# Welcome
<a name="Welcome"></a>

Use the Account Access Runtime API to list the roles that you can access and retrieve temporary Amazon Web Services credentials for those roles. You authenticate with a bearer token from IAM Identity Center with the `account_access:read_only` and `account_access:assume` scopes. Each request is scoped to a tenant.

This document was last published on November 6, 2026.