Connect AWS STS to Your AI Agent

Provide the role and session requirements so your assistant can request credentials and report when they expire.

2 tools Custom credential / Federated

Try a AWS STS Task

Copy a prompt into your agent with the oo Skill installed. Add your page links and source notes before running it.

oo Skill AWS STS

Request an IAM Role Session

Use access credentials to obtain a temporary role session with explicit requirements.

/oo AWS STS: Using my AWS access-key connection, assume [role ARN] with session name [name] for [seconds], applying [optional session policy or none] and [external ID if required]. Report expiration and keep secret values out of the summary.

Retrieve the Federated Session

Obtain current temporary credentials from the configured OIDC connection.

/oo AWS STS: Retrieve the temporary credentials from my AWS OIDC federation connection and report the expiration. Do not include secret credential values in the written summary.

Start Working with AWS STS

  1. Install OOMOL

    Set up oo CLI and the oo Skill in your agent.

    Install OOMOL →
  2. Connect AWS STS

    Connect AWS access credentials for AssumeRole, or configure OIDC federation.

    Connect AWS STS →
  3. Give Your Agent a Task

    Use /oo with the pages to read, the changes to make, and where to save the result.

    Connection Guide →

Choose Your Agent

  • Permission to assume the target IAM role and a compatible role trust policy.
  • Temporary source credentials also need their session token. Federated output reflects the configured lease; per-call policy fields do not create a new federated session.

AWS STS Tools

AWS STS provides temporary access under an IAM role. The connection supports access-key role assumption and retrieval of a configured federated credential lease.

Temporary Role Credentials

Obtain an AssumeRole session or return the configured federated credential lease.

2 tools

Assume Role

Use a connected AWS access key pair to call STS AssumeRole and return temporary credentials.

aws_sts.assume_role

Get Federated Credentials

Return AWS STS temporary credentials from the connected OOMOL OIDC federation configuration.

aws_sts.get_federated_credentials

Frequently Asked Questions

Can a session policy grant extra permissions?

No. Session policies restrict the permissions available through the role rather than adding access the role does not have.

What should I check before using the result?

Check the assumed role, expiration, and the presence of the session token. Temporary access requires the whole credential set.

Can I change a federated session by passing a different policy?

This action returns the credential lease already established by the federation configuration. It does not re-assume a role with new per-call policies.

Connect AWS STS

About AWS STS ↗