# How AWS IAM role, STS and Identity Pool work together

DevFeed: [How AWS IAM role, STS and Identity Pool work together](<https://devfeed.tech/articles/how-aws-iam-role-sts-and-identity-pool-work-together-29587.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/aws-iam-role-sts-and-identity-pool/>)

Author: info@goteleport.com (Shuo Yang)

Published: 2021-06-23T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [AWS STS](<https://devfeed.tech/topics/aws-sts.md>), [Amazon Cognito](<https://devfeed.tech/topics/amazon-cognito.md>), [AWS Identity and Access Management (IAM)](<https://devfeed.tech/topics/aws-identity-and-access-management-iam.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Application Development](<https://devfeed.tech/topics/application-development.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [amazon-cognito](<https://devfeed.tech/tags/amazon-cognito.md>), [application-development](<https://devfeed.tech/tags/application-development.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [aws-sts](<https://devfeed.tech/tags/aws-sts.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [security](<https://devfeed.tech/tags/security.md>), [services](<https://devfeed.tech/tags/services.md>)

## AI overview

This tutorial explains how AWS IAM roles, AWS STS, and Amazon Cognito Identity Pools work together to let applications obtain temporary AWS credentials. It describes the flow from an OIDC token issued by a Cognito User Pool to temporary credentials obtained through STS and subsequent access to AWS resources.

## Source excerpt

Learn how to access AWS resources using Cognito Identity Pool in combination with AWS STS to provide temporary credentials without long-lived keys.