="M14 9.048V14H2V2h5"></path></svg></span></a>.</span></p><p><span>For more information about how AWS handles your information, read the&nbsp;<a class="awsccc-u-link" href="https://aws.amazon.com/privacy/" target="_blank" rel="noopener noreferrer" data-id="awsccc-ccba-p-notice"><span>AWS Privacy Notice</span><span aria-label="Opens in a new tab" role="img" class="awsccc-u-i-open-c"><svg class="awsccc-u-i-open" viewBox="0 0 16 16" focusable="false" aria-hidden="true"><path class="awsccc-stroke-linecap-square" d="M10 2h4v4"></path><path d="M6 10l8-8"></path><path class="awsccc-stroke-linejoin-round" d="M14 9.048V14H2V2h5"></path></svg></span></a>.</span></p></div></div></div></div><div class="awsccc-u-modal-footer"><div id="ccba-footer" data-testid="ccba-footer"><div class="awsccc-u-sb awsccc-u-sb-xs awsccc-u-sb-h "><button tabindex="0" type="submit" data-testid="cancel-button" class="awsccc-u-btn awsccc-u-btn-secondary"><span>Cancel</span></button><button tabindex="0" type="submit" class="awsccc-u-btn awsccc-u-btn-primary"><span>Save preferences</span></button></div></div></div></div><div class="awsccc-u-modal-backdrop"></div></div></div><div id="awsccc-em-modal" data-id="awsccc-em-modal" tabindex="0" class="" style="display: none;"><div class="awsccc-u-modal-container "><div class="awsccc-u-modal awsccc-u-modal-large" role="dialog" aria-modal="true" aria-labelledby="awsccc-u-modal-header-awsccc-em-modal" dir="ltr" data-awsccc-modal-toggle="true" data-id="awsccc-cs-tabtrap" tabindex="-1"><div class="awsccc-u-modal-header"><h2 id="awsccc-u-modal-header-awsccc-em-modal"><span id="awsccc-em-title">Unable to save cookie preferences</span></h2></div><div class="awsccc-u-modal-content"><div id="awsccc-em-modalBody"><p id="awsccc-emm-paragraph"><span>We will only store essential cookies at this time, because we were unable to save your cookie preferences.<br><br>If you want to change your cookie preferences, try again later using the link in the AWS console footer, or contact support if the problem persists.</span></p></div></div><div class="awsccc-u-modal-footer"><div id="awsccc-em-f-c" class="awsccc-u-sb awsccc-u-sb-xs awsccc-u-sb-h "><button tabindex="0" type="submit" data-id="awsccc-em-btn-dismiss" aria-label="Dismiss error message modal" class="awsccc-u-btn awsccc-u-btn-primary"><span>Dismiss</span></button></div></div></div><div class="awsccc-u-modal-backdrop"></div></div></div></div></div><div class="awsdocs-container"><div id="preferences-root"><div class="p67oXHvSTtOfiuXWVQl1dQ== "><div id="awsdocs-doc-page-toc-resizer" title="Resize" class="IVGwncjSubJPktnnHv6FjA== nEO3rvOYLZv5eBG8EXeA0Q==" aria-hidden="true" style="left: 300px;"></div><header id="awsdocs-header" role="banner" aria-label="AWS Documentation site header" class="GtD51MLHuAh4ELo6IcrHVQ== 
      JUw9DEgWVna43y4tIPQXeA==
      "><a href="#skip-link" class="v0flpiIuA64JOmWXr6BFoA==" aria-label="Skip to main content">Skip to main content</a><div class="awsui_grid_14yj0_199n9_145 awsui_no-gutters_14yj0_199n9_181"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="xwhlR231x1ebIik4O6ys-w== v+A7v8ecMctvMBCPdXJvTw=="><div class="h4XrDYs8DyI0hVn2VE9kTQ=="><div class="awsui_root_18582_1g6fc_145 awsui_horizontal_18582_1g6fc_160 awsui_horizontal-s_18582_1g6fc_173"><div class="awsui_child_18582_1g6fc_149"><div class="awsui_grid_14yj0_199n9_145"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="vSy6TY3CyksYzzc7QAXUww=="><a data-testid="locale-selector" class="JFT2W3RiiCcY6sTgjYVYPA==  awsui_button_vjswe_l0v97_157 awsui_variant-inline-link_vjswe_l0v97_380 awsui_link_vjswe_l0v97_659" aria-label="Language Selector. Currently set to: English" aria-expanded="false" title="Language Selector. Currently set to: English" data-analytics-funnel-value="button:r0:" href="#" data-analytics-performance-mark="0-1786135161020-1036"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><span>English</span><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></span></a></div></div></div></div></div><div class="awsui_child_18582_1g6fc_149"><div class="awsui_grid_14yj0_199n9_145"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="gnWbJtYmdxvG1Je4GOp16g=="><a id="link-self:r3:" class="awsui_link_4c84z_1ekb2_145 z7ej9Ad5XDJ3686nBS+jyg==  awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" aria-label="preferences" data-analytics-funnel-value="link:r2:" href="#"><span><span>Preferences </span><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></span></a></div></div></div></div></div><div class="awsui_child_18582_1g6fc_149"><span class="lL22CSvumYV4uNW28TBjVg=="><a id="link-self:r6:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" aria-label="Contact Us" data-analytics-funnel-value="link:r5:" target="_blank" rel="noopener noreferrer" href="https://aws.amazon.com/contact-us/?cmpid=docs_headercta_contactus"><span><span>Contact Us</span></span></a></span></div><div class="awsui_child_18582_1g6fc_149"><a id="feedback-link" class="awsui_link_4c84z_1ekb2_145 s9YCXdExRq+KVp61kG1Q+Q== awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r8:" target="_blank" rel="noopener noreferrer" href="https://docs.aws.amazon.com/feedback/doc-feedback.html?hidden_service_name=IAM&amp;topic_url=https%3A%2F%2Fdocs.aws.amazon.com%2FIAM%2Flatest%2FUserGuide%2Fid_credentials_temp_request.html"><span><span>Feedback</span></span></a></div></div></div></div></div></div></div><div class="zYYW+gVs-xfln6OQw1MM0w=="><div class="_12tHC-fiuUAI9n1sBCW21w=="><div class="Pv6kck9a22-Ds4VQ8U41OA=="><a id="logoLink" href="https://docs.aws.amazon.com"><img alt="AWS Documentation" src="/assets/r/images/aws_logo_light.svg" width="58" height="35"></a></div></div><div class="w8ZR5iEDXMLjCp4AJwn6Cw=="><div class="p7Oejz9983-NNybGlP+geg=="><span class="GFTLI8Xq2FU3gXWkGF3pBA== undefined
               "><button aria-label="Scroll left" title="Scroll left" class="awsui_button_vjswe_l0v97_157 awsui_variant-icon_vjswe_l0v97_293 awsui_disabled_vjswe_l0v97_227 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r3s:" type="submit" disabled="" data-analytics-performance-mark="17-1786135161116-7790"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-angle-left_h11ix_j6r2k_363"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M11 2 5 8l6 6" class="stroke-linejoin-round"></path></svg></span></button></span><div class="qgzdBY-iIQsCt9EM1Ukbxg== "><div class="GIwN+fnsOgfy9-QBp9lnOg=="><div class="awsui_grid_14yj0_199n9_145"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="riYWHQutvO6rVeXVeEtT0g== navLink"><a aria-expanded="false" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-link_vjswe_l0v97_380 awsui_link_vjswe_l0v97_659" data-analytics-funnel-value="button:r3u:" href="#" data-analytics-performance-mark="18-1786135161116-96"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><div class="_8jzPFpB5IGN+bBMIWpp6Ag== ">Get started</div></span></a></div></div></div></div></div><div class="GIwN+fnsOgfy9-QBp9lnOg=="><div class="awsui_grid_14yj0_199n9_145"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="riYWHQutvO6rVeXVeEtT0g== navLink"><a aria-expanded="false" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-link_vjswe_l0v97_380 awsui_link_vjswe_l0v97_659" data-analytics-funnel-value="button:r40:" href="#" data-analytics-performance-mark="19-1786135161116-6774"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><div class="_8jzPFpB5IGN+bBMIWpp6Ag== ">Service guides</div></span></a></div></div></div></div></div><div class="GIwN+fnsOgfy9-QBp9lnOg=="><div class="awsui_grid_14yj0_199n9_145"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="riYWHQutvO6rVeXVeEtT0g== navLink"><a aria-expanded="false" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-link_vjswe_l0v97_380 awsui_link_vjswe_l0v97_659" data-analytics-funnel-value="button:r42:" href="#" data-analytics-performance-mark="20-1786135161116-7420"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><div class="_8jzPFpB5IGN+bBMIWpp6Ag== ">Developer tools</div></span></a></div></div></div></div></div><div class="GIwN+fnsOgfy9-QBp9lnOg=="><div class="awsui_grid_14yj0_199n9_145"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="riYWHQutvO6rVeXVeEtT0g== navLink"><a aria-expanded="false" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-link_vjswe_l0v97_380 awsui_link_vjswe_l0v97_659" data-analytics-funnel-value="button:r44:" href="#" data-analytics-performance-mark="21-1786135161116-5698"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><div class="_8jzPFpB5IGN+bBMIWpp6Ag== ">AI resources</div></span></a></div></div></div></div></div></div><span class="GFTLI8Xq2FU3gXWkGF3pBA== undefined "><button aria-label="Scroll right" title="Scroll right" class="awsui_button_vjswe_l0v97_157 awsui_variant-icon_vjswe_l0v97_293 awsui_disabled_vjswe_l0v97_227 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r46:" type="submit" disabled="" data-analytics-performance-mark="22-1786135161116-1493"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-angle-right_h11ix_j6r2k_365"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m5 2 6 6-6 6" class="stroke-linejoin-round"></path></svg></span></button></span></div></div><div class="nOihKPD6fhmfUERQwwXntQ=="><div class="x3g3KM0LUy7lmErgPdkByQ=="><div class="MB24VtnkfvDewHh5kRi+qA=="><div aria-live="polite" class="bsqaPCGp+5dtkTuB0PWgBg=="></div><div class="awsui_root_12hwc_oboi4_5 WQbs8B7Be+redmP+n6qoGQ=="><div class="awsui_root_9duf6_5dned_199"><div id=":rr:" class="awsui_trigger_1hezk_1wraf_5"><div class="awsui_input-container_2rhyz_5khgn_313"><span class="awsui_input-icon-left_2rhyz_5khgn_318"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-subtle_h11ix_j6r2k_348"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m11 11 4 4M7 12A5 5 0 1 0 7 2a5 5 0 0 0 0 10Z" class="stroke-linejoin-round"></path></svg></span></span><input aria-label="Search in this guide" placeholder="Search in this guide" id="input:rn:" class="awsui_input_2rhyz_5khgn_149 awsui_input-has-icon-left_2rhyz_5khgn_275" autocomplete="off" type="text" role="combobox" aria-autocomplete="list" aria-expanded="false" value=""></div></div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div><div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div><div class="awsui_dropdown_9duf6_5dned_153 awsui_with-limited-width_9duf6_5dned_329 awsui_hide-block-border_9duf6_5dned_349 awsui_refresh_9duf6_5dned_174 awsui_use-flexible-width_9duf6_5dned_341" data-open="false" data-animating="false" aria-hidden="true" style="--awsui-dropdown-default-min-width-esndbs: 100%; --awsui-dropdown-default-max-width-esndbs: 465px;"><div class="awsui_dropdown-content-wrapper_9duf6_5dned_153 awsui_is-empty_9duf6_5dned_318 awsui_refresh_9duf6_5dned_174"><div class="awsui_dropdown-content_9duf6_5dned_153"><div class="awsui_footer_1hezk_1wraf_13"><div class="awsui_dropdown-footer_vm8qf_jxdvh_5"></div></div></div></div></div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div></div></div></div></div><button class="U6V8TE3jGICMxcw1qO05zA==" aria-label="Open search" tabindex="0" type="button"><span class="rFEZI2gP3mZyoPrqGkIL0Q== awsui_icon_h11ix_j6r2k_189 awsui_size-medium-mapped-height_h11ix_j6r2k_286 awsui_size-medium_h11ix_j6r2k_282 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m11 11 4 4M7 12A5 5 0 1 0 7 2a5 5 0 0 0 0 10Z" class="stroke-linejoin-round"></path></svg></span></button></div><a id="console-btn" class="+0Cx-h4+ccP78aaFVVW7eA== E7C0pM0XKIlQW-tCPTXnAQ== awsui_button_vjswe_l0v97_157 awsui_variant-primary_vjswe_l0v97_235 awsui_link_vjswe_l0v97_659" data-analytics-funnel-value="button:r48:" href="https://portal.aws.amazon.com" data-analytics-performance-mark="23-1786135161117-7756"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5">Create an AWS Account</span></a></div></div></header><div id="app-layout"><main class="awsui_layout_hyvsj_14q37_400 awsui_content-first-child-main_hyvsj_14q37_555 awsui_split-panel-position-bottom_hyvsj_14q37_598 awsui_disable-content-paddings_hyvsj_14q37_555 awsui_has-content-gap-left_hyvsj_14q37_524 awsui_has-content-gap-right_hyvsj_14q37_527 awsui_root_1fj9k_q6akd_5" style="--awsui-header-height-esndbs: 98px; --awsui-footer-height-esndbs: 0px; --awsui-layout-width-esndbs: 1280px; --awsui-main-offset-left-esndbs: 301px; --awsui-min-content-width-esndbs: 280px; --awsui-notifications-height-esndbs: 0px; --awsui-overlap-height-esndbs: 163px;"><div class="awsui_background_hyvsj_14q37_149"><div class="awsui_scrolling-background_hyvsj_14q37_152"></div></div><div class="awsui_navigation-container_hyvsj_14q37_701" style="--awsui-navigation-width-esndbs: 300px;"><nav aria-hidden="true" aria-label="Side navigation" class="awsui_show-navigation_hyvsj_14q37_739 awsui_is-navigation-open_hyvsj_14q37_647"><div class="awsui_trigger-wrapper_hyvsj_14q37_1277 awsui_remove-high-contrast-header_hyvsj_14q37_680"><button aria-haspopup="true" aria-label="Open side navigation" aria-disabled="false" class="awsui_trigger_hyvsj_14q37_1185 awsui_trigger-button-styles_hyvsj_14q37_1185 awsui_navigation-toggle_1fj9k_q6akd_7" type="button"><span class=""><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M15 3H1M15 8H1M15 13H1" class="stroke-linejoin-round"></path></svg></span></span></button></div></nav><nav aria-label="Side navigation" class="awsui_navigation_hyvsj_14q37_701 awsui_navigation_1fj9k_q6akd_6 awsui_is-navigation-open_hyvsj_14q37_647" aria-hidden="false"><div class="awsui_content-container_hyvsj_14q37_829 awsui_animated-content_hyvsj_14q37_826"><div class="awsui_hide-navigation_hyvsj_14q37_838"><button class="awsui_navigation-close_1fj9k_q6akd_8 awsui_button_vjswe_l0v97_157 awsui_variant-icon_vjswe_l0v97_293 awsui_button-no-text_vjswe_l0v97_601" aria-label="Close side navigation" title="Close side navigation" data-analytics-funnel-value="button:r10:" type="button" data-analytics-performance-mark="8-1786135161037-617"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-angle-left_h11ix_j6r2k_363"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M11 2 5 8l6 6" class="stroke-linejoin-round"></path></svg></span></button></div><div class="PTjZZ2hPi1+WutFCEzRbCg== "><div class="xBAF90Tkf0Ij-5RJKjQblw== awsui_text-content_6absk_1454f_146"><h2 class="RNJhzoIrZjYBpKcESn-5hA==">AWS Identity and Access Management</h2><h3 class="FeGGagxqdIVDcn4Ud4NvnA==">User Guide</h3></div><div data-testid="doc-page-toc" class="awsui_root_l0dv0_b09l1_146"><div class="awsui_list-container_l0dv0_b09l1_230"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-root_l0dv0_b09l1_255 awsui_list-variant-root--first_l0dv0_b09l1_262"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5n:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5n:-trigger" aria-controls=":r5n:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="introduction.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">What is IAM?</span></span></a></div><div id=":r5n:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5n:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="intro-iam-features.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Why should I use IAM?</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="when-to-use-iam.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">When do I use IAM?</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="intro-managing-iam.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How do I manage IAM?</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="intro-structure.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How IAM works</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="introduction_identity-management.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Compare IAM identities and credentials</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="introduction_access-management.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How permissions and policies provide access management</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="introduction_attribute-based-access-control.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Define permissions with ABAC authorization</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5o:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5o:-trigger" aria-controls=":r5o:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="getting-started.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started</span></span></a></div><div id=":r5o:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5o:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="getting-started-account-iam.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Setting up your AWS account</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="console-account-id.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Viewing your AWS account ID</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5p:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5p:-trigger" aria-controls=":r5p:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="console-account-alias.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Using an alias for your AWS account ID</span></span></a></div><div id=":r5p:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5p:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="account-alias-create.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating an account alias</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="account-alias-delete.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Deleting an account alias</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5q:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5q:-trigger" aria-controls=":r5q:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="gs-identities.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Plan access to your AWS account</span></span></a></div><div id=":r5q:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5q:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5r:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5r:-trigger" aria-controls=":r5r:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="gs-identities-iam-users.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use cases for IAM users</span></span></a></div><div id=":r5r:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5r:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="getting-started-emergency-iam-user.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create an IAM user for emergency access</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="getting-started-workloads.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create an IAM user for workloads</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="gs-identities-mfa.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use multi-factor authentication with your identities</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5s:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5s:-trigger" aria-controls=":r5s:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="getting-started-reduce-permissions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Prepare for least-privilege permissions</span></span></a></div><div id=":r5s:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5s:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="getting-started-reduce-permissions-last-accessed.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Reviewing last accessed information for your AWS account</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="getting-started_reduce-permissions-edit-policy.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Generating a policy based on access activity</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="console_search.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Using search to find IAM resources</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5t:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5t:-trigger" aria-controls=":r5t:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="best-practices-use-cases.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Security best practices and use cases</span></span></a></div><div id=":r5t:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5t:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="best-practices.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Security best practices</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="root-user-best-practices.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Root user best practices</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="business-use-cases.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Business use cases</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5u:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5u:-trigger" aria-controls=":r5u:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="tutorials.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tutorials</span></span></a></div><div id=":r5u:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5u:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="tutorial_cross-account-with-roles.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delegate access across AWS accounts using roles</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="tutorial_managed-policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a customer managed policy</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r5v:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r5v:-trigger" aria-controls=":r5v:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="tutorial_attribute-based-access-control.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use attribute-based access control (ABAC)</span></span></a></div><div id=":r5v:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r5v:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="tutorial_abac-saml.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use SAML session tags for ABAC</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="tutorial_users-self-manage-mfa-and-creds.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permit users to manage their credentials and MFA settings</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="tutorial_saml-idp.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create SAML IdP with CloudFormation</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="tutorial_saml-federated-role.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create SAML federated role with CloudFormation</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="tutorial_saml-idp-and-federated-role.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create SAML IdP and federated role with CloudFormation</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r60:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_wrapper-expanded_gwq0h_1aa59_322 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r60:-trigger" aria-controls=":r60:" aria-expanded="true" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_expanded_gwq0h_1aa59_254 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Identities</span></span></a></div><div id=":r60:" class="awsui_content_gwq0h_1aa59_161 awsui_content-expanded_gwq0h_1aa59_473" role="group" aria-labelledby=":r60:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r61:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r61:-trigger" aria-controls=":r61:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_root-user.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS account root user</span></span></a></div><div id=":r61:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r61:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_root-enable-root-access.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Centralize root access</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_root-user-privileged-task.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Perform a privileged task</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r62:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r62:-trigger" aria-controls=":r62:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="enable-mfa-for-root.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">MFA for the root user</span></span></a></div><div id=":r62:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r62:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="enable-fido-mfa-for-root.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Enable a passkey or security key</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="enable-virt-mfa-for-root.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Enable a virtual MFA device</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="enable-hw-mfa-for-root.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Enable a hardware TOTP token</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="root-user-password.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Change the password</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="reset-root-password.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Reset a lost or forgotten root user password</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_root-user_manage_add-key.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create access keys for the root user</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_root-user_manage_delete-key.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delete access keys for the root user</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r63:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r63:-trigger" aria-controls=":r63:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_users.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Users</span></span></a></div><div id=":r63:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r63:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r64:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r64:-trigger" aria-controls=":r64:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_users_sign-in.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How IAM users sign in to AWS</span></span></a></div><div id=":r64:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r64:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="console_sign-in-mfa.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">MFA enabled sign-in</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_users_create.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a user</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_users_list.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">View IAM users</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_users_rename.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Rename a user</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_users_remove.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Remove a user</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="console_controlling-access.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Control user access to the console</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_users_change-permissions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Change user permissions</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r65:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r65:-trigger" aria-controls=":r65:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_credentials_passwords.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">User passwords</span></span></a></div><div id=":r65:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r65:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_passwords_account-policy.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Set a password policy</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_passwords_admin-change-user.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage user passwords</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_passwords_enable-user-change.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permit IAM users to change their own passwords</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_passwords_user-change-own.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How an IAM user changes their own password</span></span></a></li></ul></div></div></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r66:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r66:-trigger" aria-controls=":r66:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_credentials_access-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage access keys</span></span></a></div><div id=":r66:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r66:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-keys_inline-policy.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Control the use of access keys</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-keys_required-permissions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permissions required to manage access keys</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-key-self-managed.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How IAM users can manage their own access keys</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-keys-admin-managed.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How an IAM administrator can manage IAM user access keys</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id-credentials-access-keys-update.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Update access keys</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="securing_access-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Secure access keys</span></span></a></li></ul></div></div></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r67:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r67:-trigger" aria-controls=":r67:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_credentials_mfa.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Multi-factor authentication</span></span></a></div><div id=":r67:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r67:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r68:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r68:-trigger" aria-controls=":r68:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_credentials_mfa_enable_fido.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Assign a passkey or security key</span></span></a></div><div id=":r68:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r68:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_fido_supported_configurations.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Supported configurations for using passkeys and security keys</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_enable_virtual.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Assign a virtual MFA device</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_enable_physical.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Assign a hardware TOTP token</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_enable_cliapi.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Assign MFA devices in the AWS CLI or AWS API</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_checking-status.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Check MFA status</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_sync.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Resynchronize virtual and hardware MFA devices</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_disable.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Deactivate an MFA device</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_lost-or-broken.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Recover an MFA protected identity</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_configure-api-require.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Secure API access with MFA</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_mfa_sample-code.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Sample code: MFA</span></span></a></li></ul></div></div></li><li data-itemid="item-11" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r69:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r69:-trigger" aria-controls=":r69:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_credentials_service-specific-creds.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Service-specific credentials</span></span></a></div><div id=":r69:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r69:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_api_keys_for_aws_services.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">API keys for AWS services</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_keyspaces.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use IAM with Amazon Keyspaces</span></span></a></li></ul></div></div></li><li data-itemid="item-12" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_finding-unused.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Find unused credentials</span></span></a></li><li data-itemid="item-13" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_getting-report.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Generate credential reports</span></span></a></li><li data-itemid="item-14" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_ssh-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM credentials for CodeCommit</span></span></a></li><li data-itemid="item-15" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_server-certs.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage server certificates</span></span></a></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6a:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6a:-trigger" aria-controls=":r6a:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_groups.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">User groups</span></span></a></div><div id=":r6a:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6a:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_groups_create.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create IAM groups</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_groups_manage_list.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">View IAM groups</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_groups_manage_add-remove-users.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Edit users in IAM groups</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_groups_manage_attach-policy.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Attach a policy to a user group</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_groups_manage_rename.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Rename a user group</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_groups_manage_delete.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delete an IAM group</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6b:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6b:-trigger" aria-controls=":r6b:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Roles</span></span></a></div><div id=":r6b:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6b:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="confused-deputy.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">The confused deputy problem</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6c:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6c:-trigger" aria-controls=":r6c:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_common-scenarios.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Common scenarios</span></span></a></div><div id=":r6c:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6c:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_common-scenarios_aws-accounts.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Access across AWS accounts</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_common-scenarios_non-aws.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Access for non-AWS workloads</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_common-scenarios_third-party.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Access to third-party AWS accounts</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_common-scenarios_services.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Access to AWS services</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_common-scenarios_federated-users.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Access through identity federation</span></span></a></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6d:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6d:-trigger" aria-controls=":r6d:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_create.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Role creation</span></span></a></div><div id=":r6d:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6d:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_create_for-user.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a role for an IAM user</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_create_for-service.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a role for an AWS service</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_create-service-linked-role.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a service-linked role</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6e:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6e:-trigger" aria-controls=":r6e:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_create_for-idp.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a role for identity federation</span></span></a></div><div id=":r6e:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6e:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_create_for-idp_oidc.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a role for OIDC federation</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_create_for-idp_saml.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a role for SAML 2.0 federation</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_create_for-custom.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a role using custom trust policies</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_create_policy-examples.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Examples of policies for delegating access</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6f:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6f:-trigger" aria-controls=":r6f:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_manage.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Role management</span></span></a></div><div id=":r6f:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6f:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_permissions-to-switch.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Grant permissions to switch roles</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_passrole.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Grant permissions to pass a role to a service</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_revoke-sessions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Revoke role temporary credentials</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_update-service-linked-role.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Update a service-linked role</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_update-role-trust-policy.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Update a role trust policy</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_update-role-permissions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Update role permissions</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_update-role-settings.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Update role settings</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_manage_delete.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delete roles or instance profiles</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6g:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6g:-trigger" aria-controls=":r6g:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_manage-assume.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Methods to assume a role</span></span></a></div><div id=":r6g:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6g:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_switch-role-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Switch from a user to a role</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_switch-role-cli.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Switch roles (AWS CLI)</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_switch-role-twp.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Switch roles (Tools for Windows PowerShell)</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_switch-role-api.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Switch roles (AWS API)</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_switch-role-ec2.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use roles for applications on Amazon EC2</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_use_switch-role-ec2_instance-profiles.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use instance profiles</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6h:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6h:-trigger" aria-controls=":r6h:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_providers.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Identity providers and federation into AWS</span></span></a></div><div id=":r6h:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6h:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_federation_common_scenarios.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Common scenarios</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6i:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6i:-trigger" aria-controls=":r6i:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_providers_oidc.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">OIDC federation</span></span></a></div><div id=":r6i:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6i:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_create_oidc.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create OIDC identity provider</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_create_oidc_verify-thumbprint.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Obtain the thumbprint for an OIDC provider</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_oidc_secure-by-default.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Identity-provider controls for shared OIDC providers</span></span></a></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6j:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6j:-trigger" aria-controls=":r6j:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_providers_saml.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">SAML 2.0 federation</span></span></a></div><div id=":r6j:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6j:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_create_saml.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create SAML identity provider</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_create_saml_relying-party.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Configure relying party trust and claims</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_saml_3rd-party.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Integrate third-party SAML solution providers with AWS</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_create_saml_assertions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Configure SAML assertions for the authentication response</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_enable-console-saml.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Enable SAML federated principals access to AWS console</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshoot_saml_view-saml-response.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">View SAML response in browser</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6k:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6k:-trigger" aria-controls=":r6k:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_roles_providers_outbound.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Federating AWS Identities to external services</span></span></a></div><div id=":r6k:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6k:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_outbound_getting_started.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with outbound identity federation</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_outbound_token_claims.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Understanding token claims</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_outbound_policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Controlling access with IAM policies</span></span></a></li></ul></div></div></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6l:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_wrapper-expanded_gwq0h_1aa59_322 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6l:-trigger" aria-controls=":r6l:" aria-expanded="true" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_expanded_gwq0h_1aa59_254 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_credentials_temp.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Temporary security credentials</span></span></a></div><div id=":r6l:" class="awsui_content_gwq0h_1aa59_161 awsui_content-expanded_gwq0h_1aa59_473" role="group" aria-labelledby=":r6l:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_sts-comparison.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Compare AWS STS credentials</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_bearer.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Service bearer tokens</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_request.html" class="awsui_link_l0dv0_b09l1_407 awsui_link-active_l0dv0_b09l1_425" aria-current="page"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Request temporary security credentials</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_use-resources.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use temporary credentials with AWS resources</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6m:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6m:-trigger" aria-controls=":r6m:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_credentials_temp_control-access.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permissions for temporary security credentials</span></span></a></div><div id=":r6m:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6m:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_control-access_assumerole.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permissions for AssumeRole API operations</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_control-access_monitor.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Monitor and control actions taken with assumed roles</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_control-access_getfederationtoken.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permissions for GetFederationToken</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_control-access_getsessiontoken.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permissions for GetSessionToken</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_control-access_disable-perms.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Disabling permissions</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_control-access_enable-create.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Granting permissions to create credentials</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_control-access_sts-setcontext.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Granting permissions to use identity-enhanced console sessions</span></span></a></li></ul></div></div></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_enable-regions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage AWS STS in an AWS Region</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_temp_region-endpoints.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS STS Regions and endpoints</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_roles_providers_enable-console-custom-url.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Enable custom identity broker console access</span></span></a></li></ul></div></div></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6n:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6n:-trigger" aria-controls=":r6n:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="id_tags.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tags for IAM resources</span></span></a></div><div id=":r6n:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6n:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_tags_users.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tag IAM users</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_tags_roles.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tag IAM roles</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_tags_customer-managed-policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tag customer managed policies</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_tags_oidc.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tag OIDC identity providers</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_tags_saml.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tag IAM SAML identity providers</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_tags_instance-profiles.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tagging instance profiles</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_tags_server-certificates.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tag server certificates</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_tags_virtual-mfa.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Tag virtual MFA devices</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_session-tags.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Pass session tags</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6o:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6o:-trigger" aria-controls=":r6o:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Access management</span></span></a></div><div id=":r6o:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6o:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6p:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6p:-trigger" aria-controls=":r6p:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policies and permissions</span></span></a></div><div id=":r6p:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6p:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6q:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6q:-trigger" aria-controls=":r6q:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_managed-vs-inline.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Managed policies and inline policies</span></span></a></div><div id=":r6q:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6q:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies-choosing-managed-or-inline.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Choose between managed or inline policies</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies-convert-inline-to-managed.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Convert inline policy to managed</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_managed-deprecated.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Deprecated AWS managed policies</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_data-perimeters.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Data perimeters</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_boundaries.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permissions boundaries</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_identity-vs-resource.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Identity vs resource</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_controlling.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Control access using policies</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_iam-tags.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Control access to IAM users and roles using tags</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_tags.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Control access to AWS resources using tags</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies-cross-account-resource-access.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Cross account resource access</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_forward_access_sessions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Forward access sessions</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6r:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6r:-trigger" aria-controls=":r6r:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_examples.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Example policies</span></span></a></div><div id=":r6r:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6r:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws-dates.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Specific access during a date range</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws-enable-disable-regions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Enable or disable AWS Regions</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws_my-sec-creds-self-manage.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Self-manage credentials with MFA (Security credentials)</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws_mfa-dates.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Specific access with MFA during a date range</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws_my-sec-creds-self-manage-no-mfa.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Self-manage credentials no MFA (Security credentials)</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws_my-sec-creds-self-manage-mfa-only.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Self-manage MFA device (Security credentials)</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws_my-sec-creds-self-manage-password-only.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Self-manage console password (Security credentials)</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws_my-sec-creds-self-manage-pass-accesskeys-ssh.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Self-manage password, access keys, &amp; SSH public keys (My security credentials)</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws_deny-requested-region.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Deny access based on requested Region</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_aws_deny-ip.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Deny access based on source IP</span></span></a></li><li data-itemid="item-11" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_resource_account_data_exch.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Deny access to Amazon S3 resources outside your account except AWS Data Exchange</span></span></a></li><li data-itemid="item-12" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_datapipeline_not-owned.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Data Pipeline: Deny access to pipelines not created by user</span></span></a></li><li data-itemid="item-13" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_dynamodb_specific-table.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DynamoDB: Access specific table</span></span></a></li><li data-itemid="item-14" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_dynamodb_attributes.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DynamoDB: Allow access to specific attributes</span></span></a></li><li data-itemid="item-15" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_dynamodb_items.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DynamoDB: Allow item access based on a Amazon Cognito ID</span></span></a></li><li data-itemid="item-16" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2_ebs-owner.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Attach or detach tagged EBS volumes</span></span></a></li><li data-itemid="item-17" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2_instances-subnet.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Launch instances in a subnet (includes console)</span></span></a></li><li data-itemid="item-18" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2_securitygroups-vpc.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Manage security groups with the same tags (includes console)</span></span></a></li><li data-itemid="item-19" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2_tag-owner.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Start or stop instances a user has tagged (includes console)</span></span></a></li><li data-itemid="item-20" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2-start-stop-tags.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Start or stop instances based on tags</span></span></a></li><li data-itemid="item-21" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2-start-stop-match-tags.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Start or stop for matching tags</span></span></a></li><li data-itemid="item-22" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2_region.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Full access within a Region (includes console)</span></span></a></li><li data-itemid="item-23" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2_instance-securitygroup.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Start or stop an instance, modify security group (includes console)</span></span></a></li><li data-itemid="item-24" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2_require-mfa.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Requires MFA (GetSessionToken) for operations</span></span></a></li><li data-itemid="item-25" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_ec2_terminate-ip.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EC2: Limit terminating instances to IP range</span></span></a></li><li data-itemid="item-26" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_policy-sim.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Access the policy simulator API</span></span></a></li><li data-itemid="item-27" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_policy-sim-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Access the policy simulator console</span></span></a></li><li data-itemid="item-28" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam-assume-tagged-role.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Assume tagged roles</span></span></a></li><li data-itemid="item-29" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_multiple-services-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Allows and denies multiple services (includes console)</span></span></a></li><li data-itemid="item-30" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam-add-tag.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Add specific tag to tagged user</span></span></a></li><li data-itemid="item-31" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam-add-tag-user-role.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Add a specific tag</span></span></a></li><li data-itemid="item-32" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam-new-user-tag.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Create only tagged users</span></span></a></li><li data-itemid="item-33" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam-credential-report.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Generate credential reports</span></span></a></li><li data-itemid="item-34" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_manage-group-membership.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Manage group membership (includes console)</span></span></a></li><li data-itemid="item-35" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam-manage-tags.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Manage a tag</span></span></a></li><li data-itemid="item-36" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam-passrole-service.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Pass a role to a service</span></span></a></li><li data-itemid="item-37" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_read-only-console-no-reporting.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Read-only console access (no reporting)</span></span></a></li><li data-itemid="item-38" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_read-only-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Read-only console access</span></span></a></li><li data-itemid="item-39" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_users-manage-group.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Specific users manage group (includes console)</span></span></a></li><li data-itemid="item-40" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_set-account-pass-policy.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Setting account password requirements (includes console)</span></span></a></li><li data-itemid="item-41" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_policy-sim-path.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Access the policy simulator API based on user path</span></span></a></li><li data-itemid="item-42" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_policy-sim-path-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Access the policy simulator console based on user path (includes console)</span></span></a></li><li data-itemid="item-43" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_mfa-selfmanage.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: MFA self-management</span></span></a></li><li data-itemid="item-44" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_credentials_console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Update credentials (includes console)</span></span></a></li><li data-itemid="item-45" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_service-accessed-data-orgs.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: View AWS Organizations service last accessed information for a policy</span></span></a></li><li data-itemid="item-46" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_iam_limit-managed.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM: Apply limited managed policies</span></span></a></li><li data-itemid="item-47" class="awsui_list-item_l0dv0_b09l1_289"><a href="resource_examples_iam_policies_resource_account.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS: Deny access to resources outside your account except AWS managed IAM policies</span></span></a></li><li data-itemid="item-48" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_lambda-access-dynamodb.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Lambda: Service access to DynamoDB</span></span></a></li><li data-itemid="item-49" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_rds_region.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">RDS: Full access within a Region</span></span></a></li><li data-itemid="item-50" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_rds_db-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">RDS: Restore databases (includes console)</span></span></a></li><li data-itemid="item-51" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_rds_tag-owner.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">RDS: Full access for tag owners</span></span></a></li><li data-itemid="item-52" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_s3_cognito-bucket.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">S3: Access bucket if cognito</span></span></a></li><li data-itemid="item-53" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_s3_federated-home-directory-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">S3: Access federated principal home directory (includes console)</span></span></a></li><li data-itemid="item-54" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_s3_full-access-except-production.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">S3: Full access with recent MFA</span></span></a></li><li data-itemid="item-55" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_s3_home-directory-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">S3: Access IAM user home directory (includes console)</span></span></a></li><li data-itemid="item-56" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_s3_deny-except-bucket.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">S3: Restrict management to a specific bucket</span></span></a></li><li data-itemid="item-57" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_s3_rw-bucket.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">S3: Read and write objects to a specific bucket</span></span></a></li><li data-itemid="item-58" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_examples_s3_rw-bucket-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">S3: Read and write to a specific bucket (includes console)</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6s:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6s:-trigger" aria-controls=":r6s:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_manage.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage IAM policies</span></span></a></div><div id=":r6s:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6s:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6t:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6t:-trigger" aria-controls=":r6t:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_create.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create IAM policies</span></span></a></div><div id=":r6t:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6t:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_create-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create IAM policies (console)</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_create-cli.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create IAM policies (CLI)</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_create-api.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create IAM policies (API)</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_policy-validator.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy validation</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6u:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6u:-trigger" aria-controls=":r6u:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_testing-policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy testing</span></span></a></div><div id=":r6u:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6u:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="permissions-required_policy-simulator.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permissions for the policy simulator</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="policies_policy-simulator-how-to.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How to simulate policies</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_manage-attach-detach.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Add or remove identity permissions</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_managed-versioning.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Versioning IAM policies</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r6v:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r6v:-trigger" aria-controls=":r6v:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_manage-edit.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Edit IAM policies</span></span></a></div><div id=":r6v:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r6v:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_manage-edit-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Edit IAM policies (console)</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_manage-edit-cli.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Edit IAM policies (CLI)</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_manage-edit-api.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Edit IAM policies (API)</span></span></a></li></ul></div></div></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r70:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r70:-trigger" aria-controls=":r70:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_manage-delete.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delete IAM policies</span></span></a></div><div id=":r70:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r70:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_manage-delete-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delete IAM policies (console)</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_manage-delete-cli.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delete IAM policies (AWS CLI)</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_manage-delete-api.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delete IAM policies (AWS API)</span></span></a></li></ul></div></div></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r71:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r71:-trigger" aria-controls=":r71:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_last-accessed.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Refine permissions using access information</span></span></a></div><div id=":r71:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r71:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_last-accessed-view-data.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">View IAM access information</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_last-accessed-view-data-orgs.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">View access information for AWS Organizations</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_last-accessed-example-scenarios.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Example scenarios</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_last-accessed-action-last-accessed.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Action last accessed services and actions</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r72:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r72:-trigger" aria-controls=":r72:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_understand.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy summaries</span></span></a></div><div id=":r72:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r72:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r73:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r73:-trigger" aria-controls=":r73:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_understand-policy-summary.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy summary (list of services)</span></span></a></div><div id=":r73:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r73:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_view-policy-summary.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">View policy summaries</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_understand-policy-summary-access-level-summaries.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Access levels in policy summaries</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r74:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r74:-trigger" aria-controls=":r74:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_understand-service-summary.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Service summary (list of actions)</span></span></a></div><div id=":r74:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r74:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_view-service-summary.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">View service summaries</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r75:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r75:-trigger" aria-controls=":r75:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_understand-action-summary.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Action summary (list of resources)</span></span></a></div><div id=":r75:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r75:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_view-action-summary.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">View action summaries</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_policy-summary-examples.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Example policy summaries</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r76:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r76:-trigger" aria-controls=":r76:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_permissions-required.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permissions required to access IAM resources</span></span></a></div><div id=":r76:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r76:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="id_credentials_delegate-permissions_examples.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Example policies for IAM</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r77:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r77:-trigger" aria-controls=":r77:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies-temporary-delegation.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Temporary delegation</span></span></a></div><div id=":r77:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r77:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-initiate-request.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Initiate a temporary delegation request</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-review-requests.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Review Temporary delegation requests</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-revoke-access.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Revoke Temporary delegation access</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-notifications.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Notifications</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-cloudtrail.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CloudTrail</span></span></a></li></ul></div></div></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r78:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r78:-trigger" aria-controls=":r78:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies-temporary-delegation-partner-guide.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Temporary delegation for Partners</span></span></a></div><div id=":r78:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r78:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-understanding-integration.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Understanding your integration</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-understanding-permissions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Understanding permissions</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-policy-evaluation-guidelines.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy evaluation guidelines</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-policy-templates.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy templates</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="temporary-delegation-building-integration.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Building your integration</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r79:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r79:-trigger" aria-controls=":r79:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Code examples</span></span></a></div><div id=":r79:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r79:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7a:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7a:-trigger" aria-controls=":r7a:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples_iam.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM</span></span></a></div><div id=":r7a:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7a:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7b:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7b:-trigger" aria-controls=":r7b:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples_iam_basics.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Basics</span></span></a></div><div id=":r7b:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7b:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Hello_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Hello IAM</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Scenario_CreateUserAssumeRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Learn the basics</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7c:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7c:-trigger" aria-controls=":r7c:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples_iam_actions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Actions</span></span></a></div><div id=":r7c:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7c:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_AddClientIdToOpenIdConnectProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AddClientIdToOpenIdConnectProvider</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_AddRoleToInstanceProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AddRoleToInstanceProfile</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_AddUserToGroup_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AddUserToGroup</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_AttachGroupPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AttachGroupPolicy</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_AttachRolePolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AttachRolePolicy</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_AttachUserPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AttachUserPolicy</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ChangePassword_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ChangePassword</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateAccessKey_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateAccessKey</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateAccountAlias_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateAccountAlias</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateGroup_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateGroup</span></span></a></li><li data-itemid="item-11" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateInstanceProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateInstanceProfile</span></span></a></li><li data-itemid="item-12" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateLoginProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateLoginProfile</span></span></a></li><li data-itemid="item-13" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateOpenIdConnectProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateOpenIdConnectProvider</span></span></a></li><li data-itemid="item-14" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreatePolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreatePolicy</span></span></a></li><li data-itemid="item-15" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreatePolicyVersion_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreatePolicyVersion</span></span></a></li><li data-itemid="item-16" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateRole</span></span></a></li><li data-itemid="item-17" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateSAMLProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateSAMLProvider</span></span></a></li><li data-itemid="item-18" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateServiceLinkedRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateServiceLinkedRole</span></span></a></li><li data-itemid="item-19" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateUser_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateUser</span></span></a></li><li data-itemid="item-20" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_CreateVirtualMfaDevice_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">CreateVirtualMfaDevice</span></span></a></li><li data-itemid="item-21" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeactivateMfaDevice_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeactivateMfaDevice</span></span></a></li><li data-itemid="item-22" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteAccessKey_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteAccessKey</span></span></a></li><li data-itemid="item-23" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteAccountAlias_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteAccountAlias</span></span></a></li><li data-itemid="item-24" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteAccountPasswordPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteAccountPasswordPolicy</span></span></a></li><li data-itemid="item-25" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteGroup_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteGroup</span></span></a></li><li data-itemid="item-26" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteGroupPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteGroupPolicy</span></span></a></li><li data-itemid="item-27" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteInstanceProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteInstanceProfile</span></span></a></li><li data-itemid="item-28" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteLoginProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteLoginProfile</span></span></a></li><li data-itemid="item-29" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteOpenIdConnectProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteOpenIdConnectProvider</span></span></a></li><li data-itemid="item-30" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeletePolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeletePolicy</span></span></a></li><li data-itemid="item-31" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeletePolicyVersion_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeletePolicyVersion</span></span></a></li><li data-itemid="item-32" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteRole</span></span></a></li><li data-itemid="item-33" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteRolePermissionsBoundary_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteRolePermissionsBoundary</span></span></a></li><li data-itemid="item-34" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteRolePolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteRolePolicy</span></span></a></li><li data-itemid="item-35" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteSAMLProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteSAMLProvider</span></span></a></li><li data-itemid="item-36" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteServerCertificate_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteServerCertificate</span></span></a></li><li data-itemid="item-37" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteServiceLinkedRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteServiceLinkedRole</span></span></a></li><li data-itemid="item-38" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteSigningCertificate_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteSigningCertificate</span></span></a></li><li data-itemid="item-39" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteUser_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteUser</span></span></a></li><li data-itemid="item-40" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteUserPermissionsBoundary_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteUserPermissionsBoundary</span></span></a></li><li data-itemid="item-41" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteUserPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteUserPolicy</span></span></a></li><li data-itemid="item-42" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DeleteVirtualMfaDevice_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DeleteVirtualMfaDevice</span></span></a></li><li data-itemid="item-43" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DetachGroupPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DetachGroupPolicy</span></span></a></li><li data-itemid="item-44" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DetachRolePolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DetachRolePolicy</span></span></a></li><li data-itemid="item-45" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_DetachUserPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DetachUserPolicy</span></span></a></li><li data-itemid="item-46" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_EnableMfaDevice_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">EnableMfaDevice</span></span></a></li><li data-itemid="item-47" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GenerateCredentialReport_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GenerateCredentialReport</span></span></a></li><li data-itemid="item-48" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GenerateServiceLastAccessedDetails_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GenerateServiceLastAccessedDetails</span></span></a></li><li data-itemid="item-49" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetAccessKeyLastUsed_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetAccessKeyLastUsed</span></span></a></li><li data-itemid="item-50" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetAccountAuthorizationDetails_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetAccountAuthorizationDetails</span></span></a></li><li data-itemid="item-51" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetAccountPasswordPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetAccountPasswordPolicy</span></span></a></li><li data-itemid="item-52" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetAccountSummary_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetAccountSummary</span></span></a></li><li data-itemid="item-53" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetContextKeysForCustomPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetContextKeysForCustomPolicy</span></span></a></li><li data-itemid="item-54" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetContextKeysForPrincipalPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetContextKeysForPrincipalPolicy</span></span></a></li><li data-itemid="item-55" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetCredentialReport_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetCredentialReport</span></span></a></li><li data-itemid="item-56" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetGroup_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetGroup</span></span></a></li><li data-itemid="item-57" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetGroupPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetGroupPolicy</span></span></a></li><li data-itemid="item-58" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetInstanceProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetInstanceProfile</span></span></a></li><li data-itemid="item-59" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetLoginProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetLoginProfile</span></span></a></li><li data-itemid="item-60" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetOpenIdConnectProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetOpenIdConnectProvider</span></span></a></li><li data-itemid="item-61" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetPolicy</span></span></a></li><li data-itemid="item-62" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetPolicyVersion_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetPolicyVersion</span></span></a></li><li data-itemid="item-63" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetRole</span></span></a></li><li data-itemid="item-64" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetRolePolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetRolePolicy</span></span></a></li><li data-itemid="item-65" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetSamlProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetSamlProvider</span></span></a></li><li data-itemid="item-66" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetServerCertificate_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetServerCertificate</span></span></a></li><li data-itemid="item-67" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetServiceLastAccessedDetails_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetServiceLastAccessedDetails</span></span></a></li><li data-itemid="item-68" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetServiceLastAccessedDetailsWithEntities_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetServiceLastAccessedDetailsWithEntities</span></span></a></li><li data-itemid="item-69" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetServiceLinkedRoleDeletionStatus_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetServiceLinkedRoleDeletionStatus</span></span></a></li><li data-itemid="item-70" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetUser_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetUser</span></span></a></li><li data-itemid="item-71" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GetUserPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetUserPolicy</span></span></a></li><li data-itemid="item-72" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListAccessKeys_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListAccessKeys</span></span></a></li><li data-itemid="item-73" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListAccountAliases_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListAccountAliases</span></span></a></li><li data-itemid="item-74" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListAttachedGroupPolicies_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListAttachedGroupPolicies</span></span></a></li><li data-itemid="item-75" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListAttachedRolePolicies_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListAttachedRolePolicies</span></span></a></li><li data-itemid="item-76" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListAttachedUserPolicies_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListAttachedUserPolicies</span></span></a></li><li data-itemid="item-77" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListEntitiesForPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListEntitiesForPolicy</span></span></a></li><li data-itemid="item-78" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListGroupPolicies_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListGroupPolicies</span></span></a></li><li data-itemid="item-79" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListGroups_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListGroups</span></span></a></li><li data-itemid="item-80" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListGroupsForUser_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListGroupsForUser</span></span></a></li><li data-itemid="item-81" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListInstanceProfiles_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListInstanceProfiles</span></span></a></li><li data-itemid="item-82" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListInstanceProfilesForRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListInstanceProfilesForRole</span></span></a></li><li data-itemid="item-83" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListMfaDevices_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListMfaDevices</span></span></a></li><li data-itemid="item-84" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListOpenIdConnectProviders_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListOpenIdConnectProviders</span></span></a></li><li data-itemid="item-85" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListPolicies_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListPolicies</span></span></a></li><li data-itemid="item-86" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListPolicyVersions_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListPolicyVersions</span></span></a></li><li data-itemid="item-87" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListRolePolicies_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListRolePolicies</span></span></a></li><li data-itemid="item-88" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListRoleTags_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListRoleTags</span></span></a></li><li data-itemid="item-89" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListRoles_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListRoles</span></span></a></li><li data-itemid="item-90" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListSAMLProviders_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListSAMLProviders</span></span></a></li><li data-itemid="item-91" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListServerCertificates_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListServerCertificates</span></span></a></li><li data-itemid="item-92" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListSigningCertificates_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListSigningCertificates</span></span></a></li><li data-itemid="item-93" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListUserPolicies_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListUserPolicies</span></span></a></li><li data-itemid="item-94" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListUserTags_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListUserTags</span></span></a></li><li data-itemid="item-95" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListUsers_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListUsers</span></span></a></li><li data-itemid="item-96" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ListVirtualMfaDevices_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ListVirtualMfaDevices</span></span></a></li><li data-itemid="item-97" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_PutGroupPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">PutGroupPolicy</span></span></a></li><li data-itemid="item-98" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_PutRolePermissionsBoundary_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">PutRolePermissionsBoundary</span></span></a></li><li data-itemid="item-99" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_PutRolePolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">PutRolePolicy</span></span></a></li><li data-itemid="item-100" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_PutUserPermissionsBoundary_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">PutUserPermissionsBoundary</span></span></a></li><li data-itemid="item-101" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_PutUserPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">PutUserPolicy</span></span></a></li><li data-itemid="item-102" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_RemoveClientIdFromOpenIdConnectProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">RemoveClientIdFromOpenIdConnectProvider</span></span></a></li><li data-itemid="item-103" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_RemoveRoleFromInstanceProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">RemoveRoleFromInstanceProfile</span></span></a></li><li data-itemid="item-104" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_RemoveUserFromGroup_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">RemoveUserFromGroup</span></span></a></li><li data-itemid="item-105" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_ResyncMfaDevice_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">ResyncMfaDevice</span></span></a></li><li data-itemid="item-106" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_SetDefaultPolicyVersion_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">SetDefaultPolicyVersion</span></span></a></li><li data-itemid="item-107" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_TagRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">TagRole</span></span></a></li><li data-itemid="item-108" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_TagUser_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">TagUser</span></span></a></li><li data-itemid="item-109" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UntagRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UntagRole</span></span></a></li><li data-itemid="item-110" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UntagUser_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UntagUser</span></span></a></li><li data-itemid="item-111" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateAccessKey_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateAccessKey</span></span></a></li><li data-itemid="item-112" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateAccountPasswordPolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateAccountPasswordPolicy</span></span></a></li><li data-itemid="item-113" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateAssumeRolePolicy_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateAssumeRolePolicy</span></span></a></li><li data-itemid="item-114" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateGroup_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateGroup</span></span></a></li><li data-itemid="item-115" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateLoginProfile_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateLoginProfile</span></span></a></li><li data-itemid="item-116" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateOpenIdConnectProviderThumbprint_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateOpenIdConnectProviderThumbprint</span></span></a></li><li data-itemid="item-117" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateRole</span></span></a></li><li data-itemid="item-118" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateRoleDescription_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateRoleDescription</span></span></a></li><li data-itemid="item-119" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateSamlProvider_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateSamlProvider</span></span></a></li><li data-itemid="item-120" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateServerCertificate_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateServerCertificate</span></span></a></li><li data-itemid="item-121" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateSigningCertificate_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateSigningCertificate</span></span></a></li><li data-itemid="item-122" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UpdateUser_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UpdateUser</span></span></a></li><li data-itemid="item-123" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UploadServerCertificate_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UploadServerCertificate</span></span></a></li><li data-itemid="item-124" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_UploadSigningCertificate_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">UploadSigningCertificate</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7d:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7d:-trigger" aria-controls=":r7d:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples_iam_scenarios.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Scenarios</span></span></a></div><div id=":r7d:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7d:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_cross_ResilientService_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Build and manage a resilient service</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_ecs_ServiceConnect_085_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Configure container service connectivity</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_ecs_GettingStarted_086_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a container task for the serverless launch type</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_api_gateway_GettingStarted_087_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a rest API with function proxy integration</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Scenario_UserPolicies_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create read-only and read-write users</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_ecs_GettingStarted_018_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating a container service for virtual machine instances</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GettingStarted_044_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating a managed monitoring workspace</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_cloudwatch_GettingStarted_031_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating a monitoring dashboard with function name as a variable</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_lambda_GettingStarted_019_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating your first serverless function</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_redshift_GettingStarted_038_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Get started with serverless data warehouses</span></span></a></li><li data-itemid="item-11" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_config_service_GettingStarted_053_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with configuration management</span></span></a></li><li data-itemid="item-12" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iot_GettingStarted_079_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with internet of things device protection</span></span></a></li><li data-itemid="item-13" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GettingStarted_028_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with machine learning feature stores</span></span></a></li><li data-itemid="item-14" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_eks_GettingStarted_034_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with managed kubernetes clusters</span></span></a></li><li data-itemid="item-15" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_ec2_GettingStarted_057_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with managed streaming</span></span></a></li><li data-itemid="item-16" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_redshift_GettingStarted_039_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with provisioned data warehouse clusters</span></span></a></li><li data-itemid="item-17" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GettingStarted_080_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with workflow orchestration</span></span></a></li><li data-itemid="item-18" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Scenario_ManageAccessKeys_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage access keys</span></span></a></li><li data-itemid="item-19" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Scenario_PolicyManagement_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage policies</span></span></a></li><li data-itemid="item-20" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Scenario_RoleManagement_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage roles</span></span></a></li><li data-itemid="item-21" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Scenario_AccountManagement_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage your account</span></span></a></li><li data-itemid="item-22" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_secrets_manager_GettingStarted_073_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Moving hardcoded secrets to secure secret storage</span></span></a></li><li data-itemid="item-23" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam-policies.AWSMettleDocs.latest.userguide.managed-policies.xml.10_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permission policy allows AWS Compute Optimizer Automation to apply recommended actions</span></span></a></li><li data-itemid="item-24" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam-policies.AWSMettleDocs.latest.userguide.automation.xml.2_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permission policy to enable Automation across your organization</span></span></a></li><li data-itemid="item-25" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam-policies.AWSMettleDocs.latest.userguide.automation.xml.1_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permission policy to enable Automation for your account</span></span></a></li><li data-itemid="item-26" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam-policies.AWSMettleDocs.latest.userguide.automation.xml.5_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permission policy to grant full access to Compute Optimizer Automation for a management account of an organization</span></span></a></li><li data-itemid="item-27" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam-policies.AWSMettleDocs.latest.userguide.automation.xml.3_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permission policy to grant full access to Compute Optimizer Automation for standalone AWS accounts</span></span></a></li><li data-itemid="item-28" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam-policies.AWSMettleDocs.latest.userguide.automation.xml.6_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permission policy to grant read-only access to Compute Optimizer Automation for a management account of an organization</span></span></a></li><li data-itemid="item-29" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam-policies.AWSMettleDocs.latest.userguide.automation.xml.4_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permission policy to grant read-only access to Compute Optimizer Automation for standalone AWS accounts</span></span></a></li><li data-itemid="item-30" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam-policies.AWSMettleDocs.latest.userguide.slr-automation.xml.1_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Permission policy to grant service-linked role permissions for Compute Optimization Automation</span></span></a></li><li data-itemid="item-31" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Scenario_RollbackPolicyVersion_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Roll back a policy version</span></span></a></li><li data-itemid="item-32" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GettingStarted_069_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Run CPU stress tests on virtual machine instances using fault injection</span></span></a></li><li data-itemid="item-33" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_dynamodb_Scenario_ABACSetup_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Set up Attribute-Based Access Control</span></span></a></li><li data-itemid="item-34" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GettingStarted_046_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Setting up systems management</span></span></a></li><li data-itemid="item-35" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_GettingStarted_032_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Using property variables in monitoring dashboards to monitor multiple serverless functions</span></span></a></li><li data-itemid="item-36" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_dynamodb_Scenario_StreamsAndTTL_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Work with Streams and Time-to-Live</span></span></a></li><li data-itemid="item-37" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam_example_iam_Scenario_IamPolicyBuilder_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Work with the IAM Policy Builder API</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7e:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7e:-trigger" aria-controls=":r7e:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples_sts.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS STS</span></span></a></div><div id=":r7e:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7e:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7f:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7f:-trigger" aria-controls=":r7f:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples_sts_basics.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Basics</span></span></a></div><div id=":r7f:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7f:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7g:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7g:-trigger" aria-controls=":r7g:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples_sts_actions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Actions</span></span></a></div><div id=":r7g:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7g:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_sts_AssumeRole_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AssumeRole</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_sts_AssumeRoleWithWebIdentity_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AssumeRoleWithWebIdentity</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_sts_DecodeAuthorizationMessage_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">DecodeAuthorizationMessage</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_sts_GetFederationToken_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetFederationToken</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_sts_GetSessionToken_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">GetSessionToken</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7h:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7h:-trigger" aria-controls=":r7h:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="service_code_examples_sts_scenarios.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Scenarios</span></span></a></div><div id=":r7h:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7h:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_sts_Scenario_AssumeRoleMfa_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Assume an IAM role that requires an MFA token</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_ecs_ServiceConnect_085_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Configure container service connectivity</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_sts_Scenario_ConstructFederatedUrl_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Construct a URL for federated users</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_ecs_GettingStarted_086_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a container task for the serverless launch type</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_api_gateway_GettingStarted_087_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a rest API with function proxy integration</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_ecs_GettingStarted_018_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating a container service for virtual machine instances</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_iam_GettingStarted_044_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating a managed monitoring workspace</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_cloudwatch_GettingStarted_031_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating a monitoring dashboard with function name as a variable</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_sts_Scenario_SessionTokenMfa_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Get a session token that requires an MFA token</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_config_service_GettingStarted_053_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with configuration management</span></span></a></li><li data-itemid="item-11" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_ecr_GettingStarted_078_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with container registries</span></span></a></li><li data-itemid="item-12" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_iot_GettingStarted_063_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with internet of things messaging</span></span></a></li><li data-itemid="item-13" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_iam_GettingStarted_028_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with machine learning feature stores</span></span></a></li><li data-itemid="item-14" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_eks_GettingStarted_034_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with managed kubernetes clusters</span></span></a></li><li data-itemid="item-15" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_ec2_GettingStarted_057_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with managed streaming</span></span></a></li><li data-itemid="item-16" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_pinpoint_GettingStarted_049_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with push notifications</span></span></a></li><li data-itemid="item-17" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_opensearch_GettingStarted_016_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with search and analytics engines</span></span></a></li><li data-itemid="item-18" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_wafv2_GettingStarted_052_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with web application firewalls</span></span></a></li><li data-itemid="item-19" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_secrets_manager_GettingStarted_073_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Moving hardcoded secrets to secure secret storage</span></span></a></li><li data-itemid="item-20" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_iam_GettingStarted_069_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Run CPU stress tests on virtual machine instances using fault injection</span></span></a></li><li data-itemid="item-21" class="awsui_list-item_l0dv0_b09l1_289"><a href="sts_example_iam_GettingStarted_046_section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Setting up systems management</span></span></a></li></ul></div></div></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7i:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7i:-trigger" aria-controls=":r7i:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="security.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Security</span></span></a></div><div id=":r7i:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7i:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7j:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7j:-trigger" aria-controls=":r7j:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="security-creds.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS security credentials</span></span></a></div><div id=":r7j:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7j:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="security-creds-programmatic-access.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Programmatic access</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="security-audit-guide.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS security audit guidelines</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="data-protection.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Data protection</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7k:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7k:-trigger" aria-controls=":r7k:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="security-logging-and-monitoring.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Logging and monitoring</span></span></a></div><div id=":r7k:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7k:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="cloudtrail-integration.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Log events with CloudTrail</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="cloudtrail-track-privileged-tasks.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Track privileged tasks in CloudTrail</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="iam-compliance-validation.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Compliance validation</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="disaster-recovery-resiliency.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Resilience</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="infrastructure-security.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Infrastructure security</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="configuration-and-vulnerability-analysis.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Configuration and vulnerability analysis</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="security-iam-awsmanpol.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS managed policies</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><a href="introduction_security-outside-iam.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Security features outside IAM</span></span></a></li></ul></div></div></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7l:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7l:-trigger" aria-controls=":r7l:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="what-is-access-analyzer.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM Access Analyzer</span></span></a></div><div id=":r7l:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7l:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7m:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7m:-trigger" aria-controls=":r7m:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access-analyzer-findings.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Findings</span></span></a></div><div id=":r7m:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7m:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-concepts.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How findings work</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7n:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7n:-trigger" aria-controls=":r7n:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access-analyzer-getting-started.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Getting started with IAM Access Analyzer</span></span></a></div><div id=":r7n:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7n:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-create-external.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create an external access analyzer</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-manage-external.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage an external access analyzer</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-create-internal.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create an internal access analyzer</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-manage-internal.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage an internal access analyzer</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-create-unused.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create an unused access analyzer</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-manage-unused.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Manage an unused access analyzer</span></span></a></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-dashboard.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Findings dashboard</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-findings-view.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Review findings</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-findings-filter.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Filter findings</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-findings-archive.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Archive findings</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-findings-remediate.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Resolve findings</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-error-findings.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Error findings</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-resources.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Supported resource types</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7o:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7o:-trigger" aria-controls=":r7o:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access-analyzer-delegated-administrator.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Delegated administrator</span></span></a></div><div id=":r7o:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7o:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-delegated-administrator-add.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Add a delegated administrator</span></span></a></li></ul></div></div></li><li data-itemid="item-11" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-archive-rules.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Archive rules</span></span></a></li><li data-itemid="item-12" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-eventbridge.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Monitoring with EventBridge</span></span></a></li><li data-itemid="item-13" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-securityhub-integration.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Security Hub CSPM integration</span></span></a></li><li data-itemid="item-14" class="awsui_list-item_l0dv0_b09l1_289"><a href="logging-using-cloudtrail.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Logging with CloudTrail</span></span></a></li><li data-itemid="item-15" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-reference-filter-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Filter keys</span></span></a></li><li data-itemid="item-16" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-using-service-linked-roles.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Using service-linked roles</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7p:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7p:-trigger" aria-controls=":r7p:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access-analyzer-access-preview.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Preview access</span></span></a></div><div id=":r7p:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7p:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-preview-access-s3-console.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Previewing access in Amazon S3 console</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-preview-access-apis.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Previewing access with IAM Access Analyzer APIs</span></span></a></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7q:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7q:-trigger" aria-controls=":r7q:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access-analyzer-checks-validating-policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Checks for validating policies</span></span></a></div><div id=":r7q:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7q:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-policy-validation.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Validate with basic policy checks</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-reference-policy-checks.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy check reference</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-custom-policy-checks.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Validate with custom policy checks</span></span></a></li></ul></div></div></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7r:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7r:-trigger" aria-controls=":r7r:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access-analyzer-policy-generation.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM Access Analyzer policy generation</span></span></a></div><div id=":r7r:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7r:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-policy-generation-action-last-accessed-support.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM Access Analyzer policy generation services</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="access-analyzer-quotas.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM Access Analyzer quotas</span></span></a></li></ul></div></div></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7s:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7s:-trigger" aria-controls=":r7s:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="troubleshoot.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Troubleshoot IAM</span></span></a></div><div id=":r7s:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7s:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshoot_access-denied.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Access denied error messages</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshooting_root-user.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Root user issues</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshoot_policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM policies</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshoot_mfa-fido.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Passkeys and FIDO Security Keys</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshoot_roles.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM roles</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshoot_iam-ec2.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM and Amazon EC2</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshoot_iam-s3.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM and Amazon S3</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="troubleshoot_saml.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">SAML 2.0 federation</span></span></a></li></ul></div></div></li><li data-itemid="item-11" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7t:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7t:-trigger" aria-controls=":r7t:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="iam-cross-service.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">How IAM works with other AWS services</span></span></a></div><div id=":r7t:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7t:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="creating-resources-with-cloudformation.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create IAM resources with CloudFormation</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="using-aws-with-cloudshell.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use AWS CloudShell with IAM</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="sdk-general-information-section.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Working with AWS SDKs</span></span></a></li></ul></div></div></li><li data-itemid="item-12" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7u:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7u:-trigger" aria-controls=":r7u:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Reference</span></span></a></div><div id=":r7u:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7u:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference-arns.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Identify AWS resources with Amazon Resource Names (ARNs)</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_identifiers.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM identifiers</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_iam-quotas.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM and AWS STS quotas</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_dual-stack_endpoint_support.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Dual-stack endpoint support</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r7v:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r7v:-trigger" aria-controls=":r7v:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference_interface_vpc_endpoints.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Interface VPC endpoints</span></span></a></div><div id=":r7v:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r7v:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_iam_vpc_endpoint_create.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a VPC endpoint for IAM</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_sts_vpc_endpoint_create.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a VPC endpoint for AWS STS</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_sts_vpc_endpoint_policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Control access to AWS STS with VPC endpoint policies</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_sts_vpc_condition_keys_federated.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Use VPC condition keys to control federated access</span></span></a></li></ul></div></div></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_aws-services-that-work-with-iam.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Services that work with IAM</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r80:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r80:-trigger" aria-controls=":r80:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference_sigv.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS Signature Version 4</span></span></a></div><div id=":r80:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r80:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_sigv-signing-elements.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">SigV4 request elements</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_sigv-authentication-methods.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Authentication methods</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_sigv-create-signed-request.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Create a signed request</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_sigv-examples.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Request signature examples</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_sigv-troubleshooting.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Troubleshoot SigV4</span></span></a></li></ul></div></div></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r81:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r81:-trigger" aria-controls=":r81:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference_policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy reference</span></span></a></div><div id=":r81:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r81:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r82:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r82:-trigger" aria-controls=":r82:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference_policies_elements.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">JSON element reference</span></span></a></div><div id=":r82:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r82:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_version.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Version</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_id.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Id</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_statement.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Statement</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_sid.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Sid</span></span></a></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_effect.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Effect</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_principal.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Principal</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_notprincipal.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">NotPrincipal</span></span></a></li><li data-itemid="item-8" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_action.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Action</span></span></a></li><li data-itemid="item-9" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_notaction.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">NotAction</span></span></a></li><li data-itemid="item-10" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_resource.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Resource</span></span></a></li><li data-itemid="item-11" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_notresource.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">NotResource</span></span></a></li><li data-itemid="item-12" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r83:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r83:-trigger" aria-controls=":r83:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference_policies_elements_condition.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Condition</span></span></a></div><div id=":r83:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r83:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_condition_operators.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Condition operators</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_condition-logic-multiple-context-keys-or-values.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Conditions with multiple context keys or values</span></span></a></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_condition-single-vs-multi-valued-context-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Single-valued vs. multivalued context keys</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r84:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r84:-trigger" aria-controls=":r84:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference_policies_condition_examples.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Condition policy examples</span></span></a></div><div id=":r84:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r84:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_condition_examples-multi-valued-context-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Multivalued context key examples</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_condition_examples-single-valued-context-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Single-valued context key policy examples</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-13" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_variables.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Variables and tags</span></span></a></li><li data-itemid="item-14" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_elements_datatypes.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Supported data types</span></span></a></li></ul></div></div></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r85:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r85:-trigger" aria-controls=":r85:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference_policies_evaluation-logic.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy evaluation logic</span></span></a></div><div id=":r85:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r85:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_evaluation-logic_policy-eval-reqcontext.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Request context</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r86:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r86:-trigger" aria-controls=":r86:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="reference_policies_evaluation-logic_policy-eval-denyallow.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS enforcement code logic</span></span></a></div><div id=":r86:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r86:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_evaluation-logic_policy-eval-basics.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Single account policy evaluation</span></span></a></li><li data-itemid="item-2" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_evaluation-logic-cross-account.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Cross-account policy evaluation</span></span></a></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_evaluation-logic_AccessPolicyLanguage_Interplay.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Explicit and implicit denies</span></span></a></li></ul></div></div></li><li data-itemid="item-3" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_grammar.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Policy grammar</span></span></a></li><li data-itemid="item-4" class="awsui_list-item_l0dv0_b09l1_289"><div class="awsui_expandable-link-group_l0dv0_b09l1_334 awsui_root_gwq0h_1aa59_211 awsui_root_4mvj3_1h74t_6"><div id=":r87:-trigger" class="awsui_header_gwq0h_1aa59_316 awsui_header-navigation_gwq0h_1aa59_415 awsui-screenreader-text awsui_wrapper_gwq0h_1aa59_284 awsui_wrapper-navigation_gwq0h_1aa59_296 awsui_click-target_gwq0h_1aa59_495 awsui_header-label_4mvj3_1h74t_5"><button class="awsui_icon-container_gwq0h_1aa59_264 awsui_expand-button_gwq0h_1aa59_246" aria-labelledby=":r87:-trigger" aria-controls=":r87:" aria-expanded="false" type="button"><span class="awsui_icon_gwq0h_1aa59_197 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></button><a href="access_policies_job-functions.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">AWS managed policies for job functions</span></span></a></div><div id=":r87:" class="awsui_content_gwq0h_1aa59_161" role="group" aria-labelledby=":r87:-trigger"><ul class="awsui_list_l0dv0_b09l1_230 awsui_list-variant-expandable-link-group_l0dv0_b09l1_270"><li data-itemid="item-1" class="awsui_list-item_l0dv0_b09l1_289"><a href="access_policies_job-functions_create-policies.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Creating roles and attaching policies (console)</span></span></a></li></ul></div></div></li><li data-itemid="item-5" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_condition-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Global condition keys</span></span></a></li><li data-itemid="item-6" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_iam-condition-keys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">IAM condition keys</span></span></a></li><li data-itemid="item-7" class="awsui_list-item_l0dv0_b09l1_289"><a href="reference_policies_actions-resources-contextkeys.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Actions, resources, and condition keys</span></span></a></li></ul></div></div></li></ul></div></div></li><li data-itemid="item-13" class="awsui_list-item_l0dv0_b09l1_289"><a href="resources.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Resources</span></span></a></li><li data-itemid="item-14" class="awsui_list-item_l0dv0_b09l1_289"><a href="programming.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Making HTTP query requests</span></span></a></li><li data-itemid="item-15" class="awsui_list-item_l0dv0_b09l1_289"><a href="document-history.html" class="awsui_link_l0dv0_b09l1_407"><span class="awsui_link-text-wrapper_l0dv0_b09l1_480"><span class="awsui_link-text_eymn4_rug8v_6">Document history</span></span></a></li></ul></div></div><div class="Vd5GcExeFKpgg+ZRFQwuUA=="></div><div class="B2ZlNdDchwTrFVsPr6Fd8Q== " aria-hidden="true"></div></div></div></nav></div><div class="awsui_container_hyvsj_14q37_621 awsui_split-panel-position-bottom_hyvsj_14q37_598 awsui_disable-content-paddings_hyvsj_14q37_555 awsui_is-navigation-open_hyvsj_14q37_647 awsui_content_1fj9k_q6akd_9" style="--awsui-split-panel-height-esndbs: 0px; --awsui-sticky-vertical-top-offset: calc(98px + 0px); --awsui-sticky-vertical-bottom-offset: 0px;"><div><div class="awsui_layout_5gtk3_3q2sk_145 awsui_is-overlap-disabled_5gtk3_3q2sk_164 awsui_is-visual-refresh_5gtk3_3q2sk_204 awsui_has-header_5gtk3_3q2sk_197 awsui_default-padding_5gtk3_3q2sk_181" style="--awsui-content-layout-max-content-width-esndbs: 8947848.525px;"><div class="awsui_background_5gtk3_3q2sk_159 awsui_has-default-background_5gtk3_3q2sk_204"></div><div class="awsui_breadcrumbs_5gtk3_3q2sk_176 awsui_breadcrumbs_64tge_1scxg_17"><div class="breadcrumbs-wrapper"><nav class="awsui_breadcrumb-group_d19fg_dal76_145" aria-label="Breadcrumbs-vr"><ol class="awsui_breadcrumb-group-list_d19fg_dal76_180"><li class="awsui_item_d19fg_dal76_196"><div class="awsui_breadcrumb_1kosq_2nl47_149"><a class="awsui_anchor_1kosq_2nl47_163" href="https://docs.aws.amazon.com/index.html" tabindex="0"><span class="awsui_text_1kosq_2nl47_211 awsui_breadcrumb-item_1c68o_b6unx_5">Documentation</span></a><span class="awsui_icon_1kosq_2nl47_153"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-angle-right_h11ix_j6r2k_365"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m5 2 6 6-6 6" class="stroke-linejoin-round"></path></svg></span></span></div></li><li class="awsui_ellipsis_d19fg_dal76_198"><div class="awsui_button-dropdown_sne0l_rxc8n_145 awsui_variant-normal_sne0l_rxc8n_250"><div class="awsui_root_9duf6_5dned_199"><div id=":r18:" class="awsui_trigger_1hezk_1wraf_5"><div class="awsui_dropdown-trigger_sne0l_rxc8n_261"><button class="awsui_test-utils-button-trigger_sne0l_rxc8n_279 awsui_button_vjswe_l0v97_157 awsui_variant-breadcrumb-group_vjswe_l0v97_471" aria-label="Show path" aria-expanded="false" title="Show path" data-analytics-funnel-value="button:r19:" type="button" data-analytics-performance-mark="9-1786135161038-1036"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5">...</span></button></div></div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div><div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div><div class="awsui_dropdown_9duf6_5dned_153 awsui_with-limited-width_9duf6_5dned_329 awsui_refresh_9duf6_5dned_174 awsui_use-flexible-width_9duf6_5dned_341" data-open="false" data-animating="false" aria-hidden="true" style="--awsui-dropdown-default-min-width-esndbs: 100%; --awsui-dropdown-default-max-width-esndbs: none;"><div class="awsui_dropdown-content-wrapper_9duf6_5dned_153 awsui_refresh_9duf6_5dned_174"><div class="awsui_dropdown-content_9duf6_5dned_153"><ul id="button-dropdown-menu:r13:" class="awsui_options-list_19gcf_xq78m_145 awsui_decrease-block-margin_19gcf_xq78m_199" role="menu" tabindex="-1" aria-label="Show path" style="position: static;"></ul></div></div></div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div></div></div></div><span class="awsui_icon_d19fg_dal76_219"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-angle-right_h11ix_j6r2k_365"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m5 2 6 6-6 6" class="stroke-linejoin-round"></path></svg></span></span></li><li class="awsui_item_d19fg_dal76_196"><div class="awsui_breadcrumb_1kosq_2nl47_149"><a class="awsui_anchor_1kosq_2nl47_163" href="https://docs.aws.amazon.com/iam/index.html" tabindex="0"><span data-analytics-funnel-resource-type="true" class="awsui_text_1kosq_2nl47_211 awsui_breadcrumb-item_1c68o_b6unx_5">AWS Identity and Access Management</span></a><span class="awsui_icon_1kosq_2nl47_153"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-angle-right_h11ix_j6r2k_365"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m5 2 6 6-6 6" class="stroke-linejoin-round"></path></svg></span></span></div></li><li class="awsui_item_d19fg_dal76_196"><div class="awsui_breadcrumb_1kosq_2nl47_149 awsui_last_1kosq_2nl47_230"><span class="awsui_anchor_1kosq_2nl47_163" aria-current="page" aria-disabled="true" tabindex="0" role="link"><span data-analytics-funnel-key="funnel-name" class="awsui_text_1kosq_2nl47_211 awsui_breadcrumb-item_1c68o_b6unx_5">User Guide</span></span></div></li></ol><ol class="awsui_breadcrumb-group-list_d19fg_dal76_180 awsui_ghost_d19fg_dal76_191" aria-hidden="true" tabindex="-1"><li class="awsui_ghost-item_d19fg_dal76_197"><div class="awsui_ghost-breadcrumb_1kosq_2nl47_150"><a class="awsui_anchor_1kosq_2nl47_163" href="https://docs.aws.amazon.com/index.html" tabindex="-1"><span class="awsui_text_1kosq_2nl47_211">Documentation</span></a><span class="awsui_icon_1kosq_2nl47_153"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-angle-right_h11ix_j6r2k_365"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m5 2 6 6-6 6" class="stroke-linejoin-round"></path></svg></span></span></div></li><li class="awsui_ghost-item_d19fg_dal76_197"><div class="awsui_ghost-breadcrumb_1kosq_2nl47_150"><a class="awsui_anchor_1kosq_2nl47_163" href="https://docs.aws.amazon.com/iam/index.html" tabindex="-1"><span class="awsui_text_1kosq_2nl47_211">AWS Identity and Access Management</span></a><span class="awsui_icon_1kosq_2nl47_153"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-angle-right_h11ix_j6r2k_365"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m5 2 6 6-6 6" class="stroke-linejoin-round"></path></svg></span></span></div></li><li class="awsui_ghost-item_d19fg_dal76_197"><div class="awsui_ghost-breadcrumb_1kosq_2nl47_150 awsui_last_1kosq_2nl47_230"><span class="awsui_anchor_1kosq_2nl47_163"><span class="awsui_text_1kosq_2nl47_211">User Guide</span></span></div></li></ol></nav></div></div><div class="awsui_header-wrapper_5gtk3_3q2sk_185 awsui_header_64tge_1scxg_5 awsui_with-divider_5gtk3_3q2sk_190"><div class="awsui_column-layout_vvxn7_12f6y_181"><div class="awsui_grid_14yj0_199n9_145 awsui_grid_vvxn7_12f6y_213 awsui_grid-columns-1_vvxn7_12f6y_234 awsui_no-gutters_14yj0_199n9_181 awsui_grid-breakpoint-xs_vvxn7_12f6y_237"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><h1 id="skip-link" tabindex="-1" class="FZiJGDF4jnCDnVeC934KRg==" data-testid="guide-header"><div>Request temporary security credentials</div></h1></div></div><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-12_14yj0_199n9_307"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="awsui_root_18582_1g6fc_145 awsui_horizontal_18582_1g6fc_160 awsui_horizontal-xs_18582_1g6fc_170 awsui_align-center_18582_1g6fc_220"><div class="awsui_child_18582_1g6fc_149"><a class="awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_link_vjswe_l0v97_659" data-analytics-funnel-value="button:r1b:" href="/pdfs/IAM/latest/UserGuide/iam-ug.pdf#id_credentials_temp_request" target="_blank" rel="noopener noreferrer" data-analytics-performance-mark="10-1786135161039-47"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M1 15h14M13 6l-5 5-5-5M8 10V1" class="stroke-linejoin-round"></path></svg></span> PDF</span></a></div><div class="awsui_child_18582_1g6fc_149"><a class="awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_link_vjswe_l0v97_659" data-analytics-funnel-value="button:r1d:" href="aws-iam-release-notes.rss" target="_blank" rel="noopener noreferrer" data-analytics-performance-mark="11-1786135161039-5160"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M1 15h14M13 6l-5 5-5-5M8 10V1" class="stroke-linejoin-round"></path></svg></span> RSS</span></a></div><div class="awsui_child_18582_1g6fc_149"><a aria-label="Download Markdown" title="Download Markdown" class="awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_link_vjswe_l0v97_659" data-analytics-funnel-value="button:r1f:" href="id_credentials_temp_request.md" target="_blank" rel="noopener noreferrer" data-analytics-performance-mark="12-1786135161039-8178"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M1 15h14M13 6l-5 5-5-5M8 10V1" class="stroke-linejoin-round"></path></svg></span> Markdown</span></a></div><div class="awsui_child_18582_1g6fc_149"><div><span class="awsui_wrapper_1wepg_1lvan_166 awsui_root_4yi2u_olzz9_145"><span class="awsui_label-wrapper_1wepg_1lvan_172"><span class="awsui_control_1wepg_1lvan_206 awsui_toggle-control_4yi2u_olzz9_201"><span class="awsui_toggle-handle_4yi2u_olzz9_227"></span><input id=":r1h:" class="awsui_native-input_1wepg_1lvan_162 awsui_native-input_13tpe_9w8pd_6" aria-labelledby=":r1h:-label" type="checkbox"><span class="awsui_outline_1wepg_1lvan_155 awsui_outline_4yi2u_olzz9_178"></span></span><span class="awsui_content_1wepg_1lvan_145"><span id=":r1h:-label" class="awsui_label_1wepg_1lvan_147 awsui_label_13tpe_9w8pd_5">Focus mode</span></span></span></span></div></div></div></div></div></div></div></div><div class="awsui_content_5gtk3_3q2sk_193 awsui_with-divider_5gtk3_3q2sk_190"><div class="content-wrapper"><div class="indexed-content defaultlayout__maincontent"><div><div class="mtbB8IWKsw9zfJy5d9Axzw== "><div class="uUDIrBmae7LXTzkT8U9+sA=="><div class="_2MR6G7Iuu8DohPuBPJmKEQ=="><div class="OEVhOrW1RJh0UuWPPzap5A== "><div class="yfMjpkSCQBUG-SuvKWC1Mg== pXSx0J9bHQFDahmE+CryWA== undefined SynT6ZmEr-pX+3AI2kY68g=="><div><title>Request temporary security credentials - AWS Identity and Access Management</title><meta name="pdf" content="/pdfs/IAM/latest/UserGuide/iam-ug.pdf#id_credentials_temp_request"><meta name="rss" content="aws-iam-release-notes.rss"><meta name="forums" content="https://repost.aws/tags/TAO7Z4bI5hQVWMiYFs34QhIA"><meta name="feedback" content="https://docs.aws.amazon.com/forms/aws-doc-feedback?hidden_service_name=IAM&amp;topic_url=https://docs.aws.amazon.com/en_us/IAM/latest/UserGuide/id_credentials_temp_request.html"><meta name="feedback-yes" content="feedbackyes.html?topic_url=https://docs.aws.amazon.com/en_us/IAM/latest/UserGuide/id_credentials_temp_request.html"><meta name="feedback-no" content="feedbackno.html?topic_url=https://docs.aws.amazon.com/en_us/IAM/latest/UserGuide/id_credentials_temp_request.html"><meta name="keywords" content="IAM,AWS Identity and Access Management,IAM user,user,IAM group,group,IAM role,role,permission policy,trust policy,policy,access key,password,short-term credentials,session credentials,instance identity roles,role credentials"><link rel="alternate" type="text/markdown" href="id_credentials_temp_request.md" title="Markdown version"><script type="application/ld+json">
{
    "@context" : "https://schema.org",
    "@type" : "BreadcrumbList",
    "itemListElement" : [
      {
        "@type" : "ListItem",
        "position" : 1,
        "name" : "AWS",
        "item" : "https://aws.amazon.com"
      },
      {
        "@type" : "ListItem",
        "position" : 2,
        "name" : "AWS Identity and Access Management",
        "item" : "https://docs.aws.amazon.com/iam/index.html"
      },
      {
        "@type" : "ListItem",
        "position" : 3,
        "name" : "User Guide",
        "item" : "https://docs.aws.amazon.com/IAM/latest/UserGuide"
      },
      {
        "@type" : "ListItem",
        "position" : 4,
        "name" : "IAM Identities",
        "item" : "https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html"
      },
      {
        "@type" : "ListItem",
        "position" : 5,
        "name" : "Temporary security credentials in IAM",
        "item" : "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html"
      },
      {
        "@type" : "ListItem",
        "position" : 6,
        "name" : "Request temporary security credentials",
        "item" : "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html"
      }
    ]
}
</script><div id="main"><div style="display: none"><a href="/pdfs/IAM/latest/UserGuide/iam-ug.pdf#id_credentials_temp_request" target="_blank" rel="noopener noreferrer" title="Open PDF"></a></div><div id="breadcrumbs" class="breadcrumb"><a href="/index.html">Documentation</a><a href="/iam/index.html">AWS Identity and Access Management</a><a href="introduction.html">User Guide</a></div><div id="page-toc-src"><a href="#using_sts_regions">Using AWS STS with AWS Regions</a><a href="#api_assumerole">Requesting credentials with
        AssumeRole</a><a href="#api_assumerolewithwebidentity">Requesting credentials with
        AssumeRoleWithWebIdentity</a><a href="#api_assumerolewithsaml">Requesting credentials with
        AssumeRoleWithSAML</a><a href="#api_getfederationtoken">Requesting credentials with
        GetFederationToken</a><a href="#api_getsessiontoken">Requesting credentials with
        GetSessionToken</a></div><div id="main-content" class="awsui-util-container"><div id="main-col-body"><awsdocs-language-banner data-service="$ctrl.pageService"></awsdocs-language-banner><div class="awsdocs-page-header-container"><awsdocs-page-header></awsdocs-page-header><awsdocs-filter-selector id="awsdocs-filter-selector"></awsdocs-filter-selector></div><p>To request temporary security credentials, you can use AWS Security Token Service (AWS STS) operations in the
    AWS API. These include operations to create and provide trusted users with temporary security
    credentials that can control access to your AWS resources. For more information about AWS STS,
    see <a href="./id_credentials_temp.html">Temporary security credentials in IAM</a>. To learn about
    the different methods that you can use to request temporary security credentials by assuming a
    role, see <a href="./id_roles_manage-assume.html">Methods to assume a role</a>.</p><p>To call the API operations, you can use one of the <a href="https://docs.aws.amazon.com/http://aws.amazon.com/tools/">AWS SDKs</a>. The SDKs are available for a variety of programming languages and
    environments, including Java, .NET, Python, Ruby, Android, and iOS. The SDKs take care of tasks
    such as cryptographically signing your requests, retrying requests if necessary, and handling
    error responses. You can also use the AWS STS Query API, which is described in the
    <a href="https://docs.aws.amazon.com/STS/latest/APIReference/">AWS Security Token Service API Reference</a>. Finally, two command line tools support the AWS STS commands: the <a href="https://aws.amazon.com/documentation/cli" rel="noopener noreferrer" target="_blank"><span>AWS Command Line Interface</span><awsui-icon class="awsdocs-link-icon" name="external"><span aria-label="Opens in a new tab"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_name-external_h11ix_j6r2k_374"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></awsui-icon></a>, and the <a href="https://aws.amazon.com/documentation/powershell" rel="noopener noreferrer" target="_blank"><span>AWS Tools for Windows PowerShell</span><awsui-icon class="awsdocs-link-icon" name="external"><span aria-label="Opens in a new tab"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_name-external_h11ix_j6r2k_374"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></awsui-icon></a>. </p><p>The AWS STS API operations create a new session with temporary security credentials that
    include an access key pair and a session token. The access key pair consists of an access key ID
    and a secret key. Users (or an application that the user runs) can use these credentials to
    access your resources.</p><p>You can create a role session and pass session policies and session tags
    programmatically using AWS STS API operations. The resulting session permissions are the
    intersection of the role's identity-based policies and the session policies. For more
    information about session policies, see <a href="./access_policies.html#policies_session">Session policies</a>. For more information about session tags, see <a href="./id_session-tags.html">Pass session tags in AWS STS</a>.</p><div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-link_h11ix_j6r2k_360"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><circle cx="8" cy="8" r="7"></circle><path d="M8 12V7M8 6V4"></path></svg></span></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p>The size of the session token that AWS STS API operations return is not fixed. We strongly
      recommend that you make no assumptions about the maximum size. The typical token size is less
      than 4096 bytes, but that can vary.</p></div></div>
    <h2 id="using_sts_regions">Using AWS STS with AWS Regions<div class="_0RyrTGB0Kc7J6GM+SjQKtA=="><span tabindex="-1" class="_6cXlowEstJU-2JYC67+uHQ=="><span class="awsui_root_xjuzf_vdsjn_559"><span class="awsui_trigger_xjuzf_vdsjn_594" id=":r4a:"><span class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-right-xxs_18wu0_1wax5_733 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div data-analytics="copyLink" data-analytics-type="eventContext" class="wn3-i0wpB6OIOxt5HoT9uA=="><div data-analytics="using_sts_regions" data-analytics-type="eventDetail"><button aria-label="Copy link to the section" title="Copy link to the section" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-icon_vjswe_l0v97_322 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r4b:" type="submit" data-analytics-performance-mark="24-1786135161122-7065"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M5 8h6M7 12H5c-2.21 0-4-1.79-4-4s1.79-4 4-4h2M9 12h2c2.21 0 4-1.79 4-4s-1.79-4-4-4H9" class="stroke-linejoin-round"></path></svg></span></button></div></div></span></span></span></span></div></h2>
    <p>You can send AWS STS API calls either to a global endpoint or to one of the Regional
      endpoints. If you choose an endpoint closer to you, you can reduce latency and improve the
      performance of your API calls. You also can choose to direct your calls to an alternative
      Regional endpoint if you can no longer communicate with the original endpoint.</p>
    <p>If you are
      using one of the various AWS SDKs, then use that SDK method to specify a Region before you
      make the API call. If you manually construct HTTP API requests, then you must direct the
      request to the correct endpoint yourself. For more information, see the <a href="https://docs.aws.amazon.com/general/latest/gr/rande.html#sts_region">AWS STS section of <em>Regions and
          Endpoints</em></a> and <a href="./id_credentials_temp_enable-regions.html">Manage AWS STS in an AWS Region</a>.</p>
    <p>The following are the API operations that you can use to acquire temporary credentials for
      use in your AWS environment and applications.</p>
   
    <h2 id="api_assumerole">Requesting credentials for cross-account delegation and federation through a custom identity broker<div class="_0RyrTGB0Kc7J6GM+SjQKtA=="><span tabindex="-1" class="_6cXlowEstJU-2JYC67+uHQ=="><span class="awsui_root_xjuzf_vdsjn_559"><span class="awsui_trigger_xjuzf_vdsjn_594" id=":r4d:"><span class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-right-xxs_18wu0_1wax5_733 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div data-analytics="copyLink" data-analytics-type="eventContext" class="wn3-i0wpB6OIOxt5HoT9uA=="><div data-analytics="api_assumerole" data-analytics-type="eventDetail"><button aria-label="Copy link to the section" title="Copy link to the section" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-icon_vjswe_l0v97_322 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r4e:" type="submit" data-analytics-performance-mark="25-1786135161122-8372"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M5 8h6M7 12H5c-2.21 0-4-1.79-4-4s1.79-4 4-4h2M9 12h2c2.21 0 4-1.79 4-4s-1.79-4-4-4H9" class="stroke-linejoin-round"></path></svg></span></button></div></div></span></span></span></span></div></h2>
    <p>The <a href="https://docs.aws.amazon.com//STS/latest/APIReference/API_AssumeRole.html"><code class="code">AssumeRole</code></a> API operation is useful for allowing existing IAM users
      to access AWS resources that they don't already have access to. For example, the user might
      need access to resources in another AWS account. It is also useful as a means to temporarily
      gain privileged access—for example, to provide multi-factor authentication (MFA). You
      must call this API using active credentials. To learn who can call this operation, see <a href="./id_credentials_sts-comparison.html">Compare AWS STS credentials</a>. For
      more information, see <a href="./id_roles_create_for-user.html">Create a role to give permissions to an IAM user</a> and <a href="./id_credentials_mfa_configure-api-require.html">Secure API access with MFA</a>.</p>

    <div class="procedure"><h6>To request temporary security credentials for cross-account delegation and federation through a custom identity broker</h6><ol><li>
        <p>Authenticate with your AWS security credentials. This call must be made using valid
          AWS security credentials.</p>
      </li><li>
        <p>Call the operation <a href="https://docs.aws.amazon.com//STS/latest/APIReference/API_AssumeRole.html"><code class="code">AssumeRole</code></a>.</p>
      </li></ol></div>

    <p>The following example shows a sample request and response using <code class="code">AssumeRole</code>.
      This example request assumes the <code class="code">demo</code> role for the specified duration with the
      included <a href="./access_policies.html#policies_session">session policy</a>, <a href="./id_session-tags.html">session tags</a>, <a href="./id_roles_common-scenarios_third-party.html">external ID</a>, and <a href="./id_credentials_temp_control-access_monitor.html">source identity</a>. The resulting
      session is named <code class="code">John-session</code>. </p>
    <div class="example"><h6>Example request</h6><div class="example-contents"><pre class="programlisting"><div class="zKy3ntW31EpIOUhn4g2QBg== BD-nm-vt3Tr2EY8iQBbyIg==" data-testid="codeBtnContainer"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div><button data-testid="copyCodeBtn" class="_75sMI+SpHdgbiOmB5dQCjg== awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_button-no-text_vjswe_l0v97_601" aria-label="Copy https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=AssumeRole
&amp;RoleSessionName=John-session
&amp;RoleArn=arn:aws:iam::123456789012:role/demo
&amp;Policy=%7B%22Version%22%3A%222012-10-17%22%2C%22Statement%22%3A%5B%7B%22Sid%22%3A%20%22Stmt1%22%2C%22Effect%22%3A%20%22Allow%22%2C%22Action%22%3A%20%22s3%3A*%22%2C%22Resource%22%3A%20%22*%22%7D%5D%7D
&amp;DurationSeconds=1800
&amp;Tags.member.1.Key=Project
&amp;Tags.member.1.Value=Pegasus
&amp;Tags.member.2.Key=Cost-Center
&amp;Tags.member.2.Value=12345
&amp;ExternalId=123ABC
&amp;SourceIdentity=DevUser123
&amp;AUTHPARAMS" title="Copy https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=AssumeRole
&amp;RoleSessionName=John-session
&amp;RoleArn=arn:aws:iam::123456789012:role/demo
&amp;Policy=%7B%22Version%22%3A%222012-10-17%22%2C%22Statement%22%3A%5B%7B%22Sid%22%3A%20%22Stmt1%22%2C%22Effect%22%3A%20%22Allow%22%2C%22Action%22%3A%20%22s3%3A*%22%2C%22Resource%22%3A%20%22*%22%7D%5D%7D
&amp;DurationSeconds=1800
&amp;Tags.member.1.Key=Project
&amp;Tags.member.1.Value=Pegasus
&amp;Tags.member.2.Key=Cost-Center
&amp;Tags.member.2.Value=12345
&amp;ExternalId=123ABC
&amp;SourceIdentity=DevUser123
&amp;AUTHPARAMS" data-analytics-funnel-value="button:r51:" type="submit" data-analytics-performance-mark="31-1786135161124-118"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M15 5H5v10h10V5Z" class="stroke-linejoin-round"></path><path d="M13 1H1v11" class="stroke-linejoin-round"></path></svg></span></button></div><!--DEBUG: cli (http)--><code class="http hljs">https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=AssumeRole
&amp;RoleSessionName=John-session
&amp;RoleArn=arn:aws:iam::123456789012:role/demo
&amp;Policy=%7B%22Version%22%3A%222012-10-17%22%2C%22Statement%22%3A%5B%7B%22Sid%22%3A%20%22Stmt1%22%2C%22Effect%22%3A%20%22Allow%22%2C%22Action%22%3A%20%22s3%3A*%22%2C%22Resource%22%3A%20%22*%22%7D%5D%7D
&amp;DurationSeconds=1800
&amp;Tags.member.1.Key=Project
&amp;Tags.member.1.Value=Pegasus
&amp;Tags.member.2.Key=Cost-Center
&amp;Tags.member.2.Value=12345
&amp;ExternalId=123ABC
&amp;SourceIdentity=DevUser123
&amp;AUTHPARAMS</code></pre><div class="programlisting-portal"></div></div></div>
    <p>The policy value shown in the preceding example is the URL-encoded version of the
      following policy:</p>
    <awsdocs-tabs><dl style="display: none">
    <dt>JSON</dt><dd tab-id="json">
            <div class="variablelist">
     
<dl>
        <dt><b><span class="term"></span></b></dt>
        <dd>
            
                
                <pre class="programlisting" data-example-id="2d590bf69bca3998b29091fc0ab0f2a532eb83de1dba831afd8eddf97a8e3d58"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli (json)--><code class="json hljs"><code class="userinput"><span>{</span><span class="hljs-attr">"Version"</span>:<span class="hljs-string">"2012-10-17"</span>,<span class="hljs-attr">"Statement"</span>:[<span>{</span><span class="hljs-attr">"Sid"</span>:<span class="hljs-string">"Stmt1"</span>,<span class="hljs-attr">"Effect"</span>:<span class="hljs-string">"Allow"</span>,<span class="hljs-attr">"Action"</span>:<span class="hljs-string">"s3:*"</span>,<span class="hljs-attr">"Resource"</span>:<span class="hljs-string">"*"</span>}]}</code>
</code></pre>
            
        </dd>
    </dl></div>
        </dd>
</dl><div class="ft3vr4M9bHoVR2TjN-y9gg=="><a id="json-0">anchor</a></div><div class="Cgz5bioRKCCqJVFMLIAQPg== awsui_root_14rmt_1cc6a_396 awsui_root_14iqq_k6ugb_189 awsui_variant-default_14iqq_k6ugb_230 awsui_refresh_14iqq_k6ugb_238"><div id=":r4t:" class="awsui_content-wrapper_14iqq_k6ugb_309"><div class="awsui_refresh_14iqq_k6ugb_238 awsui_header_14iqq_k6ugb_350 awsui_header_164jl_1ns0c_5"><div class="awsui_tabs-header_14rmt_1cc6a_154 awsui_tabs-header-with-divider_14rmt_1cc6a_388"><div class="awsui_tab-header-scroll-container_14rmt_1cc6a_163"><ul role="tablist" class="awsui_tabs-header-list_14rmt_1cc6a_169 awsui_tabs-header-list_1acwa_dp0cl_5"><li class="awsui_tabs-tab_14rmt_1cc6a_216" role="presentation"><div class="awsui_tabs-tab-header-container_14rmt_1cc6a_237 awsui_refresh_14rmt_1cc6a_250 awsui_tabs-tab-active_14rmt_1cc6a_379 awsui_tabs-tab-focusable_14rmt_1cc6a_392"><button class="awsui_tabs-tab-link_14rmt_1cc6a_296 awsui_refresh_14rmt_1cc6a_250 awsui_tabs-tab-active_14rmt_1cc6a_379 awsui_tabs-tab-focused_14rmt_1cc6a_484 awsui_active-tab-header_1acwa_dp0cl_6 awsui_tabs-tab-focusable_14rmt_1cc6a_392" aria-controls="awsui-tabs-:r4s:-json-0-panel" data-testid="json-0" id="awsui-tabs-:r4s:-json-0" aria-selected="true" role="tab" tabindex="0" type="button"><span class="awsui_tabs-tab-label_14rmt_1cc6a_226 awsui_tab-label_1acwa_dp0cl_7"><span>JSON</span></span></button></div></li></ul></div></div></div><div class="awsui_content_14iqq_k6ugb_309"><div class="awsui_content-inner_14iqq_k6ugb_500 awsui_content-inner_1mwlm_oyjaq_5 awsui_with-header_14iqq_k6ugb_507"><div class="awsui_tabs-container-content-wrapper_14rmt_1cc6a_469 awsui_with-paddings_14rmt_1cc6a_458"><div class="awsui_tabs-content_14rmt_1cc6a_434 awsui_tabs-content-active_14rmt_1cc6a_444" role="tabpanel" id="awsui-tabs-:r4s:-json-0-panel" tabindex="0" aria-labelledby="awsui-tabs-:r4s:-json-0"><div class="tabbedContent"><div>
            <div class="variablelist">
     
<dl>
        <dt><b><span class="term"></span></b></dt>
        <dd>
            
                
                <pre class="programlisting" data-example-id="2d590bf69bca3998b29091fc0ab0f2a532eb83de1dba831afd8eddf97a8e3d58"><div class="zKy3ntW31EpIOUhn4g2QBg== BD-nm-vt3Tr2EY8iQBbyIg==" data-testid="codeBtnContainer"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div><button data-testid="copyCodeBtn" class="_75sMI+SpHdgbiOmB5dQCjg== awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_button-no-text_vjswe_l0v97_601" aria-label="Copy {&quot;Version&quot;:&quot;2012-10-17&quot;,&quot;Statement&quot;:[{&quot;Sid&quot;:&quot;Stmt1&quot;,&quot;Effect&quot;:&quot;Allow&quot;,&quot;Action&quot;:&quot;s3:*&quot;,&quot;Resource&quot;:&quot;*&quot;}]}
" title="Copy {&quot;Version&quot;:&quot;2012-10-17&quot;,&quot;Statement&quot;:[{&quot;Sid&quot;:&quot;Stmt1&quot;,&quot;Effect&quot;:&quot;Allow&quot;,&quot;Action&quot;:&quot;s3:*&quot;,&quot;Resource&quot;:&quot;*&quot;}]}
" data-analytics-funnel-value="button:r5e:" type="submit" data-analytics-performance-mark="36-1786135161134-871"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M15 5H5v10h10V5Z" class="stroke-linejoin-round"></path><path d="M13 1H1v11" class="stroke-linejoin-round"></path></svg></span></button></div><!--DEBUG: cli (json)--><code class="json hljs"><code class="userinput"><span>{</span><span class="hljs-attr">"Version"</span>:<span class="hljs-string">"2012-10-17"</span>,<span class="hljs-attr">"Statement"</span>:[<span>{</span><span class="hljs-attr">"Sid"</span>:<span class="hljs-string">"Stmt1"</span>,<span class="hljs-attr">"Effect"</span>:<span class="hljs-string">"Allow"</span>,<span class="hljs-attr">"Action"</span>:<span class="hljs-string">"s3:*"</span>,<span class="hljs-attr">"Resource"</span>:<span class="hljs-string">"*"</span>}]}</code>
</code></pre><div class="programlisting-portal"><div><div class="awsui_root_18582_1g6fc_145 awsui_horizontal_18582_1g6fc_160 awsui_horizontal-s_18582_1g6fc_173 awsui_align-center_18582_1g6fc_220"><div class="awsui_child_18582_1g6fc_149"><div class="awsui_root_18582_1g6fc_145 awsui_horizontal_18582_1g6fc_160 awsui_horizontal-xs_18582_1g6fc_170"><div class="awsui_child_18582_1g6fc_149"><button aria-label="Helpful" title="Helpful" class="awsui_button_vjswe_l0v97_157 awsui_variant-icon_vjswe_l0v97_293 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r5g:" type="submit" data-analytics-performance-mark="37-1786135161134-1121"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M9 2.871v4.13h4.12c.6 0 1.02.59.83 1.16l-1.6 4.77a1.58 1.58 0 0 1-1.49 1.07H1v-8h4l2.41-3.61c.48-.72 1.59-.38 1.59.48ZM5 14.001v-8" class="stroke-linejoin-round"></path></svg></span></button></div><div class="awsui_child_18582_1g6fc_149"><button aria-label="Not helpful" title="Not helpful" class="awsui_button_vjswe_l0v97_157 awsui_variant-icon_vjswe_l0v97_293 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r5i:" type="submit" data-analytics-performance-mark="38-1786135161134-7141"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M9 13.13V9h4.12c.6 0 1.02-.59.83-1.16l-1.6-4.77A1.58 1.58 0 0 0 10.86 2H1v8h4l2.41 3.61c.48.72 1.59.38 1.59-.48ZM5 2v8" class="stroke-linejoin-round"></path></svg></span></button></div></div></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r5l:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r5k:" target="_blank" rel="noopener noreferrer" href="https://docs.aws.amazon.com/feedback/doc-feedback.html?hidden_service_name=SDK+Code+Examples&amp;codeexampleid=2d590bf69bca3998b29091fc0ab0f2a532eb83de1dba831afd8eddf97a8e3d58&amp;topic_url=https%3A%2F%2Fdocs.aws.amazon.com%2FIAM%2Flatest%2FUserGuide%2Fid_credentials_temp_request.html"><span>Provide feedback</span></a></span></div></div></div></div>
            
        </dd>
    </dl></div>
        </div></div></div></div></div></div></div></div></awsdocs-tabs>
    <p>The <code class="code">AUTHPARAMS</code> parameter in the example is a placeholder for your
        <em>signature</em>. A signature is the authentication information that you must
      include with AWS HTTP API requests. We recommend using the <a href="https://aws.amazon.com/tools/" rel="noopener noreferrer" target="_blank"><span>AWS SDKs</span><awsui-icon class="awsdocs-link-icon" name="external"><span aria-label="Opens in a new tab"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_name-external_h11ix_j6r2k_374"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></awsui-icon></a> to create API requests, and one benefit of
      doing so is that the SDKs handle request signing for you. If you must create and sign API
      requests manually, see <a href="https://docs.aws.amazon.com/general/latest/gr/sigv4_signing.html">Signing AWS Requests By
        Using Signature Version 4</a> in the <em>Amazon Web Services General Reference</em> to learn how
      to sign a request.</p>

    <p>In addition to the temporary security credentials, the response includes the Amazon
      Resource Name (ARN) for the federated user and the expiration time of the credentials.</p>
    <div class="example"><h6>Example response</h6><div class="example-contents"><pre class="programlisting"><div class="zKy3ntW31EpIOUhn4g2QBg== BD-nm-vt3Tr2EY8iQBbyIg==" data-testid="codeBtnContainer"></div><!--DEBUG: cli (xml)--><code class="xml hljs"><span class="hljs-tag">&lt;<span class="hljs-name">AssumeRoleResponse</span> <span class="hljs-attr">xmlns</span>=<span class="hljs-string">"https://sts.amazonaws.com/doc/2011-06-15/"</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">AssumeRoleResult</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">SourceIdentity</span>&gt;</span>DevUser123<span class="hljs-tag">&lt;/<span class="hljs-name">SourceIdentity</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">Credentials</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">SessionToken</span>&gt;</span>
   AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
   LWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGd
   QrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU
   9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz
   +scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCR/oLxBA==
  <span class="hljs-tag">&lt;/<span class="hljs-name">SessionToken</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">SecretAccessKey</span>&gt;</span>
   wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY
  <span class="hljs-tag">&lt;/<span class="hljs-name">SecretAccessKey</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">Expiration</span>&gt;</span>2019-07-15T23:28:33.359Z<span class="hljs-tag">&lt;/<span class="hljs-name">Expiration</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">AccessKeyId</span>&gt;</span>AKIAIOSFODNN7EXAMPLE<span class="hljs-tag">&lt;/<span class="hljs-name">AccessKeyId</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">Credentials</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">AssumedRoleUser</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">Arn</span>&gt;</span>arn:aws:sts::123456789012:assumed-role/demo/John<span class="hljs-tag">&lt;/<span class="hljs-name">Arn</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">AssumedRoleId</span>&gt;</span>ARO123EXAMPLE123:John<span class="hljs-tag">&lt;/<span class="hljs-name">AssumedRoleId</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">AssumedRoleUser</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">PackedPolicySize</span>&gt;</span>8<span class="hljs-tag">&lt;/<span class="hljs-name">PackedPolicySize</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">AssumeRoleResult</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">ResponseMetadata</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">RequestId</span>&gt;</span>c6104cbe-af31-11e0-8154-cbc7ccf896c7<span class="hljs-tag">&lt;/<span class="hljs-name">RequestId</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">ResponseMetadata</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">AssumeRoleResponse</span>&gt;</span></code></pre><div class="programlisting-portal"></div></div></div>
    <div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-link_h11ix_j6r2k_360"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><circle cx="8" cy="8" r="7"></circle><path d="M8 12V7M8 6V4"></path></svg></span></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p>An AWS conversion compresses the passed session policies and session tags into a
        packed binary format that has a separate limit. Your request can fail for this limit even if
        your plaintext meets the other requirements. The <code class="code">PackedPolicySize</code> response
        element indicates by percentage how close the policies and tags for your request are to the
        upper size limit.</p></div></div>
   
    <h2 id="api_assumerolewithwebidentity">Requesting credentials through an OIDC provider<div class="_0RyrTGB0Kc7J6GM+SjQKtA=="><span tabindex="-1" class="_6cXlowEstJU-2JYC67+uHQ=="><span class="awsui_root_xjuzf_vdsjn_559"><span class="awsui_trigger_xjuzf_vdsjn_594" id=":r4g:"><span class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-right-xxs_18wu0_1wax5_733 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div data-analytics="copyLink" data-analytics-type="eventContext" class="wn3-i0wpB6OIOxt5HoT9uA=="><div data-analytics="api_assumerolewithwebidentity" data-analytics-type="eventDetail"><button aria-label="Copy link to the section" title="Copy link to the section" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-icon_vjswe_l0v97_322 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r4h:" type="submit" data-analytics-performance-mark="26-1786135161122-6645"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M5 8h6M7 12H5c-2.21 0-4-1.79-4-4s1.79-4 4-4h2M9 12h2c2.21 0 4-1.79 4-4s-1.79-4-4-4H9" class="stroke-linejoin-round"></path></svg></span></button></div></div></span></span></span></span></div></h2>
    <p>The <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html"><code class="code">AssumeRoleWithWebIdentity</code></a> API operation returns a set of temporary
      AWS security credentials in exchange for a JSON Web Token (JWT). This includes public
      identity providers, such as Login with Amazon, Facebook, Google, and providers that issue JWTs
      that are compatible with OpenID Connect (OIDC) discovery, such as GitHub actions or Azure
      Devops. For more information, see <a href="./id_roles_providers_oidc.html">OIDC federation</a>.</p>
    <div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-link_h11ix_j6r2k_360"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><circle cx="8" cy="8" r="7"></circle><path d="M8 12V7M8 6V4"></path></svg></span></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p><code class="code">AssumeRoleWithWebIdentity</code> requests are not signed with, and do not require
        AWS credentials.</p></div></div>
    <div class="procedure"><h6>Requesting credentials through an OIDC provider</h6><ol><li>
        <p>Call the operation <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html"><code class="code">AssumeRoleWithWebIdentity</code></a>.</p>
        <p>When you call <code class="code">AssumeRoleWithWebIdentity</code>, AWS validates the token
          presented by verifying the digital signature using public keys made available through your
          IdP's JSON web keyset (JWKS). If the token is valid, and all conditions set forth in the
          IAM role trust policy are met, AWS returns the following information to you:</p>
        <div class="itemizedlist">
           
           
           
        <ul class="itemizedlist"><li class="listitem">
            <p>A set of temporary security credentials. These consist of an access key ID, a
              secret access key, and a session token.</p>
          </li><li class="listitem">
            <p>The role ID and the ARN of the assumed role.</p>
          </li><li class="listitem">
            <p>A <code class="code">SubjectFromWebIdentityToken</code> value that contains the unique user
              ID.</p>
          </li></ul></div>
      </li><li>
        <p>Your application may then use the temporary security credentials that were returned in
          the response to make AWS API calls. This is the same process as making an AWS API call
          with long-term security credentials. The difference is that you must include the session
          token, which lets AWS verify that the temporary security credentials are valid.</p>
      </li></ol></div>
    <p>Your application should cache the credentials returned by AWS STS and refresh them as
      needed. If your application is built using an AWS SDK, the SDK has credential providers that
      can handle calling <code class="code">AssumeRoleWithWebIdentity</code> and refreshing AWS credentials
      before they expire. For more information, see <a href="https://docs.aws.amazon.com/sdkref/latest/guide/standardized-credentials.html">AWS SDKs and Tools standardized
        credential providers</a> in the <em>AWS SDKs and Tools Reference
        Guide</em>.</p>
   
    <h2 id="api_assumerolewithsaml">Requesting credentials through a SAML 2.0 identity provider<div class="_0RyrTGB0Kc7J6GM+SjQKtA=="><span tabindex="-1" class="_6cXlowEstJU-2JYC67+uHQ=="><span class="awsui_root_xjuzf_vdsjn_559"><span class="awsui_trigger_xjuzf_vdsjn_594" id=":r4j:"><span class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-right-xxs_18wu0_1wax5_733 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div data-analytics="copyLink" data-analytics-type="eventContext" class="wn3-i0wpB6OIOxt5HoT9uA=="><div data-analytics="api_assumerolewithsaml" data-analytics-type="eventDetail"><button aria-label="Copy link to the section" title="Copy link to the section" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-icon_vjswe_l0v97_322 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r4k:" type="submit" data-analytics-performance-mark="27-1786135161122-6803"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M5 8h6M7 12H5c-2.21 0-4-1.79-4-4s1.79-4 4-4h2M9 12h2c2.21 0 4-1.79 4-4s-1.79-4-4-4H9" class="stroke-linejoin-round"></path></svg></span></button></div></div></span></span></span></span></div></h2>
    <p>The <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithSAML.html"><code class="code">AssumeRoleWithSAML</code></a> API operation returns a set of temporary security
      credentials for SAML federated principals who are authenticated by your organization's existing identity
      system. The users must also use <a href="https://www.oasis-open.org/standards#samlv2.0" rel="noopener noreferrer" target="_blank"><span>SAML</span><awsui-icon class="awsdocs-link-icon" name="external"><span aria-label="Opens in a new tab"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_name-external_h11ix_j6r2k_374"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></awsui-icon></a> 2.0 (Security Assertion Markup Language) to pass authentication and
      authorization information to AWS. This API operation is useful in organizations that have
      integrated their identity systems (such as Windows Active Directory or OpenLDAP) with software
      that can produce SAML assertions. Such an integration provides information about user identity
      and permissions (such as Active Directory Federation Services or Shibboleth). For more
      information, see <a href="./id_roles_providers_saml.html">SAML 2.0 federation</a>.</p>
    <div class="procedure"><ol><li>
        <p>Call the operation <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithSAML.html"><code class="code">AssumeRoleWithSAML</code></a>.</p>
        <p>This is an unsigned call, meaning you do not need to authenticate AWS security
          credentials prior to making the request.</p>
        <div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-link_h11ix_j6r2k_360"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><circle cx="8" cy="8" r="7"></circle><path d="M8 12V7M8 6V4"></path></svg></span></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p>A call to <code class="code">AssumeRoleWithSAML</code> is not signed (encrypted). Therefore, you
            should only include optional session policies if the request is transmitted through a
            trusted intermediary. In this case, someone could alter the policy to remove the
            restrictions.</p></div></div>
      </li><li>
        <p>When you call <code class="code">AssumeRoleWithSAML</code>, AWS verifies the authenticity of the
          SAML assertion. Assuming that the identity provider validates the assertion, AWS returns
          the following information to you:</p>
        <div class="itemizedlist">
           
           
           
           
           
           
           
        <ul class="itemizedlist"><li class="listitem">
            <p>A set of temporary security credentials. These consist of an access key ID, a
              secret access key, and a session token. </p>
          </li><li class="listitem">
            <p>The role ID and the ARN of the assumed role. </p>
          </li><li class="listitem">
            <p>An <code class="code">Audience</code> value that contains the value of the
                <code class="code">Recipient</code> attribute of the <code class="code">SubjectConfirmationData</code> element
              of the SAML assertion.</p>
          </li><li class="listitem">
            <p>An <code class="code">Issuer</code> value that contains the value of the <code class="code">Issuer</code>
              element of the SAML assertion.</p>
          </li><li class="listitem">
            <p>A <code class="code">NameQualifier</code> element that contains a hash value built from the
                <code class="code">Issuer</code> value, the AWS account ID, and the friendly name of the SAML
              provider. When combined with the <code class="code">Subject</code> element, they can uniquely
              identify the SAML federated principal.</p>
          </li><li class="listitem">
            <p>A <code class="code">Subject</code> element that contains the value of the <code class="code">NameID</code>
              element in the <code class="code">Subject</code> element of the SAML assertion.</p>
          </li><li class="listitem">
            <p>A <code class="code">SubjectType</code> element that indicates the format of the
                <code class="code">Subject</code> element. The value can be <code class="code">persistent</code>,
                <code class="code">transient</code>, or the full <code class="code">Format</code> URI from the
                <code class="code">Subject</code> and <code class="code">NameID</code> elements used in your SAML assertion.
              For information about the <code class="code">NameID</code> element's <code class="code">Format</code> attribute,
              see <a href="./id_roles_providers_create_saml_assertions.html">Configure SAML assertions for the authentication response</a>. </p>
          </li></ul></div>
      </li><li>
        <p>Use the temporary security credentials returned in the response to make AWS API
          calls. This is the same process as making an AWS API call with long-term security
          credentials. The difference is that you must include the session token, which lets AWS
          verify that the temporary security credentials are valid.</p>
      </li></ol></div>

    <p>Your app should cache the credentials. By default the credentials expire after an hour. If
      you are not using the <a href="https://aws.amazon.com/blogs/mobile/using-the-amazoncredentialsprovider-protocol-in-the-aws-sdk-for-ios" rel="noopener noreferrer" target="_blank"><span>AmazonSTSCredentialsProvider</span><awsui-icon class="awsdocs-link-icon" name="external"><span aria-label="Opens in a new tab"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_name-external_h11ix_j6r2k_374"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></awsui-icon></a> action in the AWS SDK, it's up to you and your app
      to call <code class="code">AssumeRoleWithSAML</code> again. Call this operation to get a new set of
      temporary security credentials before the old ones expire.</p>
   
    <h2 id="api_getfederationtoken">Requesting credentials through a custom identity broker<div class="_0RyrTGB0Kc7J6GM+SjQKtA=="><span tabindex="-1" class="_6cXlowEstJU-2JYC67+uHQ=="><span class="awsui_root_xjuzf_vdsjn_559"><span class="awsui_trigger_xjuzf_vdsjn_594" id=":r4m:"><span class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-right-xxs_18wu0_1wax5_733 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div data-analytics="copyLink" data-analytics-type="eventContext" class="wn3-i0wpB6OIOxt5HoT9uA=="><div data-analytics="api_getfederationtoken" data-analytics-type="eventDetail"><button aria-label="Copy link to the section" title="Copy link to the section" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-icon_vjswe_l0v97_322 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r4n:" type="submit" data-analytics-performance-mark="28-1786135161122-5722"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M5 8h6M7 12H5c-2.21 0-4-1.79-4-4s1.79-4 4-4h2M9 12h2c2.21 0 4-1.79 4-4s-1.79-4-4-4H9" class="stroke-linejoin-round"></path></svg></span></button></div></div></span></span></span></span></div></h2>
    <p>The <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_GetFederationToken.html"><code class="code">GetFederationToken</code></a> API operation returns a set of temporary security
      credentials for AWS STS federated user principals. This API differs from <code class="code">AssumeRole</code> in that the
      default expiration period is substantially longer (12 hours instead of one hour).
      Additionally, you can use the <code class="code">DurationSeconds</code> parameter to specify a duration for
      the temporary security credentials to remain valid. The resulting credentials are valid for
      the specified duration, between 900 seconds (15 minutes) to 129,600 seconds (36 hours). The
      longer expiration period can help reduce the number of calls to AWS because you do not need
      to get new credentials as often.</p>

    <div class="procedure"><ol><li>
        <p>Authenticate with the AWS security credentials of your specific IAM user. This
          call must be made using valid AWS security credentials.</p>
      </li><li>
        <p>Call the operation <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_GetFederationToken.html"><code class="code">GetFederationToken</code></a>.</p>
      </li></ol></div>

    <p>The <code class="code">GetFederationToken</code> call returns temporary security credentials that
      consist of the session token, access key, secret key, and expiration. You can use
        <code class="code">GetFederationToken</code> if you want to manage permissions inside your organization
      (for example, using the proxy application to assign permissions).</p>
    <p>The following example shows a sample request and response that uses
        <code class="code">GetFederationToken</code>. This example request federates the calling user for the
      specified duration with the <a href="./access_policies.html#policies_session">session policy</a> ARN and
        <a href="./id_session-tags.html">session tags</a>. The resulting session is named
        <code class="code">Jane-session</code>.</p>
    <div class="example"><h6>Example request</h6><div class="example-contents"><pre class="programlisting"><div class="zKy3ntW31EpIOUhn4g2QBg== BD-nm-vt3Tr2EY8iQBbyIg==" data-testid="codeBtnContainer"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div><button data-testid="copyCodeBtn" class="_75sMI+SpHdgbiOmB5dQCjg== awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_button-no-text_vjswe_l0v97_601" aria-label="Copy https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetFederationToken
&amp;Name=Jane-session
&amp;PolicyArns.member.1.arn==arn%3Aaws%3Aiam%3A%3A123456789012%3Apolicy%2FRole1policy
&amp;DurationSeconds=1800
&amp;Tags.member.1.Key=Project
&amp;Tags.member.1.Value=Pegasus
&amp;Tags.member.2.Key=Cost-Center
&amp;Tags.member.2.Value=12345
&amp;AUTHPARAMS" title="Copy https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetFederationToken
&amp;Name=Jane-session
&amp;PolicyArns.member.1.arn==arn%3Aaws%3Aiam%3A%3A123456789012%3Apolicy%2FRole1policy
&amp;DurationSeconds=1800
&amp;Tags.member.1.Key=Project
&amp;Tags.member.1.Value=Pegasus
&amp;Tags.member.2.Key=Cost-Center
&amp;Tags.member.2.Value=12345
&amp;AUTHPARAMS" data-analytics-funnel-value="button:r53:" type="submit" data-analytics-performance-mark="32-1786135161124-5912"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M15 5H5v10h10V5Z" class="stroke-linejoin-round"></path><path d="M13 1H1v11" class="stroke-linejoin-round"></path></svg></span></button></div><!--DEBUG: cli (http)--><code class="http hljs">https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetFederationToken
&amp;Name=Jane-session
&amp;PolicyArns.member.1.arn==arn%3Aaws%3Aiam%3A%3A123456789012%3Apolicy%2FRole1policy
&amp;DurationSeconds=1800
&amp;Tags.member.1.Key=Project
&amp;Tags.member.1.Value=Pegasus
&amp;Tags.member.2.Key=Cost-Center
&amp;Tags.member.2.Value=12345
&amp;AUTHPARAMS</code></pre><div class="programlisting-portal"></div></div></div>
    <p>The policy ARN shown in the preceding example includes the following URL-encoded ARN: </p>
    <p><code class="code">arn:aws:iam::123456789012:policy/Role1policy</code></p>
    <p>Also, note that the <code class="code">&amp;AUTHPARAMS</code> parameter in the example is meant as a
      placeholder for the authentication information. This is the <em>signature</em>,
      which you must include with AWS HTTP API requests. We recommend using the <a href="https://aws.amazon.com/tools/" rel="noopener noreferrer" target="_blank"><span>AWS SDKs</span><awsui-icon class="awsdocs-link-icon" name="external"><span aria-label="Opens in a new tab"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_name-external_h11ix_j6r2k_374"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></awsui-icon></a> to create API requests, and one benefit of
      doing so is that the SDKs handle request signing for you. If you must create and sign API
      requests manually, see <a href="https://docs.aws.amazon.com/general/latest/gr/sigv4_signing.html">Signing AWS Requests
        By Using Signature Version 4</a> in the <em>Amazon Web Services General Reference</em> to learn
      how to sign a request.</p>
    <p>In addition to the temporary security credentials, the response includes the Amazon
      Resource Name (ARN) for the federated user and the expiration time of the credentials.</p>
    <div class="example"><h6>Example response</h6><div class="example-contents"><pre class="programlisting"><div class="zKy3ntW31EpIOUhn4g2QBg== BD-nm-vt3Tr2EY8iQBbyIg==" data-testid="codeBtnContainer"></div><!--DEBUG: cli (xml)--><code class="xml hljs"><span class="hljs-tag">&lt;<span class="hljs-name">GetFederationTokenResponse</span> <span class="hljs-attr">xmlns</span>=<span class="hljs-string">"https://sts.amazonaws.com/doc/2011-06-15/"</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">GetFederationTokenResult</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">Credentials</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">SessionToken</span>&gt;</span>
   AQoDYXdzEPT//////////wEXAMPLEtc764bNrC9SAPBSM22wDOk4x4HIZ8j4FZTwdQW
   LWsKWHGBuFqwAeMicRXmxfpSPfIeoIYRqTflfKD8YUuwthAx7mSEI/qkPpKPi/kMcGd
   QrmGdeehM4IC1NtBmUpp2wUE8phUZampKsburEDy0KPkyQDYwT7WZ0wq5VSXDvp75YU
   9HFvlRd8Tx6q6fE8YQcHNVXAkiY9q6d+xo0rKwT38xVqr7ZD0u0iPPkUL64lIZbqBAz
   +scqKmlzm8FDrypNC9Yjc8fPOLn9FX9KSYvKTr4rvx3iSIlTJabIQwj2ICCEXAMPLE==
  <span class="hljs-tag">&lt;/<span class="hljs-name">SessionToken</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">SecretAccessKey</span>&gt;</span>
  wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY
  <span class="hljs-tag">&lt;/<span class="hljs-name">SecretAccessKey</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">Expiration</span>&gt;</span>2019-04-15T23:28:33.359Z<span class="hljs-tag">&lt;/<span class="hljs-name">Expiration</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">AccessKeyId</span>&gt;</span>AKIAIOSFODNN7EXAMPLE;<span class="hljs-tag">&lt;/<span class="hljs-name">AccessKeyId</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">Credentials</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">FederatedUser</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">Arn</span>&gt;</span>arn:aws:sts::123456789012:federated-user/Jean<span class="hljs-tag">&lt;/<span class="hljs-name">Arn</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">FederatedUserId</span>&gt;</span>123456789012:Jean<span class="hljs-tag">&lt;/<span class="hljs-name">FederatedUserId</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">FederatedUser</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">PackedPolicySize</span>&gt;</span>4<span class="hljs-tag">&lt;/<span class="hljs-name">PackedPolicySize</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">GetFederationTokenResult</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">ResponseMetadata</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">RequestId</span>&gt;</span>c6104cbe-af31-11e0-8154-cbc7ccf896c7<span class="hljs-tag">&lt;/<span class="hljs-name">RequestId</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">ResponseMetadata</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">GetFederationTokenResponse</span>&gt;</span></code></pre><div class="programlisting-portal"></div></div></div>
    <div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-link_h11ix_j6r2k_360"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><circle cx="8" cy="8" r="7"></circle><path d="M8 12V7M8 6V4"></path></svg></span></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p>An AWS conversion compresses the passed session policies and session tags into a
        packed binary format that has a separate limit. Your request can fail for this limit even if
        your plaintext meets the other requirements. The <code class="code">PackedPolicySize</code> response
        element indicates by percentage how close the policies and tags for your request are to the
        upper size limit.</p></div></div>
    <p>AWS recommends that you grant permissions at the resource level (for example, you attach
      a resource-based policy to an Amazon S3 bucket), you can omit the <code class="code">Policy</code> parameter.
      However, if you do not include a policy for the AWS STS federated user principal, the temporary security
      credentials will not grant any permissions. In this case, you <em>must</em> use resource policies to grant the federated user access to your AWS
      resources.</p>
    <p>For example, assume your AWS account number is 111122223333, and you have an
      Amazon S3 bucket that you want to allow Susan to access. Susan's temporary security credentials
      don't include a policy for the bucket. In that case, you would need to ensure that the bucket
      has a policy with an ARN that matches Susan's ARN, such as
        <code class="code">arn:aws:sts::111122223333:federated-user/Susan</code>. </p>
   
    <h2 id="api_getsessiontoken">Requesting credentials for users in untrusted environments<div class="_0RyrTGB0Kc7J6GM+SjQKtA=="><span tabindex="-1" class="_6cXlowEstJU-2JYC67+uHQ=="><span class="awsui_root_xjuzf_vdsjn_559"><span class="awsui_trigger_xjuzf_vdsjn_594" id=":r4p:"><span class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-right-xxs_18wu0_1wax5_733 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div data-analytics="copyLink" data-analytics-type="eventContext" class="wn3-i0wpB6OIOxt5HoT9uA=="><div data-analytics="api_getsessiontoken" data-analytics-type="eventDetail"><button aria-label="Copy link to the section" title="Copy link to the section" class="awsui_button_vjswe_l0v97_157 awsui_variant-inline-icon_vjswe_l0v97_322 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r4q:" type="submit" data-analytics-performance-mark="29-1786135161122-4172"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M5 8h6M7 12H5c-2.21 0-4-1.79-4-4s1.79-4 4-4h2M9 12h2c2.21 0 4-1.79 4-4s-1.79-4-4-4H9" class="stroke-linejoin-round"></path></svg></span></button></div></div></span></span></span></span></div></h2>
    <p>The <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_GetSessionToken.html"><code class="code">GetSessionToken</code></a> API operation returns a set of temporary security
      credentials to an existing IAM user. This is useful for providing enhanced security, such as
      allowing AWS requests only when MFA is enabled for the IAM user. Because the credentials
      are temporary, they provide enhanced security when you have an IAM user who accesses your
      resources through a less secure environment. Examples of less secure environments include a
      mobile device or web browser.</p>

    <div class="procedure"><ol><li>
        <p>Authenticate with the AWS security credentials of your specific IAM user. This
          call must be made using valid AWS security credentials.</p>
      </li><li>
        <p>Call the operation <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_GetSessionToken.html"><code class="code">GetSessionToken</code></a>.</p>
      </li><li>
        <p><code class="code">GetSessionToken</code> returns temporary security credentials consisting of a
          session token, an access key ID, and a secret access key.</p>
      </li></ol></div>
    <p>By default, temporary security credentials for an IAM user are valid for a maximum of 12
      hours. But you can request a duration as short as 15 minutes or as long as 36 hours using the
        <code class="code">DurationSeconds</code> parameter. For security reasons, a token for an AWS account root user is
      restricted to a duration of one hour.</p>
    <p>The following example shows a sample request and response using
        <code class="code">GetSessionToken</code>. The response also includes the expiration time of the
      temporary security credentials. </p>
    <div class="example"><h6>Example request</h6><div class="example-contents"><pre class="programlisting"><div class="zKy3ntW31EpIOUhn4g2QBg== BD-nm-vt3Tr2EY8iQBbyIg==" data-testid="codeBtnContainer"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div><button data-testid="copyCodeBtn" class="_75sMI+SpHdgbiOmB5dQCjg== awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_button-no-text_vjswe_l0v97_601" aria-label="Copy https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetSessionToken
&amp;DurationSeconds=1800
&amp;AUTHPARAMS" title="Copy https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetSessionToken
&amp;DurationSeconds=1800
&amp;AUTHPARAMS" data-analytics-funnel-value="button:r55:" type="submit" data-analytics-performance-mark="33-1786135161124-1839"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M15 5H5v10h10V5Z" class="stroke-linejoin-round"></path><path d="M13 1H1v11" class="stroke-linejoin-round"></path></svg></span></button></div><!--DEBUG: cli (http)--><code class="http hljs">https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetSessionToken
&amp;DurationSeconds=1800
&amp;AUTHPARAMS</code></pre><div class="programlisting-portal"></div></div></div>
    <p>The <code class="code">AUTHPARAMS</code> parameter in the example is a placeholder for your
        <em>signature</em>. A signature is the authentication information that you must
      include with AWS HTTP API requests. We recommend using the <a href="https://aws.amazon.com/tools/" rel="noopener noreferrer" target="_blank"><span>AWS SDKs</span><awsui-icon class="awsdocs-link-icon" name="external"><span aria-label="Opens in a new tab"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_name-external_h11ix_j6r2k_374"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></awsui-icon></a> to create API requests, and one benefit of
      doing so is that the SDKs handle request signing for you. If you must create and sign API
      requests manually, see <a href="https://docs.aws.amazon.com/general/latest/gr/sigv4_signing.html">Signing AWS Requests
        By Using Signature Version 4</a> in the <em>Amazon Web Services General Reference</em> to learn
      how to sign a request.</p>
    <div class="example"><h6>Example response</h6><div class="example-contents"><pre class="programlisting"><div class="zKy3ntW31EpIOUhn4g2QBg== BD-nm-vt3Tr2EY8iQBbyIg==" data-testid="codeBtnContainer"></div><!--DEBUG: cli (xml)--><code class="xml hljs"><span class="hljs-tag">&lt;<span class="hljs-name">GetSessionTokenResponse</span> <span class="hljs-attr">xmlns</span>=<span class="hljs-string">"https://sts.amazonaws.com/doc/2011-06-15/"</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">GetSessionTokenResult</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">Credentials</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">SessionToken</span>&gt;</span>
   AQoEXAMPLEH4aoAH0gNCAPyJxz4BlCFFxWNE1OPTgk5TthT+FvwqnKwRcOIfrRh3c/L
   To6UDdyJwOOvEVPvLXCrrrUtdnniCEXAMPLE/IvU1dYUg2RVAJBanLiHb4IgRmpRV3z
   rkuWJOgQs8IZZaIv2BXIa2R4OlgkBN9bkUDNCJiBeb/AXlzBBko7b15fjrBs2+cTQtp
   Z3CYWFXG8C5zqx37wnOE49mRl/+OtkIKGO7fAE
  <span class="hljs-tag">&lt;/<span class="hljs-name">SessionToken</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">SecretAccessKey</span>&gt;</span>
  wJalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY
  <span class="hljs-tag">&lt;/<span class="hljs-name">SecretAccessKey</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">Expiration</span>&gt;</span>2011-07-11T19:55:29.611Z<span class="hljs-tag">&lt;/<span class="hljs-name">Expiration</span>&gt;</span>
  <span class="hljs-tag">&lt;<span class="hljs-name">AccessKeyId</span>&gt;</span>AKIAIOSFODNN7EXAMPLE<span class="hljs-tag">&lt;/<span class="hljs-name">AccessKeyId</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">Credentials</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">GetSessionTokenResult</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">ResponseMetadata</span>&gt;</span>
<span class="hljs-tag">&lt;<span class="hljs-name">RequestId</span>&gt;</span>58c5dbae-abef-11e0-8cfe-09039844ac7d<span class="hljs-tag">&lt;/<span class="hljs-name">RequestId</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">ResponseMetadata</span>&gt;</span>
<span class="hljs-tag">&lt;/<span class="hljs-name">GetSessionTokenResponse</span>&gt;</span></code></pre><div class="programlisting-portal"></div></div></div>
    <p>Optionally, the <code class="code">GetSessionToken</code> request can include <code class="code">SerialNumber</code>
      and <code class="code">TokenCode</code> values for AWS multi-factor authentication (MFA) verification. If
      the provided values are valid, AWS STS provides temporary security credentials that include
      the state of MFA authentication. The temporary security credentials can then be used to access
      the MFA-protected API operations or AWS websites for as long as the MFA authentication is
      valid. </p>
    <p>The following example shows a <code class="code">GetSessionToken</code> request that includes an MFA
      verification code and device serial number. </p>
    <pre class="programlisting"><div class="zKy3ntW31EpIOUhn4g2QBg== BD-nm-vt3Tr2EY8iQBbyIg==" data-testid="codeBtnContainer"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div><button data-testid="copyCodeBtn" class="_75sMI+SpHdgbiOmB5dQCjg== awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_button-no-text_vjswe_l0v97_601" aria-label="Copy https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetSessionToken
&amp;DurationSeconds=7200
&amp;SerialNumber=YourMFADeviceSerialNumber
&amp;TokenCode=123456
&amp;AUTHPARAMS" title="Copy https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetSessionToken
&amp;DurationSeconds=7200
&amp;SerialNumber=YourMFADeviceSerialNumber
&amp;TokenCode=123456
&amp;AUTHPARAMS" data-analytics-funnel-value="button:r4v:" type="submit" data-analytics-performance-mark="30-1786135161124-4916"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M15 5H5v10h10V5Z" class="stroke-linejoin-round"></path><path d="M13 1H1v11" class="stroke-linejoin-round"></path></svg></span></button></div><!--DEBUG: cli (http)--><code class="http hljs">https://sts.amazonaws.com/
?Version=2011-06-15
&amp;Action=GetSessionToken
&amp;DurationSeconds=7200
&amp;SerialNumber=YourMFADeviceSerialNumber
&amp;TokenCode=123456
&amp;AUTHPARAMS</code></pre><div class="programlisting-portal"></div>
    <div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-link_h11ix_j6r2k_360"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><circle cx="8" cy="8" r="7"></circle><path d="M8 12V7M8 6V4"></path></svg></span></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p>The call to AWS STS can be to the global endpoint or to any of the Regional endpoints that
        you activate your AWS account. For more information, see the <a href="https://docs.aws.amazon.com/general/latest/gr/rande.html#sts_region">AWS STS section of <em>Regions and
            Endpoints</em></a>.</p><p>The <code class="code">AUTHPARAMS</code> parameter in the example is a placeholder for your
          <em>signature</em>. A signature is the authentication information that you
        must include with AWS HTTP API requests. We recommend using the <a href="https://aws.amazon.com/tools/" rel="noopener noreferrer" target="_blank"><span>AWS SDKs</span><awsui-icon class="awsdocs-link-icon" name="external"><span aria-label="Opens in a new tab"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_name-external_h11ix_j6r2k_374"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></awsui-icon></a> to create API requests, and one benefit of
        doing so is that the SDKs handle request signing for you. If you must create and sign API
        requests manually, see <a href="https://docs.aws.amazon.com/general/latest/gr/sigv4_signing.html">Signing AWS Requests
          By Using Signature Version 4</a> in the <em>Amazon Web Services General Reference</em> to learn
        how to sign a request.</p></div></div>
  <awsdocs-copyright class="copyright-print"></awsdocs-copyright><awsdocs-thumb-feedback right-edge="{{$ctrl.thumbFeedbackRightEdge}}"></awsdocs-thumb-feedback></div><noscript><div><div><div><div id="js_error_message"><p><img src="https://d1ge0kk1l5kms0.cloudfront.net/images/G/01/webservices/console/warning.png" alt="Warning" /> <strong>Javascript is disabled or is unavailable in your browser.</strong></p><p>To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.</p></div></div></div></div></noscript><div id="main-col-footer" class="awsui-util-font-size-0"><div id="doc-conventions"><a target="_top" href="/general/latest/gr/docconventions.html">Document Conventions</a></div><div class="prev-next"><div id="previous" class="prev-link" accesskey="p" href="./id_credentials_bearer.html">Service bearer tokens</div><div id="next" class="next-link" accesskey="n" href="./id_credentials_temp_use-resources.html">Use temporary credentials with AWS resources</div></div></div><awsdocs-page-utilities></awsdocs-page-utilities></div><div id="quick-feedback-yes" style="display: none;"><div class="title">Did this page help you? - Yes</div><div class="content"><p>Thanks for letting us know we're doing a good job!</p><p>If you've got a moment, please tell us what we did right so we can do more of it.</p><p><awsui-button id="fblink" rel="noopener noreferrer" target="_blank" text="Feedback" click="linkClick($event)" href="https://docs.aws.amazon.com/forms/aws-doc-feedback?hidden_service_name=IAM&amp;topic_url=https://docs.aws.amazon.com/en_us/IAM/latest/UserGuide/id_credentials_temp_request.html"></awsui-button></p></div></div><div id="quick-feedback-no" style="display: none;"><div class="title">Did this page help you? - No</div><div class="content"><p>Thanks for letting us know this page needs work. We're sorry we let you down.</p><p>If you've got a moment, please tell us how we can make the documentation better.</p><p><awsui-button id="fblink" rel="noopener noreferrer" target="_blank" text="Feedback" click="linkClick($event)" href="https://docs.aws.amazon.com/forms/aws-doc-feedback?hidden_service_name=IAM&amp;topic_url=https://docs.aws.amazon.com/en_us/IAM/latest/UserGuide/id_credentials_temp_request.html"></awsui-button></p></div></div></div></div></div></div></div><div class="
          VM-l1UkHFVRegR13nxZ24g==
          mNZvV+FFPB9yiUlzl0xk0g== 
          
           
        "><div class="_1OgNW+pmdk5JO3ljxIFK2g=="><button aria-label="Close page navigation and information panel" title="Close page navigation and information panel" class="awsui_button_vjswe_l0v97_157 awsui_variant-icon_vjswe_l0v97_293 awsui_button-no-text_vjswe_l0v97_601" data-analytics-funnel-value="button:r1i:" type="submit" data-analytics-performance-mark="13-1786135161040-8649"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m2 1.71 12 12M2 13.71l12-12" class="stroke-linejoin-round"></path></svg></span></button></div><ul class="OTzAoHvbdxaTRWoYMv+4yw=="><li class="
            YLh9T6Dnpm2IV3LX3cO+ug== 
          "><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_p-vertical-m_18wu0_1wax5_554 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div><h3 class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_h3-variant_18wu0_1wax5_176 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><span id="anchor-navigation-heading">On this page</span></h3><nav aria-labelledby="anchor-navigation-heading" class="awsui_root_swimc_akseh_189 awsui_root_17oho_5eh15_5"><ol class="awsui_anchor-list_swimc_akseh_221 awsui_anchor-list_17oho_5eh15_9"><li data-itemid="anchor-item-1" class="awsui_anchor-item_swimc_akseh_245"><a class="awsui_anchor-link_swimc_akseh_283 awsui_anchor-link_17oho_5eh15_17" href="#using_sts_regions"><span class="awsui_anchor-link-text_swimc_akseh_332 awsui_anchor-link-text_17oho_5eh15_21" style="padding-inline-start: 20px;">Using AWS STS with AWS Regions</span></a></li><li data-itemid="anchor-item-2" class="awsui_anchor-item_swimc_akseh_245"><a class="awsui_anchor-link_swimc_akseh_283 awsui_anchor-link_17oho_5eh15_17" href="#api_assumerole"><span class="awsui_anchor-link-text_swimc_akseh_332 awsui_anchor-link-text_17oho_5eh15_21" style="padding-inline-start: 20px;">Requesting credentials with
        AssumeRole</span></a></li><li data-itemid="anchor-item-3" class="awsui_anchor-item_swimc_akseh_245"><a class="awsui_anchor-link_swimc_akseh_283 awsui_anchor-link_17oho_5eh15_17" href="#api_assumerolewithwebidentity"><span class="awsui_anchor-link-text_swimc_akseh_332 awsui_anchor-link-text_17oho_5eh15_21" style="padding-inline-start: 20px;">Requesting credentials with
        AssumeRoleWithWebIdentity</span></a></li><li data-itemid="anchor-item-4" class="awsui_anchor-item_swimc_akseh_245"><a class="awsui_anchor-link_swimc_akseh_283 awsui_anchor-link_17oho_5eh15_17" href="#api_assumerolewithsaml"><span class="awsui_anchor-link-text_swimc_akseh_332 awsui_anchor-link-text_17oho_5eh15_21" style="padding-inline-start: 20px;">Requesting credentials with
        AssumeRoleWithSAML</span></a></li><li data-itemid="anchor-item-5" class="awsui_anchor-item_swimc_akseh_245"><a class="awsui_anchor-link_swimc_akseh_283 awsui_anchor-link_17oho_5eh15_17" href="#api_getfederationtoken"><span class="awsui_anchor-link-text_swimc_akseh_332 awsui_anchor-link-text_17oho_5eh15_21" style="padding-inline-start: 20px;">Requesting credentials with
        GetFederationToken</span></a></li><li data-itemid="anchor-item-6" class="awsui_anchor-item_swimc_akseh_245"><a class="awsui_anchor-link_swimc_akseh_283 awsui_anchor-link_17oho_5eh15_17" href="#api_getsessiontoken"><span class="awsui_anchor-link-text_swimc_akseh_332 awsui_anchor-link-text_17oho_5eh15_21" style="padding-inline-start: 20px;">Requesting credentials with
        GetSessionToken</span></a></li></ol></nav></div></div></li><li class="
            YLh9T6Dnpm2IV3LX3cO+ug== 
          "><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_p-vertical-m_18wu0_1wax5_554 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div data-testid="related-resources-section"><div class="awsui_root_18582_1g6fc_145 awsui_vertical_18582_1g6fc_192 awsui_vertical-xxs_18582_1g6fc_198"><div class="awsui_child_18582_1g6fc_149"><h3 class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_h3-variant_18wu0_1wax5_176 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><span id="anchor-navigation-heading">Related resources</span></h3></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r89:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r88:" href="https://docs.aws.amazon.com/IAM/latest/APIReference/index.html"><span>AWS Identity and Access Management API Reference</span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r8c:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r8b:" href="https://docs.aws.amazon.com/cli/latest/reference/iam/"><span>AWS CLI commands for AWS Identity and Access Management</span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r8f:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r8e:" target="_blank" rel="noopener noreferrer" href="https://aws.amazon.com/tools/"><span>SDKs &amp; Tools</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div></div></div></div></li><li class="
            YLh9T6Dnpm2IV3LX3cO+ug== 
          "><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_p-vertical-m_18wu0_1wax5_554 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div class="gMlLJ2Yy-nuwHZe7cihPtQ=="><div class="awsui_root_18582_1g6fc_145 awsui_vertical_18582_1g6fc_192 awsui_vertical-s_18582_1g6fc_204"><div class="awsui_child_18582_1g6fc_149"><div class="awsui_root_18582_1g6fc_145 awsui_vertical_18582_1g6fc_192 awsui_vertical-l_18582_1g6fc_210"><div class="awsui_child_18582_1g6fc_149"><label id="feedbackHelpYou"><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_p-n_18wu0_1wax5_423 awsui_color-default_18wu0_1wax5_172 awsui_font-size-heading-m_18wu0_1wax5_360 awsui_font-weight-heavy_18wu0_1wax5_309">Did this page help you?</div></label></div><div class="awsui_child_18582_1g6fc_149"><div class="awsui_root_18582_1g6fc_145 awsui_horizontal_18582_1g6fc_160 awsui_horizontal-xs_18582_1g6fc_170"><div class="awsui_child_18582_1g6fc_149"><button aria-label="Yes-This page is helpful.
  " aria-describedby="feedbackHelpYou" title="Yes-This page is helpful.
  " class="awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_button-no-wrap_vjswe_l0v97_605" data-analytics-funnel-value="button:r8h:" type="submit" data-analytics-performance-mark="39-1786135161507-3175"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M9 2.871v4.13h4.12c.6 0 1.02.59.83 1.16l-1.6 4.77a1.58 1.58 0 0 1-1.49 1.07H1v-8h4l2.41-3.61c.48-.72 1.59-.38 1.59.48ZM5 14.001v-8" class="stroke-linejoin-round"></path></svg></span><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5">Yes</span></button></div><div class="awsui_child_18582_1g6fc_149"><button aria-label="No-This page is not helpful." aria-describedby="feedbackHelpYou" title="No-This page is not helpful." class="awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206 awsui_button-no-wrap_vjswe_l0v97_605" data-analytics-funnel-value="button:r8j:" type="submit" data-analytics-performance-mark="40-1786135161507-1356"><span class="awsui_icon_vjswe_l0v97_635 awsui_icon-left_vjswe_l0v97_635 awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M9 13.13V9h4.12c.6 0 1.02-.59.83-1.16l-1.6-4.77A1.58 1.58 0 0 0 10.86 2H1v8h4l2.41 3.61c.48.72 1.59.38 1.59-.48ZM5 2v8" class="stroke-linejoin-round"></path></svg></span><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5">No</span></button></div></div></div></div></div><div class="awsui_child_18582_1g6fc_149"><div><span><a id="link-self:r8m:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r8l:" target="_blank" rel="noopener noreferrer" href="https://docs.aws.amazon.com/feedback/doc-feedback.html?hidden_service_name=IAM&amp;topic_url=https%3A%2F%2Fdocs.aws.amazon.com%2FIAM%2Flatest%2FUserGuide%2Fid_credentials_temp_request.html"><span>Provide feedback</span></a></span></div></div></div></div></div></li></ul></div><div class="LERjeVcK6nut-e7aeHxQOQ==" data-testid="utility-footer"><div class="G7Bey25cFbRC2Carn-F2vQ=="><div class="AFZgK626Jav12yYP8tO08Q=="><div><h4 class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_h4-variant_18wu0_1wax5_176 awsui_p-n_18wu0_1wax5_423 awsui_d-inline_18wu0_1wax5_926 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229">Next topic:</h4><span><a id="link-self:r1s:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r1r:" href="./id_credentials_temp_use-resources.html"><span>Use temporary credentials with AWS resources</span></a></span></div><div><h4 class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_h4-variant_18wu0_1wax5_176 awsui_p-n_18wu0_1wax5_423 awsui_d-inline_18wu0_1wax5_926 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229">Previous topic:</h4><span><a id="link-self:r1v:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r1u:" href="./id_credentials_bearer.html"><span>Service bearer tokens</span></a></span></div></div></div></div></div></div></div></div></div></div></div></div></div></main></div><footer class="awsui-context-top-navigation awsui-visual-refresh" data-testid="global-footer"><div class="AD-SlYXqbH1vXA114uZKKA== "><div class="Iu4D8QWX0gq7W91Pdz+gew=="><div class="N1MCBsuydO7Xz-PA7wYc1A=="><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div class="awsui_grid_14yj0_199n9_145"><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-3_14yj0_199n9_217"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><h2 class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_h3-variant_18wu0_1wax5_176 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229">Get Started</h2><div class="gT--DcynXiEfDmz16usX6A== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-top-xs_18wu0_1wax5_753 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div class="awsui_root_18582_1g6fc_145 awsui_vertical_18582_1g6fc_192 awsui_vertical-xxs_18582_1g6fc_198"><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r22:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r21:" target="_blank" rel="noopener noreferrer" href="https://aws.amazon.com/getting-started/hands-on/"><span>AWS Hands-On Tutorials</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r25:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r24:" target="_blank" rel="noopener noreferrer" href="https://aws.amazon.com/solutions/"><span>AWS Solutions Library</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r28:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r27:" href="https://docs.aws.amazon.com/decision-guides/"><span>AWS Decision Guides</span></a></span></div></div></div></div></div></div><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-3_14yj0_199n9_217"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><h2 class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_h3-variant_18wu0_1wax5_176 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229">Service Guides</h2><div class="gT--DcynXiEfDmz16usX6A== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-top-xs_18wu0_1wax5_753 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div class="awsui_root_18582_1g6fc_145 awsui_vertical_18582_1g6fc_192 awsui_vertical-xxs_18582_1g6fc_198"><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r2b:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r2a:" href="https://docs.aws.amazon.com/generative-ai-on-aws-how-to-choose/"><span>Choosing a generative AI service</span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r2e:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r2d:" href="https://docs.aws.amazon.com/#products"><span>AWS service guides</span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r2h:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r2g:" target="_blank" rel="noopener noreferrer" href="https://github.com/aws-samples/sample-developer-tutorials"><span>AWS CLI Tutorials on GitHub</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div></div></div></div></div></div><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-3_14yj0_199n9_217"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><h2 class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_h3-variant_18wu0_1wax5_176 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229">Developer Tools</h2><div class="gT--DcynXiEfDmz16usX6A== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-top-xs_18wu0_1wax5_753 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div class="awsui_root_18582_1g6fc_145 awsui_vertical_18582_1g6fc_192 awsui_vertical-xxs_18582_1g6fc_198"><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r2k:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r2j:" href="https://docs.aws.amazon.com/code-library/latest/ug/what-is-code-library.html"><span>AWS Code Example Library</span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r2n:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r2m:" href="https://docs.aws.amazon.com/cli/"><span>AWS CLI</span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r2q:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r2p:" target="_blank" rel="noopener noreferrer" href="https://builder.aws.com/"><span>AWS Builder Center</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r2t:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r2s:" target="_blank" rel="noopener noreferrer" href="https://aws.amazon.com/blogs/developer/"><span>AWS Developer Tools Blog</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div></div></div></div></div></div><div class="awsui_grid-column_14yj0_199n9_186 awsui_colspan-3_14yj0_199n9_217"><div class="awsui_restore-pointer-events_14yj0_199n9_357"><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><h2 class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_h3-variant_18wu0_1wax5_176 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229">Helpful Links</h2><div class="gT--DcynXiEfDmz16usX6A== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-top-xs_18wu0_1wax5_753 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div class="awsui_root_18582_1g6fc_145 awsui_vertical_18582_1g6fc_192 awsui_vertical-xxs_18582_1g6fc_198"><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r30:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r2v:" target="_blank" rel="noopener noreferrer" href="https://github.com/awslabs/mcp/tree/main/src/aws-documentation-mcp-server"><span>Download the AWS Docs MCP Server</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r33:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r32:" target="_blank" rel="noopener noreferrer" href="https://console.aws.amazon.com/"><span>Sign into the AWS Console</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div><div class="awsui_child_18582_1g6fc_149"><span><a id="link-self:r36:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r35:" target="_blank" rel="noopener noreferrer" href="https://repost.aws/"><span>
    AWS re:Post</span><span class="awsui_icon-wrapper_4c84z_1ekb2_591">&nbsp;<span class="awsui_icon_4c84z_1ekb2_591" aria-label="Opens in a new tab" role="img"><span class="awsui_icon_h11ix_j6r2k_189 awsui_icon-flex-height_h11ix_j6r2k_197 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339 awsui_name-external_h11ix_j6r2k_374" style="height: 20px;"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="M13 9.012v-6H7M13.02 3 7 9.01M3 5.012v8h8.01" class="stroke-linejoin-round"></path></svg></span></span></span></a></span></div></div></div></div></div></div></div></div><div class="nWtP+UnSs71qBdVYBx3mNA== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-top-l_18wu0_1wax5_828 awsui_p-top-s_18wu0_1wax5_528 awsui_p-bottom-xs_18wu0_1wax5_513 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><span class="+fPxWfhZxbDk4rUNimqc9Q=="><div class="JZQ37DTUvGpEuwbXqARXdw== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_d-inline_18wu0_1wax5_926 awsui_color-default_18wu0_1wax5_172 awsui_font-size-body-s_18wu0_1wax5_341 awsui_font-weight-default_18wu0_1wax5_229"><span><a id="link-self:r39:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r38:" href="https://aws.amazon.com/privacy"><span>Privacy</span></a></span></div><div class="JZQ37DTUvGpEuwbXqARXdw== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_d-inline_18wu0_1wax5_926 awsui_color-default_18wu0_1wax5_172 awsui_font-size-body-s_18wu0_1wax5_341 awsui_font-weight-default_18wu0_1wax5_229"><span><a id="link-self:r3c:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r3b:" href="https://aws.amazon.com/terms"><span>Site terms</span></a></span></div><div class="JZQ37DTUvGpEuwbXqARXdw== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_d-inline_18wu0_1wax5_926 awsui_color-default_18wu0_1wax5_172 awsui_font-size-body-s_18wu0_1wax5_341 awsui_font-weight-default_18wu0_1wax5_229"><span><a id="link-self:r3f:" class="awsui_link_4c84z_1ekb2_145 awsui_variant-secondary_4c84z_1ekb2_246 awsui_font-size-body-m_4c84z_1ekb2_524" data-analytics-funnel-value="link:r3e:" href="#"><span>Cookie preferences</span></a></span></div><div class="JZQ37DTUvGpEuwbXqARXdw== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_d-inline_18wu0_1wax5_926 awsui_color-default_18wu0_1wax5_172 awsui_font-size-body-s_18wu0_1wax5_341 awsui_font-weight-default_18wu0_1wax5_229">
      © 2026, Amazon Web Services, Inc. or its affiliates. All rights reserved.</div></span><div class="GVpQE-u3iXlkjYAiEcqqfw== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_m-top-xs_18wu0_1wax5_753 awsui_m-horizontal-s_18wu0_1wax5_784 awsui_d-inline-block_18wu0_1wax5_929 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><div class="awsui_root_r2vco_j14rg_145"><div class="awsui_root_9duf6_5dned_199"><div id=":r3m:" class="awsui_trigger_1hezk_1wraf_5"><button id="trigger:r3h:" type="button" class="awsui_button-trigger_18eso_h7rq9_161 awsui_button-trigger_l32fn_xo3sj_5 awsui_has-caret_18eso_h7rq9_257" aria-expanded="false" aria-labelledby="select-arialabel-:r3k: trigger-content-:r3o:" aria-haspopup="listbox"><span id="trigger-content-:r3o:" data-value="en_us" class="awsui_option_1p2cx_4l1p9_153" title="English"><span class="awsui_content_1p2cx_4l1p9_200"><span class="awsui_label-content_1p2cx_4l1p9_207"><span class="awsui_label_1p2cx_4l1p9_207 awsui_label_1q5vz_ocied_5 awsui_trigger-variant_1p2cx_4l1p9_286"><span>English</span></span></span></span></span><span class="awsui_arrow_18eso_h7rq9_161"><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 11 4-6H4l4 6Z" class="filled stroke-linejoin-round"></path></svg></span></span></button></div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div><div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div><div class="awsui_dropdown_9duf6_5dned_153 awsui-context-top-navigation awsui_with-limited-width_9duf6_5dned_329 awsui_hide-block-border_9duf6_5dned_349 awsui_refresh_9duf6_5dned_174 awsui_use-flexible-width_9duf6_5dned_341" id="dialog:r3j:" data-open="false" data-animating="false" aria-hidden="true" style="--awsui-dropdown-default-min-width-esndbs: 100%; --awsui-dropdown-default-max-width-esndbs: 465px;"><div class="awsui_dropdown-content-wrapper_9duf6_5dned_153 awsui_refresh_9duf6_5dned_174"><div class="awsui_dropdown-content_9duf6_5dned_153"><div class="awsui_header_1hezk_1wraf_9"></div><div id="option-list:r3i:" class="awsui_options-list_19gcf_xq78m_145" role="listbox" tabindex="-1" aria-labelledby="select-arialabel-:r3k: trigger:r3h:" style="position: relative; scroll-padding-block-start: 0px;"></div><div class="awsui_footer_1hezk_1wraf_13"><div class="awsui_root_1afi9_huhgs_145 awsui_hidden_1afi9_huhgs_176"></div></div></div></div></div><div class="awsui_root_oip5a_160mh_5" tabindex="-1"></div></div></div><div hidden="" id="select-arialabel-:r3k:">Language selector</div></div></div></div></div><div class="awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_p-right-s_18wu0_1wax5_533 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229"><button class="XRTkTPfit0aX6ajCofklEQ== awsui_button_vjswe_l0v97_157 awsui_variant-normal_vjswe_l0v97_206" data-analytics-funnel-value="button:r3q:" type="submit" data-analytics-performance-mark="16-1786135161044-5961"><span class="awsui_content_vjswe_l0v97_153 awsui_label_1f1d4_ocied_5"><div class="TMpaRkAT-qjC4FFJEcjwQA=="><span class="awsui_icon_h11ix_j6r2k_189 awsui_size-normal-mapped-height_h11ix_j6r2k_267 awsui_size-normal_h11ix_j6r2k_263 awsui_variant-normal_h11ix_j6r2k_339"><svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" focusable="false" aria-hidden="true"><path d="m8 5 4 6H4l4-6Z" class="filled stroke-linejoin-round"></path></svg></span><div class="aM1KXBjgk7w2iMzNUXsE-A== awsui_root_18wu0_1wax5_1110 awsui_box_18wu0_1wax5_172 awsui_d-inline_18wu0_1wax5_926 awsui_color-default_18wu0_1wax5_172 awsui_font-size-default_18wu0_1wax5_188 awsui_font-weight-default_18wu0_1wax5_229">Top</div></div></span></button></div></div></div></footer><input data-testid="current url" type="hidden" id="current-url" value="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html"></div></div></div><div id="locale-container"></div><div id="preference-container"></div><div id="Get started"></div><div id="Service guides"></div><div id="Developer tools"></div><div id="AI resources"></div><script type="text/javascript" async="" src="https://d2c.aws.amazon.com/client/loader/v1/d2c-load.js"></script><script type="text/javascript" src="https://a0.awsstatic.com/s_code/js/3.0/awshome_s_code.js"></script></body></html>