awsflow-sts

Run AWS STS commands for identity verification and temporary credential retrieval.

3|1|Updated Dec 22, 2025

Search Tags:#vscode #security #aws #identity #sts #role-assumption #temporary-credentials

Ready to run

npx skills add https://github.com/necatiarslan/awsflow --skill awsflow-sts

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: awsflow-sts
Source: https://github.com/necatiarslan/awsflow/tree/main/skills/awsflow-sts
Command: npx skills add https://github.com/necatiarslan/awsflow --skill awsflow-sts

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

STSTool in awsflow simplifies AWS security token service operations by centralizing identity checks, role assumptions, and temporary credential retrieval inside VS Code.

Core Features & Use Cases

GetCallerIdentity to verify who you are.
AssumeRole, AssumeRoleWithSAML, and AssumeRoleWithWebIdentity to obtain temporary credentials for cross-account access.
DecodeAuthorizationMessage to troubleshoot access denials and validate policies.
GetFederationToken, GetSessionToken, and GetAccessKeyInfo to manage sessions and credentials.
Use within the awsflow workflow to streamline IAM tasks without leaving the editor.

Quick Start

Use STSTool to verify identity, assume a role, and obtain temporary credentials in a single, guided step.

Frequently Asked Questions about awsflow-sts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I assume an AWS IAM role and get temporary credentials in VS Code?▼

You can assume an AWS IAM role and retrieve temporary credentials in VS Code by running STS commands like AssumeRole with required parameters such as RoleArn and RoleSessionName. This tool centralizes identity verification and cross-account access directly within the editor.

How can I troubleshoot AWS access denied errors when assuming a role?▼

To troubleshoot AWS access denied errors during role assumption, use the DecodeAuthorizationMessage command. It decodes the encoded authorization message returned by AWS STS to help you validate policies and identify the exact permissions causing the denial.

Can I verify my AWS identity and caller details without leaving the editor?▼

Yes, you can verify your AWS identity without leaving the editor by executing the GetCallerIdentity command. It retrieves and displays details about the IAM user or role currently making the request within your VS Code workflow.

Does AWS STS role assumption in VS Code support MFA and custom session durations?▼

AWS STS role assumption in VS Code supports optional MFA and custom session durations. You can include these optional parameters when executing commands like AssumeRole or GetSessionToken to retrieve temporary credentials.

What is the best way to manage AWS cross-account access using SAML or Web Identity?▼

The best way to manage AWS cross-account access using SAML or Web Identity is by executing AssumeRoleWithSAML and AssumeRoleWithWebIdentity commands. These retrieve temporary credentials for cross-account access without requiring you to leave VS Code.