Service Reference
STS — endpoint support
Generated for Overcast. See also: AWS STS API Reference
STS — endpoint support
Generated for Overcast. See also: AWS STS API Reference
Summary
| Category | ✅ Supported | ❌ Unsupported |
|---|---|---|
| Identity | 1 | 0 |
| Temp credentials | 4 | 0 |
| SAML/OpenID | 0 | 2 |
| Federation | 0 | 1 |
| Misc | 0 | 3 |
| Total | 5 | 6 |
Endpoint details
| Operation | Status | Notes | AWS docs |
|---|---|---|---|
| GetCallerIdentity | ✅ | Returns fake account/user ARN | link |
| GetSessionToken | ✅ | Returns fake temporary credentials | link |
| AssumeRole | ✅ | Returns fake credentials + AssumedRoleUser | link |
| AssumeRoleWithWebIdentity | ✅ | Returns fake credentials | link |
| GetFederationToken | ✅ | Returns fake credentials + FederatedUser | link |
| AssumeRoleWithSAML | ❌ | Returns NotImplemented | link |
| AssumeRoot | ❌ | Returns NotImplemented | link |
| DecodeAuthorizationMessage | ❌ | Returns NotImplemented | link |
| GetAccessKeyInfo | ❌ | Returns NotImplemented | link |
| GetDelegatedAccessToken | ❌ | Returns NotImplemented | link |
| GetWebIdentityToken | ❌ | Returns NotImplemented | link |
SDK compatibility
| SDK | Tested |
|---|---|
| AWS SDK for Go v2 | ❌ |
| AWS SDK for JavaScript v3 | ✅ |
| boto3 (Python) | ❌ |
| AWS SDK for Java | ❌ |
| AWS SDK for .NET | ❌ |
Notes
- Credentials: All temporary credential operations return freshly generated fake credentials (ASIA-prefixed access key, random secret and session token).
- No credential validation: Credentials are not stored or validated; they are single-use fake values.
- Protocol: Uses AWS Query protocol (form-encoded POST body, XML responses).
Summary
| Category | ✅ Supported | ❌ Unsupported |
|---|---|---|
| General | 5 | |
| Unsupported | 6 |
Endpoints
General
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
AssumeRole | ✅ Supported | docs | |
AssumeRoleWithWebIdentity | ✅ Supported | docs | |
GetCallerIdentity | ✅ Supported | docs | |
GetFederationToken | ✅ Supported | docs | |
GetSessionToken | ✅ Supported | docs |
Unsupported
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
AssumeRoleWithSAML | ❌ Unsupported | Returns NotImplemented | docs |
AssumeRoot | ❌ Unsupported | Returns NotImplemented | docs |
DecodeAuthorizationMessage | ❌ Unsupported | Returns NotImplemented | docs |
GetAccessKeyInfo | ❌ Unsupported | Returns NotImplemented | docs |
GetDelegatedAccessToken | ❌ Unsupported | Returns NotImplemented | docs |
GetWebIdentityToken | ❌ Unsupported | Returns NotImplemented | docs |