Back to articles

Tag archive

#sts

AWS IAM Roles Anywhere Hands-On
May 26, 2026

AWS IAM Roles Anywhere Hands-On

When you're outside EC2/Lambda (home laptop, on-prem server, Raspberry Pi, Kubernetes) and you don't want long-lived keys (AKIA...) sitting around, IAM Roles Anywhere solves it by using an X.509 certificate as your AWS identity. I built a self-signed CA from scratch, registered it with Roles Anywhere, and pulled temporary credentials end-to-end in 60 minutes. Cost: $0.

May 26, 202614 min read0 reactions0 comments
AWS STS Deep Dive
May 24, 2026

AWS STS Deep Dive

I treated AssumeRole as a single API while writing the IAM piece. STS is actually 6 separate APIs (SAML / WebIdentity / Root / SessionToken / FederationToken), and Source Identity, External ID, and Session Policy change its shape entirely. This article opens every box.

May 24, 202618 min read0 reactions0 comments