Skip to main content

Assume role for per-node S3/KVS access

POST 
/v1/groups/:groupId/nodes/:nodeId/assumed-roles

Returns temporary credentials scoped to a single node for the requested services (S3 and/or KVS). The response contains ONLY the listed service permissions — no IoT/MQTT statements — keeping the STS session policy a constant size regardless of how many nodes the user can access.

The caller is identified via the SigV4-signed request. Access is granted when the node belongs to the path group AND the caller has access to that group (full-group access, or a shared subgroup the node belongs to). Super admins may assume role for any node.

Request​

Responses​

Successful response with new credentials