rboto-sts

rboto is an independent project maintained by Ferrumio. It is not affiliated with, sponsored by, or endorsed by Amazon Web Services (AWS).

Preview (Alpha). rboto is under active development. APIs may change between releases.

rboto provides an async-only, typed Python client for AWS STS, powered by Rust. This package contains STSClient and 11 operations.

Installation

Requires Python 3.12 or newer and a native wheel for your Python version and platform.

python -m pip install "rboto[sts]"

You can also install rboto-sts directly; it installs the matching rboto package. Only the selected service is installed.

These are the package names to use when a release is available on your package index. If your index has no release yet, follow the source installation instructions.

Usage

Configure credentials through your environment, shared profile, or workload role. The example uses us-east-1; select a region where your service and resources are available. Resource names, identifiers, input files, and model IDs in the example are placeholders to replace with your own.

import asyncio

from rboto import STSClient


async def main() -> None:
    client = STSClient(region="us-east-1")
    response = await client.get_caller_identity()
    print(response.account)
    print(response.arn)


if __name__ == "__main__":
    asyncio.run(main())

In an application with an event loop, call await main() instead of asyncio.run(main()). Reuse the client across calls. Constructing a client does not send a request.

API conventions

• Import the client with from rboto import STSClient.

• Every operation is asynchronous: use await client.method(...).

• Operation arguments are keyword-only and use the Python names listed below.

• Structured inputs use typed dictionaries and tagged unions from rboto_sts.types.

• Regular responses expose typed attributes; response.to_dict() converts them to a dictionary.

• Event-stream responses may be typed dictionaries containing async iterators. Follow the declared return type; consume event streams with async for.

• Byte streams are consumed asynchronously. await stream.read() buffers the complete body; iterate the stream when processing a large response.

• Direct operation calls return one page.

• Catch modeled exceptions from rboto_sts.exceptions. Their error_code, message, and operation_name identify service failures.

Clients also accept profile, endpoint_url, or shared Session settings. See configuration, errors, and streaming.

Operations

This is the complete operation catalog for this generated package. “Required arguments” lists arguments without defaults in the Python signature. Service-side conditions may require additional arguments. Each method links to its complete signature, including optional arguments. Nested input definitions are in rboto_sts.types; native response definitions are in the package's _native.pyi.

Complete signatures

assume_role

async def assume_role(
    *,
    role_arn: str,
    role_session_name: str,
    policy_arns: Sequence[PolicyDescriptorType] | None = None,
    policy: str | None = None,
    duration_seconds: int | None = None,
    tags: Sequence[Tag] | None = None,
    transitive_tag_keys: Sequence[str] | None = None,
    external_id: str | None = None,
    serial_number: str | None = None,
    token_code: str | None = None,
    source_identity: str | None = None,
    provided_contexts: Sequence[ProvidedContext] | None = None,
    minimum_session_token_size: int | None = None,
) -> AssumeRoleOutput: ...

assume_role_with_saml

async def assume_role_with_saml(
    *,
    role_arn: str,
    principal_arn: str,
    saml_assertion: str,
    policy_arns: Sequence[PolicyDescriptorType] | None = None,
    policy: str | None = None,
    duration_seconds: int | None = None,
    minimum_session_token_size: int | None = None,
) -> AssumeRoleWithSAMLOutput: ...

assume_role_with_web_identity

async def assume_role_with_web_identity(
    *,
    role_arn: str,
    role_session_name: str,
    web_identity_token: str,
    provider_id: str | None = None,
    policy_arns: Sequence[PolicyDescriptorType] | None = None,
    policy: str | None = None,
    duration_seconds: int | None = None,
    minimum_session_token_size: int | None = None,
) -> AssumeRoleWithWebIdentityOutput: ...

assume_root

async def assume_root(
    *,
    target_principal: str,
    task_policy_arn: PolicyDescriptorType,
    duration_seconds: int | None = None,
    minimum_session_token_size: int | None = None,
) -> AssumeRootOutput: ...

decode_authorization_message

async def decode_authorization_message(
    *,
    encoded_message: str,
) -> DecodeAuthorizationMessageOutput: ...

get_access_key_info

async def get_access_key_info(
    *,
    access_key_id: str,
) -> GetAccessKeyInfoOutput: ...

get_caller_identity

async def get_caller_identity() -> GetCallerIdentityOutput: ...

get_delegated_access_token

async def get_delegated_access_token(
    *,
    trade_in_token: str,
) -> GetDelegatedAccessTokenOutput: ...

get_federation_token

async def get_federation_token(
    *,
    name: str,
    policy: str | None = None,
    policy_arns: Sequence[PolicyDescriptorType] | None = None,
    duration_seconds: int | None = None,
    tags: Sequence[Tag] | None = None,
    minimum_session_token_size: int | None = None,
) -> GetFederationTokenOutput: ...

get_session_token

async def get_session_token(
    *,
    duration_seconds: int | None = None,
    serial_number: str | None = None,
    token_code: str | None = None,
    minimum_session_token_size: int | None = None,
) -> GetSessionTokenOutput: ...

get_web_identity_token

async def get_web_identity_token(
    *,
    audience: Sequence[str],
    signing_algorithm: str,
    duration_seconds: int | None = None,
    tags: Sequence[Tag] | None = None,
) -> GetWebIdentityTokenOutput: ...

Links

• Service guide
• Repository
• Issues
• Releases

Licensed under Apache-2.0.