openrec0n AWS STS Security Operations
Assume IAM roles and obtain temporary security credentials for security assessment.
Quick Commands
# List techniques
python -m cloak.cli --list-techniques sts
# Get details
python -m cloak.cli --technique-info sts.assume_role
# Execute (with required role ARN)
python -m cloak.cli --technique sts.assume_role --config '{"role_arn": "arn:aws:iam::123456789012:role/MyRole"}' --execute
Available Techniques
| Technique | Description |
|---|---|
assume_role |
Assume an IAM role and obtain temporary credentials |
Security Notes
- Temporary credentials are stored in the database but never appear in summaries
- Use
--execution-info <id>to retrieve credentials after execution - Credentials are time-limited (default 1 hour, max 12 hours)
Documentation
- Registry:
.claude/skills/cloak-techniques.json - Full docs: README.md, docs/SETUP.md, docs/TROUBLESHOOTING.md