# AWS Sts

> Assume IAM roles and obtain temporary security credentials. Use when the user asks about role assumption, cross-account access, or obtaining temporary credentials.

- Skill: `openrec0n/aws-sts` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add openrec0n/aws-sts`
- Raw SKILL.md: https://api.skillmd.com/api/skills/openrec0n/aws-sts/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: openrec0n (https://skillmd.com/u/openrec0n)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/openrec0n/aws-sts

---


# AWS STS Security Operations

Assume IAM roles and obtain temporary security credentials for security assessment.

## Quick Commands

```bash
# List techniques
python -m cloak.cli --list-techniques sts

# Get details
python -m cloak.cli --technique-info sts.assume_role

# Execute (with required role ARN)
python -m cloak.cli --technique sts.assume_role --config '{"role_arn": "arn:aws:iam::123456789012:role/MyRole"}' --execute
```

## Available Techniques

| Technique | Description |
|-----------|-------------|
| `assume_role` | Assume an IAM role and obtain temporary credentials |

## Security Notes

- Temporary credentials are stored in the database but **never** appear in summaries
- Use `--execution-info <id>` to retrieve credentials after execution
- Credentials are time-limited (default 1 hour, max 12 hours)

## Documentation

- Registry: `.claude/skills/cloak-techniques.json`
- Full docs: README.md, docs/SETUP.md, docs/TROUBLESHOOTING.md