delegated_access_tokens

Creates, updates, deletes, gets or lists a delegated_access_tokens resource.

Overview

Name	delegated_access_tokens
Type	Resource
Id	aws.sts.delegated_access_tokens

Fields

The following fields are returned by SELECT queries:

get_delegated_access_token

Name	Datatype	Description
assumed_principal	string	The Amazon Resource Name (ARN) of the principal that was assumed when obtaining the delegated access token. This ARN identifies the IAM entity whose permissions are granted by the temporary credentials.
credentials	string	Amazon Web Services credentials for API authentication.
packed_policy_size	integer	The percentage of the maximum policy size that is used by the session policy. The policy size is calculated as the sum of all the session policies and permission boundaries attached to the session. If the packed size exceeds 100%, the request fails.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_delegated_access_token	select	TradeInToken, region		Exchanges a trade-in token for temporary Amazon Web Services credentials with the permissions associated with the assumed principal. This operation allows you to obtain credentials for a specific principal based on a trade-in token, enabling delegation of access to Amazon Web Services resources.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
TradeInToken	string	The token to exchange for temporary Amazon Web Services credentials. This token must be valid and unexpired at the time of the request.
region	string	AWS region (default: us-east-1)

SELECT examples

get_delegated_access_token

Exchanges a trade-in token for temporary Amazon Web Services credentials with the permissions associated with the assumed principal. This operation allows you to obtain credentials for a specific principal based on a trade-in token, enabling delegation of access to Amazon Web Services resources.

SELECT
assumed_principal,
credentials,
packed_policy_size
FROM aws.sts.delegated_access_tokens
WHERE TradeInToken = '{{ TradeInToken }}' -- required
AND region = '{{ region }}' -- required
;