published on Monday, Jun 22, 2026 by tencentcloudstack
published on Monday, Jun 22, 2026 by tencentcloudstack
Provides a resource to perform an STS (Security Token Service) AssumeRole operation to obtain temporary security credentials.
Example Usage
Assume role with required parameters
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.StsAssumeRoleOperation("example", {
roleArn: "qcs::cam::uin/100000000000:roleName/tf-example",
roleSessionName: "tf-example",
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.StsAssumeRoleOperation("example",
role_arn="qcs::cam::uin/100000000000:roleName/tf-example",
role_session_name="tf-example")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewStsAssumeRoleOperation(ctx, "example", &tencentcloud.StsAssumeRoleOperationArgs{
RoleArn: pulumi.String("qcs::cam::uin/100000000000:roleName/tf-example"),
RoleSessionName: pulumi.String("tf-example"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.StsAssumeRoleOperation("example", new()
{
RoleArn = "qcs::cam::uin/100000000000:roleName/tf-example",
RoleSessionName = "tf-example",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.StsAssumeRoleOperation;
import com.pulumi.tencentcloud.StsAssumeRoleOperationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new StsAssumeRoleOperation("example", StsAssumeRoleOperationArgs.builder()
.roleArn("qcs::cam::uin/100000000000:roleName/tf-example")
.roleSessionName("tf-example")
.build());
}
}
resources:
example:
type: tencentcloud:StsAssumeRoleOperation
properties:
roleArn: qcs::cam::uin/100000000000:roleName/tf-example
roleSessionName: tf-example
Example coming soon!
Create StsAssumeRoleOperation Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new StsAssumeRoleOperation(name: string, args: StsAssumeRoleOperationArgs, opts?: CustomResourceOptions);@overload
def StsAssumeRoleOperation(resource_name: str,
args: StsAssumeRoleOperationArgs,
opts: Optional[ResourceOptions] = None)
@overload
def StsAssumeRoleOperation(resource_name: str,
opts: Optional[ResourceOptions] = None,
role_arn: Optional[str] = None,
role_session_name: Optional[str] = None,
duration_seconds: Optional[float] = None,
external_id: Optional[str] = None,
policy: Optional[str] = None,
serial_number: Optional[str] = None,
source_identity: Optional[str] = None,
sts_assume_role_operation_id: Optional[str] = None,
tags: Optional[Sequence[StsAssumeRoleOperationTagArgs]] = None,
token_code: Optional[str] = None)func NewStsAssumeRoleOperation(ctx *Context, name string, args StsAssumeRoleOperationArgs, opts ...ResourceOption) (*StsAssumeRoleOperation, error)public StsAssumeRoleOperation(string name, StsAssumeRoleOperationArgs args, CustomResourceOptions? opts = null)
public StsAssumeRoleOperation(String name, StsAssumeRoleOperationArgs args)
public StsAssumeRoleOperation(String name, StsAssumeRoleOperationArgs args, CustomResourceOptions options)
type: tencentcloud:StsAssumeRoleOperation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "tencentcloud_stsassumeroleoperation" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args StsAssumeRoleOperationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args StsAssumeRoleOperationArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args StsAssumeRoleOperationArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args StsAssumeRoleOperationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args StsAssumeRoleOperationArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
StsAssumeRoleOperation Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The StsAssumeRoleOperation resource accepts the following input properties:
- Role
Arn string - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- Role
Session stringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- Duration
Seconds double - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- External
Id string - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- Policy string
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- Serial
Number string - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- Source
Identity string - Caller identity uin.
- Sts
Assume stringRole Operation Id - ID of the resource.
-
List<Sts
Assume Role Operation Tag> - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- Token
Code string - MFA authentication code.
- Role
Arn string - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- Role
Session stringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- Duration
Seconds float64 - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- External
Id string - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- Policy string
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- Serial
Number string - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- Source
Identity string - Caller identity uin.
- Sts
Assume stringRole Operation Id - ID of the resource.
-
[]Sts
Assume Role Operation Tag Args - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- Token
Code string - MFA authentication code.
- role_
arn string - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role_
session_ stringname - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- duration_
seconds number - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- external_
id string - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy string
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- serial_
number string - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source_
identity string - Caller identity uin.
- sts_
assume_ stringrole_ operation_ id - ID of the resource.
- list(object)
- Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token_
code string - MFA authentication code.
- role
Arn String - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role
Session StringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- duration
Seconds Double - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- external
Id String - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy String
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- serial
Number String - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source
Identity String - Caller identity uin.
- sts
Assume StringRole Operation Id - ID of the resource.
-
List<Sts
Assume Role Operation Tag> - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token
Code String - MFA authentication code.
- role
Arn string - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role
Session stringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- duration
Seconds number - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- external
Id string - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy string
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- serial
Number string - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source
Identity string - Caller identity uin.
- sts
Assume stringRole Operation Id - ID of the resource.
-
Sts
Assume Role Operation Tag[] - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token
Code string - MFA authentication code.
- role_
arn str - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role_
session_ strname - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- duration_
seconds float - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- external_
id str - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy str
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- serial_
number str - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source_
identity str - Caller identity uin.
- sts_
assume_ strrole_ operation_ id - ID of the resource.
-
Sequence[Sts
Assume Role Operation Tag Args] - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token_
code str - MFA authentication code.
- role
Arn String - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role
Session StringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- duration
Seconds Number - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- external
Id String - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy String
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- serial
Number String - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source
Identity String - Caller identity uin.
- sts
Assume StringRole Operation Id - ID of the resource.
- List<Property Map>
- Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token
Code String - MFA authentication code.
Outputs
All input properties are implicitly available as output properties. Additionally, the StsAssumeRoleOperation resource produces the following output properties:
- Credentials
List<Sts
Assume Role Operation Credential> - Temporary access credentials.
- Expiration string
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- Expired
Time double - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- Id string
- The provider-assigned unique ID for this managed resource.
- Credentials
[]Sts
Assume Role Operation Credential - Temporary access credentials.
- Expiration string
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- Expired
Time float64 - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- Id string
- The provider-assigned unique ID for this managed resource.
- credentials list(object)
- Temporary access credentials.
- expiration string
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired_
time number - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- id string
- The provider-assigned unique ID for this managed resource.
- credentials
List<Sts
Assume Role Operation Credential> - Temporary access credentials.
- expiration String
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired
Time Double - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- id String
- The provider-assigned unique ID for this managed resource.
- credentials
Sts
Assume Role Operation Credential[] - Temporary access credentials.
- expiration string
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired
Time number - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- id string
- The provider-assigned unique ID for this managed resource.
- credentials
Sequence[Sts
Assume Role Operation Credential] - Temporary access credentials.
- expiration str
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired_
time float - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- id str
- The provider-assigned unique ID for this managed resource.
- credentials List<Property Map>
- Temporary access credentials.
- expiration String
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired
Time Number - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing StsAssumeRoleOperation Resource
Get an existing StsAssumeRoleOperation resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: StsAssumeRoleOperationState, opts?: CustomResourceOptions): StsAssumeRoleOperation@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
credentials: Optional[Sequence[StsAssumeRoleOperationCredentialArgs]] = None,
duration_seconds: Optional[float] = None,
expiration: Optional[str] = None,
expired_time: Optional[float] = None,
external_id: Optional[str] = None,
policy: Optional[str] = None,
role_arn: Optional[str] = None,
role_session_name: Optional[str] = None,
serial_number: Optional[str] = None,
source_identity: Optional[str] = None,
sts_assume_role_operation_id: Optional[str] = None,
tags: Optional[Sequence[StsAssumeRoleOperationTagArgs]] = None,
token_code: Optional[str] = None) -> StsAssumeRoleOperationfunc GetStsAssumeRoleOperation(ctx *Context, name string, id IDInput, state *StsAssumeRoleOperationState, opts ...ResourceOption) (*StsAssumeRoleOperation, error)public static StsAssumeRoleOperation Get(string name, Input<string> id, StsAssumeRoleOperationState? state, CustomResourceOptions? opts = null)public static StsAssumeRoleOperation get(String name, Output<String> id, StsAssumeRoleOperationState state, CustomResourceOptions options)resources: _: type: tencentcloud:StsAssumeRoleOperation get: id: ${id}import {
to = tencentcloud_stsassumeroleoperation.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Credentials
List<Sts
Assume Role Operation Credential> - Temporary access credentials.
- Duration
Seconds double - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- Expiration string
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- Expired
Time double - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- External
Id string - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- Policy string
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- Role
Arn string - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- Role
Session stringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- Serial
Number string - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- Source
Identity string - Caller identity uin.
- Sts
Assume stringRole Operation Id - ID of the resource.
-
List<Sts
Assume Role Operation Tag> - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- Token
Code string - MFA authentication code.
- Credentials
[]Sts
Assume Role Operation Credential Args - Temporary access credentials.
- Duration
Seconds float64 - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- Expiration string
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- Expired
Time float64 - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- External
Id string - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- Policy string
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- Role
Arn string - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- Role
Session stringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- Serial
Number string - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- Source
Identity string - Caller identity uin.
- Sts
Assume stringRole Operation Id - ID of the resource.
-
[]Sts
Assume Role Operation Tag Args - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- Token
Code string - MFA authentication code.
- credentials list(object)
- Temporary access credentials.
- duration_
seconds number - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- expiration string
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired_
time number - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- external_
id string - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy string
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- role_
arn string - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role_
session_ stringname - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- serial_
number string - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source_
identity string - Caller identity uin.
- sts_
assume_ stringrole_ operation_ id - ID of the resource.
- list(object)
- Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token_
code string - MFA authentication code.
- credentials
List<Sts
Assume Role Operation Credential> - Temporary access credentials.
- duration
Seconds Double - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- expiration String
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired
Time Double - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- external
Id String - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy String
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- role
Arn String - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role
Session StringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- serial
Number String - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source
Identity String - Caller identity uin.
- sts
Assume StringRole Operation Id - ID of the resource.
-
List<Sts
Assume Role Operation Tag> - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token
Code String - MFA authentication code.
- credentials
Sts
Assume Role Operation Credential[] - Temporary access credentials.
- duration
Seconds number - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- expiration string
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired
Time number - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- external
Id string - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy string
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- role
Arn string - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role
Session stringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- serial
Number string - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source
Identity string - Caller identity uin.
- sts
Assume stringRole Operation Id - ID of the resource.
-
Sts
Assume Role Operation Tag[] - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token
Code string - MFA authentication code.
- credentials
Sequence[Sts
Assume Role Operation Credential Args] - Temporary access credentials.
- duration_
seconds float - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- expiration str
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired_
time float - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- external_
id str - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy str
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- role_
arn str - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role_
session_ strname - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- serial_
number str - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source_
identity str - Caller identity uin.
- sts_
assume_ strrole_ operation_ id - ID of the resource.
-
Sequence[Sts
Assume Role Operation Tag Args] - Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token_
code str - MFA authentication code.
- credentials List<Property Map>
- Temporary access credentials.
- duration
Seconds Number - Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
- expiration String
- Expiration time of the temporary access credential in ISO8601 format UTC time.
- expired
Time Number - Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
- external
Id String - Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
- policy String
- Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
- role
Arn String - Resource description of the role, which can be obtained by clicking the role name in Access Management.
- role
Session StringName - User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
- serial
Number String - MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
- source
Identity String - Caller identity uin.
- sts
Assume StringRole Operation Id - ID of the resource.
- List<Property Map>
- Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
- token
Code String - MFA authentication code.
Supporting Types
StsAssumeRoleOperationCredential, StsAssumeRoleOperationCredentialArgs
- Tmp
Secret stringId - Temporary certificate secret ID. Maximum length is 1024 bytes.
- Tmp
Secret stringKey - Temporary certificate secret key. Maximum length is 1024 bytes.
- Token string
- Token. The token length is up to 4096 bytes.
- Tmp
Secret stringId - Temporary certificate secret ID. Maximum length is 1024 bytes.
- Tmp
Secret stringKey - Temporary certificate secret key. Maximum length is 1024 bytes.
- Token string
- Token. The token length is up to 4096 bytes.
- tmp_
secret_ stringid - Temporary certificate secret ID. Maximum length is 1024 bytes.
- tmp_
secret_ stringkey - Temporary certificate secret key. Maximum length is 1024 bytes.
- token string
- Token. The token length is up to 4096 bytes.
- tmp
Secret StringId - Temporary certificate secret ID. Maximum length is 1024 bytes.
- tmp
Secret StringKey - Temporary certificate secret key. Maximum length is 1024 bytes.
- token String
- Token. The token length is up to 4096 bytes.
- tmp
Secret stringId - Temporary certificate secret ID. Maximum length is 1024 bytes.
- tmp
Secret stringKey - Temporary certificate secret key. Maximum length is 1024 bytes.
- token string
- Token. The token length is up to 4096 bytes.
- tmp_
secret_ strid - Temporary certificate secret ID. Maximum length is 1024 bytes.
- tmp_
secret_ strkey - Temporary certificate secret key. Maximum length is 1024 bytes.
- token str
- Token. The token length is up to 4096 bytes.
- tmp
Secret StringId - Temporary certificate secret ID. Maximum length is 1024 bytes.
- tmp
Secret StringKey - Temporary certificate secret key. Maximum length is 1024 bytes.
- token String
- Token. The token length is up to 4096 bytes.
StsAssumeRoleOperationTag, StsAssumeRoleOperationTagArgs
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloudTerraform Provider.
published on Monday, Jun 22, 2026 by tencentcloudstack