awsclaw-sts

What problem does it solve?

AWS STS operations require precise parameters and timely identity checks to avoid misconfigurations or unauthorized access, and manually crafting each request is error-prone. awsclaw-sts lets the assistant orchestrate STSTool commands so you can verify identities, assume roles, or decode authorization failures without reconstructing every API call.

Core Features & Use Cases

• Identity Verification: Run GetCallerIdentity to confirm which account, ARN, and user ID your credentials represent before making changes.
• Role Assumption & Temporary Credentials: Use AssumeRole, GetSessionToken, and federated token commands with RoleSessionName, duration, and policy overrides to obtain exactly the temporary credentials you need.
• Authorization Troubleshooting: Decode encoded authorization failure messages or query access key info to understand denied actions for debugging and auditing.
• Use Case: When you must switch into a cross-account role with external IDs, call AssumeRole with DurationSeconds and ExternalId to securely retrieve temporary credentials before continuing operations.

Quick Start

Ask STSTool to run GetCallerIdentity so you can confirm your AWS caller identity before making changes.