# Credentials

Specifies a target role assumed by the State Machine's execution role for invoking the task's resource.

- Source: [`aws-stepfunctions/lib/task-credentials.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-stepfunctions/lib/task-credentials.ts#L10)
- Type last changed: v2.54.0 · 7 Dec 2022

## Example

```ts
import * as lambda from 'aws-cdk-lib/aws-lambda';

declare const submitLambda: lambda.Function;
declare const iamRole: iam.Role;

// use a fixed role for all task invocations
const role = sfn.TaskRole.fromRole(iamRole);
// or use a json expression to resolve the role at runtime based on task inputs
//const role = sfn.TaskRole.fromRoleArnJsonPath('$.RoleArn');

const submitJob = new tasks.LambdaInvoke(this, 'Submit Job', {
  lambdaFunction: submitLambda,
  outputPath: '$.Payload',
  // use credentials
  credentials: { role },
});
```

## Properties

- `role`: [TaskRole](/cdk/api/v2/docs/aws-cdk-lib.aws_stepfunctions.TaskRole.html) (required) — The role to be assumed for executing the Task.