# AWS Security Token Service API Reference

> AWS provides AWS Security Token Service (AWS STS) as a web service that enables you to request temporary, limited-privilege credentials for users. This guide describes the AWS STS API. For more information, see Temporary Security Credentials in the IAM User Guide.

- [Welcome](https://docs.aws.amazon.com/STS/latest/APIReference/Welcome.md)
- [Common Parameters](https://docs.aws.amazon.com/STS/latest/APIReference/CommonParameters.md)
- [Common Error Types](https://docs.aws.amazon.com/STS/latest/APIReference/CommonErrors.md)

## [Actions](https://docs.aws.amazon.com/STS/latest/APIReference/API_Operations.md)

- [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.md): Returns a set of temporary security credentials that you can use to access AWS resources.
- [AssumeRoleWithSAML](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithSAML.md): Returns a set of temporary security credentials for users who have been authenticated via a SAML authentication response.
- [AssumeRoleWithWebIdentity](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.md): Returns a set of temporary security credentials for users who have been authenticated in a mobile or web application with a web identity provider.
- [AssumeRoot](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoot.md): Returns a set of short term credentials you can use to perform privileged tasks on a member account in your organization.
- [DecodeAuthorizationMessage](https://docs.aws.amazon.com/STS/latest/APIReference/API_DecodeAuthorizationMessage.md): Decodes additional information about the authorization status of a request from an encoded message returned in response to an AWS request.
- [GetAccessKeyInfo](https://docs.aws.amazon.com/STS/latest/APIReference/API_GetAccessKeyInfo.md): Returns the account identifier for the specified access key ID.
- [GetCallerIdentity](https://docs.aws.amazon.com/STS/latest/APIReference/API_GetCallerIdentity.md): Returns details about the IAM user or role whose credentials are used to call the operation.
- [GetDelegatedAccessToken](https://docs.aws.amazon.com/STS/latest/APIReference/API_GetDelegatedAccessToken.md): Exchanges a trade-in token for temporary AWS credentials with the permissions associated with the assumed principal.
- [GetFederationToken](https://docs.aws.amazon.com/STS/latest/APIReference/API_GetFederationToken.md): Returns a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for a user.
- [GetSessionToken](https://docs.aws.amazon.com/STS/latest/APIReference/API_GetSessionToken.md): Returns a set of temporary credentials for an AWS account or IAM user.
- [GetWebIdentityToken](https://docs.aws.amazon.com/STS/latest/APIReference/API_GetWebIdentityToken.md): Returns a signed JSON Web Token (JWT) that represents the calling AWS identity.


## [Data Types](https://docs.aws.amazon.com/STS/latest/APIReference/API_Types.md)

- [AssumedRoleUser](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumedRoleUser.md): The identifiers for the temporary security credentials that the operation returns.
- [Credentials](https://docs.aws.amazon.com/STS/latest/APIReference/API_Credentials.md): AWS credentials for API authentication.
- [FederatedUser](https://docs.aws.amazon.com/STS/latest/APIReference/API_FederatedUser.md): Identifiers for the federated user that is associated with the credentials.
- [PolicyDescriptorType](https://docs.aws.amazon.com/STS/latest/APIReference/API_PolicyDescriptorType.md): A reference to the IAM managed policy that is passed as a session policy for a role session or a federated user session.
- [ProvidedContext](https://docs.aws.amazon.com/STS/latest/APIReference/API_ProvidedContext.md): Contains information about the provided context.
- [Tag](https://docs.aws.amazon.com/STS/latest/APIReference/API_Tag.md): You can pass custom key-value pair attributes when you assume a role or federate a user.


## Full content

The entire guide is also available as a single markdown file, useful for feeding the full guide to an LLM in one pass:

- [Complete guide (single file)](https://docs.aws.amazon.com/STS/latest/APIReference/full.md)