Long term credentials for IAM identity user?

Question

Everything IAM related suggest using IAM Identity management to create user, assign groups and manage permissions, however when a user is created (even a PowerUserAccess) the command line credentials given are only short term, and IAM Identity unlike IAM does not allow you to control how long credentials are valid.

Is there a way to set a PowerUserAccess or higher to have longer term credentials?

The [SSO](https://docs.aws.amazon.com/cli/latest/userguide/sso-configure-profile-token.html#sso-configure-profile-token-auto-sso) solution does not work for poweruser (terminal HPC) users as browsers do not launch.

Seem if this functionality can not be used or added it a huge limitation to using IAM identity.

Answer

Take a look at [IAM Roles Anywhere](https://aws.amazon.com/blogs/security/extend-aws-iam-roles-to-workloads-outside-of-aws-with-iam-roles-anywhere/) as a way to use short-term credentials in a automation scenario. This is a feature outside of Identity Center.

Long term credentials for IAM identity user?

Contenuto pertinente