pulumi-aws-kotlin/com.pulumi.aws.iam.kotlin/IamFunctions/getSessionContext

getSessionContext

suspend fun getSessionContext(argument: GetSessionContextPlainArgs): GetSessionContextResult

This data source provides information on the IAM source role of an STS assumed role. For non-role ARNs, this data source simply passes the ARN through in issuer_arn. For some AWS resources, multiple types of principals are allowed in the same argument (e.g., IAM users and IAM roles). However, these arguments often do not allow assumed-role (i.e., STS, temporary credential) principals. Given an STS ARN, this data source provides the ARN for the source IAM role.

Example Usage

Basic Example

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.IamFunctions;
import com.pulumi.aws.iam.inputs.GetSessionContextArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var example = IamFunctions.getSessionContext(GetSessionContextArgs.builder()
            .arn("arn:aws:sts::123456789012:assumed-role/Audien-Heaven/MatyNoyes")
            .build());
    }
}
Content copied to clipboard

Find the Provider's Source Role

Combined with aws.getCallerIdentity, you can get the current user's source IAM role ARN (issuer_arn) if you're using an assumed role. If you're not using an assumed role, the caller's (e.g., an IAM user's) ARN will simply be passed through. In environments where both IAM users and individuals using assumed roles need to apply the same configurations, this data source enables seamless use.

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.AwsFunctions;
import com.pulumi.aws.iam.IamFunctions;
import com.pulumi.aws.iam.inputs.GetSessionContextArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var current = AwsFunctions.getCallerIdentity();
        final var example = IamFunctions.getSessionContext(GetSessionContextArgs.builder()
            .arn(current.applyValue(getCallerIdentityResult -> getCallerIdentityResult.arn()))
            .build());
    }
}
Content copied to clipboard

Return

A collection of values returned by getSessionContext.

Parameters

argument

A collection of arguments for invoking getSessionContext.

suspend fun getSessionContext(arn: String): GetSessionContextResult

Return

A collection of values returned by getSessionContext.

Parameters

arn

ARN for an assumed role.

If arn is a non-role ARN, the provider gives no error and issuer_arn will be equal to the arn value. For STS assumed-role ARNs, the provider gives an error if the identified IAM role does not exist.

See also

.

suspend fun getSessionContext(argument: suspend GetSessionContextPlainArgsBuilder.() -> Unit): GetSessionContextResult

Return

A collection of values returned by getSessionContext.

Parameters

argument

Builder for com.pulumi.aws.iam.kotlin.inputs.GetSessionContextPlainArgs.

See also

.