AWS IAM documentation change

Service: IAM · 2025-06-25 · Documentation medium

File: IAM/latest/UserGuide/sts_example_sts_GetSessionToken_section.md

Summary

Added PowerShell V5 examples for Get-STSSessionToken with parameters including MFA authentication and temporary credential duration

Security assessment

The change documents security features for obtaining temporary credentials with MFA protection and session duration limits. While it enhances security documentation, there's no evidence of addressing a specific vulnerability.

Diff

diff --git a/IAM/latest/UserGuide/sts_example_sts_GetSessionToken_section.md b/IAM/latest/UserGuide/sts_example_sts_GetSessionToken_section.md
index 4055b4e5e..a7453786d 100644
--- a//IAM/latest/UserGuide/sts_example_sts_GetSessionToken_section.md
+++ b//IAM/latest/UserGuide/sts_example_sts_GetSessionToken_section.md
@@ -101,0 +102,47 @@ PowerShell
+**Tools for PowerShell V5**
+    
+
+**Example 1: Returns an`Amazon.RuntimeAWSCredentials` instance containing temporary credentials valid for a set period of time. The credentials used to request temporary credentials are inferred from the current shell defaults. To specify other credentials, use the -ProfileName or -AccessKey/-SecretKey parameters.**
+    
+    
+    Get-STSSessionToken
+    
+
+**Output:**
+    
+    
+    AccessKeyId                             Expiration                              SecretAccessKey                        SessionToken
+    -----------                             ----------                              ---------------                        ------------
+    EXAMPLEACCESSKEYID                      2/16/2015 9:12:28 PM                    examplesecretaccesskey...              SamPleTokeN.....
+
+**Example 2: Returns an`Amazon.RuntimeAWSCredentials` instance containing temporary credentials valid for one hour. The credentials used to make the request are obtained from the specified profile.**
+    
+    
+    Get-STSSessionToken -DurationInSeconds 3600 -ProfileName myprofile
+    
+
+**Output:**
+    
+    
+    AccessKeyId                             Expiration                              SecretAccessKey                        SessionToken
+    -----------                             ----------                              ---------------                        ------------
+    EXAMPLEACCESSKEYID                      2/16/2015 9:12:28 PM                    examplesecretaccesskey...              SamPleTokeN.....
+
+**Example 3: Returns an`Amazon.RuntimeAWSCredentials` instance containing temporary credentials valid for one hour using the identification number of the MFA device associated with the account whose credentials are specified in the profile 'myprofilename' and the value provided by the device.**
+    
+    
+    Get-STSSessionToken -DurationInSeconds 3600 -ProfileName myprofile -SerialNumber YourMFADeviceSerialNumber -TokenCode 123456
+    
+
+**Output:**
+    
+    
+    AccessKeyId                             Expiration                              SecretAccessKey                        SessionToken
+    -----------                             ----------                              ---------------                        ------------
+    EXAMPLEACCESSKEYID                      2/16/2015 9:12:28 PM                    examplesecretaccesskey...              SamPleTokeN.....
+
+  * For API details, see [GetSessionToken](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. 
+
+
+
+