| name | aws-sts |
| description | Assume IAM roles and obtain temporary security credentials. Use when the user asks about role assumption, cross-account access, or obtaining temporary credentials. |
AWS STS Security Operations
Assume IAM roles and obtain temporary security credentials for security assessment.
Quick Commands
python -m cloak.cli --list-techniques sts
python -m cloak.cli --technique-info sts.assume_role
python -m cloak.cli --technique sts.assume_role --config '{"role_arn": "arn:aws:iam::123456789012:role/MyRole"}' --execute
Available Techniques
| Technique | Description |
|---|
assume_role | Assume an IAM role and obtain temporary credentials |
Security Notes
- Temporary credentials are stored in the database but never appear in summaries
- Use
--execution-info <id> to retrieve credentials after execution
- Credentials are time-limited (default 1 hour, max 12 hours)
Documentation
- Registry:
.claude/skills/cloak-techniques.json
- Full docs: README.md, docs/SETUP.md, docs/TROUBLESHOOTING.md