aws sts assume-role-with-web-identity
Returns a set of temporary security credentials for users who have been authenticated in a mobile or web application with a web identity provider. AWS CLI reference
8 options Its page in the AWS CLI reference
Options
--duration-secondsThe duration, in seconds, of the role session.--minimum-session-token-sizeThe minimum size, in bytes, of the session token that STS issues for the request.--policy-arnsThe Amazon Resource Names (ARNs) of the IAM managed policies that you want to use as managed session policies.--policyAn IAM policy in JSON format that you want to use as an inline session policy.--provider-idThe fully qualified host component of the domain name of the OAuth 2.0 identity provider.--role-arnThe Amazon Resource Name (ARN) of the role that the caller is assuming.--role-session-nameAn identifier for the assumed role session.--web-identity-tokenThe OAuth 2.0 access token or OpenID Connect ID token that is provided by the identity provider.