Welcome

Use the Account Access Runtime API to list the roles that you can access and retrieve temporary Amazon Web Services credentials for those roles. You authenticate with a bearer token from IAM Identity Center with the account_access:read_only and account_access:assume scopes. Each request is scoped to a tenant.

This document was last published on November 6, 2026.