Struct AssumeRoleGrant 

pub struct AssumeRoleGrant { /* private fields */ }

A typed AWS STS AssumeRole authority transition.

The source credential authorizes this transition, but the returned credential derives its permissions from the target role and optional session policies. It is not necessarily a monotonic downscope of the source principal’s direct permissions.

Validation is performed before the STS request is signed or sent. AWS still owns trust-policy evaluation, the target role’s configured maximum session duration, the one-hour role-chaining limit, inherited transitive-tag conflicts, and packed-policy limits that cannot be determined from reqsign’s opaque source credential locally.

Implementations

impl AssumeRoleGrant

pub fn new( role_arn: impl Into<String>, role_session_name: impl Into<String>, ) -> Self

Create a grant for one target role and auditable role session name.

pub fn with_external_id(self, external_id: impl Into<String>) -> Self

Set the external ID required by the target role’s trust policy.

pub fn with_policy(self, policy: impl Into<String>) -> Self

Set one inline JSON session policy.

Session policies restrict the target role session. They cannot grant permissions beyond the target role’s identity-based policy.

pub fn with_policy_arns(self, policy_arns: Vec<String>) -> Self

Set up to ten managed session policy ARNs.

pub fn with_tags(self, tags: Vec<(String, String)>) -> Self

Set up to fifty session tags.

pub fn with_mfa( self, serial_number: impl Into<String>, token_code: impl Into<String>, ) -> Self

Bind the MFA device serial number and current six-digit token code.

Trait Implementations

impl Clone for AssumeRoleGrant

fn clone(&self) -> AssumeRoleGrant

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AssumeRoleGrant

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.