Integrating federation with an AWS account
If the users who will be accessing your account already have an authentication method, then there are a few different methods to incorporate federation into your AWS account.
"Identity federation is a system of trust between two parties for the purpose of authenticating users and conveying information needed to authorize access to resources. In this system, an Identity Provider (IdP) is responsible for user authentication, and a service provider (SP), such as a service or application, controls access to resources." (AWS, 2021)
When you incorporate federation, then your users are going to use STS to request a session for authorization into your account.
A session consists of the following:
- An access key
- A secret access key
- A security token
- An expiration date (for when the security token is no longer valid)
A federated token by default will expire in 12 hours, but can be set to time out in...