Struct AssumeRoleGrant 

pub struct AssumeRoleGrant { /* private fields */ }

Available on crate feature services-s3 only.

A typed AWS STS AssumeRole authority transition.

The source credential authorizes this transition, but the returned credential derives its permissions from the target role and optional session policies. It is not necessarily a monotonic downscope of the source principal’s direct permissions.

Validation is performed before the STS request is signed or sent. AWS still owns trust-policy evaluation, the target role’s configured maximum session duration, the one-hour role-chaining limit, inherited transitive-tag conflicts, and packed-policy limits that cannot be determined from reqsign’s opaque source credential locally.

Implementations

impl AssumeRoleGrant

pub fn new( role_arn: impl Into<String>, role_session_name: impl Into<String>, ) -> AssumeRoleGrant

Create a grant for one target role and auditable role session name.

pub fn with_external_id(self, external_id: impl Into<String>) -> AssumeRoleGrant

Set the external ID required by the target role’s trust policy.

pub fn with_policy(self, policy: impl Into<String>) -> AssumeRoleGrant

Set one inline JSON session policy.

Session policies restrict the target role session. They cannot grant permissions beyond the target role’s identity-based policy.

pub fn with_policy_arns(self, policy_arns: Vec<String>) -> AssumeRoleGrant

Set up to ten managed session policy ARNs.

pub fn with_tags(self, tags: Vec<(String, String)>) -> AssumeRoleGrant

Set up to fifty session tags.

pub fn with_mfa( self, serial_number: impl Into<String>, token_code: impl Into<String>, ) -> AssumeRoleGrant

Bind the MFA device serial number and current six-digit token code.

Trait Implementations

impl Clone for AssumeRoleGrant

fn clone(&self) -> AssumeRoleGrant

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AssumeRoleGrant

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.