Ravi Sir's Cards › AWS
AssumeRole vs GetSessionToken?
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
What it is
AssumeRole switches you into a role (different identity). GetSessionToken usually upgrades the same IAM user (often after MFA) without changing to a role.
Why it matters
Cross-account and EC2/Lambda patterns use AssumeRole. MFA-protected CLI as the same user often uses GetSessionToken.
AssumeRole
How / example
Trust policy must allow your principal for AssumeRole; GetSessionToken does not need a role trust policy.