1. Packages
  2. Packages
  3. Tencentcloud Provider
  4. API Docs
  5. StsAssumeRoleOperation
Viewing docs for tencentcloud 1.83.3
published on Friday, Jun 19, 2026 by tencentcloudstack
Viewing docs for tencentcloud 1.83.3
published on Friday, Jun 19, 2026 by tencentcloudstack

    Provides a resource to perform an STS (Security Token Service) AssumeRole operation to obtain temporary security credentials.

    Example Usage

    Assume role with required parameters

    import * as pulumi from "@pulumi/pulumi";
    import * as tencentcloud from "@pulumi/tencentcloud";
    
    const example = new tencentcloud.StsAssumeRoleOperation("example", {
        roleArn: "qcs::cam::uin/100000000000:roleName/tf-example",
        roleSessionName: "tf-example",
    });
    
    import pulumi
    import pulumi_tencentcloud as tencentcloud
    
    example = tencentcloud.StsAssumeRoleOperation("example",
        role_arn="qcs::cam::uin/100000000000:roleName/tf-example",
        role_session_name="tf-example")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := tencentcloud.NewStsAssumeRoleOperation(ctx, "example", &tencentcloud.StsAssumeRoleOperationArgs{
    			RoleArn:         pulumi.String("qcs::cam::uin/100000000000:roleName/tf-example"),
    			RoleSessionName: pulumi.String("tf-example"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Tencentcloud = Pulumi.Tencentcloud;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Tencentcloud.StsAssumeRoleOperation("example", new()
        {
            RoleArn = "qcs::cam::uin/100000000000:roleName/tf-example",
            RoleSessionName = "tf-example",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.tencentcloud.StsAssumeRoleOperation;
    import com.pulumi.tencentcloud.StsAssumeRoleOperationArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new StsAssumeRoleOperation("example", StsAssumeRoleOperationArgs.builder()
                .roleArn("qcs::cam::uin/100000000000:roleName/tf-example")
                .roleSessionName("tf-example")
                .build());
    
        }
    }
    
    resources:
      example:
        type: tencentcloud:StsAssumeRoleOperation
        properties:
          roleArn: qcs::cam::uin/100000000000:roleName/tf-example
          roleSessionName: tf-example
    
    Example coming soon!
    

    Create StsAssumeRoleOperation Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new StsAssumeRoleOperation(name: string, args: StsAssumeRoleOperationArgs, opts?: CustomResourceOptions);
    @overload
    def StsAssumeRoleOperation(resource_name: str,
                               args: StsAssumeRoleOperationArgs,
                               opts: Optional[ResourceOptions] = None)
    
    @overload
    def StsAssumeRoleOperation(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               role_arn: Optional[str] = None,
                               role_session_name: Optional[str] = None,
                               duration_seconds: Optional[float] = None,
                               external_id: Optional[str] = None,
                               policy: Optional[str] = None,
                               serial_number: Optional[str] = None,
                               source_identity: Optional[str] = None,
                               sts_assume_role_operation_id: Optional[str] = None,
                               tags: Optional[Sequence[StsAssumeRoleOperationTagArgs]] = None,
                               token_code: Optional[str] = None)
    func NewStsAssumeRoleOperation(ctx *Context, name string, args StsAssumeRoleOperationArgs, opts ...ResourceOption) (*StsAssumeRoleOperation, error)
    public StsAssumeRoleOperation(string name, StsAssumeRoleOperationArgs args, CustomResourceOptions? opts = null)
    public StsAssumeRoleOperation(String name, StsAssumeRoleOperationArgs args)
    public StsAssumeRoleOperation(String name, StsAssumeRoleOperationArgs args, CustomResourceOptions options)
    
    type: tencentcloud:StsAssumeRoleOperation
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "tencentcloud_stsassumeroleoperation" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args StsAssumeRoleOperationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args StsAssumeRoleOperationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args StsAssumeRoleOperationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args StsAssumeRoleOperationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args StsAssumeRoleOperationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    StsAssumeRoleOperation Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The StsAssumeRoleOperation resource accepts the following input properties:

    RoleArn string
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    RoleSessionName string
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    DurationSeconds double
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    ExternalId string
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    Policy string
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    SerialNumber string
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    SourceIdentity string
    Caller identity uin.
    StsAssumeRoleOperationId string
    ID of the resource.
    Tags List<StsAssumeRoleOperationTag>
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    TokenCode string
    MFA authentication code.
    RoleArn string
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    RoleSessionName string
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    DurationSeconds float64
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    ExternalId string
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    Policy string
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    SerialNumber string
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    SourceIdentity string
    Caller identity uin.
    StsAssumeRoleOperationId string
    ID of the resource.
    Tags []StsAssumeRoleOperationTagArgs
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    TokenCode string
    MFA authentication code.
    role_arn string
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    role_session_name string
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    duration_seconds number
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    external_id string
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy string
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    serial_number string
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    source_identity string
    Caller identity uin.
    sts_assume_role_operation_id string
    ID of the resource.
    tags list(object)
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    token_code string
    MFA authentication code.
    roleArn String
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    roleSessionName String
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    durationSeconds Double
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    externalId String
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy String
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    serialNumber String
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    sourceIdentity String
    Caller identity uin.
    stsAssumeRoleOperationId String
    ID of the resource.
    tags List<StsAssumeRoleOperationTag>
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    tokenCode String
    MFA authentication code.
    roleArn string
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    roleSessionName string
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    durationSeconds number
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    externalId string
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy string
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    serialNumber string
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    sourceIdentity string
    Caller identity uin.
    stsAssumeRoleOperationId string
    ID of the resource.
    tags StsAssumeRoleOperationTag[]
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    tokenCode string
    MFA authentication code.
    role_arn str
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    role_session_name str
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    duration_seconds float
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    external_id str
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy str
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    serial_number str
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    source_identity str
    Caller identity uin.
    sts_assume_role_operation_id str
    ID of the resource.
    tags Sequence[StsAssumeRoleOperationTagArgs]
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    token_code str
    MFA authentication code.
    roleArn String
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    roleSessionName String
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    durationSeconds Number
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    externalId String
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy String
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    serialNumber String
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    sourceIdentity String
    Caller identity uin.
    stsAssumeRoleOperationId String
    ID of the resource.
    tags List<Property Map>
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    tokenCode String
    MFA authentication code.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the StsAssumeRoleOperation resource produces the following output properties:

    Credentials List<StsAssumeRoleOperationCredential>
    Temporary access credentials.
    Expiration string
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    ExpiredTime double
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    Id string
    The provider-assigned unique ID for this managed resource.
    Credentials []StsAssumeRoleOperationCredential
    Temporary access credentials.
    Expiration string
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    ExpiredTime float64
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    Id string
    The provider-assigned unique ID for this managed resource.
    credentials list(object)
    Temporary access credentials.
    expiration string
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expired_time number
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    id string
    The provider-assigned unique ID for this managed resource.
    credentials List<StsAssumeRoleOperationCredential>
    Temporary access credentials.
    expiration String
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expiredTime Double
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    id String
    The provider-assigned unique ID for this managed resource.
    credentials StsAssumeRoleOperationCredential[]
    Temporary access credentials.
    expiration string
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expiredTime number
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    id string
    The provider-assigned unique ID for this managed resource.
    credentials Sequence[StsAssumeRoleOperationCredential]
    Temporary access credentials.
    expiration str
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expired_time float
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    id str
    The provider-assigned unique ID for this managed resource.
    credentials List<Property Map>
    Temporary access credentials.
    expiration String
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expiredTime Number
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing StsAssumeRoleOperation Resource

    Get an existing StsAssumeRoleOperation resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: StsAssumeRoleOperationState, opts?: CustomResourceOptions): StsAssumeRoleOperation
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            credentials: Optional[Sequence[StsAssumeRoleOperationCredentialArgs]] = None,
            duration_seconds: Optional[float] = None,
            expiration: Optional[str] = None,
            expired_time: Optional[float] = None,
            external_id: Optional[str] = None,
            policy: Optional[str] = None,
            role_arn: Optional[str] = None,
            role_session_name: Optional[str] = None,
            serial_number: Optional[str] = None,
            source_identity: Optional[str] = None,
            sts_assume_role_operation_id: Optional[str] = None,
            tags: Optional[Sequence[StsAssumeRoleOperationTagArgs]] = None,
            token_code: Optional[str] = None) -> StsAssumeRoleOperation
    func GetStsAssumeRoleOperation(ctx *Context, name string, id IDInput, state *StsAssumeRoleOperationState, opts ...ResourceOption) (*StsAssumeRoleOperation, error)
    public static StsAssumeRoleOperation Get(string name, Input<string> id, StsAssumeRoleOperationState? state, CustomResourceOptions? opts = null)
    public static StsAssumeRoleOperation get(String name, Output<String> id, StsAssumeRoleOperationState state, CustomResourceOptions options)
    resources:  _:    type: tencentcloud:StsAssumeRoleOperation    get:      id: ${id}
    import {
      to = tencentcloud_stsassumeroleoperation.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Credentials List<StsAssumeRoleOperationCredential>
    Temporary access credentials.
    DurationSeconds double
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    Expiration string
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    ExpiredTime double
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    ExternalId string
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    Policy string
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    RoleArn string
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    RoleSessionName string
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    SerialNumber string
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    SourceIdentity string
    Caller identity uin.
    StsAssumeRoleOperationId string
    ID of the resource.
    Tags List<StsAssumeRoleOperationTag>
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    TokenCode string
    MFA authentication code.
    Credentials []StsAssumeRoleOperationCredentialArgs
    Temporary access credentials.
    DurationSeconds float64
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    Expiration string
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    ExpiredTime float64
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    ExternalId string
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    Policy string
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    RoleArn string
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    RoleSessionName string
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    SerialNumber string
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    SourceIdentity string
    Caller identity uin.
    StsAssumeRoleOperationId string
    ID of the resource.
    Tags []StsAssumeRoleOperationTagArgs
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    TokenCode string
    MFA authentication code.
    credentials list(object)
    Temporary access credentials.
    duration_seconds number
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    expiration string
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expired_time number
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    external_id string
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy string
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    role_arn string
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    role_session_name string
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    serial_number string
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    source_identity string
    Caller identity uin.
    sts_assume_role_operation_id string
    ID of the resource.
    tags list(object)
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    token_code string
    MFA authentication code.
    credentials List<StsAssumeRoleOperationCredential>
    Temporary access credentials.
    durationSeconds Double
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    expiration String
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expiredTime Double
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    externalId String
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy String
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    roleArn String
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    roleSessionName String
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    serialNumber String
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    sourceIdentity String
    Caller identity uin.
    stsAssumeRoleOperationId String
    ID of the resource.
    tags List<StsAssumeRoleOperationTag>
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    tokenCode String
    MFA authentication code.
    credentials StsAssumeRoleOperationCredential[]
    Temporary access credentials.
    durationSeconds number
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    expiration string
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expiredTime number
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    externalId string
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy string
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    roleArn string
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    roleSessionName string
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    serialNumber string
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    sourceIdentity string
    Caller identity uin.
    stsAssumeRoleOperationId string
    ID of the resource.
    tags StsAssumeRoleOperationTag[]
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    tokenCode string
    MFA authentication code.
    credentials Sequence[StsAssumeRoleOperationCredentialArgs]
    Temporary access credentials.
    duration_seconds float
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    expiration str
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expired_time float
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    external_id str
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy str
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    role_arn str
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    role_session_name str
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    serial_number str
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    source_identity str
    Caller identity uin.
    sts_assume_role_operation_id str
    ID of the resource.
    tags Sequence[StsAssumeRoleOperationTagArgs]
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    token_code str
    MFA authentication code.
    credentials List<Property Map>
    Temporary access credentials.
    durationSeconds Number
    Specifies the validity period of the temporary access credential in seconds. Default is 7200 seconds, maximum is 43200 seconds.
    expiration String
    Expiration time of the temporary access credential in ISO8601 format UTC time.
    expiredTime Number
    Expiration time of the temporary access credential, returned as a Unix timestamp accurate to seconds.
    externalId String
    Role external ID, which can be obtained by clicking the role name in Access Management. Length is between 2 and 128.
    policy String
    Policy description. The policy syntax refers to CAM Policy Syntax. The policy cannot contain the principal element.
    roleArn String
    Resource description of the role, which can be obtained by clicking the role name in Access Management.
    roleSessionName String
    User-defined temporary session name. Length is between 2 and 128, can contain uppercase and lowercase characters, numbers, and special characters: =,.@_-.
    serialNumber String
    MFA serial number associated with the CAM user making the call. Format: qcs::cam:uin/${ownerUin}::mfa/${mfaType}. mfaType supports softToken.
    sourceIdentity String
    Caller identity uin.
    stsAssumeRoleOperationId String
    ID of the resource.
    tags List<Property Map>
    Session tag list. A maximum of 50 session tags can be passed, and duplicate tag keys are not supported.
    tokenCode String
    MFA authentication code.

    Supporting Types

    StsAssumeRoleOperationCredential, StsAssumeRoleOperationCredentialArgs

    TmpSecretId string
    Temporary certificate secret ID. Maximum length is 1024 bytes.
    TmpSecretKey string
    Temporary certificate secret key. Maximum length is 1024 bytes.
    Token string
    Token. The token length is up to 4096 bytes.
    TmpSecretId string
    Temporary certificate secret ID. Maximum length is 1024 bytes.
    TmpSecretKey string
    Temporary certificate secret key. Maximum length is 1024 bytes.
    Token string
    Token. The token length is up to 4096 bytes.
    tmp_secret_id string
    Temporary certificate secret ID. Maximum length is 1024 bytes.
    tmp_secret_key string
    Temporary certificate secret key. Maximum length is 1024 bytes.
    token string
    Token. The token length is up to 4096 bytes.
    tmpSecretId String
    Temporary certificate secret ID. Maximum length is 1024 bytes.
    tmpSecretKey String
    Temporary certificate secret key. Maximum length is 1024 bytes.
    token String
    Token. The token length is up to 4096 bytes.
    tmpSecretId string
    Temporary certificate secret ID. Maximum length is 1024 bytes.
    tmpSecretKey string
    Temporary certificate secret key. Maximum length is 1024 bytes.
    token string
    Token. The token length is up to 4096 bytes.
    tmp_secret_id str
    Temporary certificate secret ID. Maximum length is 1024 bytes.
    tmp_secret_key str
    Temporary certificate secret key. Maximum length is 1024 bytes.
    token str
    Token. The token length is up to 4096 bytes.
    tmpSecretId String
    Temporary certificate secret ID. Maximum length is 1024 bytes.
    tmpSecretKey String
    Temporary certificate secret key. Maximum length is 1024 bytes.
    token String
    Token. The token length is up to 4096 bytes.

    StsAssumeRoleOperationTag, StsAssumeRoleOperationTagArgs

    Key string
    Tag key, up to 128 characters, case-sensitive.
    Value string
    Tag value, up to 256 characters, case-sensitive.
    Key string
    Tag key, up to 128 characters, case-sensitive.
    Value string
    Tag value, up to 256 characters, case-sensitive.
    key string
    Tag key, up to 128 characters, case-sensitive.
    value string
    Tag value, up to 256 characters, case-sensitive.
    key String
    Tag key, up to 128 characters, case-sensitive.
    value String
    Tag value, up to 256 characters, case-sensitive.
    key string
    Tag key, up to 128 characters, case-sensitive.
    value string
    Tag value, up to 256 characters, case-sensitive.
    key str
    Tag key, up to 128 characters, case-sensitive.
    value str
    Tag value, up to 256 characters, case-sensitive.
    key String
    Tag key, up to 128 characters, case-sensitive.
    value String
    Tag value, up to 256 characters, case-sensitive.

    Package Details

    Repository
    tencentcloud tencentcloudstack/terraform-provider-tencentcloud
    License
    Notes
    This Pulumi package is based on the tencentcloud Terraform Provider.
    Viewing docs for tencentcloud 1.83.3
    published on Friday, Jun 19, 2026 by tencentcloudstack

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial