How to Change the Session Duration of IAM Role Credentials to 12 Hours in AWS

Discover how to extend AWS IAM role credentials duration to `12 hours` using simple steps. Learn to utilize AWS CLI effectively for better resource management.
---
This video is based on the question https://stackoverflow.com/q/68434843/ asked by the user 'user15322469' ( https://stackoverflow.com/u/15322469/ ) and on the answer https://stackoverflow.com/a/68434934/ provided by the user 'Marcin' ( https://stackoverflow.com/u/248823/ ) at 'Stack Overflow' website. Thanks to these great users and Stackexchange community for their contributions.

Visit these links for original content and any more details, such as alternate solutions, latest updates/developments on topic, comments, revision history etc. For example, the original title of the Question was: I want to change the session duration of iam role credentials to 12 hours

Also, Content (except music) licensed under CC BY-SA https://meta.stackexchange.com/help/licensing
The original Question post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/by-sa/4.0/ ) license, and the original Answer post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/by-sa/4.0/ ) license.

If anything seems off to you, please feel free to write me at vlogize [AT] gmail [DOT] com.
---
How to Change the Session Duration of IAM Role Credentials to 12 Hours in AWS

Managing session durations for IAM role credentials can sometimes be quite tricky, especially if you're aiming for longer access periods. If you’ve faced the challenge of having your token expire after just one hour, you’re not alone. Luckily, extending the session duration of IAM role credentials to 12 hours is straightforward once you know the right commands. In this guide, we’ll explore the problem and walk you through the solution step-by-step.

Understanding the Problem

When you assume an IAM role in AWS using the AWS CLI, the resulting session has a default duration of one hour. This means that your temporary credentials will expire after one hour, requiring you to re-obtain new credentials if you wish to continue your session. This limitation can be inconvenient, particularly for tasks that require access over an extended period, such as working with Amazon S3 or executing AWS Lambda functions.

Why Change the Session Duration?

Extending the session duration to 12 hours provides several benefits:

Saves Time: Frequent credential re-issues can interrupt workflows.

Increased Productivity: You can work longer without needing to reauthenticate.

Simplified Management: Fewer credentials to manage means less chance of errors.

The Solution: Extending Session Duration

To change the session duration of your IAM role credentials to 12 hours, you need to adjust your command slightly. Here’s how:

Step-by-Step Guide

Original Command:
When you first assume the role you may have used a command similar to this:

[[See Video to Reveal this Text or Code Snippet]]

Add Duration Seconds:
To extend the session duration, you should include the --duration-seconds option followed by the desired duration in seconds. For 12 hours, you would set it to 43200 seconds. Here’s how your updated command should look:

[[See Video to Reveal this Text or Code Snippet]]

Important Notes

IAM Role Maximum Duration: Before running the command, ensure that the IAM role’s maximum session duration is set to at least 12 hours. You can check this in the AWS Management Console under IAM roles.

Credential Handling: Once you've updated your command appropriately and verified the maximum session duration, you can run the command. You’ll now receive temporary credentials that last for 12 hours before expiration.

Conclusion

By following the steps outlined above, you can successfully increase the session duration of your IAM role credentials to 12 hours. This adjustment can significantly improve your experience managing resources in AWS, allowing for longer operational sessions without the hassle of the frequent reauthentication process.

If you encounter issues, ensure that your IAM role permissions and policies support the updated session duration. Happy cloud computing!

Видео How to Change the Session Duration of IAM Role Credentials to 12 Hours in AWS канала vlogize