STS

Question 1

What is STS?

Answer 1

Standard Token Service
Allows to assume a role with web identity
Returns temp security credentials for users

API for STS

Question 2

Describe how to use STS

Answer 2

User authenticates with web identity provider to access AWS resources

Once user is authenticated, app makes assume-role-with-identity API call

If successful User gets temp credentials

(AssumeRoleUser. AssumeRoleID)