Last updated：2021-10-29 17:57:25
This topic describes how an IAM user uses the Kingsoft Cloud console and API to assume an IAM role whose trusted entity is a Kingsoft Cloud account.
Only IAM users can assume a role. A Kingsoft Cloud account cannot assume a role.
After you log in to the Kingsoft Cloud console as an IAM user by using SSO, you can assume an IAM role by switching your login identity to the role.
- After the switching is complete, your login identity changes to the IAM role, and you have the permissions that are granted to the IAM role.
- The smaller value of the maximum session duration of the IAM role and login session validity period of the IAM user is used as the login session validity period of the IAM role.
An authorized IAM user can use an AccessKey to call the AssumeRole API operation to obtain the STS token of an IAM role.
Did you find the above information helpful?
Please give us your feedback.
Thank you for your feedback.