@@ -78,10 +78,10 @@ public interface AWSSecurityTokenService {
7878 * an AWS account or IAM user. The credentials consist of an Access Key
7979 * ID, a Secret Access Key, and a security token. These credentials are
8080 * valid for the specified duration only. The session duration for IAM
81- * users can be between one and 36 hours, with a default of 12 hours. The
82- * session duration for AWS account owners is restricted to one hour.
83- * Providing the AWS Multi-Factor Authentication (MFA) device serial
84- * number and the token code is optional.
81+ * users can be between 15 minutes and 36 hours, with a default of 12
82+ * hours. The session duration for AWS account owners is restricted to a
83+ * maximum of one hour. Providing the AWS Multi-Factor Authentication
84+ * (MFA) device serial number and the token code is optional.
8585 * </p>
8686 * <p>
8787 * For more information about using GetSessionToken to create temporary
@@ -116,8 +116,9 @@ public GetSessionTokenResult getSessionToken(GetSessionTokenRequest getSessionTo
116116 * for a federated user with the user name and policy specified in the
117117 * request. The credentials consist of an Access Key ID, a Secret Access
118118 * Key, and a security token. Credentials created by IAM users are valid
119- * for the specified duration, between one and 36 hours; credentials
120- * created using account credentials last one hour.
119+ * for the specified duration, between 15 minutes and 36 hours;
120+ * credentials created using account credentials have a maximum duration
121+ * of one hour.
121122 * </p>
122123 * <p>
123124 * The federated user who holds these credentials has any permissions
@@ -127,12 +128,12 @@ public GetSessionTokenResult getSessionToken(GetSessionTokenRequest getSessionTo
127128 * Amazon Resource Name (ARN). For more information about how token
128129 * permissions work, see <a
129130 * ocs.amazonwebservices.com/IAM/latest/UserGuide/TokenPermissions.html">
130- * Controlling Permissions in Temporary Credentials </a> in <i>Using AWS
131- * Identity and Access Management </i> . For information about using
132- * GetFederationToken to create temporary credentials, see <a
131+ * Controlling Permissions in Temporary Credentials </a> in <i>Using
132+ * IAM </i> . For information about using GetFederationToken to create
133+ * temporary credentials, see <a
133134 * cs.amazonwebservices.com/IAM/latest/UserGuide/CreatingFedTokens.html">
134135 * Creating Temporary Credentials to Enable Access for Federated Users
135- * </a> in <i>Using AWS Identity and Access Management </i> .
136+ * </a> in <i>Using IAM </i> .
136137 * </p>
137138 *
138139 * @param getFederationTokenRequest Container for the necessary
@@ -156,16 +157,76 @@ public GetSessionTokenResult getSessionToken(GetSessionTokenRequest getSessionTo
156157 public GetFederationTokenResult getFederationToken (GetFederationTokenRequest getFederationTokenRequest )
157158 throws AmazonServiceException , AmazonClientException ;
158159
160+ /**
161+ * <p>
162+ * The <code>AssumeRole</code> action returns a set of temporary
163+ * security credentials that you can use to access resources that are
164+ * defined in the role's policy. The returned credentials consist of an
165+ * Access Key ID, a Secret Access Key, and a security token.
166+ * </p>
167+ * <p>
168+ * <b>Important:</b> Only IAM users can assume a role. If you use AWS
169+ * account credentials to call AssumeRole, access is denied.
170+ * </p>
171+ * <p>
172+ * The credentials are valid for the duration that you specified when
173+ * calling <code>AssumeRole</code> , which can be from 15 minutes to 1
174+ * hour.
175+ * </p>
176+ * <p>
177+ * When you assume a role, you have the privileges that are defined in
178+ * the role. You can further restrict the privileges by passing a policy
179+ * when calling <code>AssumeRole</code> .
180+ *
181+ * </p>
182+ * <p>
183+ * To assume a role, you must be an IAM user from a trusted entity and
184+ * have permission to call <code>AssumeRole</code> .
185+ * Trusted entites are defined when the IAM role is created.
186+ * Permission to call <code>AssumeRole</code> is defined in your or your
187+ * group's IAM policy.
188+ * </p>
189+ * <p>
190+ * </p>
191+ * <p>
192+ * </p>
193+ * <p>
194+ * </p>
195+ * <p>
196+ * </p>
197+ * <p>
198+ * </p>
199+ *
200+ * @param assumeRoleRequest Container for the necessary parameters to
201+ * execute the AssumeRole service method on AWSSecurityTokenService.
202+ *
203+ * @return The response from the AssumeRole service method, as returned
204+ * by AWSSecurityTokenService.
205+ *
206+ * @throws PackedPolicyTooLargeException
207+ * @throws MalformedPolicyDocumentException
208+ *
209+ * @throws AmazonClientException
210+ * If any internal errors are encountered inside the client while
211+ * attempting to make the request or handle the response. For example
212+ * if a network connection is not available.
213+ * @throws AmazonServiceException
214+ * If an error response is returned by AWSSecurityTokenService indicating
215+ * either a problem with the data in the request, or a server side issue.
216+ */
217+ public AssumeRoleResult assumeRole (AssumeRoleRequest assumeRoleRequest )
218+ throws AmazonServiceException , AmazonClientException ;
219+
159220 /**
160221 * <p>
161222 * The GetSessionToken action returns a set of temporary credentials for
162223 * an AWS account or IAM user. The credentials consist of an Access Key
163224 * ID, a Secret Access Key, and a security token. These credentials are
164225 * valid for the specified duration only. The session duration for IAM
165- * users can be between one and 36 hours, with a default of 12 hours. The
166- * session duration for AWS account owners is restricted to one hour.
167- * Providing the AWS Multi-Factor Authentication (MFA) device serial
168- * number and the token code is optional.
226+ * users can be between 15 minutes and 36 hours, with a default of 12
227+ * hours. The session duration for AWS account owners is restricted to a
228+ * maximum of one hour. Providing the AWS Multi-Factor Authentication
229+ * (MFA) device serial number and the token code is optional.
169230 * </p>
170231 * <p>
171232 * For more information about using GetSessionToken to create temporary
0 commit comments