Class AssumeRoleOptions
- Namespace
- DynaSharp.Credentials
- Assembly
- DynaSharp.dll
The optional settings of AssumeRoleCredentialsProvider, which a profile spells external_id and duration_seconds.
public sealed class AssumeRoleOptions- Inheritance
-
AssumeRoleOptions
- Inherited Members
Constructors
AssumeRoleOptions()
public AssumeRoleOptions()Properties
Duration
Gets how long the session lasts: 15 minutes to 12 hours in whole seconds, and at most the maximum session duration of the role, which STS checks. null, the default, asks for none, so the session lasts the default hour. A session of 15 minutes is refreshed every 30 seconds, because it never leaves the advisory refresh period of 15 minutes before its expiration.
public TimeSpan? Duration { get; init; }Property Value
ExternalId
Gets the external id that the trust policy of the role asks for, which a third party that assumes a role in the account of a customer passes (the confused deputy problem). null, the default, sends none.
public string? ExternalId { get; init; }Property Value
Region
Gets the region of the STS endpoint, which is also the region the request is signed for. null, the default, looks for it
as a client does, in AWS_REGION, AWS_DEFAULT_REGION and the profile, at each fetch that needs it.
public AwsRegion? Region { get; init; }Property Value
StsEndpoint
Gets the endpoint of STS, for example a VPC endpoint: an absolute http or https URL without user info, path, query or fragment. It goes ahead of
AWS_ENDPOINT_URL_STS, AWS_ENDPOINT_URL and the region. The request is signed for Region or the region found as a
client finds it, and for us-east-1 when there is none. null, the default, works the endpoint out at each fetch.
public Uri? StsEndpoint { get; init; }