positional arguments:¶

ROLE

the role to assume

optional arguments:¶

-d SECONDS, --duration SECONDS

number of seconds the credentials should be valid for (900-3600) (default: 900)

--session-name PATH

role session identifier to include in the assumed role user ID (default: automatic)

-c

generate C-shell commands on stdout (default if SHELL looks like a csh-style shell

-s

generate Bourne shell commands on stdout (default if SHELL does not look like a csh-style shell

--policy-content POLICY_CONTENT

an IAM policy further restricting what the credentials will be allowed to do. This cannot grant additional permissions.

--policy-document FILE

file containing an IAM policy further restricting what the credentials will be allowed to do. This cannot grant additional permissions.

--external-id STR

external ID to use for comparison with policies

--mfa-serial MFA

MFA token serial number

--mfa-code CODE

MFA token code

-U URL, --url URL

token service endpoint URL

--region USER@REGION

region and/or user names to search when looking up config file data

-I KEY_ID, --access-key-id KEY_ID

-S KEY, --secret-key KEY

--security-token TOKEN

--debug

show debugging output

--debugger

launch interactive debugger on error

--version

show the program's version and exit

-h, --help

show this help message and exit