Ravi Sir's Cards › AWS
assume-role vs get-session-token
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Gives
assume-role
Keys for another role.
get-session-token
Keys for yourself with MFA.
Key points
Can cross accounts.
Same identity, MFA flag true.
Example
aws sts assume-role
Use when
Switch to admin or other account.
MFA-protected actions.