AssumeDecoratedRoleWithSAMLRequest

import type { AssumeDecoratedRoleWithSAMLRequest } from "https://aws-api.deno.dev/v0.4/services/lakeformation.ts?docs=full";

interface AssumeDecoratedRoleWithSAMLRequest {

DurationSeconds?: number | null;

PrincipalArn: string;

RoleArn: string;

SAMLAssertion: string;

}

§Properties

DurationSeconds?: number | null

[src]

The time period, between 900 and 43,200 seconds, for the timeout of the temporary credentials.

PrincipalArn: string

[src]

The Amazon Resource Name (ARN) of the SAML provider in IAM that describes the IdP.

RoleArn: string

[src]

The role that represents an IAM principal whose scope down policy allows it to call credential vending APIs such as GetTemporaryTableCredentials. The caller must also have iam:PassRole permission on this role.

SAMLAssertion: string

[src]

A SAML assertion consisting of an assertion statement for the user who needs temporary credentials. This must match the SAML assertion that was issued to IAM. This must be Base64 encoded.