Skip to main content

Assume IoT user role

POST 
/v1/assumed-roles

Assumes an IoT user role for the authenticated caller. The caller is identified via the SigV4-signed request; no AWS credentials need to be passed in the body.

Regular User Flow: Returns credentials with IAM permissions scoped to all groups and subgroups the user has access to.

Admin User Flow: Super admin users can use group and subgroup scoped APIs, /v1/groups/{groupId}/assumed-roles or /v1/groups/{groupId}/subgroups/{subGroupId}/assumed-roles variants instead.

MQTT client ID: the returned credentials permit iot:Connect only with client id user:<email|phone>:<session> — the caller's own login username plus a per-session suffix. The bare user:<email|phone> form is rejected. See the ESP RainMaker Neo User MQTT API (MQTT_User) spec.

Request​

Responses​

Successful response with new credentials