Manage IAM Roles

An IAM role is an IAM identity that you can create in your account and that has specific permissions. An IAM role is similar to an IAM user, in the sense that an ARTESCA identity with permission policies can access ARTESCA resources based on the role’s policies.

You can assume a role using the AssumeRole or the AssumeRoleWithWebIdentity APIs. Both APIs return a set of temporary credentials any user or application can use for a specific amount of time.

An IAM role has a trust policy that defines which conditions must be met to enable other principals to assume it. This trust policy reduces the risks associated with privilege escalation.

Tip

Refer to AWS documentation for more information on IAM roles.

Important

Make sure to configure AWS CLI before performing the following operations.

General Operations

• Create IAM Roles
• Delete IAM Roles
• List IAM Roles

Default Roles

• Default ARTESCA Roles

Role Assumption

• Assume Role as an IAM User
• Assume Role as a Web Identity