Skip to main content

Security Token Service Get Caller Identity

Returns details about the IAM user or role whose credentials are used to call the operation.

No permissions are required to perform this operation. If an administrator adds a policy to your IAM user or role that explicitly denies access to the sts:GetCallerIdentity action, you can still perform this operation. Permissions are not required because the same information is returned when an IAM user or role is denied access. To view an example response, see I Am Not Authorized to Perform: iam:DeleteVirtualMFADevice in the IAM User Guide.

External Documentation

To learn more, visit the AWS documentation.

Basic Parameters​

ParameterDescription
AWS Region(s)Enter the desired AWS Region(s).

To execute the action in multiple regions, provide a comma-separated list.
For example: us-east-1,eu-west-2.

If you wish to run the action in all available regions, use the asterisk symbol (*) instead.

Advanced Parameters​

ParameterDescription
Disable XML To JSON Auto ConvertWhen checked, XML responses are not automatically converted into JSON format.

Example Output​

{
    "Account": "123456789012",
    "Arn": "arn:aws:sts::123456789012:federated-user/my-federated-user-name",
    "UserId": "123456789012:my-federated-user-name"
}

Automation Library Example​

Onboarding Team Member to Project

Automation LibraryPreview this Automation on desktop