CmdID / aws / aws lakeformation
aws lakeformation assume-decorated-role-with-saml
Allows a caller to assume an IAM role decorated as the SAML user specified in the SAML assertion included in the request. AWS CLI reference
4 options Its page in the AWS CLI reference
Options
--duration-secondsThe time period, between 900 and 43,200 seconds, for the timeout of the temporary credentials.--principal-arnThe Amazon Resource Name (ARN) of the SAML provider in IAM that describes the IdP.--role-arnThe role that represents an IAM principal whose scope down policy allows it to call credential vending APIs such as GetTemporaryTableCredentials.--saml-assertionA SAML assertion consisting of an assertion statement for the user who needs temporary credentials.