Temporary Credentials
Identity & AccessTemporary credentials are short-lived AWS security credentials issued by the AWS Security Token Service (STS). They consist of an access key ID, a secret access key, and a session token, and they expire automatically after a configurable duration.
Unlike long-term access keys, temporary credentials cannot be leaked permanently - even if stolen, they expire. This is why AWS recommends using IAM roles (which use temporary credentials) instead of IAM users with long-term access keys for every use case possible.
Related Terms
The process of obtaining temporary security credentials by calling AWS STS to take on the permissions of an IAM role.
An AWS identity with temporary credentials that can be assumed by users, services, or applications to perform actions without long-term access keys.
A long-term credential pair (access key ID + secret access key) used to authenticate programmatic requests to AWS. Should be replaced with IAM roles wherever possible.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.