The identifiers for the temporary security credentials that the operation returns.

Amazon Web Services credentials for API authentication.

The web identity token that was passed is expired or is not valid.

Identifiers for the federated user that is associated with the credentials.

The request could not be fulfilled because the identity provider (IDP) that was asked to verify the incoming identity token could not be reached.

The identity provider (IdP) reported that authentication failed.

The error returned if the message passed to DecodeAuthorizationMessage was invalid.

The web identity token that was passed could not be validated by Amazon Web Services.

The request was rejected because the policy document was malformed.

The request was rejected because the total packed size of the session policies and session tags combined was too large.

A reference to the IAM managed policy that is passed as a session policy for a role session or a federated user session.

Contains information about the provided context.

STS is not activated in the requested region for the account that is being asked to generate credentials.

You can pass custom key-value pair attributes when you assume a role or federate a user.