Ravi Sir's Cards › AWS
The three STS pieces
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
Students export only key and secret and wonder why every call is InvalidClientTokenId.
What is it?
STS sessions need AccessKeyId, SecretAccessKey, and SessionToken together. The token proves the creds came from STS.
SessionToken
How to do it
Export AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and AWS_SESSION_TOKEN from the AssumeRole response.
Example
aws sts get-caller-identity with all three shows the assumed-role ARN, not your long-lived user alone.